In an advanced upgrade scenario, you perform the upgrade procedure on the same Multi-Domain Log Server.
Note - Upgrade of a Multi-Domain Log Server from R80.20.M1 is not supported. You must perform a clean install of R80.20 Multi-Domain Log Server.
Important - Before you upgrade a Multi-Domain Log Server:
Step |
Description |
---|---|
1 |
|
2 |
See the Upgrade Options and Prerequisites. |
3 |
You must upgrade your Multi-Domain Servers. |
4 |
You must close all GUI clients (SmartConsole applications) connected to the source Multi-Domain Log Server. |
Workflow:
Step 1 of 8: Get the R80.20 installation image
Step |
Description |
---|---|
1 |
Download the R80.20 Clean Install ISO file from the R80.20 Home Page SK. |
2 |
Transfer the R80.20 ISO file to the current Multi-Domain Server to some directory (for example, Note - Make sure to transfer the file in the binary mode. |
Step 2 of 8: On the current Multi-Domain Log Server, run the Pre-Upgrade Verifier and export the entire management database
Step |
Description |
---|---|
1 |
Connect to the command line on the current Multi-Domain Log Server. |
2 |
Log in with the superuser credentials. |
3 |
Log in to the Expert mode. |
4 |
Stop all Check Point services:
|
5 |
Go to the main MDS context:
|
6 |
Mount the R80.20 ISO file:
|
7 |
Go to the installation folder in the ISO:
|
8 |
Run the installation script:
This menu shows:
|
9 |
Enter 1 to run the Pre-upgrade verification. Note - The Pre-Upgrade Verifier analyzes compatibility of the currently installed configuration with the version, to which you upgrade. A detailed report shows the steps to do before and after the upgrade. |
10 |
Read the Pre-Upgrade Verifier output. If you need to fix errors:
|
11 |
Enter 3 to export the current Multi-Domain Log Server configuration. |
12 |
Answer the interactive questions:
Note - If you enter no in the question " |
13 |
Make sure the export file is created in the specified directory:
|
14 |
Calculate the MD5 for the exported file:
|
15 |
Transfer the exported database from the current Multi-Domain Log Server to an external storage:
Note - Make sure to transfer the file in the binary mode. |
Step 3 of 8: Get the R80.20 Multi-Domain Log Server
Do not perform initial configuration in SmartConsole.
Current OS |
Available options |
---|---|
Gaia |
You can: |
Operating System |
You must perform a clean install of the R80.20 Multi-Domain Log Server. |
Important:
The IP addresses of the source and target R80.20 Multi-Domain Log Servers must be the same. If you need to have a different IP address on the R80.20 Multi-Domain Log Server, you can change it only after the upgrade procedure. Note that you have to issue licenses for the new IP address. For applicable procedure, see sk74020.
Step 4 of 8: On the R80.20 Multi-Domain Log Server, import the entire management database
Step |
Description |
---|---|
1 |
Connect to the command line on the R80.20 Multi-Domain Log Server. |
2 |
Log in with the superuser credentials. |
3 |
Log in to the Expert mode. |
4 |
Make sure a valid license is installed:
If it is not already installed, then install a valid license now. |
5 |
Transfer the exported database from an external storage to the R80.20 Multi-Domain Log Server, to some directory. Note - Make sure to transfer the file in the binary mode. |
6 |
Make sure the transferred file is not corrupted. Calculate the MD5 for the transferred file and compare it to the MD5 that you calculated on the original Multi-Domain Log Server:
|
7 |
Import the configuration:
Note: |
8 |
Make sure that on all Domain Log Servers, none of the required daemons (FWM, FWD, CPD, and CPCA) are in the state "
If some of the required daemons on a Domain Log Server are in the state "
|
Step 5 of 8: Install the management database
Step |
Description |
---|---|
1 |
Connect with SmartConsole to each R80.20 Domain Management Server that manages the Domain Log Server. |
2 |
In the top left corner, click Menu > Install database. |
3 |
Select all objects. |
4 |
Click Install. |
5 |
Click OK. |
Step 6 of 8: Upgrade the attributes of all managed objects in all Domain Log Servers
Step |
Description |
---|---|
1 |
Connect to the command line on the R80.20 Multi-Domain Log Server. |
2 |
Log in with the superuser credentials. |
3 |
Log in to the Expert mode. |
4 |
Make sure that on all Domain Log Servers, none of the required daemons (FWM, FWD, CPD, and CPCA) are in the state "
If some of the required daemons on a Domain Log Server are in the state "
|
5 |
Go to the main MDS context:
|
6 |
Upgrade the attributes of all managed objects in all Domain Log Servers at once:
Notes:
|
7 |
Allow the database synchronization to run:
Restart the Check Point services:
For more information, see sk121718. |
8 |
Make sure that on all Domain Log Servers, none of the required daemons (FWM, FWD, CPD, and CPCA) are in the state "
If some of the required daemons on a Domain Log Server are in the state "
|
Step 7 of 8: Test the functionality on R80.20 Multi-Domain Log Server
Step |
Description |
---|---|
1 |
Connect with the SmartConsole to the R80.20 Multi-Domain Log Server. |
2 |
Make sure the configuration was upgraded correctly and it works as expected. |
Step 8 of 8: Test the functionality on R80.20 Multi-Domain Server
Step |
Description |
---|---|
1 |
Connect with the SmartConsole to the R80.20 Multi-Domain Server. |
2 |
Make sure the logging works as expected. |