Upgrading a Management Server or Log Server from R80.20.M1 with CPUSE

In a CPUSE upgrade scenario, you perform the upgrade procedure on the same Security Management Server.

Notes:

This procedure is supported only for Check Point computers that run R80.20.M1.
These instructions equally apply to:
- Security Management Server
- Endpoint Security Management Server
- CloudGuard Controller
- Dedicated Log Server
- Dedicated SmartEvent Server

Important - Before you upgrade a Security Management Server:

Step	Description
1	Back up your current configuration.
2	See the Upgrade Options and Prerequisites.
3	In R80 and above, examine the SmartConsole sessions: Connect with the SmartConsole to the Security Management Server. From the left navigation panel, click Manage & Settings > Sessions > View Sessions. You must publish or discard all sessions, for which the Changes column shows a number greater than zero. Right-click on such session and select Publish or Discard.
4	You must close all GUI clients (SmartConsole applications) connected to the source Security Management Server.
5	Install the latest version of the CPUSE from sk92449. Note - The default CPUSE does not support the required Upgrade Tools package.

Workflow:

Get the required Upgrade Tools
Upgrade the Security Management Server with CPUSE
Install the R80.20 SmartConsole
Upgrade the dedicated Log Servers and dedicated SmartEvent Servers
Install the management database
Install the Event Policy
Test the functionality

Step 1 of 7: Get the required Upgrade Tools

Step	Description
1	Download the required Upgrade Tools from the sk135172. Note - This is a CPUSE Offline package.
2	Install the required Upgrade Tools with CPUSE. See Installing Software Packages on Gaia and follow the applicable action plan for the local offline installation.
3	Make sure the package is installed. Run this command in the Expert mode: `[Expert@MGMT:0]# cpprod_util CPPROD_GetValue CPupgrade-tools-R80.20 BuildNumber 1` The output must show the same build number you see in the name of the downloaded package. Example: Name of the downloaded package: `ngm_upgrade_wrapper_992000043_1.tgz` `[Expert@MGMT:0]# cpprod_util CPPROD_GetValue CPupgrade-tools-R80.20 BuildNumber 1` `992000043` `[Expert@MGMT:0]#`

Step

Description

Download the required Upgrade Tools from the sk135172.

Note - This is a CPUSE Offline package.

Install the required Upgrade Tools with CPUSE.

See Installing Software Packages on Gaia and follow the applicable action plan for the local offline installation.

Make sure the package is installed. Run this command in the Expert mode:

[Expert@MGMT:0]# cpprod_util CPPROD_GetValue CPupgrade-tools-R80.20 BuildNumber 1

The output must show the same build number you see in the name of the downloaded package.

Example:

Name of the downloaded package: ngm_upgrade_wrapper_992000043_1.tgz

[Expert@MGMT:0]# cpprod_util CPPROD_GetValue CPupgrade-tools-R80.20 BuildNumber 1
992000043
[Expert@MGMT:0]#

Step 2 of 7: Upgrade the Security Management Server with CPUSE

See Installing Software Packages on Gaia and follow the applicable action plan for the local installation.

Step 3 of 7: Install the R80.20 SmartConsole

See Installing SmartConsole.

Step 4 of 7: Upgrade the dedicated Log Servers and dedicated SmartEvent Servers

If your Security Management Server manages dedicated Log Servers or SmartEvent Servers, you must upgrade these dedicated servers to the same version as the Security Management Server.

See Upgrading a Management Server or Log Server from R80.20.M1.

Step 5 of 7: Install the management database

Step	Description
1	Connect with SmartConsole to the R80.20 Security Management Server.
2	In the top left corner, click Menu > Install database.
3	Select all objects.
4	Click Install.
5	Click OK.

Step 6 of 7: Install the Event Policy

This step applies only if the SmartEvent Correlation Unit Software Blade is enabled on the R80.20 Security Management Server.

Step	Description
1	Connect with the SmartConsole to the R80.20 Security Management Server.
2	In the SmartConsole, from the left navigation panel, click Logs & Monitor.
3	At the top, click + to open a new tab.
4	In the bottom left corner, in the External Apps section, click SmartEvent Settings & Policy. The Legacy SmartEvent client opens.
5	In the top left corner, click Menu > Actions > Install Event Policy.
6	Confirm.
7	Wait for these messages to appear: `SmartEvent Policy Installer installation complete` `SmartEvent Policy Installer installation succeeded`
8	Click Close.
9	Close the Legacy SmartEvent client.

Step 7 of 7: Test the functionality

Step	Description
1	Connect with the SmartConsole to the R80.20 Security Management Server.
2	Make sure the management database and configuration were upgraded correctly.