Upgrading with SmartUpdate for R77.30 and Below

You can remotely upgrade all Check Point packages on a single remote gateway, other than the operating system, in a single operation. The Upgrade all Packages function allows you to simultaneously distribute or upgrade multiple packages to the latest management version.

Upgrading a Single Package on a Check Point Remote Gateway

Use this procedure to select the specific package that you want to apply to a single package. The Distribute function allows you to:

• Upgrade the OS
• Upgrade a package to a management version other than the latest
• Apply Hot Fix Accumulators (HFAs)

To update a single package on a remote gateway:

1. In the Package Management window, right-click the Check Point Security Gateway to upgrade.
2. Select Distribute Package.
3. From the Distribute Package window, select the package to distribute.

   Use the Ctrl and Shift key to select multiple packages.

4. Click Distribute.

   The installation proceeds only if the upgrade packages selected are available in the Package Repository.

Upgrading All Packages on a Check Point Remote Gateway

You can remotely upgrade all Check Point packages on a single remote gateway, other than the operating system, in a single operation. The Upgrade all Packages function allows you to simultaneously distribute or upgrade multiple packages to the latest management version.

1. Click Packages > Upgrade all Packages.
2. From the Upgrade All Packages window, select the Check Point Security Gateways that you want to upgrade. Use the Ctrl and Shift keys to select multiple devices.

   Note - The Reboot if required option (selected by default) is required, to activate the newly distributed package.

3. If one or more of the required packages are missing from the Package Repository, the Download Packages window opens. Download the required package directly to the Package Repository.
4. Click Upgrade.

   The installation proceeds only if the upgrade packages for the selected packages are available in the Package Repository.

Prerequisites for Remote Upgrades

Make sure that SmartUpdate connections are allowed.

1. In SmartConsole, click Menu > Global properties > Track > Log Implied Rules.
2. Make sure that Accept SmartUpdate Connections is selected.

Secure Internal Communication (SIC) must be established between the Security Management Server and remote Check Point Security Gateways.

Distributions and Upgrades

You can upgrade all packages on one remote gateway, or you can distribute specific packages one-by-one for all Gateways.

Canceling and Uninstalling

You can stop a Distributed installation or upgrade while in progress.

To stop a Distributed installation or upgrade:

From the SmartUpdate Menu, select Operation > Stop Operation.

To uninstall a package:

From the SmartUpdate Menu, select Packages > Uninstall.

Note - Uninstallation restores the gateway to the last management version distributed.

Restarting the Check Point Security Gateway

After you Distribute an upgrade or uninstall, reboot the gateway.

To restart the gateway:

• Select Reboot if required at the final stage of upgrade or uninstall.
• Select Packages > Reboot Gateway.