Two doubs about SMS and GW upgrade

[fjulianom]

Hi experts,

I have two doubs about SMS and GW upgrade (from R80.30 to R81.10):

1. When you do a "Verify Update" in Gaia, does it also consider the free space prerrequisites (20G in root, 10G in /var/log etc.?

2. When running the "lmv_manager" command I see this:

I would need 100G of free space for the upgrade, but I only have 17G. But I see that "upgrade" space which says "Reserved for version upgrade". Do I need to consider the prerrequisites if I have this "upgrade" space?

Regards,

Julián

[Boaz_Orshav]

Hi

  Yes - verify checks the required disk space.

  If the verification passes - no need to worry about the required disk space for the new partition,

[the_rock]

Hey @fjulianom 

I personally always go by whether verify gives green checkmark when doing it from web UI. I would say as general rule I follow is to have at least 15-20 GB free in / dir and 30 GB free at least in /var/log

Andy

[fjulianom]

Hi,

Yeah, I verified the Verifier checks the required free space. I did a Verify Update for the R81.10 Gaia Fresh Install and Upgrade. My SMS passes, however, my GW doesn't. I get this message:

It says this result is not compatible with the package:

- Machine's configuration is 'Security Gateway'    >>>>>>>>>>>> why not?

- This installation package may not be supported on your appliance model.   >>>> my GW is installed on VM. What's the problem?

- This installation package may not be supported on your server.       >>>> my GW is installed on VM. What's the problem?

Regards,

Julián

[the_rock]

Hey brother,

Can you send a screenshot from web UI for R81.10 packages you see (I mean fw web UI)? Btw, does not matter its VM, I had done it probably 100 times on it, no issues.

Andy

[fjulianom]

Hi Andy,

Here you are:

[the_rock]

K, use BLINK package, its better and way faster than regular one, If you right click on that one, does it show its good for upgrade?

Andy

[fjulianom]

Hi,

For Blink package:

Apart from the required disk space, it says:

- This installation package may not be supported on your appliance model.

Which is ambiguous.

Regards,

Julián

[the_rock]

Strange...what are the specs for your gateway? Can you run clish -c "show asset all" and send the output?

Andy

[the_rock]

This is my R81.20 lab (used to have R80.30 on it) and used blink images to upgrade to R80.40 -> R81.10 -> R81.20 with no issues at all.

Andy

[Expert@quantum-firewall:0]# clish -c "show asset all"
CLINFR0771 Config lock is owned by admin. Use the command 'lock database override' to acquire the lock.
Platform: VMware Virtual Platform
CPU Model: Intel(R) Xeon(R) CPU E5-2620 v3
CPU Frequency: 2397.223 Mhz
Number of Cores: 4
CPU Hyperthreading: Disabled

[Expert@quantum-firewall:0]# ^C
[Expert@quantum-firewall:0]# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current 56G 8.1G 48G 15% /
/dev/sda2 291M 42M 235M 15% /boot
/dev/mapper/vg_splat-lv_log 140G 11G 130G 8% /var/log
tmpfs 11G 7.3M 11G 1% /dev/shm
[Expert@quantum-firewall:0]#

[fjulianom]

Hi Andy,

This is my output:

[Expert@AGRFW-CPX01:0]# clish -c "show asset all"
Platform: AHV             >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> Nutanix
CPU Model: Intel(R) Xeon(R) Silver 4110 CPU
CPU Frequency: 2095.078 Mhz
Number of Cores: 4
CPU Hyperthreading: Disabled

By the way, I can go from R80.30 to R81.10 directly, right?

Regards,

Julián

[the_rock]

I had done it before on VM with no issues:

 

[the_rock]

You could try download the file from my screenshot and see if it works, BUT...the catch is you would most likely need to free up more space in order for that to work. I would confirm with TAC best way to do this.

[fjulianom]

Hi Andy,

Why do you mean? What file?

You could try download the file from my screenshot and see if it works

Regards,

Julián

[the_rock]

Screenshot in my last response from upgrade wizard.

[fjulianom]

Hi,

OK, thank you. I would also ask to TAC, much slower than this community 😞

Many thanks for your help,

Julián

[the_rock]

we can do remote if you like.

Andy

[PhoneBoy]

We can confirm it is supported if you tell us the precise hardware on which you are doing it.

[fjulianom]

Hi,

I don't have that information right now, I will try to find out. Is there a document where says the supported hardware?

Regards,

Julián

[the_rock]

https://www.checkpoint.com/support-services/hcl/

[_Val_]

Which appliance model do you use? In the message, its says "This installation package may not be supported on your appliance model". Use a regular upgrade package, not "fresh installation" instead.

[fjulianom]

Hi,

The GW is installed on a VM. Do you mean the specific server hardware? What do you mean with regular upgrade package? Blink package? When I verify the blink package I get this warning:

- This installation package may not be supported on your appliance model.

When I verify the Major version package I get these warnings:

- Machine's configuration is 'Security Gateway'

- This installation package may not be supported on your appliance model.

- This installation package may not be supported on your server.

Regards,

Julián

[_Val_ · Accepted solution]

Fresh Install package is only supported with CP appliances for Security Gateways. This is what you literally see in the message. I hope it is clear enough.

[fjulianom]

Hi,

But with the blink package I also get this warning:

- This installation package may not be supported on your appliance model.

Regards,

Julián

[_Val_]

Fresh Install Upgrade package is a Blink package with some additional scripts to backup and restore your previous config on the freshly installed appliance. 

Blink does not really install the OS and products from scratch. It just replaces files on a pre-existing file system of a Check Point appliance. Specific disk format & partitioning, plus full control over HW allow as to cut some corners with Blink. It is also a reason it is not supported on open servers and VMs.

I can only repeat once more, please use the regular upgrade package, which should also be available in the list of packages on your GW.

[fjulianom]

Hi,

When I use the upgrade wizard for open servers, I get this:

This Check Point R81.10 Gaia Fresh install and upgrade is the same which appears in CPUSE under Major version.

Regards,

Julián