Recommend to downgrade JHF

[S_E_]

Hi

just saw a interesting thing in SmartConsole |MDSM Domain | Gateway |Actions | Install Hotfix

It recommends to downgrade from HF156 to HF118 -> attachement

cpinfo -y FW1

This is Check Point CPinfo Build 914000219 for GAIA
[FW1]
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_TEX_ENGINE_R8040_AUTOUPDATE
HOTFIX_GOT_TPCONF_AUTOUPDATE
HOTFIX_R80_40_MAAS_TUNNEL_AUTOUPDATE
HOTFIX_R80_40_JUMBO_HF_MAIN Take: 156

FW1 build number:
This is Check Point's software version R80.40 - Build 139
kernel: R80.40 - Build 127

Gateway has access to usercenter

[firewall1_active_member]
curl_cli -vk https://support.checkpoint.com
* Rebuilt URL to: https://support.checkpoint.com/
* Trying 209.87.209.88...
* TCP_NODELAY set
* Connected to support.checkpoint.com (209.87.209.88) port 443 (#0)

Regards

[G_W_Albrecht · Accepted solution]

No, it does not suggest to downgrade - it shows the alternative to the currently installed GA Jumbo, and that is the preceeding GA Jumbo 😎. But looks quite misleading if you have no experience with CP...

[S_E_]

Ups, sorry. Need to improve my reading skills.

So, on this box was formerly T139, T118,T102 and T91 installed.

show installer packages
** ************************************************************************* **
** Hotfixes **
** ************************************************************************* **
Display name Status
R80.40 Jumbo Hotfix Accumulator General Availability (Take 102) Installed as part of
R80.40 Jumbo Hotfix Accumulator General Availability (Take 118) Installed as part of
Check_Point_R80_40_JUMBO_HF_Bundle_T139_sk165456_FULL.tgz Installed as part of
Check_Point_R80_40_JUMBO_HF_Bundle_T156_sk165456_FULL.tgz Installed
** ************************************************************************* **
** Majors **
** ************************************************************************* **
Display name Status
Check Point R80.40 Gaia Fresh Install and upgrade Installed

Regards

[G_W_Albrecht]

No reading skills needed - this is just the way it works, displaying the last instead of the current GA if it is installed already. CPUSE shows more information about installed HFs and the process is more transparent.

[Boaz_Orshav]

Hi

  It should not show this info in the Smart Console Install Hotfix view as indeed it is misleading

  Can you please send me the logs from the gateway collected by "da_cli collect_logs" on the gateway machine?

boazo@checkpoint.com

Thanks

[S_E_]

hi, sent by mail. Thanks

Regards