Support Center > Search Results > SecureKnowledge Details
Removing old Check Point packages and files after an upgrade on Security Gateway / Security Management Server Technical Level

Note: This issue does not apply to R80.xx. When you upgrade to R80.xx, the new version is installed on a new partition. As a result, there are no leftover hotfixes.



After an upgrade, the packages of the old version are not deleted automatically.

For example, when upgrading from R71 to R75, the old R71 packages and files remain in the system. This could lead to a disk space issue, especially after several upgrades.

A new shell script was developed in order to remove all old packages and files from the upgraded machine (R70 GA and higher).


Important Notes:


Follow these steps to remove all old packages and files:

  1. Download the TAR file with the shell script - RemoveOldVersion.tar.

  2. Transfer the RemoveOldVersion.tar file to the relevant machine (for example, /var/log/ directory).

  3. Connect to the command line on the machine.

  4. Log in to Expert mode.
  5. Extract the shell script:

    [Expert@HostName]# cd /var/log/
    [Expert@HostName]# tar xvf RemoveOldVersion.tar
  6. Assign the execute permissions to the script:

    [Expert@HostName]# chmod u+x /var/log/
  7. Execute the script:

    [Expert@HostName]# ./

  8. The script performs the following operations:

    1. Creates a detailed log file:

    2. Uninstalls all old RPM packages, except these:
      • CPrt (Eventia products)
      • CPinfo (CPinfo utility)
      • CPuepm (Endpoint Security Server)
      • CPda (Deployment Agent)
      • CPSmartLog (SmartLog)
      • CPmds (Multi-Domain Security Management Server)

    3. Deletes all directories and files that were installed by old RPM packages (except those mentioned above):
      • /opt/<package>
      • /var/opt/<package>
      • /var/OPT/<package>
      • /opt/CPshrd-*
      • /var/log/CPsuite-*
    4. Restores '/sysimg' location (if created directory/symlink) after installation.

    5. Restores links for old FW-1 log folders that exist in '/var/log'.
  9. Once the script completes its job, the user will get the prompt back.
  10. To verify that the script has finished successfully, run the following commands:

    [Expert@HostName]# rpm -qa | grep CP
    [Expert@HostName]# ls -l /opt/CP*
    [Expert@HostName]# ls -l /var/opt/CP*
    [Expert@HostName]# ls -l /var/log/CPsuite-*


    • The outputs should show only the latest version (to which the system was upgraded).

    • These directories are not deleted:
      • CPrt (Eventia products)
      • CPinfo (CPinfo utility)
      • CPuepm (Endpoint Security Server)
      • CPda (CPUSE Deployment Agent)
      • CPSmartLog (SmartLog)
      • CPmds (Multi-Domain Security Management Server)


Related solutions:

This solution is about products that are no longer supported and it will not be updated
Applies To:
  • 00987751 , 01057661

Give us Feedback
Please rate this document