cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

Hello, 

 

I need some expert advice and help on how I can upgrade the entire environment to R77.30, basically I am looking for best practices and any known issues that can be expected.

 

My environment:

Management sever (Model:Smart-1 5) running R77.20

Tow security gateways 4800  running R76 ( OS build 265).

I have VPN traditionnel and community mode  already configured 

For information i need to make this upgrade without production break .

Highly appreciate the help.

 

1 Solution

Accepted Solutions

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

The Smart-1 5 is not supported to run any code level beyond R77.30.  You'll need to replace it with at least a Smart-1 205 or a VM/open server with at least 2 cores and 6GB of RAM, preferably 4+ cores and 10GB+ of RAM.

Your 4800 units are end of engineering support in 2020 and end of all support in 2022 so start planning to replace them. 

Would also echo Heiko's comment about converting to simplified VPN mode prior to the upgrade, while traditional VPN mode is supported in R80+ CoreXL will have to be disabled.

 

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com
6 Replies

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

Hi @Rania_Chetoui ,

You should upgrade to R80.20 or R80.30. R77.30 is out of support in September.

The Smart-1 5 is not supported for R80.x

Tags (1)

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

First upgrade the management server to R80.30 and install Jumbo HFA. Then you can update the gateways of the cluster. to R80.30 + HFA.

More see here:

Upgrade/Download Wizard

Check Point R80.30

R80.30 Release Notes

R80.30 Installation and Upgrade Guide

R80.30 Upgrade map

R80.30 Backward Compatibly Map

Tags (1)

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

CUT>>>

I have VPN traditionnel and community mode already configured

<<<CUT

Important!

Before you upgrade to R80.x, you need to change VPN traditional mode to the new simplified mode. There is no wizard for this anymore under R80.

Tags (1)

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

Thank you for your help, 

I already think to migrate to R80.10, but i think that i don't have enough memorie in my manager :

this is what i have:

Manager Server:

Platform: S-10-00
Model: Smart-1 5
CPU Model: Intel(R) Celeron(R) M processor 1.50GHz
CPU Frequency: 1500.120
Disk Model: Hitachi HDS721050CLA360
Disk Capacity: 500 GB
Memory Slot 1 Size: 1024

Security gateway :

Platform: T-180-00
Model: Check Point 4800
Serial Number: 1236B03015
CPU Frequency: 2660.218
Disk Model: WDC WD2503ABYX-01WERA1
Disk Capacity: 251 GB
Memory Slot 1 Size: 4096MB
Memory Slot 2 Size: 4096MB

 

With this performance can i migrate to R80.30 ?

 

 

 

0 Kudos
Admin
Admin

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution
A Smart-1 5 cannot be upgraded to R80.x.
You should work with a local partner to trade that in for either a newer Smart-1 appliance.

The 4800 should run R80.x just fine.

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

The Smart-1 5 is not supported to run any code level beyond R77.30.  You'll need to replace it with at least a Smart-1 205 or a VM/open server with at least 2 cores and 6GB of RAM, preferably 4+ cores and 10GB+ of RAM.

Your 4800 units are end of engineering support in 2020 and end of all support in 2022 so start planning to replace them. 

Would also echo Heiko's comment about converting to simplified VPN mode prior to the upgrade, while traditional VPN mode is supported in R80+ CoreXL will have to be disabled.

 

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com