Upgrading a Security Gateway with CPUSE

Best Practice - Use the Central Deployment in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.. For more information, see the R81.10 Security Management Administration Guide > Chapter Managing Gateways > Section Central Deployment of Hotfixes and Version Upgrades.

Notes: In a CPUSE Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself. upgrade scenario, you perform the upgrade procedure on the same Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.. This upgrade method is supported only for Security Gateways that already run Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Operating System.

Important - Before you upgrade a Security Gateway: Step Instructions 1 Back up your current configuration (see Backing Up and Restoring). 2 See the Upgrade Options and Prerequisites. 3 Upgrade the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. and Log Servers. 4 Upgrade the licenses on the Security Gateway, if needed. See Working with Licenses. 4 Schedule a full maintenance window to make sure you can make all the custom configurations again after the upgrade. The upgrade process replaces all existing files with default files. If you have custom configurations on the Security Gateway, they are lost during the upgrade. As a result, different issues can occur in the upgraded Security Gateway.

Procedure:

1. On the Security Gateway, upgrade to R81.10 with CPUSE, or perform a Clean Install of R81.10

   Important - You must reboot the Security Gateway after the upgrade or clean install.

   Installation Method	Instructions
   Upgrade to R81.10 with CPUSE	See Installing Software Packages on Gaia. Follow the applicable action plan for the local or central installation. In local installation, select the R81.10 package and perform Upgrade. See sk92449 for detailed steps.
   Clean Install Installation of a Check Point Operating System from scratch on a computer. of R81.10 with CPUSE	See Installing Software Packages on Gaia. Follow the applicable action plan for the local or central installation. In local installation, select the R81.10 package and perform Clean Install. See sk92449 for detailed steps.
   Clean Install of R81.10 from scratch	Follow Installing a Security Gateway - only the step "Install the Security Gateway". Important - In the Gaia First Time Configuration Wizard, for the Management Connection IP address, you must use the same IP address as was used by the previous Security Gateway (prior to the upgrade).

2. In SmartConsole, establish SIC with the Security Gateway

   Important - This step is required only if you performed a Clean Install of R81.10 on this Security Gateway.

   Step	Instructions
   1	Connect with SmartConsole to the R81.10 Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. or Main Domain Management Server that manages this Security Gateway.
   2	From the left navigation panel, click Gateways & Servers.
   3	Open the Security Gateway object.
   4	From the left tree, click General Properties.
   5	Click the Communication button.
   6	Click Reset.
   7	In the One-time password field, enter the same Activation Key you entered during the First Time Configuration Wizard of the Security Gateway.
   8	In the Confirm one-time password field, enter the same Activation Key again.
   9	Click Initialize.
   10	The Trust state field must show Trust established.
   11	Click Close to close the Communication window.
   12	Click OK to close the Security Gateway Properties window.
   13	Publish the SmartConsole session.

3. In SmartConsole, change the version of the Security Gateway object

   Step	Instructions
   1	Connect with SmartConsole to the R81.10 Security Management Server or Domain Management Server that manages this Security Gateway.
   2	From the left navigation panel, click Gateways & Servers.
   3	Open the Security Gateway object.
   4	From the left tree, click the General Properties page.
   5	In the Platform section > Version field, select R81.10.
   6	Click OK.

4. In SmartConsole, install the Policy

   Step	Instructions
   1	Connect with SmartConsole to the R81.10 Security Management Server or Domain Management Server that manages this Security Gateway.
   2	From the left navigation panel, click Gateways & Servers.
   3	Install the Access Control Policy: Click Install Policy. In the Policy field, select the applicable Access Control Policy. Click Install. The Access Control Policy must install successfully.
   4	Install the Threat Prevention Policy: Click Install Policy. In the Policy field, select the applicable Threat Prevention Policy. Click Install. The Threat Prevention Policy must install successfully.

5. Test the functionality

   Step	Instructions
   1	Connect with SmartConsole to the R81.10 Security Management Server or Domain Management Server that manages this Security Gateway.
   2	From the left navigation panel, click Logs & Monitor > Logs.
   3	Examine the logs from this Security Gateway to make sure it inspects the traffic as expected.