cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
Employee
Employee

New upgrade mechanism for management servers in R80.40!

Hi everyone,

My name is Itai and I'm a Team Leader in Check Point R&D. My team is responsible for a new upgrade mechanism for the management server.

The new upgrade mechanism will be executed (under the hood) when upgrading from R80.20, R80.20.Mx and R80.30 to R80.40 (and to any future version).

I would like to share with you some exciting advantages of the new upgrade mechanism 

  • New updatable code mechanism for faster delivery of upgrade fixes and enhancements, automatically downloaded as upgrade packages from the Download Center for online environments. Also available for offline environments and requires to download latest upgrade package from the Download Center. For instructions see sk135172.
  • New dynamic HTML upgrade report shows the current status while upgrade is in progress and the final report once upgrade is done. 
    • When upgrading using CPUSE, the report is available by clicking the “To see a detailed upgrade report” link in the Package Details pane. Available from DA version1858.
    • When upgrading using CPUSE or Advanced upgrade, the report is available on the management server at $MDS_FWDIR/log/upgrade_report-<timestamp>.html
  • The new upgrade mechanism was designed to leverage best the architecture of R80.X thus it is more reliable.
  • Future releases will include Management API commands for management server upgrade, this will allow DevOps teams to orchestrate the upgrade process automatically.

Note: I would like to inform that the command for Advance Upgrade has been changed in the new upgrade mechanism. The command that should be used when upgrading from R80.20, R80.20.Mx and R80.30 to R80.40 is migrate_server  (instead of migrate command that is used when upgrading from R80.10 and lower versions). For more information search for migrate_server in R80.40 Installation and Upgrade Guide.

I hope you will enjoy from our new upgrade mechanism. Feel free to reply to this thread with comments or questions, or to reach me or @Eran_Habad privately. 

Itai

7 Replies
Highlighted
Employee
Employee

Re: New upgrade mechanism for management servers in R80.40!

I'm adding an example of the upgrade report

 

Upgrade report for exampleUpgrade report for example

0 Kudos
Highlighted

Re: New upgrade mechanism for management servers in R80.40!

Nice work, sounds like this could help in ramping out smaller changes faster.

Btw that’s looks like a MDS, if I understood correctly MDS is not yet supported in R80.40.
0 Kudos
Highlighted
Employee+
Employee+

Re: New upgrade mechanism for management servers in R80.40!

Hi @Magnus-Holmberg thanks for the feedback. Of course MDS is supported in R80.40.

Eran

0 Kudos
Highlighted

Re: New upgrade mechanism for management servers in R80.40!

Hi,

 

Thanks for the clarification.
just notice that the limitation that was refering to R80.40 in MDS was regarding IOT.

Currently Check Point is extending its capabilitys in the cloud with more features.
Thinking more specificliy on Dome9 and Protego, these products are currently not part of the general mgmt release and depends on the cloud mgmt if i understand it correctly.

This new feature for mgmt upgrade is it planning to close the gap and bring more functions in the the regular mgmt/mds?
Maybe to be deliverd as a plugin or similar.

 

Thanks
Magnus

0 Kudos
Highlighted
Employee+
Employee+

Re: New upgrade mechanism for management servers in R80.40!

The management upgrade process is aimed for a smooth migration of the database between main train versions. After the upgrade, you can enjoy the features and capabilities of the new version. The question on cloud products is agnostic to the upgrade mechanism, and can be asked in the cloud section of Check Mates. In general, indeed some of Check Point's products are outside the main train (not only cloud) to allow CI/CD without dependency on Check Point releases. 

0 Kudos
Highlighted

Re: New upgrade mechanism for management servers in R80.40!

Is it now prefered to upgrade mgmt vs migrate export and do clean install, if already on r80.20 3.10 kernel?
0 Kudos
Highlighted

Re: New upgrade mechanism for management servers in R80.40!

Afaik the R80.30 CPUSE upgrade of SMS did an export of the database, fresh install on a new partition (while keeping the old partition in case of upgrade failures) and database import. If you did that manually, you would have a backup of the database export.