This article describes R76SP.10_VSLS Jumbo Hotfix Accumulator - accumulation of stability and quality fixes resolving multiple issues on 61000 / 41000 products running R76SP.10_VSLS.
Click here to see the complete article.
Table of Contents:
-
Introduction
-
Availability
-
Important Notes
-
List of resolved issues per Take
-
Installation instructions
-
List of replaced files
-
Troubleshooting instructions
Click Here to Show Entire Article
Introduction
R76SP.10_VSLS Jumbo Hotfix Accumulator is an accumulation of stability and quality fixes resolving multiple issues on 61000 / 41000 products running R76SP.10_VSLS.
This Incremental Hotfix and this article are periodically updated with new fixes.
The list of resolved issues below describes each resolved issue and provides a Take number, in which the fix was included.
A resolved issue is included in the Incremental Hotfix starting from the Take number listed in this table (inclusive).
The date, when this take was made available is listed near the Take's number.
Availability
In order to receive the Jumbo Hotfix Accumulator, please contact the following mailing list
(it might take up to 24 hours to provide an answer, not including Fridays and Saturdays):
61000_41000_installation_forum@checkpoint.com
Latest available Take is:
Take |
Date |
Take_18 |
21 Oct 2015 |
Important Notes
- This Jumbo Hotfix Accumulator is suitable only for 61000 / 41000 running R76SP.10_VSLS take 36.
- If you have previously installed any private hotfixes on top of your current version, then contact Check Point Support before applying this Jumbo Hotfix Accumulator to verify that it is compatible with your environment.
List of resolved issues per Take
Installation instructions
- Perform Fresh Installation of R76SP.10_VSLS.
-
Install the Jumbo Hotfix Accumulator.
Prerequisites:
For quick Disaster Recovery, take snapshots for all SGMs on the chassis:
- Take snapshots during off-peak hours.
- First, take snapshots on Standby chassis, then take snapshots on Active chassis.
- Do not make any configuration changes on chassis from the time of taking the between snapshots and until the upgrade and hotfix installation are complete.
- Do not make any configuration changes on the Security Management Server / Multi-Domain Security Management Server that manages the chassis until the upgrade and hotfix installation are complete.
Important Note: The Jumbo Hotfix Accumulator can be installed in two ways:
-
Full Connectivity installation
This type of installation keeps the current connections both in single and in dual chassis configurations.
In dual chassis configurations, hotfixes are installed on Standby chassis, a fail-over is performed from Active chassis to Standby chassis, and then Hotfixes are installed on former Active chassis.
Note: It is recommended to perform this type of installation via console.
Show / Hide instructions for Full Connectivity installation
-
Preparation:
- Transfer the Jumbo Hotfix Accumulator to your /home/admin/ directory on 61000/41000 appliance.
-
Copy the Jumbo Hotfix Accumulator file to all SGMs:
# asg_cp2blades Check_Point_R76SP_10_VSLS_jhf_T<number>.tgz
-
Installation:
Notes:
- <Name_of_..._chassis> used in the syntax below means "chassis1" or "chassis2".
- <ID_of_..._chassis> used in the syntax below means "1" or "2".
Instructions:
-
Set the state of Standby chassis to "down":
# asg chassis_admin -c <ID_of_Standby_chassis> down
-
Install the Jumbo Hotfix Accumulator on Standby chassis:
-
Unpack the Jumbo Hotfix Accumulator (note the "-C" flag in the syntax):
# mkdir /home/admin/temp
# tar -zxvf /home/admin/Check_Point_R76SP_10_VSLS_jhf_T<number>.tgz -C /home/admin/temp/
-
Install the Jumbo Hotfix Accumulator:
# cd /home/admin/temp
# ./AsgInstallScript -b <Name_of_Standby_chassis>
-
Verify the installation of hotfixes:
# ./AsgInstallScript verify
Notes:
- Active chassis Blades will note 'Failed' on the first chassis installation.
- Upgraded SGMs on the Standby chassis should display the corresponding package number, post upgrade (it is expected that upgraded packages will be different).
-
Upgrade the SSM firmware on Standby chassis:
# asg_ssm_upgrade ssm all chassis <ID_of_Standby_chassis>
Notes:
- Perform this step only if SSM firware is lower than 2.4.C12 (you can run the 'asg_version -v' command).
- Perform this step via console connection to upgraded chassis.
-
Reboot the Standby chassis:
# g_reboot -b <Name_of_Standby_chassis> -a
-
Monitor the system until SGMs on the Standby chassis are UP and Enforcing security again:
# asg monitor
-
Set the state of Standby chassis to "up":
# asg chassis_admin -c <ID_of_Standby_chassis> up
-
Set the state on currently Active chassis to "down":
Note: This will cause chassis fail-over from Active chassis to Standby chassis.
# asg chassis_admin -c <ID_of_currently_Active_chassis> down
-
Install the Jumbo Hotfix Accumulator on former Active chassis:
-
Unpack the Jumbo Hotfix Accumulator (note the "-C" flag in the syntax):
# mkdir /home/admin/temp
# tar -zxvf /home/admin/Check_Point_R76SP_10_VSLS_jhf_T<number>.tgz -C /home/admin/temp/
-
Install the Jumbo Hotfix Accumulator:
# cd /home/admin/temp/
# ./AsgInstallScript -b <Name_of_former_Active_chassis>
-
Verify the installation of hotfixes:
# ./AsgInstallScript verify
-
Upgrade the SSM firmware on former Active chassis:
# asg_ssm_upgrade ssm all chassis <ID_of_former_Active_chassis>
Note: Perform this step only if SSM firware is lower than 2.4.C12 (you can run the 'asg_version -v' command).
-
Reboot the former Active chassis:
# g_reboot -b <Name_of_former_Active_chassis> -a
-
Monitor the system until SGMs on the former Active chassis are UP and Enforcing security again:
# asg monitor
-
Set the state of former Active chassis to "up":
Important Note: If your former Active chassis is configured as "Primary Up", an automatic fail-back will occur.
# asg chassis_admin -c <ID_of_former_Active_chassis> up
-
Verify the installation of hotfixes on both chassis:
# asg_version -v
Example of output:
Installed HFA
-------------
-*- 4 blades: 1_01 1_02 2_01 2_02 -*-
R76SP_10_VSLS_jhf take_15
-
Regular installation
This type of installation requires reboot of entire chassis. Therefore, all current connections will be interrupted.
Important Note: This type of installation can be performed only via console.
Show / Hide instructions for regular installation
-
Preparation:
- Transfer the Jumbo Hotfix Accumulator to your /home/admin/ directory on 61000/41000 appliance.
-
Copy the Jumbo Hotfix Accumulator file to all SGMs:
# asg_cp2blades Check_Point_R76SP_10_VSLS_jhf_T<number>.tgz
-
Installation:
-
Unpack the Jumbo Hotfix Accumulator (note the "-C" flag in the syntax):
# mkdir /home/admin/temp
# tar -zxvf /home/admin/Check_Point_R76SP_10_VSLS_jhf_T<number>.tgz -C /home/admin/temp/
-
Install the Jumbo Hotfix Accumulator:
# cd /home/admin/temp
# ./AsgInstallScript -b all
-
Verify the installation of hotfixes:
# ./AsgInstallScript verify
-
Upgrade the SSM firmware, if it is lower than 2.4.C12 (you can run the 'asg_version -v' command):
# asg_ssm_upgrade ssm all chassis all
-
Reboot:
# g_reboot -a
-
Verify the installation of hotfixes:
# asg_version -v
Example of output:
Installed HFA
-------------
-*- 4 blades: 1_01 1_02 2_01 2_02 -*-
R76SP_10_VSLS_jhf take_15
List of replaced files
List of files replaced by this Jumbo Hotfix Accumulator can be provided upon request by Check Point Support.
Troubleshooting instructions
Click Here to Show Entire List