This article provides answers to some frequently asked questions about Jumbo Hotfix Accumulators. This article does not apply to 61000 / 41000 Security Systems.

Check Point always recommends to upgrade to the most recent Recommended Jumbo Hotfix Accumulator Take.

Jumbo Hotfix Accumulators

Version	Recommended Take
R81.10 Jumbo Hotfix Accumulator	Link
R81 Jumbo Hotfix Accumulator	Link
R80.40 Jumbo Hotfix Accumulator	Link

 

 

• What is the difference between Latest Jumbo Hotfix Take and Recommended Take?
  

  Latest (formerly, Ongoing) - Early Adoption Take
  Recommended (formerly, GA) - General Availability Take
  
  The Latest Jumbo Hotfix Take usually becomes Recommended around 3-4 weeks after release unless there is a critical issue found in the Take. In such a case, the Latest Take will be replaced with a new one.

  
  
  
• I am planning to upgrade to the next main-train version. How can I be sure I will not lose fixes between Jumbo Hotfix Takes?
  

  Refer to sk164258 to check the compatibility of Jumbo Hotfix Takes between different releases.
  
  

• How to check the Take number of the currently installed Jumbo Hotfix Accumulator (if it is installed)?
  

  Note: If the Jumbo Hotfix Accumulator is not installed, then this command will return an error - "Failed to find the value".

  Exact syntax for each Jumbo Hotfix Accumulator:

  1. On R80.x/R81.x with Jumbo Hotfix Accumulator, run this command:

     [Expert@HostName:0]# cpinfo -y all

     Note: The installed_jumbo_take [-n | -h] command is not supported by the R80.x Jumbo Hotfix Accumulator 

  2. On R80 with sk111536 - Jumbo Hotfix Accumulator for R80 (R80_jumbo_hf), run this command:

     The same command applies to Jumbo that was installed using Gaia CPUSE and using Legacy CLI.

     Jumbo Take number	Verification Instructions
     63 and above	[Expert@HostName:0]# installed_jumbo_take [-n | -h] Notes: If no argument is specified, then the command will print: "RXX.XX Jumbo Hotfix Accumulator take_N is installed, see skXXXXX". If "-n" argument is specified, then the command will print only the number of the Take (value "0" means that a reference to the Jumbo Hotfix Accumulator was not found in Check Point registry). If "-h" argument is specified, then the command will print the usage help.
     29	There is no command that could confirm that the Take_29 is installed. Check Point Registry will not show that the Take_29 is installed. This Take is a part of the R80 ISO Take 113, per R80 Release Notes.

  3. On R77.30 with sk106162 - Jumbo Hotfix Accumulator for R77.30 (R77_30_jumbo_hf), run this command:

     The same command applies to Jumbo that was installed using Gaia CPUSE and using Legacy CLI.

     Jumbo Take number

     Verification Instructions

     All

     [Expert@HostName:0]# installed_jumbo_take [-n | -h] Notes: On VSX Gateway, this command must be run from the context of VS0 (run "vsenv" command). If no argument is specified, then the command will print: "RXX.XX Jumbo Hotfix Accumulator take_N is installed, see skXXXXX". If "-n" argument is specified, then the command will print only the number of the Take (value "0" means that a reference to the Jumbo Hotfix Accumulator was not found in Check Point registry). If "-h" argument is specified, then the command will print the usage help.

  
  
  

• When should you install the Jumbo Hotfix Accumulator?
  

  All Jumbo Hotfix Accumulator Takes include many important fixes, therefore Check Point recommends to install the most recent Recommended Jumbo Hotfix Accumulator Take.

• When to Backup and Restore your Gaia OS machine?
  

  Before installing any hotfix (including Jumbo Hotfix Accumulator), it is strongly recommended to backup all the relevant configuration. This includes:

  • Configuration of Operating System
  • Configuration of Check Point software
  • Relevant Check Point database files

  All the relevant files can be collected by:

  • Taking the snapshot of the whole system
  • Collecting backup of the system (either in Clish, or in Gaia Portal)
  • Collecting 'migrate export' on Security Management Server
  • Collecting 'mds backup export' on Multi-Domain Security Management Server

  At the very least, the following files must be backed up on Gaia OS:

  • /config/db/initial
  • /config/db/initial_db
  • $CPDIR/registry/HKLM_registry.data*
  • All files that will be replaced by the given hotfix (refer to the hotfix release notes)

  If the system must be reverted to the state before installing the hotfix, use the collected backup / export / snapshot files.

  Related solutions:

  • sk108902 - Best Practices - Backup on Gaia OS
  • sk91400 - System Backup and Restore feature in Gaia

  Related document: The relevant Gaia Administration Guide - Chapter 'Maintenance' - System Configuration Backup.

  
  
  

• How to install a newer Take of Jumbo Hotfix Accumulator on top of the current Take?
  

  Jumbo Hotfix Accumulators support upgrade - i.e., a newer Take of Jumbo Hotfix Accumulator can be installed on top of the current Take of Jumbo Hotfix Accumulator.

  Important Note (refer to sk107320):

  CPUSE Agent build	Notes
  1776 and higher	The previous Take is not uninstalled and kept on the machine, shown as "installed as part of" the new Take.

  
  
  

• How to uninstall a Take of Jumbo Hotfix Accumulator?
  

  Jumbo Hotfix Accumulators support uninstall.
  Exact instructions appear in the "Uninstall instructions" section in the corresponding solution articles.

   

• Can you install a regular hotfix on top of the Jumbo Hotfix Accumulator?
  

  Yes, a regular hotfix (hotfix created only for single specific issue) can be installed on top of the currently installed Jumbo Hotfix Accumulator unless there is a conflict between the regular hotfix and the currently installed Jumbo Hotfix Accumulator (i.e., both hotfix packages replace the same files).

  Contact Check Point Support to verify.
  
  

• Can you install the Jumbo Hotfix Accumulator only on Security Gateway, or only on Security Management Server in the environment?
  

  The Jumbo Hotfix Accumulator can be installed either on Security Gateway, or on Security Management Server / Multi-Domain Management Server in the environment.

  However, to ensure that all the issues listed for the Jumbo Hotfix Accumulator are resolved, it is strongly recommended that the same Jumbo Hotfix Accumulator is installed on all Security Gateways and Security Management Servers / Multi-Domain Security Management Servers in the environment.
  
  

• Can you install the Jumbo Hotfix Accumulator only on specific cluster member (and not on others)?
  

  ClusterXL is supported only between identical operating systems (all cluster members must be installed on the same operating system) and between identical Check Point software versions (all cluster members must be installed with identical Check Point software, including OS version/build and hotfixes).

  Meaning, the identical Takes of the Jumbo Hotfix Accumulator must be installed on all members of the given cluster.

  Related document: 

  • sk93306 - ATRG: ClusterXL R80.10 and lower - Chapter 'Introduction to ClusterXL' - ClusterXL requirements for hardware and software

  
  
  

• Can you install different Takes of the Jumbo Hotfix Accumulator on different cluster members?
  

  ClusterXL is supported only between the identical operating systems (all cluster members must be installed on the same operating system) and between identical Check Point software versions (all cluster members must be installed with identical Check Point software, including OS version/build and identical hotfixes).

  Meaning, the identical Takes of the Jumbo Hotfix Accumulator must be installed on all members of the given cluster.

  Related document:

  • sk93306 - ATRG: ClusterXL R80.10 and lower - Chapter 'Introduction to ClusterXL' - ClusterXL requirements for hardware and software

  
  
  

• Can you install the Jumbo Hotfix Accumulator on cluster members while preserving the current connections?
  

  • Yes, As CCP version does not change, sync is on after installing the Jumbo Hotfix Accumulator on the first member and rebooting it (Standby member in case of cluster HA), and the connections are preserved.

  
  
  

• Can you upgrade to the next major/minor release, if you have Jumbo Hotfix Accumulator installed?
  

  Refer to Upgrade map.

  • Upgrade from R77.30 to R80.10, R80.20, R80.30 or R80.40 with sk106162 - Jumbo Hotfix Accumulator for R77.30 (R77_30_jumbo_hf)

    • To upgrade R77.30 Security Gateway:

      1. Upgrade to the General Availability release: R80.10 or R80.20 GA, R80.30.
      2. Install the latest recommended Jumbo HotFix Take number of the  relevant release.

    • R77.30 Management Server can be upgraded to R80 only using Clean Install and Advanced Upgrade method.

  
  
  

• What is CPUSE Identifier?
  

  CPUSE Identifier is a CPUSE search string used to find a relevant CPUSE package on Check Point Cloud.

  
  
  

• Why Gaia Portal seems to be stuck / frozen for several minutes during the CPUSE installation of Jumbo Hotfix Accumulator?
  

  Machine is being restarted after installing the Jumbo Hotfix Accumulator.

  To be sure that the Jumbo Hotfix Accumulator was installed successfully:

  Where to check	Instructions
  In Gaia Portal	Navigate to Upgrades (CPUSE) pane and click on Status and Actions. Use the filter button near the help icon - select the "Installed" packages. The Jumbo Hotfix Accumulator should appear with the status " Installed".
  In CLI	Log in to Clish. Run: [Expert@HostName:0]# show installer packages

  
  
  

• How can you tell if Jumbo Hotfix Accumulator was installed via Gaia CPUSE, or via Legacy CLI?
  

  Refer to sk107320 - How can you tell if a hotfix was installed on Gaia OS via CPUSE or via Legacy CLI.
  Note: starting from R80.10, CLI is no longer supported.
  
  

• Is Red Hat Linux supported?
  

  Jumbo Hotfix Accumulator does not support Red Hat Linux.

• How to get notifications about Jumbo SKs updates?
  

  To receive email updates on changes in Jumbo Hotfix Accumulator (new Takes released, Takes moved to General Availability and other important changes), follow the steps below:
  
  1.      Install and configure RSS extension for your browser.
  
  2.      Go to the relevant Jumbo article.
  
  3.      Click the RSS Feed button.

  

  4.      Click Subscribe.

  
  

  
  
  
  Jumbo Hotfix Accumulator was canceled for the below versions:
  

  R80.30 Jumbo Hotfix Accumulator

  R80.20 Jumbo Hotfix Accumulator

  sk116380 - Jumbo Hotfix Accumulator for R80.10

  sk111536 - Jumbo Hotfix Accumulator for R80 (R80_jumbo_hf)

  sk106162 - Jumbo Hotfix Accumulator for R77.30 (R77_30_jumbo_hf)

  sk101975 - Jumbo Hotfix Accumulator for R77.20 (R77_20_jumbo_hf)

  sk98285 - Jumbo Hotfix Accumulator for R77.10 (gypsy_hf_base_021)

  sk96192 - Jumbo Hotfix Accumulator for R77 (gulli_hf_base_008)

  sk96191 - Jumbo Hotfix Accumulator for R76 (gizmo_hf_041_050)

  sk95827 - Jumbo Hotfix Accumulator for R75.47 (fiat_hf_base_026)