- Products
- Learn
- Local User Groups
- Partners
- More
The State of Ransomware Q1 2026
Key Trends and Their Impact
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
CheckMates Go:
CheckMates Fest
not sure what you are upgrading for type of things, gateway, mgmt server...
But my generic answer would be.
Make sure that everything works correctly first, meaning receive logs, push policy etc.
- Verify that your box supports the new version. if its an appliance it would be listed in https://www.checkpoint.com/support-services/support-life-cycle-policy/
- Use CPUSE for the upgrade, make sure to upgrade the DA (deployment agent)
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
- Run the verification on the packet you want to upgrade to.
- Take a snapshot (this would allow you do a easy rollback, (more complicated if VSX) )
Image can be chosen during reboot. including the snapshot.
- After reboot etc is done, update obejct in the smartconsole, install database, push policy
check that you get logs etc.
If you check the release notes there are step by step guide on how to do the upgrades.
I also have a few videos regarding versus upgrades scenario.
In regards to blink, i normally do the normal upgrade first and then add the GA HFA after.
regards,
magnus
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY