Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Full HA cluster upgrade from R77.30 to R80.10

Hi.

What is the best practice for upgrading full ha cluster from R77.30 to R80.10?

Could not find any documentation on that on SK.

Thanks,

Alex

Tags (1)
0 Kudos
6 Replies
Highlighted
Admin
Admin

Keep in mind that R80.10 management requires significantly more memory than R77.x management does.

On a standalone gateway and Full HA scenario, this means your gateways will need, at bare minimum, 8GB of RAM.

More is recommended if your appliances support it.

That said, your options for Full HA aren't all that different than any other upgrade.

You have two choices:

1. In-place upgrade with CPUSE

2. Migrate export / import ("Advanced" upgrade)

Personally, I would opt for a migrate export/import upgrade.

There are, of course, more steps here and I'll see if I can get someone to provide some more context.

0 Kudos
Highlighted

Hi, is this a Management machine or a Gateway?

0 Kudos
Highlighted

Hi Tomer.

Full HA means that I have two appliances (in this case two 4400) that any one of the is a Management and a Gateway. (in full sync).

0 Kudos
Highlighted

Alexander, Don 't even think of putting a R80.10 Smart Center on a 4400 appliance.

I rather take my chances in a foxhole during an artillery barrage then trying to do something like that.

Get you Smart Center off these boxes to a separate system before you even think R80.

Highlighted

Gotta agree with Hugo here, the 4400 only has two cores and 4GB of RAM.  Running R80.10 purely as a gateway on a 4400 would probably be OK if you didn't have too many blades enabled, but including R80.10 management as well on a 4400?  Will probably work but the performance will almost certainly be unacceptable.

--
My book "Max Power: Check Point Firewall Performance Optimization"
now available via http://maxpowerfirewalls.com.

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com
Admin
Admin

It certainly wouldn't work with anything less than 8GB of RAM.