Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

Hello, 

 

I need some expert advice and help on how I can upgrade the entire environment to R77.30, basically I am looking for best practices and any known issues that can be expected.

 

My environment:

Management sever (Model:Smart-1 5) running R77.20

Tow security gateways 4800  running R76 ( OS build 265).

I have VPN traditionnel and community mode  already configured 

For information i need to make this upgrade without production break .

Highly appreciate the help.

 

1 Solution

Accepted Solutions
Highlighted

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

The Smart-1 5 is not supported to run any code level beyond R77.30.  You'll need to replace it with at least a Smart-1 205 or a VM/open server with at least 2 cores and 6GB of RAM, preferably 4+ cores and 10GB+ of RAM.

Your 4800 units are end of engineering support in 2020 and end of all support in 2022 so start planning to replace them. 

Would also echo Heiko's comment about converting to simplified VPN mode prior to the upgrade, while traditional VPN mode is supported in R80+ CoreXL will have to be disabled.

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com

View solution in original post

6 Replies
Highlighted

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

Hi @Rania_Chetoui ,

You should upgrade to R80.20 or R80.30. R77.30 is out of support in September.

The Smart-1 5 is not supported for R80.x

Tags (1)
Highlighted

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

First upgrade the management server to R80.30 and install Jumbo HFA. Then you can update the gateways of the cluster. to R80.30 + HFA.

More see here:

Upgrade/Download Wizard

Check Point R80.30

R80.30 Release Notes

R80.30 Installation and Upgrade Guide

R80.30 Upgrade map

R80.30 Backward Compatibly Map

Tags (1)
Highlighted

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

CUT>>>

I have VPN traditionnel and community mode already configured

<<<CUT

Important!

Before you upgrade to R80.x, you need to change VPN traditional mode to the new simplified mode. There is no wizard for this anymore under R80.

Tags (1)
Highlighted

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

Thank you for your help, 

I already think to migrate to R80.10, but i think that i don't have enough memorie in my manager :

this is what i have:

Manager Server:

Platform: S-10-00
Model: Smart-1 5
CPU Model: Intel(R) Celeron(R) M processor 1.50GHz
CPU Frequency: 1500.120
Disk Model: Hitachi HDS721050CLA360
Disk Capacity: 500 GB
Memory Slot 1 Size: 1024

Security gateway :

Platform: T-180-00
Model: Check Point 4800
Serial Number: 1236B03015
CPU Frequency: 2660.218
Disk Model: WDC WD2503ABYX-01WERA1
Disk Capacity: 251 GB
Memory Slot 1 Size: 4096MB
Memory Slot 2 Size: 4096MB

 

With this performance can i migrate to R80.30 ?

 

 

 

0 Kudos
Highlighted
Admin
Admin

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution
A Smart-1 5 cannot be upgraded to R80.x.
You should work with a local partner to trade that in for either a newer Smart-1 appliance.

The 4800 should run R80.x just fine.
Highlighted

Re: Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Jump to solution

The Smart-1 5 is not supported to run any code level beyond R77.30.  You'll need to replace it with at least a Smart-1 205 or a VM/open server with at least 2 cores and 6GB of RAM, preferably 4+ cores and 10GB+ of RAM.

Your 4800 units are end of engineering support in 2020 and end of all support in 2022 so start planning to replace them. 

Would also echo Heiko's comment about converting to simplified VPN mode prior to the upgrade, while traditional VPN mode is supported in R80+ CoreXL will have to be disabled.

 

Book "Max Power 2020: Check Point Firewall Performance Optimization" Third Edition
Now Available at www.maxpowerfirewalls.com

View solution in original post