Downgrade from R82.10

[Secret-goblin-5]

I just got some new gateways which are already on the latest R82.10 OS version.

I want to move the to the same version and JHF as the live gateways so that I can migrate export the old config.

I cannot get the new CPUse to show me the downgraded version I want, it just says "You are up to date" (I know! That's the problem!)

I uploaded blink_image_1.1_Check_Point_R82_T777_JHF_T39_SecurityGateway.tgz, which uploaded, but did not appear.

All I see is

How do I "downgrade" to the version I want?

[Peter_Lyndley · Accepted solution]

simple answer - you cant.

If they come with R82.10 , then i'm guessing they are the new appliances with ARM chips. These require R82.10 and no other version will run on them yet.

What is your concern about the old config ?

[Secret-goblin-5]

We are doing in place upgrades.

Swapping the old standby, moving active over, then swapping the next one.
Our goal is 0 downtime.

We have VTI tunnels which are configured in WebUI, Custom static routes, custom security settings. A policy push won't cut it.

So how do we move the config across from the old ones to the new ones?

[Peter_Lyndley]

Have a look at MVC (Multi Version Cluster) in the upgrade and install guides.

You can copy and paste the 'show configuration' across in most cases, certainly all the things you mention above. This along with MVC being enabled should allow you a 0 downtime (assuming the interface convention/topology is the same between the two appliances) - sometimes a small downtime is unavoidable.

[Chris_Atkinson · Accepted solution]

3900s can't be downgraded they need R82.10 with it's updated kernel.

[Vincent_Bacher · Accepted solution]

Yes. More specifically, R82.10 uses kernel version 5.14, while R82 uses Linux kernel 4.18.
3900s ARM processors are not supported by kernels below 5.14.

[hle2001]

If I upgrade my central virtual machine security Management server from R81.20  to version R82, can it be able to manage the new pair 3920  came with R82.10  version? this new 3920 will replace my current clusterXL 3600 model running R81.20.

Thank you,

-Robert Lee

[Chris_Atkinson]

Correct yes make sure it has the correct (or latest) JHF/Jumbo aswell.

[the_rock]

Or at least recommended take.

[the_rock · Accepted solution]

As the guys said, you cant do it and say even if you could, I would NOT recommend it.