Support Center > Search Results > SecureKnowledge Details
Installing a Jumbo Hotfix Accumulator on CloudGuard for Azure, AWS and GCP VMs
Solution

It is now possible to apply Jumbo Hotfix Accumulators on Check Point Security Gateways running in Amazon Web Services (AWS)Microsoft Azure and Google Cloud Platform (GCP).

Supported Jumbo Hotfix Accumulators per version

Platform
Version Supported JHF
Notes and Limitations
Azure, AWS
R77.30
R77.30 Jumbo Hotfix Accumulator

From take 189 and above.

See Notes for installing R77.30 Jumbo Hotfix Accumulators

GCP R77.30
Not supported

 

Azure, AWS, GCP
R80.10
R80.10 Jumbo Hotfix Accumulator

Supported in Azure from take 135 and above.

Supported in AWS and GCP from take 53 and above.

Take 131 is not supported on GCP.

Uninstalling JHFs is not supported when using CPUSE build 1677 or below.

Azure, AWS, GCP
R80.20 Management
R80.20 Jumbo Hotfix Accumulator

 

Azure, AWS, GCP R80.20 Gateway
Jumbo Hotfix Accumulator for R80.20 with Gaia 3.10  
Azure, AWS, GCP R80.30 Management R80.30 Jumbo Hotfix Accumulator  
 Azure, AWS, GCP  R80.30 Gateway TBD  

Notes:

  • Installation of any other hotfix is not supported, unless specifically stated for that hotfix.

Notes for installing R77.30 Jumbo Hotfix Accumulators

Show / Hide the section
  • On Security Gateway running in Amazon Web Services (AWS), it is not supported to install Takes 189 and above of the R77.30 Jumbo Hotfix Accumulator when the user's shell is configured to /etc/cli.sh (the default shell).
    1. Before installing the Takes 189 and above, the user's shell must be changed to any shell other than /etc/cli.sh - e.g., /bin/bash, /bin/csh, /bin/tcsh (refer to R77 versions Gaia Administration Guide - chapter "User Management" - section "Users").
    2. After installing the Takes 189 and above, it is not supported to change the user's shell back to /etc/cli.sh.
  • The "GIRAFFE" hotfix is pre-installed as part of the image for automation of the vSEC Controller:

    • Starting with the Check Point image R77.30-028.120 for AWS
    • Starting with the Check Point image 77.30.8029129 for Azure

    Before installing Take 189 (and above) of R77.30 Jumbo Hotfix Accumulator, this "GIRAFFE" hotfix must be uninstalled (otherwise, a conflict will occur):

    1. Check if this hotfix is installed:
      [Expert@HostName:0]# cpinfo -y all | grep HOTFIX_GIRAFFE_V2
    2. Uninstall this hotfix either using the CPUSE, or on the CLI:
      [Expert@HostName:0]# /opt/CPsuite-R77/uninstall_fw1_wrapper_HOTFIX_GIRAFFE_V2
  • The vSEC Central License Management Utility is pre-installed as part of the image as VSEC_CENTRAL_LIC_001 hotfix.

    Before installing Take 221 (and above) of R77.30 Jumbo Hotfix Accumulator, this "VSEC_CENTRAL_LIC_001" hotfix must be uninstalled (otherwise, a conflict will occur):

    1. Check if this hotfix is installed:
      [Expert@HostName:0]# cpinfo -y all | grep VSEC_CENTRAL_LIC
    2. Uninstall this hotfix either using the CPUSE, or on the CLI:
      [Expert@HostName:0]# /opt/CPsuite-R77/uninstall_fw1_wrapper_HOTFIX_VSEC_CENTRAL_LIC_001

    If you are using the machine as Management Server, then after installing Take 221 (and above) of R77.30 Jumbo Hotfix Accumulator, you may want to reinstall the vSEC Central License Management Utility (the "VSEC_CENTRAL_LIC_001" hotfix from sk109713).

  • On Security Gateway running in Amazon Web Services (AWS), importing the R77.30 Jumbo Hotfix Accumulator package using the CPUSE in Gaia Portal might fail.

    In such case, import and install the CPUSE Offline package of the R77.30 Jumbo Hotfix Accumulator in Gaia Clish:

    1. Make sure to install the latest build of the CPUSE Agent.

    2. Refer to sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent):

      1. Follow the section "(4-A-d)" - import instructions for Offline procedure in Gaia Clish

        HostName> lock database override
        HostName> installer import local <Full_Path>/<Name_of_Jumbo_Hotfix_Package>.tgz
        HostName> show installer packages imported
      2. Follow section "(4-B-a)", subsection "(4-B-a-iii)" - installation instructions in Gaia Clish for Hotfixes:

        HostName> installer verify[press Space key][press Tab key]
        HostName> installer verify <Package_Number>
        HostName> installer install[press Space key][press Tab key]
        HostName> installer install <Package_Number>
    3. Reboot is required.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment