- Products
- Learn
- Local User Groups
- Partners
- More
Access Control and Threat Prevention Best Practices
5 November @ 5pm CET / 11am ET
Ask Check Point Threat Intelligence Anything!
October 28th, 9am ET / 3pm CET
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
Spark Management Portal and More!
Hi all.
We've got an standalone cluster (that is, two machines, both SG and MGMT, un MGMT primary, the other secondary) still in R77.30 and with no connection to the Internet.
So the challenge is to upgrade them to R81.10 (we are not using R81.20 yet). I expected that getting the package from Check Point, copying the file to the appliances and doing an installer import local would be enough. But CPUSE says it's not a valid CPUSE package.
I've tried also getting the package from a same series appliance (5xxxx), copying it to the appliances, installer import... Nothing. Same result.
Could anybody please point me to the correct packages to download?
Thanks
So you have full-HA? 2 standalone in a cluster? I wish upgrade wizard was available, but it is not. Maybe contact TAC to confirm the right package...do you see anything from web UI that shows as valid if you right click and verify for upgrade?
Best,
Andy
Hi!
Well, WebUI is another problem. 🙂 It's an R77.30 and the machines we have to acces it don't have Internet Explorer anymore. I've tried an old Firefox portable and nothing.
Anyway, I'm going through command line with installer. And since it gets no packages, nothing to verify...
I think you are right, I can ask TAC the right way to do this. Thanks!
Try this, its an old trick I used to do for who knows how long...do windows + R, type iexplore and see if that works, though that may open edge browser lol
Andy
I also found that sometimes it works in private window (any browser really, but most likely Google Chrome)
Best,
Andy
You should upgrade in at least two steps. One to R80.40, then one to R81.10.
If you aren't already running CPUSE 2379, you may also need to update it manually.
Note that there are some significant OS improvements you don't get from an upgrade (filesystem, partition table alignment, etc.). You should eventually reinstall from scratch at R81.20 using ISOmorphic. You can bring your configuration over, but it takes a few extra steps. You should start researching and planning all that now.
Excellent point Bob.
Andy
You are right, hadn't noticed till now that the management needs a two step with R80.40 as the first one. That's probably why currently cpuse is saying the R81.10 packages are not right.
So, more work to do... Nice... 🙂 Thanks!
Is web ui still broken?
Hi! Yes, no way to get an IE working to access WebUI. But no problem, I can work on CLI.
I'm still struggling anyway. Now I've tried to import locally the R80.40 upgrade package and... again, installer says it is not a valid CPUSE package.
I guess next try is to upgrade installer, but I wonder if an R77.30 is going to accept the latest version
There is command to trey update it from cli, I mean da agent, not sure if it works in R77.30...
Here it is in R81.20
Andy
you can simply type da_cli, hit enter and it will give all the options
[Expert@cpazurecluster1:0]# da_cli check_for_updates
{
"Action ID" : "-1",
"Message" : "Checking for new available packages. This operation may take a few moments"
}
[Expert@cpazurecluster1:0]#
Absolute worst case, this process should get you to R80.40:
Check Point's big advantage to me is it's just software. Except at the low end (Quantum Spark) and high end (Maestro, Quantum LightSpeed), their hardware is nothing special; it's just overpriced x86 servers with weird card slots. This is relevant here because their software works just as well in a VM as it does on real hardware.
Build some VMs and try this process at least once. I probably forgot something in that list of steps. Testing it on VMs will help confirm the process works before you try it on your production boxes. This process is complicated enough I would try it several times. Back when I was doing upgrades by hand, I would try most of my significant upgrades in VMs at least 20 times to build familiarity before trying them for real.
Hi! Still working on this. I'm stuck on the migrate import step.
After a while importing I get an error saying import has failed. Checking the migrate log file:
[4 Apr 15:41:51] [ExecCommandGetOutput] Going to execute command: '"/opt/CPsuite-R80.40/fw1/bin/upgrade_tools/././/ips_upgrade_tool" import "/opt/CPsuite-R80.40/fw1/tmp/migrate/regular_files/fwdir/tmp/ips_files" "/opt/CPsuite-R80.40/fw1/bin/upgrade_tools/././/"'
[4 Apr 15:41:52] [ExecCommandGetOutput] Command completed with an exit code 1
[4 Apr 15:41:52] [ExecCommandGetOutput] ERR: The given exit code indicates an error
[4 Apr 15:41:52] ...<-- ExecCommandGetOutput
[4 Apr 15:41:52] [CommandRunner::exec] ERR: Command execution had failed
And then in the ips upgrade log file:
[4 Apr 15:41:52] [ReadFwsetFile] Going to read file '/opt/CPsuite-R80.40/fw1/tmp
/migrate/regular_files/fwdir/tmp/ips_files/ips_upgrade_tool.conf'
[4 Apr 15:41:52] [ReadFwsetFile] ERR: Failed to open file: No such file or direc
tory
[4 Apr 15:41:52] ..<-- ReadFwsetFile
[4 Apr 15:41:52] .<-- GetConfigFileSet
[4 Apr 15:41:52] [RunSMCImport] ERR: Failed to read configuration file!
[4 Apr 15:41:52] <-- RunSMCImport
Any idea? Thanks!
Appears something wrong with config file, thats final error it gives...did you ever open TAC case on it?
Andy
I'm on it 🙂
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
19 | |
18 | |
18 | |
11 | |
10 | |
7 | |
6 | |
6 | |
6 | |
5 |
Tue 28 Oct 2025 @ 11:00 AM (EDT)
Under the Hood: CloudGuard Network Security for Google Cloud Network Security Integration - OverviewTue 28 Oct 2025 @ 12:30 PM (EDT)
Check Point & AWS Virtual Immersion Day: Web App ProtectionTue 28 Oct 2025 @ 11:00 AM (EDT)
Under the Hood: CloudGuard Network Security for Google Cloud Network Security Integration - OverviewTue 28 Oct 2025 @ 12:30 PM (EDT)
Check Point & AWS Virtual Immersion Day: Web App ProtectionThu 30 Oct 2025 @ 03:00 PM (CET)
Cloud Security Under Siege: Critical Insights from the 2025 Security Landscape - EMEAThu 30 Oct 2025 @ 02:00 PM (EDT)
Cloud Security Under Siege: Critical Insights from the 2025 Security Landscape - AMERAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY