Hi,
I did this upgrade just recently. The pdf with the release:
http://www.checkpoint.com/downloads/latest/hfa.html was helpful in that it listed the install procedure (I can email it to you if you like (pm me your email). It basically says this:
General Installation Considerations
It is possible to install R55 PLUS HFA via SmartUpdate. The R55P HFA package,
from R55P HFA_04 and above, should be added to the repository of the R55
SmartCenter server, after which it can be installed using SmartUpdate.
Component Build Number Comment
SVN Foundation 541624002 The output of cpshared_ver
should be:
This is Check Point SVN
Foundation (R) NG with
Application Intelligence (R55)
HFA_06 for IPSO 3.8 (or 3.9),
Hotfix 624- Build 002
Firewall & Kernel 541624004 The output of fw ver -k should
be:
This is Check Point VPN-1(TM)
& FireWall-1 (R) NG with
Application Intelligence (R55)
HFA_06 for IPSO 3.8 (or 3.9),
Hotfix 624 Build 004 Kernel:
NG with Application
Intelligence (R55) HFA_06 for
IPSO 3.8 (or 3.9), Hotfix 624
Build 004
HFA/Component SVN Foundation FireWall-1 & Kernel
HFA_R55P_06 (Current) 541624002 541624004
HFA_R55P_05 541560004 541560004
HFA_R55P_04 541480003 541480004
HFAR_R55P_03 541388004 541388003
HFA_R55P_02 541298003 541298011
HFA_R55P_01 541194006 541194003
Check Point NG with Application Intelligence R55 HFA_06 for IPSO 3.8 and IPSO 3.9 Release Notes. Last Update September 14, 2005 6
HFA_R55P_06 can safely be installed on:
Security Gateways that are managed by SmartCenter Server or Provider-1 of version
NG with Application Intelligence R55 General Availability (GA) and up.
SmartCenter Servers of version NG with Application Intelligence R55 for IPSO 3.8
and IPSO 3.9 General Availability (GA) or previous HFAs.
Fixes that are relevant for Enforcement Modules only, can be installed on the
Enforcement Module only.
Before installing HFA_R55P_06, make sure that version NG with Application
Intelligence (R55) for IPSO 3.8 and/or IPS0 3.9 is installed and configured on your
machine.
Installing HFA_R55P_06 overrides any current support Hotfix that has been applied to
version NG with Application Intelligence (R55) for IPSO 3.8 and/or IPSO 3.9.
It is recommended to read the ClusterXL Guide prior to applying the HFA in a cluster
environment.
It is recommended to manually backup the FWDIR and CPDIR directories of the SVN
Foundation and Firewall products before installing HFA_R55P_06.
The directories can be accessed:
cd $FWDIR and cd $CPDIR
Installation Instructions for IPSO 3.8 and IPSO 3.9
The package SHF_HFA_R55P_06.tgz format consists of the following components:
install_hfa.
uninstall_hfa
files/cpshared_HOTFIX_HFA_R55P_06_541624002
files/fw1_HOTFIX_HFA_R55P_06_541624004
files/others
(specific OS files)
1 Extract the package to a temporary directory.
2 Stop the Firewall processes by executing cpstop. In a cluster configuration, execute
cphastop, as well.
3 Execute the install_hfa script in order to start the installation.
4 When the installation is complete, reboot the machine.
5 Install the Security Policy. The only thing I had to do was change the file properties (chmod 777 etc) in the temp directory on the IPSO that I transfered the files to. I hope I have helped in some way.