- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
i prepare the upgrade
Bond interfaces that are not connected to any Virtual System, should be deleted from the topology before the upgrade procedure.
"Make sure that all SGMs and SSMs are up to date and that the system is configured correctly.
# asg diag verify"
"Copy the HFA Upgrade package to the SMO.
Check_Point_R76SP_50_upgrade.linux.tgz"
"Create a temporary directory on the SMO in:
/home/admin/ # mkdir -v /home/admin/temp"
"If a temporary directory already exists, delete it first with this command:
# g_all rm -rf /home/admin/temp"
"Extract the HFA Upgrade package to the temporary directory.
# tar -xvzf /home/admin/Check_Point_R76SP_50_upgrade.linux.tgz -C /home/admin/temp/"
Best Practice - Connect over a console to the SMO and run the next steps through the console connection.
"Run the pre-installation script.
# cd /home/admin/temp/
# ./AsgInstallScript pre_install"
Upgrade Chassis B.
"Note - Make sure to run the script from Chassis A and not Chassis B.
# cd /home/admin/temp/
# ./AsgInstallScript –b chassis<Chassis_B_ID>"
Confirm that the HFA Upgrade installation procedure completed successfully. A summary message shows when the upgrade is complete.
Preparing for Failover
"Set Chassis B to administratively UP state.
> asg chassis_admin -c <Chassis_B_ID> up"
"Run diagnostics.
# asg policy verify –a [-vs all]
# asg_route -a [--vs all]"
"Make sure that Chassis B is UP and enforces security.
Important - You must correct all errors shown by the diagnostics before you continue to the next step.
> asg stat -v
Failing Over to Chassis B"
"Set Chassis A to administratively DOWN state.
> asg chassis_admin -c <Chassis_A_ID> down"
"Make sure that all SGMs are UP, and that traffic flows normally on Chassis B.
Important - Make sure Chassis B works correctly before you upgrade Chassis A.
> asg monitor [-vs all]
> asg perf [-vs all] -v"
Preparing to Upgrade Chassis A
"Copy the HFA Upgrade package to the SMO.
Check_Point_R76SP_50_upgrade.linux.tgz"
"Create a temporary directory on the SMO in:
/home/admin/
# mkdir -v /home/admin/temp"
"If a temporary directory already exists, delete it first with this command:
# g_all rm -rf /home/admin/temp"
"Extract the HFA Upgrade package to the temporary directory.
# tar -xvzf /home/admin/Check_Point_R76SP_50_upgrade.linux.tgz -C /home/admin/temp/"
"Best Practice - Connect over a console to the SMO and run the next steps through the console connection.
Upgrading Chassis A"
"Make sure that Chassis A is in administratively DOWN state.
> asg monitor -all"
"Upgrade Chassis A.
Note - Make sure to run the script from Chassis B and not Chassis A.
# cd /home/admin/temp/
# ./AsgInstallScript -b chassis<Chassis_A_ID>"
Confirm that the HFA Upgrade installation procedure completed successfully. A summary message shows when the upgrade is complete.
Reboot the SGMs when prompted. Wait until all SGMs are UP.
Preparing for Failover
"Set Chassis A to administratively UP state.
> asg chassis_admin -c <Chassis_A_ID> up"
"Run diagnostics.
# asg policy verify –v [-vs all]
# asg_route"
"Make sure that Chassis A is UP and enforces security.
Important - You must correct all errors shown by the diagnostics before you continue to the next step.
> asg stat -v"
Completing the Upgrade
"Run the finalize step.
Note - This is a mandatory step.
# ./AsgInstallScript finalize"
i want to know if there is an issue how can i do rollback ??
Before you start, create snapshot on all SGMs, then your rollback would be restoring snapshots. So you are 100% rolled back including all custom hotfixes and files
thank you very much
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY