Upgrading a Checkpoint Cloudguard VMSS (Scaleset) from R80.20 --> R80.30 in Azure

[Eugene_Tcheby]

Cross posting from "General Management Topics" 

As R80.10 and R80.20 images are soon to be delisted from the Azure Marketplace,

I put together a step-by-step guide with screenshots on how to upgrade a Cloudguard VMSS (Scale Set) from R80.20 to R80.30 in Microsoft Azure - with R80.20 Management. This "how-to" is based on the new procedure from the Admin Guide which you can find here: https://sc1.checkpoint.com/documents/IaaS/WebAdminGuides/EN/CP_VMSS_for_Azure/Default.htm (This link was edited by Check Point on 19 Dec 2021)

Your feedback and comments are appreciated. 

Find original post below

https://community.checkpoint.com/t5/General-Management-Topics/How-to-Upgrade-a-Cloudguard-VMSS-Scale...

[_Daniel_]

Thanks Eugene for the well detailed procedure.

Just one quick question, have you got a similar doco for upgrading an Azure R77.30 to R80.10 with the lowest possible outage.

I've read sk118717 (How to upgrade CloudGuard for AWS & CloudGuard for Microsoft Azure from R77.30 / R80 to R80.10 / R80.20 ) and  CloudGuard Network High Availability for Azure R80.10 and Higher Deployment Guide > the upgrade part (This link was edited by Check Point on 19 Dec 2021), and I'm bit confused, it looks  the Side by Side method will assign new ip addresses and Keeping the same network interfaces got a long outage.

As our other requirement is to keep the same public ip address (we got so many site to site vpn tunnels which we can't ask third parties to update their config), can you think of an optimal method to upgrade.

We're really hopeful there's a way other than choosing the lesser of two evils

Cheers.