Uninstall product from gateway or management server

[nmelay2]

Hello guys,

Is there a way to cleanly uninstall products from a gateway or management, once they're no longer used?

For example, Endpoint Policy Management blade was previously enabled, but no longer is, and you want to cleanly get rid of the UEPM directories.

[the_rock]

If I were you, I would NOT do those things myself. I would open TAC case to get an official answer/procedure.

Andy

[nmelay2]

I was indeed looking for an official procedure/command, not some kind of hack.

[the_rock]

Right...and thats why I suggested what I did.

Andy

[PhoneBoy · Accepted solution]

The short answer is no.

Generally speaking, the same system image is used for gateway and management, which includes components for all of the above.
Depending on both the options chosen at initial installation and activation in SmartConsole, the various pieces are activated as needed.

On the gateway side, the same infrastructure is used for most blades, which means there's nothing really to remove.
The management side has similar dependencies amongst its components, though there is some data that is unique to each blade.
In any case, the software that makes up these components cannot be removed individually.
The data that is unique to those management blades (e.g. Endpoint) remains when they are deactivated and, short of an advanced migration/clean install, that data won't be removed unless it is done so manually.

Professional Services (either through Check Point or a partner) might be able to assist with this task if it needs to be done in place.

[nmelay2]

Thanks for your detailed answer.

I was under the impression that the UEPM directories at least were only created once the blade was activated, but just realized they're already here after the FTW and initial installation.

OK, makes sense there's no way to remove it then.

[the_rock]

Out it this way...Im sure there is a way to remove them, but if you make a mistake, you will probably end up doing way more "damage" than what you intended. Honestly, if I were you, I would still contact TAC to get their official statement, but my gut feeling is they will probably tell you something similar to what @PhoneBoy already advised.

Best,

Andy