R82.10 approximate release date?

[the_rock]

Hey guys,

Any idea when R82.10 will be out as generic availability?

Best,

Andy

[Chris_Atkinson]

To my knowledge there is no requirement to reinstall JHF T22 (from sk183557) that was only relevant for the initial release of R82.10 Take 271.

I will submit feedback on sk183557 & sk183508 to have some relevant notes added to it for clarity.

[Paul_Hagyard]

Thanks Chris, appreciate it.

[MeravAlon]

Correct. By upgrading to T464, you will get all the fixes include in T271 & Jumbo T22. No need to re-install Jumbo HF T22 on top of T464. 

Merav

[_Val_]

Yes, new ARM boxes have to run R82.10, but this is still not the case for the main train

[_Val_]

Well... From what I heard, it should be earlier than that. We plan to have a TechTalk around this release, so stay tuned.

[the_rock]

Good news!

[the_rock]

Considering how great R82 is, Im sure R82.10 will be even better.

Andy

[hle2001]

I just bought two 3920 GWs and it came with R82.10. My plan to replaced our ClusterXL model 3600 running R81.20, but I could not find version R82.10 on Checkpoint website. I am able to download R82 and latest Jumbo hotfix take 43, and 44. Can I upgrade my central Management server from R81.20 to R82 and then perform the ClusterXL upgrade with new pair 3920 running R82.10?

I even request for a Early Access program but have not heard back from Checkpoint yet.

Or do I need to put version R82 on the new 3920?

Thank you,

Robert Lee

[Alex-]

Everything's described in the SK for that series.

[Paul_Hagyard]

The 3920s must run R82.10 - that is what they ship with, and that is required for the platform.

See https://support.checkpoint.com/results/sk/sk183557, but you SmartCenter server must be running R82 JHF 19 or later (43 is the recommended).

[Paul_Hagyard]

Whoops, wrong SK, that was the JHF for R82.10 itself. See Alex's link for the main R82.10 for 3900

[the_rock]

Yep, thats right sk Alex gave, I also referenced the link, but we were all thinking of the same article : - )

[the_rock]

Im fairly positive you can manage R82.10 gw with R82 mgmt server.

https://support.checkpoint.com/results/sk/sk183199

[the_rock]

As a matter of fact, I helped the client recently with those devices on R82.10 and management on R82 latest jumbo and worked just fine.

[hle2001]

Thank you for your response. I just download all R82 and latest Jumbo Hotfix take 43 & 44.

Here is my current settings:

Firewall Management server running as VM R81.20

For ClusterXL, it has two 3600 running R81.20.

The goal is to replace ClusterXL 3600GWs with new pair 3920 (R82.10).

Here is my steps and please correct me and exactly what command to perform these steps:

1. Upgrade Secure Management server from R81.20 to R82 and apply latest take 43.

2. Installed latest Smart Console, Check_Point_SmartConsole_R82_jumbo_HF_B1059_Win.exe.

3. Check new Smart Console & Management Server still manage Gateway 3600 R81.20 OK.

4. Generate license file from User Center and apply to Smart Console/Smart Update database and apply to new 3920

5. Configure all Network interfaces and Static routes for 3920 same as 3600 for Active/Standby

6. Turn off 3600 Standby gateway and  replace with new 3920 keep same name and IP address, re-establish the SIC. Question: where do I add MVC command? both on 3600GW (active) and 3920GW? and on ClusterXL do I need to change the hardware to 3900 Appliances and version to R82.10 or R82, and when install policy, do I need to uncheck as shown from attach For gateway clusters..?

how I make sure the new 3920 standby, receive the policy before I perform the swap to the 3600gw (active) and repeat the steps?

when both 3920 GWs in the clusterXL I can safely turn off MVC? 

[the_rock]

You got it all right, but here is what I can say about MVC. You only really need to enable it on HIGHER version member, meaning on one that would be first upgraded, so it can sync with lower version member. You dont need to change mvc on 3600 fws. Please refer for all the steps in below link. I must have done this 20+ times, never an issue.

Reference about it:

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Installation_and_Upgrade_Guide/Top...

And ALWAYS make sure you start with whichever member is backup.

https://community.checkpoint.com/t5/Security-Gateways/Replace-Upgrade-Cluster/td-p/69216

[hle2001]

Hi,

Btw, while I am trying to import the R82 fresh Install and upgrade package for my Virtual VM Security Management server running R81.20, it said not enough disk space. Do you know where I can remove unneeded files so I can perform the R82 upgrade?

Thank you,

-Robert Lee

[the_rock]

Hey Robert,

Here is what I always do. So, lets say for argument sake, you have issue with /var/log dir (though same command can be applied to ANY dir and file size).

Say you want to check files bigger than 500Mbs in /var/log, you can run:

find /var/log -size +500M

BUT, PLEASE...be careful what you delete, because if you inadvertently remove ANY database file and reboot, if you got no backup, that management server will NEVER log you in smart console again and Im not kidding (been through that long time ago with a customer). Now, if you have a backup, that would be your only savior, so I do strongly suggest you get that at least.

[Timothy_Hall]

Boot in maintenance mode and run lvm_manager.  You should be able to reallocate some more space to where you need it (either / or /var/log).

[Paul_Hagyard]

Have a look at:

sk94671 (How to add hardware resources, such as log storage, to a Virtual Machine running Gaia OS)

sk95566 (Managing partition sizes through the LVM manager on Gaia OS)

It's relatively easy with a VM to add a new virtual disk and expand the storage. Storage is cheap, easier than trying to free it up 🙂

Also have a detailed read of the install/upgrade guide for options to upgrade management. While an in-place upgrade will work it's generally better to do an advanced upgrade via migrate export/import to a new VM - but there is a lot more involved with that.