Installing and Uninstalling a Hotfix on Security Group Members

This section describes the Full Connectivity installation and uninstall of an Offline CPUSEClosed Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself. For details, see sk92449. package.

Installing a Hotfix Package on Security Group Members

Important:

Installation Procedure

Uninstalling a Hotfix Package on Security Group Members

Important:

  • It is not supported to upgrade the CPUSE Agent on Security Group Members.

  • This procedure keeps the current connections in a Security Group.

  • This procedure applies to Security Groups in both Security Gateway and VSX mode.

    In VSX mode, you must run all the commands in the context of VS0.

  • Do not uninstall the hotfix from all the Security Group Members in a specific Security Group at the same time.

  • You uninstall the hotfix from one logical group of the Security Group Members at one time.

    The other logical group of the Security Group Members continues to handle traffic.

    You divide all Security Group Members in a specific Security Group into two logical groups - denoted below as "A" and "B".

    1. You uninstall the hotfix from the Security Group Members in the Logical Group "A"

    2. You uninstall the hotfix from the Security Group Members in the Logical Group "B"

    Each logical group should contain the same number of Security Group Members - as close as possible.

    Example 1:

    • There are 8 Security Group Members in the Security Group.

    • The Logical Group "A" contains Security Group Members from 1_1 to 1_4.

    • The Logical Group "B" contains Security Group Members from 1_5 to 1_8.

    Example 2:

    • There are 5 Security Group Members in the Security Group.

    • The Logical Group "A" contains Security Group Members from 1_1 to 1_3.

    • The Logical Group "B" contains Security Group Members from 1_4 and 1_5.

Uninstall Procedure