Checkpoint NSX vSEC-Controller and vSEC gateway upgrade

[RGK_019]

Hi Experts,

 I Looking out for detailed  Documentation   on Checkpoint NSX vSEC-Controller and vSEC gateway upgrade  

Currently running vSEC controller R80 target version R80.10 and vSEC gateway R77.30 and Target version R80.10

[PhoneBoy]

Why R80.10 and not R80.20 or R80.30?
The management piece of this should be a fairly standard upgrade--refer to the Install and Upgrade guide.

[Dorit_Dor]

To strengthen this point:

Vsec R80.10 management uses in some cases, private enhancement (on private build).

We highly recommend management R80.20 or R80.30 where this is built-in. It will save you problems in the future. 

We also recommend to customers that already use the private build in R80.10 already, to upgrade the management and enjoy this as built in capability rather than straggle with private fixes on this private take. 

[RGK_019]

Thanks for your quick reply.

Can you please let us know if we can directly upgrade NSX vSEC-Controller from R80 to R80.20 or need to upgrade it to R80.10 then R80.20 and vSEC GW from R77.30 to R80.10 ?

Also please let us know if any special instructions/steps need to be flowed for this upgrade..

Thanks in advance!

[G_W_Albrecht]

According to sk114518 - vSEC Gateway for NSX managed by vSEC Controller, R80.10 CloudGuard Gateway for NSX (T154) managed by R80.20 Management Server is the lasted available version, so why the talk about R80.30 ?

[Itay_Sharim]

CloudGuard controller is tightly integrated with the management server and is included in R80.20. You can directly upgrade the management server and there is no requirement for a two stage upgrade workflow.

Please follow the upgrade guides for both the controller and the NSX gateways. Note the Prerequisites section.

https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_CloudGuard_for_NSX_managed_by_R8...

https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_CloudGuard_Controller_Adm...

[Dorit_Dor]

We do recommend R80.20 or R80.30 over R80.10 (integrated vsec into the management). R80.20 management is a very safe choice.

R80.30 GW has further advantages with integrated updated linux (3.10). 

[Ofer_Raz]

Further to Dorit's posting I'd like to clarify:

• With R80.20/R80.30 management all NSX gateways can be managed
• R80.30 NSX-T management is publicly available
• R80.30 NSX-V management is in early access. Expected GA within 4 weeks (as an extension on top of 80.30 management)

Thanks, Ofer