VSX JHF upgrade

[Ihenock1011]

Hi Team,

We have a Check Point Maestro deployment with Security Gateways (SGs) running in VSX mode. Each VSX instance hosts a member of a two-member Security Gateway cluster (SG-01 and SG-02). We're planning to upgrade the Jumbo Hotfix (JHF) on these VSX instances.

Our goal is to achieve a zero-downtime upgrade by leveraging the redundancy within the VSX cluster. Is it possible to perform the upgrade in the following way:

1. Perform the JHF upgrade on SG-01. During this upgrade, SG-02 will handle the traffic.
2. Once SG-01 is upgraded and operational, upgrade the JHF on SG-02.

If this is possible, can you show me how to disable the member, perform the upgrade, and bring it back into operation?

Thanks,

[Chris_Atkinson · Accepted solution]

Have you already reviewed the documented process? e.g.

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_Maestro_AdminGuide/Content/T...