VSX Upgrade

[Sanjay_S]

Hi All,

We are planning to upgrade our VSX cluster from R77.30 to R80.30. Is it possible to upgrade it directly to R80.30 version or is there any upgrade path we need to follow? Also please let me know what all the things we need to consider for this upgrade. We have 4 physical firewall and 2 virtual systems. 

Regards,

Sanjay S

[Lari_Luoma]

Hi Sanjay!

My recommendation is upgrade to R80.40. You can upgrade directly from R77.30 to R80.30 (or .40) using CPUSE. When upgrading VSX the first step is to run vsx_util upgrade on the management server.

Make sure to follow all the steps in the Installation and Upgrade Guide for the relevant version.

[Magnus-Holmberg]

Is upgrade or reinstall the recommended way for clusters?

[Lari_Luoma · Accepted solution]

If you want to benefit of the new XFS file system you will have to do fresh installation. In all other cases upgrade is recommended.

With CPUSE upgrade you get your configuration migrated automatically to the new version and automatic snapshot for rollback.

[Lari_Luoma]

Take a look at this discussion for upgrade vs. Fresh installation discussion:

https://community.checkpoint.com/t5/General-Management-Topics/Clean-install-vs-upgrade/td-p/14701

[Magnus-Holmberg]

Thanks for the clarification, most of our clusters are already running R80.30 3.10 as we changed most to HP G10, so for us we already on the new filesystem.

We are planning our upgrades to R80.40 for the VSX. The first MDS we tested with CPUSE went perfectly. (Nice new report) Previously we have reinstalled clusters to be on a clean box, but CPUSE would simplify the process by a lot.

[Lari_Luoma]

It's indeed very nice process compared to the old vsx_util reconfigure one. Personally I haven't done any VSX upgrades to R80.40 yet, but it worked fine with earlier R80.x versions as well.

[Sanjay_S]

Thanks Lari for the information. I will go through the upgrade guide and will get back in the conversation in case of any doubts.
Thanks Again 🙂

[Tsahi_Etziony]

Hey @Sanjay_S,

Maybe using CDT will make the upgrade process even easier. CDT will do it automatically - it will take care of cluster upgrades and operate both CPUSE and vsx_util on its own.