Slides are attached below the video, after which Q&A follows.
When will Admin Guides be available for R82.20?
Guides will be released when R82.20 reaches GA, currently expected at the end of August.
What happens in case the verify shows warnings or errors?
The upgrade preparation will stop.
Will it support SMS/MDS upgrade?
The Background Upgrade feature is for gateways where downtime will be noticed. Normal upgrades on management do not generally cause an outage for end user traffic. Having said that, we are planning something similar on the management side.
How is the cluster upgrade planned? Does it automatically follow the HA upgrade process?
The preparation doesn't affect the status. when using SMC for the upgrade flow - it will be done according to best practice - start with backup and move to active.
Is the same to upgrade via web GUI ?
Yes same option will be available inside CPUSE page as well but for complex envs like cluster its better to do it centrally for the orchestration part.
Can we pick what version we want? Or will it always take the latest release?
It will be offered automaticlly for 82.20 recomended, but you will be able to do this for other packages as well (might require enable specific configuration)
So upgrading active node will cause a fail-over?
If done locally from CPUSE - yes only during the final stage - not during preparation.
Does the new upgrade method work on Maestro?
Yes - this flow will support Maestro as well.
Does this support Spark appliances?
Currently, no.
Will tools be available to partners to analyze the same data that TAC gets?
We have a workspace based on docker compose that partners can raise on their own server and then upload the tgz file and explore it as if they were on customer GW
Is this diagnostic tools built from Skyline?
The metrics used here are the same as we use for Skyline and AIOps.
If this update metod is use for Jumbo, will be some custom files on filesystem present after upgrade?
currently it will avilable for major upgrades. later on for moving between jumbo as well the challenge is the personal files that are not affected during jumbo install.
Does Background Upgrade support VSX/VSNext?
Not at present. We plan to implement support for Legacy VSX first.
I'm assuming it will show metrics for all SGM's if there are multiple?
Indeed. It is fully support scalable platform aware and will show you both aggregated data or per member data.
Do any of these diagnostic tools require the Monitoring blade to be enabled on the gateway?
No.
Is SD-WAN mgmt moved to the firewall locally in this R82.20?
Yes. We did a TechTalk about this a few weeks ago, in fact. We also did one on AI Network Firewall, which is part of the R82.20 release.
Does WebUI Troubleshooting work for classic VSX as well? How about VSNext?
On VSnext works from day 1. VSX has no webUI. currently not supported. Is on the roadmap.
Will the dacli command use the same quick install/upgrade options?
yes there is a clish command for "prepare action" in general yes it will be also exposed in dacli.
Does "no expert mode" mean that it will not be available for troubleshooting? There are many times where it is needed for tcpdump, log file analysis, etc.
Our goal is to eliminate the need for Expert mode. Expert mode is still available.
Some guardrails to avoid saturation of CPU when using the web UI? Like with debug
Yes. the troubleshooting tools build with guardrails (mem/cpu.timeout) in order to prevent cpu overload. of course there some tools that consume more cpus (fw debugs for example) and the tool his classified like that so user is aware.
Currently, a CPUSE upgrade appears to overwrite certain configuration files, such as $FWDIR/conf/trac_client_1.ttm. Will the upgrade process generate a report that includes a list of all files that were modified, replaced, or overwritten during the upgrade?
All items that were migrated from the local configuration files to Unified configuration will survive upgrade and be logged.
Will there be alert for parameters that need reboot on web ui?
yes, you can see pending tab.
Will the advanced configuration options/parameters be updated somehow automatically to reflect new SKs?
Updates will be provided through the regular Jumbo Hotfixes. SKs will be updated, also each parameter in the "comment" may have sk hyperlink if related to specific sk.
Can this advanced configuration data be exported so it can be saved offline?
Not in the first stage. However, this specific capability is planned.
Can this change be done from SmartConsole instead of Gaia WebUI?
This is planned for R83 release (future).
Will there be a path to convert ClusterXL to ElasticXL automatically?
There already is one: https://support.checkpoint.com/results/sk/sk183894
Is Check Point planning to support ACME protocol?
This is planned for a 2027 release per https://support.checkpoint.com/results/sk/sk184604
Is there a additional license needed for Illumio or other Open Garden integrations?
No
If the upgrade is done (all except reboot) and then there is an unplanned powerfail, will the upgrade take place on reboot? Or will it only complete the reboot when requested from SmartConsole?
Only when specifically requested by the user.
Is every new Setting in Gaia Portal also targetable via Gaia API?
Yes.
