topic Re: upgrade R82 maestro from R81.10SP in Hyperscale Firewall (Maestro)

upgrade R82 maestro from R81.10SP

Vanness_Chen — Wed, 15 Apr 2026 09:25:49 GMT

I am currently preparing an upgrade plan for a customer to migrate Maestro from R81.10 to R82. After reviewing several upgrade cases, I am concerned about the possibility of unexpected issues during the process.

I am considering splitting the upgrade into three phases (SMS → MHO → SG), with more than one week between each phase.
Would this approach be feasible?

I would greatly appreciate any recommendations or best practices you could share.

Thank you in advance for your guidance.

Re: upgrade R82 maestro from R81.10SP

Vincent_Bacher — Wed, 15 Apr 2026 09:34:02 GMT

I don't have best practices as we don't use scalable platform devices such as 64k or Maestro anymore.
But i would say this approach is correct.
The only additional point I would consider is doing a clean install on the devices because of the move from the "special" scalable platform release R81.10SP to the "universal" release R82.

Re: upgrade R82 maestro from R81.10SP

Alex- — Wed, 15 Apr 2026 09:34:24 GMT

There was that webinar yesterday I found quite useful.

https://community.checkpoint.com/t5/Hyperscale-Firewall-Maestro/Maestro-Masters-2026-Upgrades-and-Migrations-Video-and-Slides/m-p/275451#M4144

Re: upgrade R82 maestro from R81.10SP

Martijn — Wed, 15 Apr 2026 12:51:10 GMT

Hi,

The three phase approach is a good one. You should do that!!

Upgraded a Maestro environment from R81.10 to R82 last year and followed the steps described in the R82 Maestro Installation and Upgrade guide. The steps are very well described and easy to follow.

Preperation is very important. Make sure you have all the software downloaded. Hotfixes, Deployment Agent etc. Also make sure you are on the correct hotfix for R81.10 before upgrading. All is in the Upgrade guide.

On MHO's disk space can be an issue, so follow:

sk182325 - Importing a CPUSE package on Maestro Orchestrator fails with "There is not enough disk space to import the package"

Before upgrading make sure you have backups and snapshots created. An Auto-snapshot will be created when upgarding to R82.

And make sure Implied Rules are enabled. In the past I had some issues with a policy install during the sp_upgrade script procedure. Maybe caused by Implied Rules not being enabled. Since enabling Implied Rules during the upgrade, I had no issues.

Good luck!!

Martijn

Re: upgrade R82 maestro from R81.10SP

Vanness_Chen — Thu, 16 Apr 2026 03:10:19 GMT

Hi @Vincent_Bacher

If we choose to perform the upgrade using a clean installation, wouldn’t the existing configuration and data be lost?

Or is it possible to use the command from SK174202 —
set maestro export local orchestrator — to create a backup on R81.10, and then import it after upgrading to R82?

Re: upgrade R82 maestro from R81.10SP

Vincent_Bacher — Thu, 16 Apr 2026 06:18:29 GMT

tbh i am not sure, maybe other mates can answer this question better.
But from my end the mentioned sk is feasible.

Re: upgrade R82 maestro from R81.10SP

emmap — Thu, 16 Apr 2026 06:30:57 GMT

It's not a QA'd or supported upgrade method for MHOs.