topic Re: HA Upgrades in SMB 1490 in Spark Firewall (SMB)

HA Upgrades in SMB 1490

Bhavin_Bhatt1 — Wed, 06 Dec 2017 19:33:15 GMT

Something very weird happened today with a 1490 HA pair.

I logged in to check the code versions on the appliances and somehow kicked off an upgrade.

Funny thing is, one appliance upgraded at 11:40am and the other appliance upgraded at 2pm. I was only logged into both appliances at 11:40am for a minute or so. The firewall that upgraded at 11:40 was the standby one. active firewall auto upgraded at 2pm.

The version they were on was r77.20.51 when I logged in to check them. Is this something you might have seen?

The customer has kicked off, cause the second upgrade kicked users off and they called me at 2:15pm.

If I am not wrong, you need to download the update and then once done, manually trigger the upgrade. So even if i might have clicked on download without realising, how did it start upgrading, also, i couldn't have logged into the other firewall 2 hours later to carry out another upgrade ? or did it do that itself ?

Thanks

Bhav

Re: HA Upgrades in SMB 1490

Eyal_Rashelbach — Thu, 07 Dec 2017 07:07:52 GMT

Hi Bhavin,

have you noted the 600/700 online help section about Automatic Upgrade ?
https://demo700.checkpoint.com/help/eng/smb/html_frameset.htm?topic=help/eng/smb/help_DeviceSystemOperations&anchor=o163771

I point you to the Notes at the bottom were it is stated:

"When a new firmware upgrade is available, a note shows the version number. Click Upgrade Now to upgrade it immediately, or click More Information to see what is new in the firmware version"

That might explain the behavior you faced

Eyal

***************************************************************************************************

To automatically upgrade your appliance firmware when Cloud Services is not configured:

Click Configure automatic upgrades.
The Automatic Firmware Upgrades window opens.
Click Perform firmware upgrades automatically.
Select the upgrade option to use when new firmware is detected:
- Upgrade immediately
Or
- Upgrade according to this frequency.
If you selected Upgrade according to this frequency, select one of the Occurs options:
- Daily - Select the Time of day.
- Weekly - Select the Day of week and Time of day.
- Monthly - Select the Day of month and Time of day.
Click Apply.

Notes:

When a new firmware upgrade is available, a note shows the version number. Click Upgrade Now to upgrade it immediately, or click More Information to see what is new in the firmware version.
If the gateway is configured by Cloud Services, automatic firmware upgrades are locked. They can only be set by Cloud Services.

***************************************************************************************************

Re: HA Upgrades in SMB 1490

PhoneBoy — Sat, 09 Dec 2017 08:41:48 GMT

Note that, in general, upgrading one member of a cluster will NOT upgrade the other member.

Most likely, the auto-update feature Eyal mentioned above was enabled.