What is best practice when de-/installing multiple hotfixes

[RickHoppe]

Hi,

I'm having a situation I need to install the latest Jumbo Hotfix Take on several Security Gateways that have an older JHF Take and an incompatible Hotfix. A new version of that Hotfix is supplied which can be installed on top of the latest Jumbo Hotfix.

I wonder what the quickest way or best practice is to do this via CPUSE.

Usually I would proceed like this.

- Deinstall hotfix

- Reboot

- Install new Jumbo Hotfix Take (old JHF take will automatically be deinstalled)

- Reboot

- Install new version of hotfix

- Reboot

But in this case I have quite a lot Security Gateways and it would save time if I could do it faster.

Would you advise it to do it like this? Or do you have a better suggestion?

- Deinstall hotfix, suppress reboot.

- Install new Jumbo Hotfix Take, suppress reboot (old JHF take will automatically be deinstalled).

- Install new version of hotfix

- Reboot

Regards,

Rick

[Hugo_vd_Kooij]

Surpressing reboots may result in issues when not everything is done untill the reboot.

Particularly with your scenario. I rather spend an extra 30 minutes now then having to spend a lot of time on odd issues later.

[RickHoppe]

Better safe than sorry. I totally agree.

I was recommended the second scenario by professionals though it did not came from Check Point TAC. If there is no other supported scenario to speed things up I just going to extend the maintenance window.

[Gaurav_Pandya]

Yeah. It is better to spend little time with best practice than more time with strange issues.