- CheckMates
- :
- Products
- :
- General Topics
- :
- Re: Uninstall product from gateway or management s...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Uninstall product from gateway or management server
Hello guys,
Is there a way to cleanly uninstall products from a gateway or management, once they're no longer used?
For example, Endpoint Policy Management blade was previously enabled, but no longer is, and you want to cleanly get rid of the UEPM directories.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The short answer is no.
Generally speaking, the same system image is used for gateway and management, which includes components for all of the above.
Depending on both the options chosen at initial installation and activation in SmartConsole, the various pieces are activated as needed.
On the gateway side, the same infrastructure is used for most blades, which means there's nothing really to remove.
The management side has similar dependencies amongst its components, though there is some data that is unique to each blade.
In any case, the software that makes up these components cannot be removed individually.
The data that is unique to those management blades (e.g. Endpoint) remains when they are deactivated and, short of an advanced migration/clean install, that data won't be removed unless it is done so manually.
Professional Services (either through Check Point or a partner) might be able to assist with this task if it needs to be done in place.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If I were you, I would NOT do those things myself. I would open TAC case to get an official answer/procedure.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was indeed looking for an official procedure/command, not some kind of hack.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Right...and thats why I suggested what I did.
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The short answer is no.
Generally speaking, the same system image is used for gateway and management, which includes components for all of the above.
Depending on both the options chosen at initial installation and activation in SmartConsole, the various pieces are activated as needed.
On the gateway side, the same infrastructure is used for most blades, which means there's nothing really to remove.
The management side has similar dependencies amongst its components, though there is some data that is unique to each blade.
In any case, the software that makes up these components cannot be removed individually.
The data that is unique to those management blades (e.g. Endpoint) remains when they are deactivated and, short of an advanced migration/clean install, that data won't be removed unless it is done so manually.
Professional Services (either through Check Point or a partner) might be able to assist with this task if it needs to be done in place.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for your detailed answer.
I was under the impression that the UEPM directories at least were only created once the blade was activated, but just realized they're already here after the FTW and initial installation.
OK, makes sense there's no way to remove it then.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Out it this way...Im sure there is a way to remove them, but if you make a mistake, you will probably end up doing way more "damage" than what you intended. Honestly, if I were you, I would still contact TAC to get their official statement, but my gut feeling is they will probably tell you something similar to what @PhoneBoy already advised.
Best,
Andy