How to update a GW Azure

[RemoteUser]

Hi all,
I'm running a Check Point gateway in Azure with version R81.20, and I need to upgrade it from one Jumbo Hotfix Take to another. (Maybe the reccomended)
What is the recommended procedure to perform this update in a cloud environment like Azure?
Are there any specific considerations or best practices I should follow?

Thanks in advance for your support!

[Don_Paterson · Accepted solution]

The first link is a key SecureKnowledge article to reference for CloudGuard Network Security in general. The ones below that are good too. 

You should find everything you need them, including best practice. 

There is the option to deploy a new replacement image from the marketplace (which includes the hotfix) but that takes more planning. 

Central Deploy or CPUSE/DA is a good way to go. 

https://support.checkpoint.com/results/sk/sk173705 

https://support.checkpoint.com/results/sk/sk109141 

https://support.checkpoint.com/results/sk/sk132192

https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/R81.20/Installation-Uninstall.htm?tocpath=____...

[Duane_Toler · Accepted solution]

Jumbo HFA for R81.20 can be updated just like any other gateway using whatever method you prefer.  The coordination of the downtime is up to you and your requirements.

[Lesley · Accepted solution]

Same as a normal gateway. Maybe worth to make backup/snapshot on Azure level for quick rollback

[Amir_Senn · Accepted solution]

You got very good answers from all the best people here, I would just like to add some additional info and recommendations and tips:

• The only thing that's actually different between on-premise based solution is the upgrade package. We have a dedicated package for upgrade found in first SK below. Just keep in mind for the future. I also believe that this will be eliminated as well in the future.
• From my experience, the other most noticeable difference is the partition size. In order to keep costs for you as low as possible, the default storage size for our solution is 100 GB. You can increase it during deployment if you wish to suit your needs. I would take this into consideration the next time you install a new Azure solution or increase the amount of storage for existing solution. SK for increasing storage can also be found below. Upgrade packages are imported to /var/log partition.
• My preferred procedure for upgrading/installing JHF is by using CDT, very powerful tool IMO. For simplicity, I recommend installing the JHF from SmartConsole. I ripped off GIF from sk168597 to show how simple it is:

gif_s202201041901421.gif

In-Place Upgrade packages for CloudGuard Network: https://support.checkpoint.com/results/sk/sk177714

How to increase the disk size of a CloudGuard VM for Azure, AWS, GCP, and OCI: https://support.checkpoint.com/results/sk/sk156552

Central Deployment Tool (CDT): https://support.checkpoint.com/results/sk/sk111158

[RemoteUser]

Thank you all for the thorough answers. It’s just as I imagined, my only concern was whether, being in the cloud, there might be special Jumbo updates or dedicated links to download them, similar to how it works with their images.
But you've now clarified that they can be upgraded just like regular gateways.

[the_rock]

Glad we can help bro!

Andy

[the_rock · Accepted solution]

Ola bro,

Everyone is 100% right. You just do it normal way, like you would on say 9300 model via web UI. I just did one recently in Azure like that.

Andy