Upgrade from R77.30 to R80.30

[Nelson_Wong]

Hi all,

I have 1 SMS with using open server and 2 gateway (cluster) with using appliance 4600. Both of them are 32bit OS.

I would like to upgrade these server to r80.30 and using 64bit OS.

What are requirements of hardware and software? (e.g. CPU Core, RAM, disk space)

How do I upgrade SMS and gateways?

Can I upgrade without downtime?

Thank you for your answering.

[PhoneBoy]

The hardware requirements are documented in the R80.30 Release Notes: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_RN/html_frameset.htm

You upgrade the SMS first, which should not involve any downtime since the gateways will continue to pass traffic and will temporarily store logs locally until the management server comes back up and you push policy to the gateways.

The R80.30 Installation and Upgrade guide covers the different upgrade methods for both Management and Gateways, which also includes different methods for upgrading clusters with different levels of downtime. See: https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_Installation_and_Upgrade_Gui...

If you have specific questions after reading all this, ask away.

[Nelson_Wong]

I also have a number of site-to-site VPN and a Remote VPN. WIll these traffics be interrupted?

[_Val_]

Look for "Connectivity Upgrade" in R80.30 Installation and Upgrade Guide. With CU path, it is possible to upgrade almost seamlessly 

However, for practical purposes, I would advise planning a short service interruptions anyway.

[Nelson_Wong]

I have upgraded the SMS to R80.30. However, I found that I cannot get data from FW. The status shown as "Execution error".

How can I fix this issue?

[PhoneBoy]

Since I'm not sure what the context that error message has, please provide a screenshot.

[Nelson_Wong]

Please take a took in Operation Status session. CP-FW1 and CP-FW status are shown as Execution error.

I found a KB for this issue:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

However, I have no idea how I can be done in solution step 1.

[PhoneBoy]

In general, we have not updated SmartUpdate much for R80.x.
What is it you are trying to do with SmartUpdate?

If you're trying to kick off an upgrade, this should be done with CPUSE on the gateway, not with SmartUpdate.
License management can be done on the CLI.

[Nelson_Wong]

I am not using SmartUpdate. Here is my upgraded steps:
1. Export existing SMS (R77.30) using migration tools.
2. Shutdown existing SMS (R77.30).
3. Fresh Install a new SMS (R80.30)
4. Import to new SMS (R80.30) using migration tools.
5. Install Policy.
6. Go to SmartUpdate and get data from SMS and cluster gateways.

In normal, all the devices status should be shown as 'Get Gateway Data' completed successfully, but now only SMS can be got.

So, I would like to ask how I can fix this issue.

Thank you.

[PhoneBoy · Accepted solution]

In R80,x, the status of the gateways should be viewed in SmartConsole, not SmartUpdate.

[Nelson_Wong]

So, should I not care on this issue? If the license status shown as OK in SmartConsole, it is normal. Am I right?

[PhoneBoy · Accepted solution]

You are correct, the issue with SmartUpdate is merely cosmetic.