Supported Upgrade Paths

Installation Methods

Note - For more information about Security Management Servers and supported managed Security Gateways see sk113113.

Upgrade to R81 is available only from these versions:

From Version	Security Gateways and VSX	Management Servers and Multi-Domain Servers	Standalone
R80.40, R80.30 kernel 3.10, R80.30 kernel 2.6, R80.20 kernel 3.10, R80.20 kernel 2.6
R80.20.M2, R80.20.M1	Not applicable		Not applicable
R80.10	⁽²⁾	Requires a 2-step upgrade path ⁽¹⁾⁽²⁾	Requires a 2-step upgrade path ⁽¹⁾⁽²⁾
R80	Not applicable	Requires a 2-step upgrade path ⁽¹⁾	Not applicable
R77.30	⁽²⁾⁽³⁾	Requires a 2-step upgrade path ^(1)(2)(3)	Requires a 2-step upgrade path ^(1)(2)(3)

Notes:

The required 2-step upgrade path is:
1. To R80.40
  
  See the R80.40 Installation and Upgrade Guide.
2. To R81
Before you start the upgrade, you must make sure the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. OS edition is 64-bit:
1. Get the current Gaia OS edition with this Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell). command:
  
  show version all
2. If the Gaia OS edition is "32-bit", run these Gaia Clish commands:
  
  set edition 64-bit
  
  save config
  
  reboot
To upgrade an R77.30 environment that implements Carrier Security (former Firewall-1 GX), you must follow sk169415:
1. Upgrade the R77.30 Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. to the special R80.30-based image.
2. Upgrade the R80.30 Management Server to R81.
3. Change the GTP settings.
4. Upgrade the R77.30 Security Gateway / Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. to R81.

Use these methods to upgrade your Check Point environment to R81:

Check Point Products	Supported Upgrade Methods for These Products
Security Gateway VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts.	Central Deployment of Hotfixes in SmartConsole CPUSE Upgrade CPUSE Clean Install
Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. CloudGuard Controller Provisions SDDC services as Virtual Data Centers that provide virtualized computer networking, storage, and security. Endpoint Security Management Server	CPUSE Upgrade CPUSE Clean Install Advanced Upgrade Upgrade with Migration

Check Point Products

Supported Upgrade Methods for These Products

The minimum required unpartitioned disk space is the highest value of one of these:

Size of the current root partition.
The used space in the current root partition plus 3 GB.
If the used space is more than 90% of the root partition, then 110% of the size of the current root partition.

Important:

At least 20 GB of free disk space is required in the root partition for an Upgrade to succeed.
At least 10 GB of free disk space is required in the /var/log partition for a Clean Install or Upgrade to succeed.