- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hello Experts,
I am upgrading checkpoint cluster form R80.10 to R80.30 via "connectivity upgrade" method.
while doing research and discovery, i found "zero down time" process suggests to change CCP mode to Broadcast before we start upgrade. but "connectivity upgrade" process does not.
Both the process suggest to turn CCP mode to Auto at the end of the upgrade process.
can you please suggest me how to deal CCP modes in "connectivity upgrade" method. do i need to change it to "broadcast" before starting upgrade.
currently CCP mode is unicast in this cluster.
thank you in advance.
Put it this way...you WANT zero downtime upgrade, because thats exactly what it is, no downtime. If you read the guide ( https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_Installation_and_Upgrade_Gui...) it tells you exactly what you need to do.
I know this is for R80.10, but same applies to any version really. You upgrade backup, reboot, change cluster version in dashboard, install policy as per instructions, do same on current master and install policy again after reboot. If you read the guide I pasted the link for, you will see the instructions.
Why R80.30 and not R80.40?
There you also have the Multi-Version Cluster method.
Also why Unicast?
Thank you for responding,
we have 4600 appliances and have some performance issue and that is the reason TAC suggested to go with R80.30.
i am still curious about CCP mode during the upgrade. Normally what mode it should be? since i have started managing this cluster it is in multicast mode.
Question: Should i change CCP mode to Auto or broadcast before/after firmware upgrade?
Honestly, I upgraded lots of clusters and never changed CCP mode ever and all worked fine. Just follow zero downtime upgrade, its pretty straight forward. I would try to have console access to the boxes when doing this, just to be on the safe side.
since, zero down time method says connection initiated through active member drops when we fail over. i have planned to go for "connectivity upgrade" method. which is mostly similar to zero down time method. there is one extra step of connectivity method when standby member start sync with primary member.
should i continue with "connectivity method" ? please guide me
Put it this way...you WANT zero downtime upgrade, because thats exactly what it is, no downtime. If you read the guide ( https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_Installation_and_Upgrade_Gui...) it tells you exactly what you need to do.
I know this is for R80.10, but same applies to any version really. You upgrade backup, reboot, change cluster version in dashboard, install policy as per instructions, do same on current master and install policy again after reboot. If you read the guide I pasted the link for, you will see the instructions.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 20 | |
| 19 | |
| 18 | |
| 8 | |
| 7 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 3 |
Tue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY