Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Ihenock1011
Advisor
Jump to solution

VSX JHF upgrade

Hi Team,
 

We have a Check Point Maestro deployment with Security Gateways (SGs) running in VSX mode. Each VSX instance hosts a member of a two-member Security Gateway cluster (SG-01 and SG-02). We're planning to upgrade the Jumbo Hotfix (JHF) on these VSX instances.

Our goal is to achieve a zero-downtime upgrade by leveraging the redundancy within the VSX cluster. Is it possible to perform the upgrade in the following way:

  1. Perform the JHF upgrade on SG-01. During this upgrade, SG-02 will handle the traffic.
  2. Once SG-01 is upgraded and operational, upgrade the JHF on SG-02.

If this is possible, can you show me how to disable the member, perform the upgrade, and bring it back into operation?

Thanks,

0 Kudos
1 Solution

Accepted Solutions
Chris_Atkinson
Employee Employee
Employee
1 Reply
Chris_Atkinson
Employee Employee
Employee

Have you already reviewed the documented process? e.g.

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Maestro_AdminGuide/Content/T...

CCSM R77/R80/ELITE