no space to upgrade to R81.20

[Vega]

Hello guys,

I tried to upgrade checkpoint to R81.20. But I Verify the update packages, It shows there is not enough disk space to upgrade.
I check the disk in terminal, how should I clean the disk to upgrade safety?


another question is

should I keep the security gateway and open server at the same version?
Is it ok if I only upgrade open server to R81.20? or there will be a problem to  device?

thanks for your help 🙂 

[G_W_Albrecht]

First: Check GAiA WebGUI of the GW for partition details ! Looks like logs are using much space, they should be on the SMS. You could also save the GAiA config and do a fresh install.

Another: No problem with R81.20 SMS for R81.10 GWs. But i would wait a little more time with changing to R81.20.

[Vega]

Thanks for your answer.
How can I export these log to SMS or another place with Gaia WebGUI? Or use CLI command? 

[the_rock]

Just winscp into the appliance and then download the files.

Andy

[PhoneBoy]

https://support.checkpoint.com/results/sk/sk63361 
You can use scp/sftp to copy the files somewhere else. 

[the_rock]

You can try something like below:

find /var/log -size +500000000c

That will look for any files bigger than 500 MBs in /var/log and you can delete whats safe to remove

Andy

[CheckPointerXL]

tip for lazy people:

find /var/log -size +500M 

🤣

[the_rock]

True that 😂

[Vega]

Thank you for your answers. I tried to use the command "find /var/log -size +500M" to find the relevant files, but there were too many, and I couldn't display all the results in CLI mode. I also tried to adjust the window size, but I still couldn't. As a result, I couldn't use WinSCP to find all the relevant files and export them or perform other operations.

How can I adjust the window size or move the CLI screen?

Also, are these files over 500M safe to export or Delete?
According to the official instructions provided by PhoneBoy, It seems I need to contact technical support. However, I am unable to do so at this time for some reason.
I am afraid of damaging the firewall. I would like to ask about it first. Thank you.

[G_W_Albrecht]

Use PuTTY and not a GAIA CLI window that can not be resizerd ! Please also follow the old CP advice: Do not delete folders/directories, only files that you surely know can be deleted. That would include installation files (.tgz), logs & co. Still this is dangerous territory and only makes real sense on the SMS. After export of GAiA settings, GWs can be freshly installed, FTW, settings imported and policy installed - no need to delete any files...

I still do not understand why you need to upgrade at all - R81.10 is a good version, so if you do not need some new feature so badly that you are ready to put much work in it, just stay...

[Vega]

My client has installed SmartConsole, so he can also see the update information. However, I need to plan in advance how to proceed if he wants to update to meet his needs.
This firewall was previously set up by other IT staff who worked with my client, but I have never had any experience with any Checkpoint products in the past.
Thank you for your advice. I am also trying to find more suggestions to convince my client that staying on R81.10 is less likely to cause problems.

[G_W_Albrecht]

I have received the statement that it is suggested to stay on R81.10 until open bugs in R81.20 are resolved in a new Jumbo from a CheckPoint engineer on phone.

[CheckPointerXL]

Findd /var/log -size +500M | xargs ls -lhars

To sort by size the output

[the_rock]

I would not say all of them are safe to delete, but please generate backup at least (and snapshot if possible), so you can revert if anything was to happen with the database.

Andy

[Bob_Zimmerman]

Snapshots only cover data in lv_current, not in lv_log (mounted as /var/log).

On the plus side, it's safe to delete almost anything in /var/log. Worst case, something like logging breaks until you reboot. This is why it isn't saved in snapshots.