Supported Upgrade Paths

Installation Methods

For Security Management Servers we recommend that you use the CPUSE Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself. option available in Gaia Portal Web interface for the Check Point Gaia operating system.. To learn more about CPUSE, see sk92449.
For Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. upgrade, we recommend that you use the Central Deployment available in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.. See sk168597.

Upgrade Paths

Note - For more information about Security Management Servers and supported managed Security Gateways see sk113113.

Upgrade to R81.20 is available only from these versions:

Current Version	Security Gateways and VSX ⁽¹⁾	Management Servers and Multi-Domain Servers	Standalone
R81.10, R81, R80.40, R80.30 kernel 3.10, R80.30 kernel 2.6, R80.20 kernel 3.10, R80.20 kernel 2.6
For Scalable Platforms: R81.10, R81, R80.30SP, R80.20SP	⁽²⁾	Not applicable	Not applicable
R80.20.M2, R80.20.M1	Not applicable		Not applicable
R80.10	⁽⁴⁾	Requires a 2-step upgrade path ⁽³⁾⁽⁴⁾	Requires a 2-step upgrade path ⁽³⁾⁽⁴⁾
R80	Not applicable	Requires a 2-step upgrade path ⁽³⁾	Not applicable
R77.30	⁽⁴⁾⁽⁵⁾	Requires a 2-step upgrade path ^(3)(4)(5)	Requires a 2-step upgrade path ^(3)(4)(5)

Notes:

Starting from R81.10, VSLS is the only supported mode for new installations of VSX Clusters.

Upgrade of a VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. in the High Availability mode from R81.10 and earlier versions to R81.20 is supported.

To convert the upgraded VSX Cluster to VSLS, use the "vsx_util to convert" command.
Upgrade from these versions to R81.20 is supported only with specific takes of a Jumbo Hotfix Software package installed on top of the current software version to fix a wrong or undesired behavior, and to add a new behavior. Accumulators.

See sk177624.

In Maestro environment, it is possible to upgrade Security Groups A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. and Quantum Maestro Orchestrators A scalable Network Security System that connects multiple Check Point Security Appliances into a unified system. Synonyms: Orchestrator, Quantum Maestro Orchestrator, Maestro Hyperscale Orchestrator. Acronym: MHO. (if you decide to upgrade, you must upgrade both).
The required 2-step upgrade path is:
1. To R80.40
  
  See the R80.40 Installation and Upgrade Guide.
2. To R81.20
Before you start the upgrade, you must make sure the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. OS edition is 64-bit:
1. Get the current Gaia OS edition with this Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell). command:
  
  show version all
2. If the Gaia OS edition is "32-bit", run these Gaia Clish commands:
  
  set edition 64-bit
  
  save config
  
  reboot
To upgrade an R77.30 environment that implements Carrier Security (former Firewall-1 GX), you must follow sk169415:
1. Upgrade the R77.30 Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. to the special R80.30-based image.
2. Upgrade the R80.30 Management Server to R81.
3. Change the GTP settings.
4. Upgrade the R77.30 Security Gateway / Cluster to R81.
5. Upgrade the R81 Management Server to R81.20.
6. Upgrade the R81 Security Gateway / Cluster to R81.20.