Upgrade Methods

In This Section: Upgrade with CPUSE Advanced Upgrade of Management Servers and Log Servers Migrating and Upgrading of Management Servers and Log Servers Gradual Upgrade of R7x Multi-Domain Server

You can use this method to upgrade your Security Gateways and Cluster Members:

Computer	CPUSE
Security Gateways, VSX Gateways, Cluster Members	Supported

You can use these methods to upgrade your Management Servers and Log Servers:

Computer	CPUSE	Advanced Upgrade	Migration and Upgrade	Gradual Upgrade
Security Management Server, Endpoint Security Management Server, vSEC Controller	Supported	Supported	Supported	Not applicable
Multi-Domain Server	Supported	Supported	Supported	Supported
Multi-Domain Log Server	Supported	Supported	Supported	Not applicable
Dedicated Log Server, Endpoint Policy Server	Supported	Supported	Supported	Not applicable
Dedicated SmartEvent Server	Supported	Supported	Supported	Not applicable

Important:

• Upgrade with CPUSE is supported only on Check Point computers that currently run Gaia Operating System.
• Before you upgrade your Security Gateways and Cluster Members, you must upgrade your Management Servers that manage them.
• You must upgrade your dedicated Log Servers and SmartEvent Servers to the same version as the Management Servers that manage them.

  You must upgrade your Management Servers before you can upgrade these dedicated servers.

• You must upgrade your Multi-Domain Log Servers to the same version as the Multi-Domain Servers that manage them.
• Gradual Upgrade is supported only from R7x versions.
• During the upgrade process in a Management High Availability environment, we recommend that you do not use any of the Security Management Servers or Multi-Domain Servers to make changes in the management databases. This can cause inconsistent synchronization between these servers.

Upgrade with CPUSE

With CPUSE, you can install software packages to upgrade or to perform a clean install on Check Point computers that run on the Gaia Operating System.

For more about CPUSE, see sk92449.

For detailed CPUSE upgrade instructions, see:

Upgrade From	Section
R80.20, R80.10 and lower	Upgrading a Security Management Server with CPUSE Upgrading a Dedicated Log Server, or Endpoint Policy Server with CPUSE Upgrading a Dedicated SmartEvent Server with CPUSE Upgrading one Multi-Domain Server with CPUSE Upgrading Multi-Domain Servers in High Availability with CPUSE Upgrading a Multi-Domain Log Server with CPUSE Upgrading a Security Gateway with CPUSE Upgrading a VSX Gateway with CPUSE
R80.20.M2, R80.20.M1	Upgrading a Management Server or Log Server from R80.20.M1 or R80.20.M2 with CPUSE Upgrading one Multi-Domain Server from R80.20.M1 or R80.20.M2 with CPUSE Upgrading Multi-Domain Servers in High Availability from R80.20.M1 or R80.20.M2 with CPUSE Upgrading a Multi-Domain Log Server from R80.20.M1 or R80.20.M2 with CPUSE

Advanced Upgrade of Management Servers and Log Servers

In an advanced upgrade scenario, perform these steps on the same Check Point computer:

Step	Description
1	Take a full backup and snapshot of the current Check Point computer.
2	Export the entire management database with the R80.30 Management Server Migration Tool.
3	Get the R80.30 Check Point computer: If the current Check Point computer runs on Gaia, you can upgrade it to R80.30. If the current Check Point computer runs an operating system other than Gaia, you must perform a clean install of the R80.30.
4	Import the entire management database.

For detailed Advanced Upgrade instructions, see:

Upgrade From	Section
R80.20, R80.10 and lower	Upgrading a Security Management Server with Advanced Upgrade Upgrading a Dedicated Log Server, or Endpoint Policy Server with Advanced Upgrade Upgrading a Dedicated SmartEvent Server with Advanced Upgrade Upgrading one Multi-Domain Server with Advanced Upgrade Upgrading Multi-Domain Servers in High Availability with Advanced Upgrade Upgrading a Multi-Domain Log Server with Advanced Upgrade
R80.20.M2, R80.20.M1	Upgrading a Management Server or Log Server from R80.20.M1 or R80.20.M2 with Advanced Upgrade Upgrading one Multi-Domain Server from R80.20.M1 or R80.20.M2 with Advanced Upgrade Upgrading Multi-Domain Servers in High Availability from R80.20.M1 or R80.20.M2 with Advanced Upgrade Upgrading a Multi-Domain Log Server from R80.20.M1 or R80.20.M2 with Advanced upgrade

Migrating and Upgrading of Management Servers and Log Servers

In a migration and upgrade scenario, perform these steps on the source Check Point computer and the different target Check Point computer:

Step	Description
1	Export the entire management database from the source Check Point computer with the R80.30 Management Server Migration Tool.
2	Install another target R80.30 Check Point computer.
3	Import the entire management database on the new target R80.30 Check Point computer.

For detailed migration and upgrade instructions, see:

Upgrade From	Section
R80.20, R80.10 and lower	Upgrading a Security Management Server with Migration Upgrading a Dedicated Log Server, or Endpoint Policy Server with Migration Upgrading a Dedicated SmartEvent Server with Migration Upgrading one Multi-Domain Server with Migration Upgrading Multi-Domain Servers in High Availability with Migration Upgrading a Multi-Domain Log Server with Migration
R80.20.M2, R80.20.M1	Upgrading a Management Server or Log Server from R80.20.M1 or R80.20.M2 with Migration Upgrading one Multi-Domain Server from R80.20.M1 or R80.20.M2 with Migration Upgrading Multi-Domain Servers in High Availability from R80.20.M1 or R80.20.M2 with Migration Upgrading a Multi-Domain Log Server from R80.20.M1 or R80.20.M2 with Migration

Gradual Upgrade of R7x Multi-Domain Server

In a gradual scenario, perform these steps on the source R7x Multi-Domain Server and the target R80.30 Multi-Domain Server:

Step	Description
1	Install a target R80.30 Multi-Domain Server.
2	Create the corresponding Domain Management Servers, into which you import the entire management databases from the source R7x Domain Management Servers.
3	Migrate the Global Policy from the current R7x Multi-Domain Server to the R80.30 Multi-Domain Server.
4	On the current R7x Multi-Domain Server, export the entire management databases from the applicable source R7x Domain Management Servers one by one with the R80.30 Management Server Migration Tool.
5	On the target R80.30 Multi-Domain Server, import the entire management databases to the applicable target R80.30 Domain Management Servers one by one.

Important - We recommend upgrading the entire Multi-Domain Server at once.

For detailed gradual upgrade instructions, see Upgrading one R7x Multi-Domain Server with Gradual Migration of Domain Management Servers.