- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
not sure what you are upgrading for type of things, gateway, mgmt server...
But my generic answer would be.
Make sure that everything works correctly first, meaning receive logs, push policy etc.
- Verify that your box supports the new version. if its an appliance it would be listed in https://www.checkpoint.com/support-services/support-life-cycle-policy/
- Use CPUSE for the upgrade, make sure to upgrade the DA (deployment agent)
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
- Run the verification on the packet you want to upgrade to.
- Take a snapshot (this would allow you do a easy rollback, (more complicated if VSX) )
Image can be chosen during reboot. including the snapshot.
- After reboot etc is done, update obejct in the smartconsole, install database, push policy
check that you get logs etc.
If you check the release notes there are step by step guide on how to do the upgrades.
I also have a few videos regarding versus upgrades scenario.
In regards to blink, i normally do the normal upgrade first and then add the GA HFA after.
regards,
magnus
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY