Upgradation for Security Management Server and 2 Security Gateway Clusters(1600 & 5200)

[Hari122939_]

Hello Team,

I have a requirement to upgrade the Security management server and 2 clusters(1600 and 5200).My client want to go upgrade to latest version(R81.20) for both SMS and Security Gateways because current versions are going to expire in next 2 months. 

I placed my client current versions below:

                                                                                                   Appliance                   Current Version                          Upgrade Version

1.Security Management Server (or) Console                     open server                -  R80.40                                      81.10.X  or 81.20.X

2.Quantum Spark 1600  Security Gateway(Cluster)           1600                           -  R80.20.50                                 81.10.X  or  81.20.X  

3.Enterprise 5200 Security Gateway(Cluster)                     5200                           -  R80.40                                      81.10.X  or  81.20.X 

Please share the Supported Upgradation Path document for both Security Management Server and Security Gateways.   

Thank You.

[the_rock]

Personally, I always do zero downtime upgrade, which is replaced these days with MVC (multi version cluster). In short, I would upgrade mgmt first to R81.20 (whatever recommended jumbo is now, I think 41), then after reboot, follow below process for the clusters.

Andy

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Installation_and_Upgrade_Gui...

This part, SUPER important you follow the steps how they are outlined.

 

[genisis__]

Manager first for sure, and I would also suggest clean build to take advantage of XFS filesystems, also keep in mind I believe there is a kernel version change, and I've seen issue with this in the past, so suggest clean build on the GWs, however MVC will ensure you have service.

Lates JHFA is Take 45 which I suspect will go to GA soon.

[the_rock]

I know people who prefer back up the config, then do clean innstall, then do restore. Thats fine too, no issues with that.

Andy

[genisis__]

I generally do backup and then an export of the manager,  GW's really just take a copy of the GAIA config and an custom edits if there are any.

[the_rock]

I would say one thing to pay attention to is if you have custom modified files, such as table.def or user.def, as that may not work with the upgrade from R80.40 to R81.10 or R81.20

Andy

[genisis__]

100%!

[the_rock]

I think its fine say from R81 upgrading to later codes, but before R81, it was an issue.

Andy