Checkpoint Firewall Upgrade R81.10 Jumbo Hotfix will raise a no response result

[chumicat]

This is an experience sharing.

My customer's checkpoint firewalls are R81.10 with Jumbo Hotfix HF66 on appliance 5200.

We are going to upgrade the Jumbo Hotfix to perform the CVE-24919 mitigation.

The problem occured when we upgrade to Jumbo Hotfix HF139 or HF150. Other version might have same situation, but I didn't test it.

The symptoms of the problem is: Upgrade procedure will stock at step of installation update, and the Duration counter will stock either. We will not able to access the Gaia Portal during this procedure. 

Do not panic! It will stock about 15 minutes and then we can access the Gaia Portal again.

DO NOT RESTART THE CP SERVICE OR REBOOT THE DEVICE DURING THE PROCEDURE, or you might need to reinstall the firewall. I've been there.

[PhoneBoy]

Is this a standalone box (with management included)?
15 minutes seems like a long time after a reboot otherwise.

[the_rock]

I had done this 4 times on 5200 appliances, never had this issue.

Andy