Management High Availability QUESTION

[robori]

Question: You have a production implementation of Mgmt High Availability, at Version VPN-1 NG with AI R55. You must upgrade both SmartCenterServers to VPN-1.

My comments: I understand that the first thing is we need to synchronize the 2 SmartCenter Servers, but after that, do we FIRST upgrade the Secondary SCS or we perform an Advanced Upgrade on the primary SCS first ?

Please share your thoughts !

Thank you,
Robori

[lodown]

It has been awhile since I have upgraded a SmartCenter, but we did the following to move from R55 to NGX R60:

Sync the Management Stations
CPSTOP or shutdown the secondary
Upgrade the Primary
Once the primary is up and running, upgrade the Secondary

This is also how I usually upgraded SPLAT HA Firewalls as well, but I would suggest you consult the Checkpoint documentation before you upgrade.

lodown

[robori]

"Question: You have a production implementation of Mgmt High Availability, at Version VPN-1 NG with AI R55. You must upgrade both SmartCenterServers to VPN-1. , What´s the correct procedure?"

A)
1- Synchronize the two SmartCenter Servers
2-Upgrade the secondary SmartCenter Server
3- Upgrade the primary SmartCenter Server
4- Configure both SmartCenter Server host objects versions to VPN1-NGX
5- Synchronize the Servers again

B)
1- Synchronize the two SmartCenter Servers
2- Perform an advanced upgrade the primary SmartCenter Server
3- Upgrade the secondary SmartCenter Server
4- Configure both SmartCenter Server host objects versions to VPN1-NGX
5- Synchronize the Servers again


I am between these two answers, dumps say it´s "A" the correct option.

[ipsec]

Originally Posted by robori

"Question: You have a production implementation of Mgmt High Availability, at Version VPN-1 NG with AI R55. You must upgrade both SmartCenterServers to VPN-1. , What´s the correct procedure?"

A)
1- Synchronize the two SmartCenter Servers
2-Upgrade the secondary SmartCenter Server
3- Upgrade the primary SmartCenter Server
4- Configure both SmartCenter Server host objects versions to VPN1-NGX
5- Synchronize the Servers again

B)
1- Synchronize the two SmartCenter Servers
2- Perform an advanced upgrade the primary SmartCenter Server
3- Upgrade the secondary SmartCenter Server
4- Configure both SmartCenter Server host objects versions to VPN1-NGX
5- Synchronize the Servers again


I am between these two answers, dumps say it´s "A" the correct option.

A is correct
P/N 701768 HandBook