3200 Appliance Upgrade to R80.20 as StandAlone

[Poh_Seng_Anthon]

Hi All

        I have customer currently running on R77.30 using 3200 StandAlone NGTX. Would it advisable to upgrade it to R80.20?

regards

Anthony 

[Wolfgang]

Did this January '19, runing since without problems. Onyl the normal limitations and recommendations for R80.20 upgrade checked.

[Danny]

As R77.30 expires in September 2019 it's absolutely advisable to upgrade it to R80.20, as this is Check Point's official recommendation for all customers. I have it running as well. No issues. A bit slow, but that's normal when you have a 3200 (Datasheet) running as standalone. Just be aware that that using Solid State Drive (SSD) is not supported with a Standalone Deployment on 3000 Appliances.

[Poh_Seng_Anthon]

Hi Danny

       i'm aware about SSD. thanks for the advise.

[Marcos_Vieira]

I have just created a Service Request asking about Standalone 3100 with SSD and the answer was positive. However...

Looking at the sk110052 it says: Solid State Drive (SSD) is supported with a Standalone Deployment only on 3100/3200 appliances.

At the same sk110052, three lines above, it has a confused text saying: When using Solid State Drive (SSD), the local logging feature in SmartConsole is not supported on the Security Gateway. In case of a disconnection between the Log Server and the Security Gateway, logs will automatically be saved locally on the Security Gateway.  So it is contradicting itself in the same paragraph.

Why the Standalone is supported in the 3000 SSD family but not in the other appliances (from 5100 up to 5800) using the same disk (at least they have the same size)?

[Jerry]

my own experience with 3200's - great with dist-environment but not really capable (resource wise) with Standalone (FW+MGMT) as the hardware is sooner or later struggling with logging and fwk at the same time. IMHO 3200 should be SMS-managed, Standalone appliances starts from 5200 really. Just my 5 cents from practical standpoint. all URL's provided by Danny says exactly the same but in a more PR-ised manner 🙂

[Poh_Seng_Anthon]

Hi Jerry

        Unfortunately our customer does not have a seperate SMS server. but thanks for the advise.

regards

Anthony

[G_W_Albrecht]

The distributed deployment i would suggest consists of a GW cluster and SMS in a VM. A lot of FullManagement HA or StandAlone deployments have been changed with the R80.x0 upgrade process to distributed to eliminate issues.