Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Rania_Chetoui
Explorer
Jump to solution

Upgrade process of Management server from R77.20 to R77.30 and cluster_XL from R76 to R77.30

Hello, 

 

I need some expert advice and help on how I can upgrade the entire environment to R77.30, basically I am looking for best practices and any known issues that can be expected.

 

My environment:

Management sever (Model:Smart-1 5) running R77.20

Tow security gateways 4800  running R76 ( OS build 265).

I have VPN traditionnel and community mode  already configured 

For information i need to make this upgrade without production break .

Highly appreciate the help.

 

1 Solution

Accepted Solutions
Timothy_Hall
Legend Legend
Legend

The Smart-1 5 is not supported to run any code level beyond R77.30.  You'll need to replace it with at least a Smart-1 205 or a VM/open server with at least 2 cores and 6GB of RAM, preferably 4+ cores and 10GB+ of RAM.

Your 4800 units are end of engineering support in 2020 and end of all support in 2022 so start planning to replace them. 

Would also echo Heiko's comment about converting to simplified VPN mode prior to the upgrade, while traditional VPN mode is supported in R80+ CoreXL will have to be disabled.

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com

View solution in original post

6 Replies
HeikoAnkenbrand
Champion Champion
Champion

Hi @Rania_Chetoui ,

You should upgrade to R80.20 or R80.30. R77.30 is out of support in September.

The Smart-1 5 is not supported for R80.x

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
HeikoAnkenbrand
Champion Champion
Champion

First upgrade the management server to R80.30 and install Jumbo HFA. Then you can update the gateways of the cluster. to R80.30 + HFA.

More see here:

Upgrade/Download Wizard

Check Point R80.30

R80.30 Release Notes

R80.30 Installation and Upgrade Guide

R80.30 Upgrade map

R80.30 Backward Compatibly Map

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
HeikoAnkenbrand
Champion Champion
Champion

CUT>>>

I have VPN traditionnel and community mode already configured

<<<CUT

Important!

Before you upgrade to R80.x, you need to change VPN traditional mode to the new simplified mode. There is no wizard for this anymore under R80.

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
Rania_Chetoui
Explorer

Thank you for your help, 

I already think to migrate to R80.10, but i think that i don't have enough memorie in my manager :

this is what i have:

Manager Server:

Platform: S-10-00
Model: Smart-1 5
CPU Model: Intel(R) Celeron(R) M processor 1.50GHz
CPU Frequency: 1500.120
Disk Model: Hitachi HDS721050CLA360
Disk Capacity: 500 GB
Memory Slot 1 Size: 1024

Security gateway :

Platform: T-180-00
Model: Check Point 4800
Serial Number: 1236B03015
CPU Frequency: 2660.218
Disk Model: WDC WD2503ABYX-01WERA1
Disk Capacity: 251 GB
Memory Slot 1 Size: 4096MB
Memory Slot 2 Size: 4096MB

 

With this performance can i migrate to R80.30 ?

 

 

 

0 Kudos
PhoneBoy
Admin
Admin
A Smart-1 5 cannot be upgraded to R80.x.
You should work with a local partner to trade that in for either a newer Smart-1 appliance.

The 4800 should run R80.x just fine.
Timothy_Hall
Legend Legend
Legend

The Smart-1 5 is not supported to run any code level beyond R77.30.  You'll need to replace it with at least a Smart-1 205 or a VM/open server with at least 2 cores and 6GB of RAM, preferably 4+ cores and 10GB+ of RAM.

Your 4800 units are end of engineering support in 2020 and end of all support in 2022 so start planning to replace them. 

Would also echo Heiko's comment about converting to simplified VPN mode prior to the upgrade, while traditional VPN mode is supported in R80+ CoreXL will have to be disabled.

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events