Support Center > Search Results > SecureKnowledge Details
Upgrade single VSX Gateway from R77 / R77.10 to R77.20 / R77.30 using in-place upgrade Technical Level
Solution

Refer to the main sk97552 (VSX Reconfigure and Upgrade Matrix to R77.10 / R77.20 / R77.30).

 

When to use this procedure

  • Upgrading single VSX Gateway from R77 to R77.20 / R77.30 (using in-place upgrade).
  • Upgrading single VSX Gateway from R77.10 to R77.20 / R77.30 (using in-place upgrade).
  • Upgrading single VSX Gateway from R77.20 to R77.30 (using in-place upgrade).

 

Part 1 - Upgrade of Security Management Server / Multi-Domain Security Management Server

  1. Backup the involved machines at the same time:

    • Security Management Server / Multi-Domain Security Management Server
    • Single VSX Gateway

    Note: Refer to "Related Documentation" section below - "How to Backup".

  2. If required, upgrade your Security Management Server / Multi-Domain Security Management Server to the desired version.

    R77.20 / R77.30 Security Gateways (in Gateway mode and in VSX mode) can be managed by the following Security Management Servers / Multi-Domain Security Management Servers:

    Note: Only features relevant to the version installed on the Security Management Servers / Multi-Domain Security Management Server will be available in SmartDashboard and in 'vsx_util' command.
    Examples:
    • You will not be able to upgrade the single VSX Gateway configuration from R77 to R77.20, if you manage it with R77 Security Management server.
    • You will not be able to use Mobile Access Blade on VSX R77.20, if you manage it with R76 Security Management server.
    • You will not be able to use Multi Bridge capability on R77.30, if you manage it with prior version to R77.30 Security Management server.

 

Part 2 - Upgrade of single VSX Gateway

  1. Upgrade the configuration of the single VSX Gateway object to R77.20 / R77.30 version on the Security Management Server / Main Domain Management Server.

    Note: If you do not want new R77.20 / R77.30 features on the single VSX Gateway, then skip this step (proceed to Step 2 below).

    Run the 'vsx_util upgrade' command and follow on screen instructions.
    Select your single VSX Gateway and then select the R77.20 / R77.30 version.

    Important Note: On Management Server R77.20 and lower, when 'vsx_util upgrade' operation completes, user is prompted to reconfigure the VSX machines. User must refuse - select "no" - and proceed to Step 2 below.

  2. Stop Check Point services on the single VSX Gateway:

    [Expert@HostName:0]# cpstop

  3. Perform in-place upgrade from R77 to R77.20 / R77.30, or from R77.10 to R77.20 / R77.30, or from R77.20 to R77.30 on the single VSX Gateway.

    • For upgrade requirements:

      Refer to Release Notes (R77.20, R77.30) - Chapter 'Installation and Upgrade' - section 'Required Disk Space on Gaia'
    • For upgrade instructions:

      Refer to Release Notes (R77.20) - Chapter 'Installation and Upgrade' - section 'Upgrading with Legacy CLI'
      Refer to Release Notes (R77.30) - Chapter 'Installation and Upgrade' - section 'Upgrading'

    In addition, refer to sk101975: Jumbo Hotfix Accumulator for R77.20 - section "How to upgrade to R77.30".

  4. On the single VSX Gateway, verify that all Virtual Systems are up with the correct policy (this may take few minutes):

    [Expert@HostName:0]# vsx stat -v

  5. Follow the instructions in sk101465 to enable Mobile Access Push Notifications on the upgraded R77.20 / R77.30 Virtual Systems.

 

Related Documentation

Show / Hide documentation

Documents:

 

Solutions:

 

How to Backup:

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment