Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
This widget could not be displayed.
9 Replies

Hi Team,

I’m after some insights about upgrading a SMS in Azure from R81.10 to R81.20 as I’ve got entry level experience with Azure.

In place upgrade (https://support.checkpoint.com/results/download/133468) didn’t work throwing an error about partition  “Your partitions are not in Check Point standard format, and an upgrade is not possible. Reinstall your system and verify correct partitioning.” As per sk180769, it looks in place upgrade is not supported.

We're currently considering carrying out an advanced upgrade, however I'm unsure about a few points in Azure. My approach is as follows:

  1. download and install R81.20 upgrade tools on R81.10 SMS
  2. run an upgrade verify, followed by addressing any error, warnings, etc.
  3. export the DB, and copy it out verifying its checksum
  4. shut down the R81.10 SMS, de-associating it’s vNIC
  5. build the new R81.20 SMS from marketplace in the same region (do we need to create a new resource group for it?), having the same name as the R81.10 SMS
  6. associate R81.10’s NIC to R81.20 SMS
  7. install the latest HFA
  8. import the DB

Points 4-6 are bit blurry to me, is this the right approach, did anyone out there go through the same?

Just to note that I went through sk155632 our SMS doesn't have a public ip address as alias just a single private ip address

SMS Azure Upgrade

SMS Azure Upgrade

Hi Team,

I’m after some insights about upgrading a SMS in Azure from R81.10 to R81.20 as I’ve got entry level experience with Azure.

In place upgrade (https://support.checkpoint.com/results/download/133468) didn’t work throwing an error about partition  “Your partitions are not in Check Point standard format, and an upgrade is not possible. Reinstall your system and verify correct partitioning.” As per sk180769, it looks in place upgrade is not supported.

We're currently considering carrying out an advanced upgrade, however I'm unsure about a few points in Azure. My approach is as follows:

  1. download and install R81.20 upgrade tools on R81.10 SMS
  2. run an upgrade verify, followed by addressing any error, warnings, etc.
  3. export the DB, and copy it out verifying its checksum
  4. shut down the R81.10 SMS, de-associating it’s vNIC
  5. build the new R81.20 SMS from marketplace in the same region (do we need to create a new resource group for it?), having the same name as the R81.10 SMS
  6. associate R81.10’s NIC to R81.20 SMS
  7. install the latest HFA
  8. import the DB

Points 4-6 are bit blurry to me, is this the right approach, did anyone out there go through the same?

Just to note that I went through sk155632 our SMS doesn't have a public ip address as alias just a single private ip address

Hi Team,

I’m after some insights about upgrading a SMS in Azure from R81.10 to R81.20 as I’ve got entry level experience with Azure.

In place upgrade (https://support.checkpoint.com/results/download/133468) didn’t work throwing an error about partition  “Your partitions are not in Check Point standard format, and an upgrade is not possible. Reinstall your system and verify correct partitioning.” As per sk180769, it looks in place upgrade is not supported.

We're currently considering carrying out an advanced upgrade, however I'm unsure about a few points in Azure. My approach is as follows:

  1. download and install R81.20 upgrade tools on R81.10 SMS
  2. run an upgrade verify, followed by addressing any error, warnings, etc.
  3. export the DB, and copy it out verifying its checksum
  4. shut down the R81.10 SMS, de-associating it’s vNIC
  5. build the new R81.20 SMS from marketplace in the same region (do we need to create a new resource group for it?), having the same name as the R81.10 SMS
  6. associate R81.10’s NIC to R81.20 SMS
  7. install the latest HFA
  8. import the DB

Points 4-6 are bit blurry to me, is this the right approach, did anyone out there go through the same?

Just to note that I went through sk155632 our SMS doesn't have a public ip address as alias just a single private ip address

0 Kudos
0 Kudos
the_rock
MVP Diamond
MVP Diamond
the_rock
MVP Diamond
MVP Diamond

I had done in-place upgrade couple times and worked without any issues.

Andy

Best,
Andy
"Have a great day and if its not, change it"

I had done in-place upgrade couple times and worked without any issues.

Andy

Best,
Andy
"Have a great day and if its not, change it"
0 Kudos
0 Kudos
DanielEl
Participant
DanielEl
Participant

Thanks Andy,

We did raise a ticket with TAC to get their confirmation "I verified the in-place upgrade method would not work for that Azure image, which was deployed in 2022. The only method for this upgrade would be the side-by-side upgrade"

Thanks Andy,

We did raise a ticket with TAC to get their confirmation "I verified the in-place upgrade method would not work for that Azure image, which was deployed in 2022. The only method for this upgrade would be the side-by-side upgrade"

the_rock
MVP Diamond
MVP Diamond
the_rock
MVP Diamond
MVP Diamond

Makes sense...I can totally see logic in what they told you, since I believe in place upgrade became available in 2023, if I recall correctly.

Andy

Best,
Andy
"Have a great day and if its not, change it"

Makes sense...I can totally see logic in what they told you, since I believe in place upgrade became available in 2023, if I recall correctly.

Andy

Best,
Andy
"Have a great day and if its not, change it"
0 Kudos
0 Kudos
Amir_Senn
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP
Amir_Senn
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP

It's because of the multiple partitions. Also not supported for on-prem for upgrading to R81.20.

Kind regards, Amir Senn

It's because of the multiple partitions. Also not supported for on-prem for upgrading to R81.20.

Kind regards, Amir Senn
Amir_Senn
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP
Amir_Senn
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP

(1)
(1)
the_rock
MVP Diamond
MVP Diamond
the_rock
MVP Diamond
MVP Diamond

I remember following 1st link both times.

Andy

Best,
Andy
"Have a great day and if its not, change it"

I remember following 1st link both times.

Andy

Best,
Andy
"Have a great day and if its not, change it"
0 Kudos
0 Kudos
DanielEl
Participant
DanielEl
Participant

Came across a fantastic video for Chris Martel showing exactly what we're after: https://www.youtube.com/watch?v=dm80UUlsKTI

Came across a fantastic video for Chris Martel showing exactly what we're after: https://www.youtube.com/watch?v=dm80UUlsKTI

(1)
(1)
the_rock
MVP Diamond
MVP Diamond
the_rock
MVP Diamond
MVP Diamond

Amazing reference, thank you for that!

Andy

Best,
Andy
"Have a great day and if its not, change it"

Amazing reference, thank you for that!

Andy

Best,
Andy
"Have a great day and if its not, change it"
0 Kudos
0 Kudos