- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hi,
As I read the CCSE course book, I could notice this:
So, how to test on a cluster if you do not install the policy?
Say I would upgrade from 81.10 to 81.20 and start the process by installing the new image on the standby gateway. What is the point of MVC if you cannot install the policy?
If not to install the policy on different version gateways in a cluster, how then should I test the configuration, what should be tested? How to be sure that everything went good on the standby? Should I try to make a manual failover?
Maybe the quoted text is a little bit misleading. What do I do through a MVC upgrade?
Select Install on each selected gateway independently.
Clear For gateway clusters, if installation on a cluster member fails, do not install on that cluster.
Select Install on each selected gateway independently.
Select For gateway clusters, if installation on a cluster member fails, do not install on that cluster.
You can install policies with MVC. But you have to install it separately on both nodes and you have to change Version for the cluster in SmartConsole for both nodes each time. So, MVC is not meant for permanent use, but only to get a non-interruptive upgrade and the possibility to test the new version on one node before upgrading the whole cluster.
Maybe the quoted text is a little bit misleading. What do I do through a MVC upgrade?
Select Install on each selected gateway independently.
Clear For gateway clusters, if installation on a cluster member fails, do not install on that cluster.
Select Install on each selected gateway independently.
Select For gateway clusters, if installation on a cluster member fails, do not install on that cluster.
You can install policies with MVC. But you have to install it separately on both nodes and you have to change Version for the cluster in SmartConsole for both nodes each time. So, MVC is not meant for permanent use, but only to get a non-interruptive upgrade and the possibility to test the new version on one node before upgrading the whole cluster.
Your text contains more logical reasoning than what I have encountered in the book. I will strive to enhance my understanding and adhere to that approach.
I can tell you from my experience, activating MVC did not sadly help much compared to say zero downtime upgrade. There was always at least 30 seconds period where connections would drop. Maybe others had better success, not sure.
Best,
Andy
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 19 | |
| 17 | |
| 14 | |
| 8 | |
| 7 | |
| 3 | |
| 3 | |
| 3 | |
| 3 | |
| 2 |
Tue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY