Central Deployment of Hotfixes

Central Deployment allows performing batch deployment of Jumbo Hotfix Software package installed on top of the current software version to fix a wrong or undesired behavior, and to add a new behavior. Accumulators and Hotfixes using SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on..

You can deploy a Recommended Jumbo Hotfix Accumulator Collection of hotfixes combined into a single package. Acronyms: JHA, JHF, JHFA. or a specific Jumbo Hotfix Accumulator take.

You can find the name of the specific Jumbo Hotfix Accumulator in the relevant SK article for the applicable version.

Notes:

You can select up to 30 Security Gateways and ClusterXL Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Members.
Up to 10 targets can be deployed concurrently.

Prerequisites

This table shows the Jumbo Hotfix Accumulator takes which are required to install the recommended Jumbo Hotfix Accumulator.

Version	Jumbo Hotfix Accumulator
R80.30	Take 76 or higher.
R80.20	A Take higher than Take 118.
R80.10	A Take higher than 245.

To use the Install Hotfix from SmartConsole options:

The version of the installed Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. must be R80.40 or higher.
The Security Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. and target Security Gateways must be able to connect to the Check Point cloud.
The administrator has the Manage Licenses and Packages permissions.
The latest deployment agent is installed on the targets.
SIC Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. is already established for the target Security Gateways.
A policy is installed on the target Security Gateways.
To upgrade a configured ClusterXL, the Cluster object must be selected.

Limitations

Only recommended and on-going Jumbo Hotfix Accumulators Takes made available in the Check Point update servers are supported.

If SmartConsole and the Security Management Server are connected through a proxy server, the GUI for this feature is not supported. In this case, use the applicable API command.

The following are not supported with Hotfix Central Deployment:

ClusterXL in High Availability mode configured as "Switch to higher priority Cluster Member" (known as "Primary Up").
ClusterXL in Load Sharing mode, and VRRP Clusters.
VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts..
Using Central Deployment from:
- A Global Domain or in the Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. context.
- A Standalone Configuration in which the Security Gateway and the Security Management Server products are installed and configured on the same server. server.
- Standby Multi-Domain Security Management and Security Management Server.
Log Server Dedicated Check Point server that runs Check Point software to store and process logs.
SmartEvent Server

Installing the Jumbo Hotfix Accumulator

To Install a Jumbo Hotfix Accumulator or a Hotfix

Best Practice - Central deployment of Hotfixes on the Security Management Server relies on status reports from the managed Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. servers. Therefore, we recommend to wait for two minutes after the Gaia server is up and running before you install a Hotfix.

In SmartConsole Go to the GATEWAYS & SERVERS view.

The list of available Jumbo Hotfix Accumulators shows in a new column.
Select the target Security Gateways for deployment.
From the Toolbar menu, select Actions > Install Hotfix

Alternatively, right-click the Gateways & Servers view > Actions > Install Hotfix.

The Install Hotfix window opens, and shows Information about the selected targets and their corresponding recommended Jumbo Hotfix Accumulators.

Select one of the options:

Install Recommended Jumbo Hotfix (default).

Note - If there is no recommended Jumbo Hotfix Accumulator for the selected targets, this option is grayed out.

If a recommended Jumbo Hotfix Accumulator applies only to some of the selected targets, the deployment takes place only for those targets.

Install Specific Hotfix
1. Copy the Jumbo Hotfix Accumulator file name from the applicable SK article and paste it in the Install Specific Hotfix text box.
2. Click Validate

Click Verify - The Install Hotfix window is minimized and the verification process starts.
1. To see the progress of the verification process open the Tasks view at the bottom left corner of SmartConsole and click Details:
Click Install.