Upgrading a Multi-Domain Log Server from R80.20 and higher with CPUSE

In a CPUSEClosed Check Point Upgrade Service Engine for Gaia Operating System. With CPUSE, you can automatically update Check Point products for the Gaia OS, and the Gaia OS itself. upgrade scenario, you perform the upgrade procedure on the same Multi-Domain Log ServerClosed Dedicated Check Point server that runs Check Point software to store and process logs in a Multi-Domain Security Management environment. The Multi-Domain Log Server consists of Domain Log Servers that store and process logs from Security Gateways that are managed by the corresponding Domain Management Servers. Acronym: MDLS..

Notes:

  • This procedure is supported only for servers that run R80.20.M1, R80.20, R80.20.M2, R80.30, or higher versions.

  • For additional information related to this upgrade, see sk163814.

Important - Before you upgrade a Multi-Domain Log ServerClosed Dedicated Check Point server that runs Check Point software to store and process logs.:

Step

Instructions

1

Back up your current configuration (see Backing Up and Restoring).

2

See the Upgrade Options and Prerequisites.

3

You must upgrade your Multi-Domain Servers.

4

You must close all GUI clients (SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. applications) connected to the source Multi-Domain Log Server.

5

Run the Pre-Upgrade Verifier on all source servers and fix all detected issues before you start the upgrade.

Procedure:

  		1.

    Important - See Upgrade Tools to understand if your server can download and install the latest version of the Upgrade Tools automatically.

    Step

    Instructions

    1

    Download the R81 Upgrade Tools from the sk135172.

    (See Upgrade Tools.)

    Note - This is a CPUSE Offline package.

    2

    Install the R81 Upgrade Tools with CPUSE.

    See Installing Software Packages on Gaia and follow the applicable action plan for the Local - Offline installation.

    3

    Make sure the package is installed.

    Run this command in the Expert mode:

    cpprod_util CPPROD_GetValue CPupgrade-tools-R81 BuildNumber 1

    The output must show the same build number you see in the name of the downloaded TGZ package.

    Name of the downloaded package: ngm_upgrade_wrapper_993000222_1.tgz

    [Expert@HostName:0]# cpprod_util CPPROD_GetValue CPupgrade-tools-R81 BuildNumber 1

    993000222

    [Expert@HostName:0]#

    Note - The command "migrate_server" from these Upgrade Tools always tries to connect to Check Point Cloud over the Internet.

    This is to make sure you always have the latest version of these Upgrade Tools installed.

    If the connection to Check Point Cloud fails, this message appears:

    Timeout. Failed to retrieve Upgrade Tools package. To download the package manually, refer to sk135172.

  2. See Installing Software Packages on Gaia and follow the applicable action plan.

  3. Step

    Instructions

    1

    Connect with SmartConsole to the R81 Multi-Domain ServerClosed Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. that manages the Multi-Domain Log Server.

    2

    From the left navigation panel, click Multi-Domain > Domains.

    3

    From the top toolbar, open the Multi-Domain Log Server object.

    4

    From the left tree, click General.

    5

    In the Platform section > in the Version field, select R81.

    6

    Click OK.

  4. Step

    Instructions

    1

    Connect to the command line on the server.

    2

    Log in to the Expert mode.

    3

    Restore the Log Exporter configuration as described in sk127653.

    4

    Reconfigure the Log Exporter:

    cp_log_export reconf

    5

    Restart the Log Exporter:

    cp_log_export restart

    For more information, see the R81 Logging and Monitoring Administration Guide > Chapter Log Exporter.

  5. Step

    Instructions

    1

    Connect with SmartConsole to the R81 Multi-Domain Log Server.

    2

    Make sure the management database and configuration were upgraded correctly.

  6. Step

    Instructions

    1

    Connect with SmartConsole to the R81 Multi-Domain Server that manages the Multi-Domain Log Server.

    2

    Make sure the logging works as expected.