Upgrading a Security Management Server or Log Server from R80.20 and higher with Advanced Upgrade

In an advanced upgrade scenario, you perform the upgrade procedure on the same Check Point server.


Important - Before you upgrade a Management ServerClosed Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. or Log Server:




Back up your current configuration (see Backing Up and Restoring).


See the Upgrade Options and Prerequisites.


Only the latest published database revision is upgraded.

If there are pending changes, we recommend to Publish the session.


You must close all GUI clients (SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. applications) connected to the source Security Management Server.


Install the latest version of the CPUSEClosed Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself. from sk92449.

Note - This is to make sure the CPUSE is able to support the required Upgrade Tools package.


Run the Pre-Upgrade Verifier on all source servers and fix all detected issues before you start the upgrade.


In Management High Availability, make sure the Primary Security Management Server is upgraded and runs, before you start the upgrade on other servers.