Cloudguard upgrade in Azure

[Gaurav_Pandya]

Hi Mates,

We are planning to upgrade Cloudguard firewall running R80.30 in Azure environment to R81.20. Some documentation show that you can upgrade using CPUSE while others say you need to create a new VM and migrate to the new VM. 

TAC is suggesting to upgrade using CDT even though it is single firewall. Can I have some more feedback on it?

Thanks in advance.

[Alex-]

You can check sk132192 and sk177714 for the relevant images.

I did an upgrade from R81 to R81.10 using CPUSE with Blink on a IaaS gateway managed by Smart-1 Cloud.

The image was imported, the verifier returned an OK and the process was started. At the very end, we got an error message stating it was failed and we should contact support so we thought the image was lost and got ready to redeploy it.

We did try a reboot to see if at least it would boot OK on R81 and actually after reboot it started with R81.10 and the hotfix and runs OK since.

Also, refer to this thread: https://community.checkpoint.com/t5/Cloud-Network-Security/Upgrade-Azure-CloudGuard-IaaS-Single-Gate...

[the_rock]

You can, BUT, catch is this. Upgrade to R81.10 first, then use link for R81.20 upgrade once you are on R81.10

Andy

https://support.checkpoint.com/results/sk/sk177714

 

[Gaurav_Pandya]

Ok thanks. I will check that sk

[the_rock]

Definitely. Before, upgrade was NOT possible for the gateways, you had to spin the new instance, so this makes it much easier.

Andy