CloudGuard Network Security Upgrade

[kamaladmire1]

Hi Check mates

I am looking to Upgrade Cloud Guard R80.40 to R81.20

if you can help with, the current R80.40 deployment we can upgrade to R81.10 but not R81.20 pre verification checks failed with error below:

Error:

Gateway disk:

Parted -l

Fdisk -l

Image use for upgrade:

aio_Check_Point_ivory_main_T634__R81.20_Gaia_3_10_Install_and_Upgrade.tar

current R80.40 has file system ntfs!!!

Is there a way to upgrade directly to R81.20 without Parallel deployment??

[AkosBakos]

Hi @kamaladmire1,

The Cloudguard GW's upgrade are totally different than the simple cluster

Here is the guide:

https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_CloudGuard_Network_for_Azure_HA_Clust...

Read it carefully, and if you are not familiar with AZURE, ask for help.

Akos

[kamaladmire1]

Thanks Akos, what you ae referring is I have already looked at, however in this particular scenario the issue is to do with disk partition being NTFS, as If  I am on R81.10 and have  Linux-Swap I can upload the R81.20 image and do in-place upgrade (see below screenshot from R81.10)

[AkosBakos]

Hi @kamaladmire1 

I wouldn't bother with partitioning.

I would install a new R81.20, and I redirect the traffic in maintanace window from R81.10 ->r81.20

Or I misunderstood something?

Akos

[kamaladmire1]

well that's the last option, I would prefer to do in-place upgrade if possible, that's what I am looking here...is anyone having this issue when disk being ntfs???

[AkosBakos]

Hi @kamaladmire1 

Because you will deploy the new R81.20 gateway from AZURE, so it must work without any problem. From this point the partitioning will be OK, and you got a new GW.

I did this steps last time, and it worked for me.

Akos

[AkosBakos]

Hi,

The second step is this:

Deploy a new Check Point CloudGuard Network High Availability in the needed version.
You need to deploy it to the same subnets as in the existing CloudGuard Network High Availability solution.

In this case you will deploy an R81.20 gateway

[PhoneBoy]

One thing I know changed in R81.20 is the disk partitioning.
These changes can only be implemented through a clean install.
There may be other underlying changes that necessitate this approach as well.