topic Re: Doubt about installing hotfix on Maestro in Hyperscale Firewall (Maestro)

Doubt about installing hotfix on Maestro

fjulianom — Wed, 10 Jun 2026 11:46:50 GMT

Hi community,

I have to install a hotfix on Maestro, and I am a newbee on Maestro 😊. I have read the official guide:

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Maestro_AdminGuide/Topics-Maestro-AG/Installing-Uninstalling-Hotfix-on-Security-Group-Members.htm

I am clear until step 3. I have a SG with two members, namely 1_1 and 1_2. The guide says "Set Security Group Members in the Logical Group "A" to the "down" state", does it mean all the members at once? This SG has Mobile Access enabled, and I use this VPN to connect to them, and then I connect to the SG via ssh. If I set all the members to down state, I suppose I will loose access to the ssh session. Can I set one member to down state first, install the hotfix to this member, for example "installer install 2 member_ids 1_1", and then do the same with the other member?

Regards,

Julián

Re: Doubt about installing hotfix on Maestro

Dario_Perez — Wed, 10 Jun 2026 12:59:49 GMT

Logical security group it does mean split total amount of gateways on two groups

so if you have 2 Sgm then split as

group A 1_1 and group B 1_2

or viseversa but apply on 1 group at time

Re: Doubt about installing hotfix on Maestro

fjulianom — Wed, 10 Jun 2026 14:21:04 GMT

Hi Dario,

I have the attached image.

Then I have one SG, with two gateways, 1_1 and 1_2, I guess... In this situation, can I set one member to down state first, install the hotfix to this member, for example "installer install 2 member_ids 1_1", and then do the same with the other member?

Regards,

Julián

Re: Doubt about installing hotfix on Maestro

Dario_Perez — Wed, 10 Jun 2026 14:51:40 GMT

correct

#g_clusterXL_admin -b 1_2 down

>installer install 1 member_ids 1_2
reboot
then;
asg monitor to confirm backs as Active state and do the same for SGM1