Upgrading Multi-Domain Servers in High Availability from R80.20 and higher with Advanced Upgrade

In an advanced upgrade scenario, you perform the upgrade procedure on the same Multi-Domain Servers.

Notes:

  • This procedure is supported only for servers that run R80.20.M1, R80.20, R80.20.M2, or R80.30.

  • For additional information related to this upgrade, see sk163814.

Important - Before you upgrade Multi-Domain Servers:

Step

Instructions

1

Back up your current configuration (see Backing Up and Restoring).

2

See the Upgrade Options and Prerequisites.

3

Only the latest published database revision is upgraded.

If there are pending changes, we recommend to Publish the session.

4

If there are Global Policies configured on the Global Domain:

  1. Connect with SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. to the Global Domain on your source Multi-Domain ServerClosed Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS..

  2. Reassign all Global Policies to all applicable Domains.

Important - Do not publish any changes in the Global Domain until you complete the upgrade to the next available version. This is necessary to avoid any potential issues caused by different policy revisions on the Global Domain and on other Domains.

5

You must close all GUI clients (SmartConsole applications) connected to the source Multi-Domain Server.

6

Install the latest version of the CPUSEClosed Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself. For details, see sk92449. from sk92449.

Note - This is to make sure the CPUSE is able to support the required Upgrade Tools package.

7

Run the Pre-Upgrade Verifier on all source servers and fix all detected issues before you start the upgrade.

8

In Management High Availability, make sure the Primary Multi-Domain Server is upgraded and runs, before you start the upgrade on other servers.

Important - Before you can install Hotfixes on servers that work in Management High Availability, you must upgrade all these servers.

Procedure: