Supported Upgrade Paths

CPUSE is the installation and upgrade method supported for this release. To learn more about CPUSE, see sk92449.

R80.20 Security Management Server supports Linux 3.10 kernel. When you perform a Clean Install, or Advanced Upgrade to R80.20, it uses the xfs file system. After an in-place upgrade (using CPUSE), the file system remains ext3 except for Smart-1 525, 5050, 5150 appliances, which use the xfs file system.

New Early Availability program with our new Linux kernel version 3.10 based on R80.20 is now available for Security Gateway. This version is for customers who are looking to try R80.20 Security Gateway on Open Servers with latest CPUs. For more information, see sk137854.

Upgrade with the Supported Methods for your current installation.

From R75.4x, R76, R77.x, R77.20 EP6.0/EP6.1/EP6.2, R77.30.01, R77.30.02, R77.30.03, R80, R80.10 and R80.20.M1 to R80.20:

Check Point Product	Supported Methods
Security Gateway Security Management Server Multi-Domain Server CloudGuard Controller	CPUSE Upgrade CPUSE Clean Install Advanced Upgrade

Notes:

• To upgrade from R77.20 or R77.30 with the Add-on: It is not necessary to uninstall the Add-on. Remove these unsupported features: Modbus support with the Application Control Software Blade, "SAML" Cloud Connector for web based single sign on.
• Downgrade: On Smart-1 525, Smart-1 5050, and Smart-1 5150 appliances (sk120453) that run the Dedicated R80.10 image -

  Before upgrading to R80.20, take a Gaia OS Snapshot. If in the future you decide to downgrade the appliance back to the Dedicated R80.10 image, revert to that Gaia OS Snapshot.

• When upgrading from R80 only, User Defined reports will be migrated during the upgrade to the SmartConsole reports. Report Scheduling and email server definitions will not be migrated and need to be defined.

Maintaining Security Management Server Version

You can manage R80.20 Gateways with your existing R80.10 Security Management Server or Multi-Domain Server.

To enable this:

• Install R80.10 Jumbo Hotfix Accumulator Take 167 and higher (Refer to sk116380).
• Install R80.10 SmartConsole build 89 and higher (Refer to sk119612).

Note that if you choose to not upgrade to R80.20 Security Management Server or Multi-Domain Server, the new features will not be supported.

Required Disk Space

Required Disk Space for Security Management Server:

Before installation or upgrade, CPUSE verifies that enough free disk space is available. If the amount of available disk space is not sufficient, a message shows what is required.

This table shows the free disk space required for some packages:

R80.20 Installation, or Upgrade Type	Required Disk Space
Clean Install   Major Upgrade	The minimum required unpartitioned disk space is the highest value of one of these: Size of the current root partition. The used space in the current root partition plus 3 GB. If the used space is more than 90% of the root partition, then 110% of the size of the current root partition.

If you do not have enough free disk space, you can use the Logical Volume Manager (LVM) to increase the disk space of logical volumes on Gaia. This space is taken from the unallocated disk space, which is usually used for snapshots and upgrades. For more details see sk95566.

Required Disk Space for R80.20 Server:

Before you run a clean install of R80.20 Multi-Domain Servers, make sure that at least 10 GB of free disk space in the root partition is available. For an environment with many Domain Management Servers, more than 10 GB of free disk space is often required.

Check Point Appliances

Standalone and Management Servers boot by default with 64-bit Gaia kernel after a clean install or upgrade to R80.20.

Note - If you revert an R80.20 upgrade, the appliance will still boot with 64-bit Gaia kernel, even if it was originally 32-bit.

Management Servers

Check Point Product	Smart-1 25b, 205, 210, 225, 405, 410, 525	Smart-1 50, 150, 3050, 3150, 5050, 5150
Security Management	ü	ü
Log Server	ü	ü
SmartEvent Server	ü	ü
Multi-Domain Security Management		ü
Multi-Domain Log Server		ü

Smart-1 Appliances

Appliance	Management	Management + Log Server	Management + Log Server + SmartEvent
Gen V Smart-1 (405, 410, 525, 5050, 5150)	ü	ü	ü
Smart-1 225, 3050, 3150	ü	ü	ü
Smart-1 210 (16GB RAM)**	ü	ü	ü
Smart-1 210 (8GB RAM)	ü	ü
Smart-1 205 (16GB RAM)**	ü	ü	ü
Smart-1 205 (4GB RAM)*	ü
Smart-1 150 (16GB / 32GB RAM)	ü	ü	ü
Smart-1 150 (8GB RAM)*	ü	ü
Smart-1 50 (16GB / 32GB RAM)	ü	ü	ü
Smart-1 50 (4GB)*	ü
Smart-1 25B*	ü

* These Smart-1 appliances with default memory can run Security Management OR Log Server OR SmartEvent.

** We recommend that you upgrade the memory on these Smart-1 appliances to 16GB as part of the upgrade to R80.20.

Security Gateway and Standalone (Gateway + Management)

The model numbers in this table are for the series of appliances that support R80.20.

Appliance Series	Security Gateway	Standalone (Gateway + Management)
2200	ü
3000	ü	ü
4000	ü	*, **
5000	ü	ü
12000	ü	**
13000	ü	ü
15000	ü	ü
21000	ü	ü
23000	ü	ü

* The 4200 appliance does not support a Standalone deployment.

** These appliance models do not support a Standalone deployment with their default RAM (4GB): 4400, 4600, 4800, 12200, and 12400. Upgrade these models to at least 8 GB RAM to support a Standalone deployment.

Threat Emulation Private Cloud Appliance

These appliances are fully supported with R80.20:

TEX100X, TEX250X, TEX1000X and TEX2000X.

Hardware Health Monitoring

R80.20 supports these Hardware Health Monitoring features for Gaia Check Point appliances:

• RAID Health: Use SNMP to monitor the health of the disks in the RAID array, and be notified of volume and disk states.
• Hardware Sensors: Use the Gaia Portal or SNMP to monitor fan speed, motherboard voltages, power supply health, and temperatures. Some open servers are supported with an IPMI interface card that requires an IPMI card.

  Check Point Appliances	Smart-1
  SNMP Hardware sensor monitoring (polling and traps)	ü
  Gaia Portal hardware sensor monitoring	ü
  RAID monitoring with SNMP	ü