- Products
- Learn
- Local User Groups
- Partners
- More
CheckMates Fifth Birthday
Celebrate with Us!
days
hours
minutes
seconds
Join the CHECKMATES Everywhere Competition
Submit your picture to win!
Check Point Proactive support
Free trial available for 90 Days!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
The 2022 MITRE Engenuity ATT&CK®
Evaluations Results Are In!
Now Available: SmartAwareness Security Training
Training Built to Educate and Engage
MITRE ATT&CK
Inside Check Point products!
CheckFlix!
All Videos In One Space
Hi everyone,
My name is Itai and I'm a Team Leader in Check Point R&D. My team is responsible for a new upgrade mechanism for the management server.
The new upgrade mechanism will be executed (under the hood) when upgrading from R80.20, R80.20.Mx and R80.30 to R80.40 (and to any future version).
I would like to share with you some exciting advantages of the new upgrade mechanism
Note: I would like to inform that the command for Advance Upgrade has been changed in the new upgrade mechanism. The command that should be used when upgrading from R80.20, R80.20.Mx and R80.30 to R80.40 is migrate_server (instead of migrate command that is used when upgrading from R80.10 and lower versions). For more information search for migrate_server in R80.40 Installation and Upgrade Guide.
I hope you will enjoy from our new upgrade mechanism. Feel free to reply to this thread with comments or questions, or to reach me or @Eran_Habad privately.
Itai
I'm adding an example of the upgrade report
Upgrade report for example
Hi @Magnus-Holmberg thanks for the feedback. Of course MDS is supported in R80.40.
Eran
Hi,
Thanks for the clarification.
just notice that the limitation that was refering to R80.40 in MDS was regarding IOT.
Currently Check Point is extending its capabilitys in the cloud with more features.
Thinking more specificliy on Dome9 and Protego, these products are currently not part of the general mgmt release and depends on the cloud mgmt if i understand it correctly.
This new feature for mgmt upgrade is it planning to close the gap and bring more functions in the the regular mgmt/mds?
Maybe to be deliverd as a plugin or similar.
Thanks
Magnus
The management upgrade process is aimed for a smooth migration of the database between main train versions. After the upgrade, you can enjoy the features and capabilities of the new version. The question on cloud products is agnostic to the upgrade mechanism, and can be asked in the cloud section of Check Mates. In general, indeed some of Check Point's products are outside the main train (not only cloud) to allow CI/CD without dependency on Check Point releases.
Afaik the R80.30 CPUSE upgrade of SMS did an export of the database, fresh install on a new partition (while keeping the old partition in case of upgrade failures) and database import. If you did that manually, you would have a backup of the database export.
Albretch, do you use only migrate export for backup of database?
Hello.
I want to ask what will be better toll to backup R80.30 EPM Server, old "migrate export --include-uepm-msi-files" or new one "migrate_server export --include-uepm-msi-files"?
Thanks
Zbyszek
Hi Itai,
Thanks for share this information. Really I didn´t know about the new mechanism, and maybe I have some doubts yet. I think will be good do a meeting, or presentation with some examples. I have a question in this moment I have a SMS in R80.30, I think migrate the SMS to Open Server, what is the best way for migrate?:
1. Upgrade the SMS in R80.30 for CPUSE, and then use the database with migrate server export for migrate to Open Server, (it will requiere one step more).
2. Use migration_server export to R80.40 in the SMS in R80.30, and then in SMS Open Server with fresh install use migrate_import?
3. Use migrate export normal in R80.30 and use migrate import in the new SMS Open SErver in R80.40?
Maybe if I do the way 2, for logs and indexes I need do a migrate_server -l or not? or only transfer de logs?
Regards,
Julian.
Hi
We have discovered that in the process, all sheduled pdf reports (/opt/CPrt-R80.40/smartview/exported_files) are included in the file -- (so in this customer the exported file was around 3.4G, with near 4.7G of pdf files...)
Is there anyway to avoid exportinf those exported reports?
BR
I would like to see an option for a partial cluster update with the mvc-feature. After a partial upgrade we can test the new version in the customer enviroment with an easy option to fallback to the "old" member.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY