CloudGuard Upgrades support
Hello Check Mates and Cloud Mates,
Anyone got the latest on upgrading SMS and/or SGs and Clusters in public cloud?
I know is has been technically blocked to do major version upgrades but I understand that was something that might change in Q4 2021.
This SK is very good for reference for public cloud upgrades (bigger VMs, bigger disks and version upgrades).
It is implied that technical upgrades of major versions are still not supported in public cloud.
Another interesting point. Not a new topic but still interesting:
If an R81 SMS gets JHFA TAKE 42 then in theory it can manage an R81.10 SG
For AWS gateways this is available now using CPUSE (https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...) as an in-place upgrade. Azure gateways are due any time now but this has been pushed back a few times so don't hold me to that 😉
Management is coming around H2 I believe (but side-by-side upgrades for management tend to be easier so probably not as urgent).
I could ask the SK team to add R81.10 to the top of that SK (Version field) and also link this SK -> sk155632 but I have Feedback spammed them enough this week (and proved humanity) so I can only suggest it in here 🙂
And I see that they are Blink images. 🙂
Right now, in-place upgrade (IPU) of security GWs on static constructs (non-scale sets) is supported on AWS (released 2 months ago) and Azure (release is planned for this week). The IPU process is enabled for any SRC to any DST starting at R80.30 and above on released versions (versions under EA are not supported).
Management in place upgrade is not supported yet, it is on the roadmap for end of Q3.
Please visit this resource for further exploration - IPU
PS - feel free to contact me at email@example.com
The in place upgrade was supposed to be released this week, unfortunately, delayed to next week. If you need this urgently, where the target version is R80.40, please mail me privately. If you can wait another week, the new timeline for the release is June 28.
Just in - In-place upgrade for Azure is now released.
Upgrade packages, supported upgrade flows, versions and configurations are available in sk177714 - CloudGuard for Public Cloud In-Place upgrade packages
We will be more than happy to receive feedback or requests.