Software Updates

Gaia automatically locates and shows the available software update packages for Check Point products and the Gaia OS. The updates packages are for minor releases and Hotfixes. Only packages that are applicable to the Gaia computer are shown. The packages can be downloaded from the Check Point Support center and installed. You can configure downloads and installations to be manual, scheduled, or automatic.

You can add a private package to the list of available packages. A private package is a hotfix that you get from Check Point Support. Private packages are not available on the Check Point Support Center.

The general workflow for updating software is:

1. Define the software deployment policy for downloads and installation.

   Downloads and installations can be manual, automatic, or scheduled (daily, weekly, monthly, or once only).

2. Define mail notifications for new packages and for automatic package updates.
3. Do the software download and installation.

Configuring a Software Deployment Policy - WebUI

To define the software deployment policy:

1. In the WebUI, go to the Software Updates > Policy page.
2. Configure how to download updates. Select one of Manually, Scheduled, or Automatic.

   If you choose to make a schedule for the download of updates. You can define the schedule to be Daily, Weekly, Monthly, or Once.

3. Configure how to install updates. Select one of Manually, Scheduled, or Automatic.
4. Check Point would like to collects statistics about downloaded and installed packages. This information is used only to make a better software update service. To let Check Point collect statistics, select Allow sending statistics information.
5. Select which sanity tests to perform after installing the software updates:
   • Processes - Make sure that Check Point processes are running
   • Policy installation - Make sure that it is possible to install a policy
   • Network Access - Make sure that all the network interfaces on the Gaia computer are Up.
6. Select Auto-rollback upon failure to do this if the installed package fails one of the sanity tests:
   • Automatically restore the installation you had before the package was installed.
   • Send a notification that the installation failed.

   If the installed package fails one of the sanity tests, and this option is not selected, only the notification is sent.

7. Click Apply.

Configuring Software Update Notifications - WebUI

You can be notified by email of these software update events:

• New packages in the Check Point Support Center that are available for download.
• Packages on the Gaia computer that have been downloaded.
• Package installation success or failure.

To configure software update notifications:

1. In the WebUI, go to the Software Updates > Software Update Notifications page.
2. Click Add.
3. Enter the email addresses of persons who will receive notification, and select the types of notification they will receive.
4. Go to the System Management > Mail Notifications page.
5. Enter the email address of the sender of the software update notifications.
6. Configure a mail server address.

   Note - If you do not configure an email address in the System Management > Mail Notifications page, no notifications are sent.

Configuring Software Deployment - WebUI

Before doing a software update:

1. Configure the software updates policy to:
   • Download packages manually, automatically or according to a schedule.
   • Install packages manually, automatically or according to a schedule.
2. Configure mail notifications for packages.

To manually download a software package:

You will receive an email when a package is available for download from the Check Point Support Center.

1. In the Software Updates > Status and Actions page, select a package with the status Available for Download.
2. Click Download.

When the package is downloaded, the package status changes to Available for Install. If you configured mail notifications for downloads, you will get an email notification.

To manually install a software package:

If you configured mail notifications for downloads, you will receive an email when a package is available for installation.

1. In the Software Updates > Status and Actions page, select a package with the status Available for install.
2. Click Install.

When the package is installed on the Gaia computer, the package status changes to Installed. If you configured mail notifications for packages, you will receive an email when a package is Installed.

To add a private package to the list of available package:

You can add a private package to the list of available packages. A private package is a hotfix that you get from Check Point Support. Private packages are not available on the Check Point Support Center.

1. In the Software Updates > Status and Actions page, insert the URL that you received from Support.
2. Click Add.

The package is added to the list of packages.

Configuring Software Deployment – clish (installation)

installer

	download <TAB>

	install <TAB>

	uninstall <TAB>

installer

	download <package name>

	install <package name>

	uninstall <package name>

installer restore_policy 

set installer download_mode 

	automatic

	manual

set installer install_mode 
	automatic

	manual

set installer deployment-mail-notification <email address> 	available_packages false

	available_packages true

	download_status false

	download_status true

	install_status false

	install_status true

show installer 

	available_packages

	available_local_packages

	installed_packages

	package_status

CLI Procedures- Software Updates

This section includes some basic procedures for configuring software updates using the CLI.

Show Commands

To show the packages that are available for download:

show installer available_packages

To show the packages that are available for installation:

show installer available_local_packages

To show the installed packages:

show installer installed_packages

To show the packages and their status:

show installer package_status

Configuring the Software Deployment Policy

To download a package:

installer download <package name or number>

To install a local package:

installer install <package name or number>

To uninstall a package:

installer uninstall <package name or number>

To restore the default deployment policy:

installer restore_policy

Configuring Package Notifications

To configure notifications for available packages:

You can add or remove email addresses from the list to which emails about available packages are sent.

set installer deployment-mail-notification <email address> available packages false

Set installer deployment-mail-notification <email address> available packages true

To configure notifications for downloaded packages:

You can add or remove email addresses from the list to which emails about newly downloaded (or failed) packages are sent.

set installer deployment-mail-notification <email address> download_status true

set installer deployment-mail-notification <email address> download_status false

To configure notifications for installed packages:

You can add or remove email addresses from the list to which emails about newly installed (or failed) packages are sent.

set installer deployment-mail-notification <email address> install_status true

set installer deployment-mail-notification <email address> install_status false

Configuring the Software Deployment Policy

To sets downloads to be automatic or manual:

set installer download_mode manual

set installer download_mode automatic

To sets installation to be automatic or manual:

set installer install_mode manual

set installer install_mode automatic