Installation and Uninstall Instructions for R82 Jumbo Hotfix Accumulator

Central Deployment allows you to perform a batch deployment of Jumbo Hotfix Accumulators and Hotfixes from SmartConsole.

• You can select up to 30 Security Gateways and ClusterXL Cluster Members.

• You can deploy a package to 10 targets at the same time.

1. In the left navigation panel, click Gateways & Servers.

2. Select the target Security Gateway or Cluster Member for deployment. To select multiple targets, press and hold the CTRL key.

3. Right-click the selected Security Gateway > Actions > Install Hotfix/Jumbo....

4. In the Install Hotfix/Jumbo window, choose Install the recommended Jumbo, click Install.
   Or choose Install a specific Hotfix/Jumbo, find a preferred Take and then click Install.

5. You can track the installation progress in the Recent Tasks window.
   When the installation is complete, the installed Jumbo Hotfix Accumulator Take number is updated in Gateways & Servers overview and in the Summary tab of the selected Security Gateway.

For more details, see the Quantum Security Management Administration Guide for your version > chapter "Managing Gateways" > section "Central Deployment of Hotfixes and Version Upgrades".

1. Install the Recommended Build of CPUSE Deployment Agent from sk92449.

2. With a web browser, connect to Gaia Portal at:
   

   https://<IP address of Gaia Management Interface>

   • If you changed the default port of Gaia Portal from 443, then you must also enter it (https://<IP address>:<Port>).

   • If you see the padlock icon in the top left corner, click the icon and click Yes to confirm.
     

   • Important - On Scalable Platforms (Maestro and Chassis), you must connect to the Gaia Portal of the applicable Security Group.

3. In the left navigation tree, click Software Updates > Available Updates.

There are three available options for downloading and installing a Jumbo Hotfix update.

Option 1: Latest and Recommended Takes

1. Navigate to the Jumbo Updates section.

2. Select the Latest or Recommended Jumbo Hotfix Accumulator Take.

3. Proceed to Installing the Package below.

Option 2: From Check Point Cloud (Online)

1. Click the Add Package button under the Current version pane.

2. Select From Check Point cloud to use a specific Jumbo Hotfix Accumulator package (TAR file).

3. The "Add a package from the Check Point cloud" window is displayed. To find the preferred package, use CPUSE Online Identifier:
   Check_Point_R82_jumbo_hf_main_Bundle_T<Take number>_FULL.tgz
   

   Example:
   Check_Point_R82_jumbo_hf_main_Bundle_T120_FULL.tgz

4. Click Add Package. The package should now be displayed in the Jumbo Updates section.
   Proceed to Installing the Package below.

Option 3: From Your Computer (Offline)

1. Click the Add Package button under the Current version pane.

2. Select From your computer if you downloaded the version prior to installation.

3. Click Browse.

4. Select the package file.

5. Click Open.

6. Click Import. The imported package should now be displayed in the Jumbo Updates section.
   Proceed to Installing the Package below.

Installing the Package

1. Before installing, select the preferred package and click Verify to check compatibility.

2. Review the verification results in the package description.
   If compatible: "Verification results. Installation is allowed" message is displayed in the package description.
   If not compatible: A warning with explanation is displayed in the package description.

3. Select the package to install. Click the Install button on the toolbar.
   Once installed, the new version is displayed in the Overview and under Software Updates > Current Version section.

1. Install the Recommended Build of CPUSE Agent from sk92449.

   Note - This build should not be used for Scalable Platforms (ElasticXL, Quantum Maestro and Quantum Scalable Chassis).

2. Connect to command line on target Gaia Server.

3. If your default shell is the Expert mode, then go to Gaia Clish.

   HostName:0> clish

4. Obtain the lock over the Gaia configuration database:

   HostName:0> lock database override

5. Best Practice: Before you download an online CPUSE Jumbo Hotfix Accumulator package, make sure it is fully compatible with your current version. If the package is not compatible, the results show if some prerequisite package or configuration are missing.
   Verify the required Jumbo Hotfix Accumulator package:

   HostName:0> installer verify PRESS THE TAB KEY TO SEE ALL PACKAGES installer verify <ID> [not-interactive]

6. Download the required package using the Download page or Gaia Portal.
   Alternatively, import the package in advance in the Gaia Portal or do it using the Gaia Clish commands below.

   Option 1: Import from Cloud

   1. Examine the list of the Jumbo Hotfix Accumulator packages available in CPUSE:

   HostName:0> show installer packages all

   2. A new row appears in the corresponding section:
      Major Versions
      Gaia Fast Deployment Images
      Jumbo Hotfix Accumulator Takes
      Hotfix Packages

   3. Import the required Jumbo Hotfix Accumulator package:

      HostName:0> installer import cloud <CPUSE Identifier

      Note: The <CPUSE Identifier> string is provided on the Downloads page.

      For example, Check_Point_R82_jumbo_hf_main_Bundle_T<Take number>_FULL.tgz

      If such CPUSE package does not exist, if there is a mistake in the pasted CPUSE Identifier, or if this CPUSE package is not compatible with your Gaia version, this message appears:
      

      HostName:0> No package was found

   Option 2: Import from Local Directory

   If the preferred package is already downloaded and stored locally on the Gaia Server, use this command:

   HostName:0> installer import local <Full Local Path> [not-interactive]

   Note: Replace <Full Local Path> with the complete path including the filename.

   Example: /var/log/Hotfix_Package.tgz

   The path must start from the root directory (/)

   Option 3: Import from FTP Server

   If the preferred package is already downloaded and stored locally on the FTP Server, use this command:
   

   HostName:0> installer import ftp <FTP IPv4 address> path <FTP Path> username <FTP Username> [password <FTP Password>] [not-interactive]

7. Choose the preferred package by entering an ID (number in the list) and type Y (yes) to confirm the installation.

1. In the left navigation panel of SmartConsole, click Gateways & Servers.

2. Select the target Security Gateway or Cluster Member for uninstall. To select multiple targets, press and hold the CTRL key.

3. Right-click the selected Security Gateway > Actions > Uninstall Hotfix/Jumbo....

4. In the Uninstall Hotfix/Jumbo window, from the drop-down menu select the Hotfix/Jumbo to uninstall, click Uninstall.

1. CPUSE Software Updates Policy should be configured to allow self-update of CPUSE Agent.

   Otherwise (and if this Server is offline), manually install the Recommended Build of CPUSE Agent from sk92449.

2. Connect to the Gaia Portal on your GaiaServer and navigate to the Software Upgrades section > click Current Version.

3. Click the three dots menu and choose Uninstall.

4. A warning that after this uninstall, the server reboots automatically appears .

   Click Yes, revert to start the uninstall.

5. The system reboots.

6. Reconnect to Gaia Portal.

7. The previously installed Jumbo Hotfix Accumulator version is now restored. The version is displayed in the Overview tab.

1. CPUSE Software Updates Policy should be configured to allow self-update of CPUSE Agent.

   Otherwise (and if this Server is offline), manually install the Recommended Build of CPUSE Agent from sk92449.

2. Connect to the command line on Gaia Server.

3. Log in to Gaia Clish.

   HostName:0> clish

4. Obtain the lock over the Gaia configuration database:

   HostName:0> lock database override

5. Uninstall the Jumbo Hotfix Accumulator package:

   HostName:0> installer uninstall PRESS THE TAB KEY TO SEE ALL PACKAGES installer uninstall <ID> [not-interactive]

   The progress in percentage appears in Gaia Clish.

6. Server reboots automatically.

For ElasticXL and Maestro, follow the instructions in the R82 Scalable Platforms Administration Guide > Chapter "Common Procedures for Scalable Platforms" > Section "Installing and Uninstalling a Hotfix on Security Group Members".

For Scalable Chassis, follow the instructions in the R82 Scalable Platforms Administration Guide > Chapter "Working with Quantum Scalable Chassis" > Section "Installing and Uninstalling a Hotfix on SGMs on Scalable Chassis".