Important Information

	Latest Software We recommend that you install the most recent software release to stay up-to-date with the latest functional improvements, stability fixes, security enhancements and protection against new and evolving attacks.
	Certifications For third party independent certification of Check Point products, see the Check Point Certifications page.
	Check Point R81 For more about this release, see the R81 home page.
	Latest Version of this Document in English Open the latest version of this document in a Web browser. Download the latest version of this document in PDF format.
	Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments.

Revision History

Date	Description
26 September 2023	Updated: Renamed the cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. upgrade method "Minimal Effort" to "Minimum Effort" Minimum Effort Upgrade of a Security Gateway Cluster - Added the missing step to establish SIC Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. with Cluster Members after Clean Install Installation of a Check Point Operating System from scratch on a computer. Minimum Effort Upgrade of a VSX Cluster - Added the missing step to establish SIC with Cluster Members after Clean Install Renamed the cluster upgrade method "Zero Downtime" to "Minimum Downtime" to show better the nature of this upgrade method Note - Multi-Version Cluster (MVC) Upgrade is the Zero Downtime Upgrade. Minimum Downtime Upgrade of a Security Gateway Cluster - Added the missing steps to establish SIC with Cluster Members after Clean Install Minimum Downtime Upgrade of a VSX Cluster - Added the missing steps to establish SIC with Cluster Members after Clean Instal
25 September 2023	Updated: Installing a CloudGuard Controller - Updated the note about the Known Limitation VSECPC-1341 Multi-Version Cluster Upgrade Procedure - Gateway Mode Minimum Downtime Upgrade of a Security Gateway Cluster - Updated the notes about changing the CCP mode to Broadcast Minimum Downtime Upgrade of a VSX Cluster - Updated the notes about changing the CCP mode to Broadcast
21 February 2023	In the upgrade procedures for Management High Availability Servers, added this note: Make sure the Security Management Servers can communicate with each other and SIC works between these servers. For details, see sk179794.
12 October 2022	Updated: Multi-Version Cluster Limitations
19 June 2022	Updated: Backing Up and Restoring Prerequisites for Upgrading and Migrating of Management Servers and Log Servers Configuring ClusterXL in Bridge Mode - Active / Active with Two or Four Switches - the last step about the kernel parameter "`fwha_monitor_if_link_state`" Upgrade procedures for Management Servers - if the SmartProvisioning Check Point Software Blade on a Management Server (the actual name is "Provisioning") that manages large-scale deployments of Check Point Security Gateways using configuration profiles. Synonyms: Large-Scale Management, SmartLSM, LSM. Software Blade Specific security solution (module): (1) On a Security Gateway, each Software Blade inspects specific characteristics of the traffic (2) On a Management Server, each Software Blade enables different management capabilities. is enabled, then must install policies on all SmartLSM Security Profiles
23 January 2022	Updated: Installing Software Packages on Gaia Upgrade Options and Prerequisites Prerequisites for Upgrading and Migrating of Management Servers and Log Servers - removed all references to R80.10 and lower versions Prerequisites for Upgrading and Migrating of Security Gateways and Clusters - removed all references to R80.10 and lower versions Upgrade Methods Upgrade Tools Upgrading one Multi-Domain Server from R80.20 and higher - added a preliminary step to reassign all Global Policies to all applicable Domains Upgrading Multi-Domain Servers in High Availability from R80.20 and higher - added a preliminary step to reassign all Global Policies to all applicable Domains Removed (because upgrade or migration from versions R80 and R80.10 is not supported): Prerequisites for Upgrading vSEC Controller R80.10 and lower Upgrading a Security Management Server or vSEC Controller from R80.10 and lower Upgrading a Dedicated Log Server from R80.10 and lower Upgrading a Dedicated SmartEvent Server from R80.10 and lower Upgrading one Multi-Domain Server from R80.10 and lower Upgrading Multi-Domain Servers in High Availability from R80.10 and lower Upgrading a Multi-Domain Log Server from R80.10 and lower Upgrading an Endpoint Security Management Server from R80.10 and lower Upgrading a Dedicated Endpoint Policy Server from R80.10 and lower Upgrading a Standalone from R80.10 and lower
16 April 2021	Updated: Installing Full High Availability Cluster Upgrade Methods - removed information about a Gradual Upgrade from R7x versions because it is not supported The note "In a Management High Availability environment, the SmartEvent Software Blade is supported only on the Active Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. (for more information, see sk25164)." Removed (because upgrade or migration from R77.x versions is not supported): Migrating Global Policies from an R7x Multi-Domain Server Migrating Database from an R7x Security Management Server to an R81 Domain Management Server Migrating Database from an R7x Domain Management Server to an R81 Domain Management Server Migrating Database from an R7x Standalone to an R81 Domain Management Server
05 November 2020	Updated: Supported Versions in Multi-Version Cluster
03 November 2020	Updated: Migrating Database from an R81 Domain Management Server to an R81 Security Management Server
02 November 2020	Added: Multi-Version Cluster Upgrade Procedure - VSX Mode Deploying a Domain Dedicated Log Server Updated: Backing Up and Restoring - added link to sk127653 Prerequisites for Upgrading and Migrating of Management Servers and Log Servers Upgrade Tools Upgrading a Security Management Server or Log Server from R80.20 and higher - all procedures Upgrading one Multi-Domain Server from R80.20 and higher - all procedures Upgrading Multi-Domain Servers in High Availability from R80.20 and higher - all procedures Upgrading a Multi-Domain Log Server from R80.20 and higher - all procedures Upgrading an Endpoint Security Management Server or Endpoint Policy Server from R80.20 and higher - all procedures Migrating Database Between R81 Security Management Servers Installing a VSX Gateway - updated notes Installing a VSX Cluster - updated notes Multi-Version Cluster Upgrade Procedure - Gateway Mode
21 October 2020	First release of this document