CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Management High Availability
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-04-09
chipone chipone is offline
Member
 
Join Date: 2007-04-17
Posts: 37
Rep Power: 0
chipone has an average reputation (10+)
Default Smartcenter server update

Hello

Can anyone tell me if i need to do a Smartcenter server update hotfix if so how, currently running Smartcenter pro server R60 244 secureplatform and IP390 gateway's which i'm finally updating to R60_HFA_06 via smartupdate.
Thanks
Reply With Quote
  #2 (permalink)  
Old 2008-04-09
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 724
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Smartcenter server update

You should always install the HFA on the Smartcenter server before you install it on the gateway. If you don't know which HFA is installed, you can do a "fw ver -k" from the commandline and the readme notes for the HFA will list the build # as well.
__________________
Its all in the documentation.
Reply With Quote
  #3 (permalink)  
Old 2008-04-10
chipone chipone is offline
Member
 
Join Date: 2007-04-17
Posts: 37
Rep Power: 0
chipone has an average reputation (10+)
Default Re: Smartcenter server update

I have installed the HOT fix on the server via smartupdate and then i do a verify on the gateway then push the Hot fix to the gateway.
The question i was asking does the secureplatform have a hot fix , i know you can do a server upgrade via the web gui but not aware of an update.
Reply With Quote
  #4 (permalink)  
Old 2008-04-10
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 724
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Smartcenter server update

In the past HFAs had three seperate parts you had to run individually. One of those parts is for SPLAT. The newer HFAs have all three parts rolled into one and a very basic installer which detects whether or not each part should be installed.

Using SmartUpdate with the newer HFAs (~R60 HFA04 or newer I believe) will install the necessary SPLAT updates.
__________________
Its all in the documentation.
Reply With Quote
  #5 (permalink)  
Old 2008-04-11
chipone chipone is offline
Member
 
Join Date: 2007-04-17
Posts: 37
Rep Power: 0
chipone has an average reputation (10+)
Default Re: Smartcenter server update

when i did HFA_05 the only option was to install on the gateway , now i have donwloaded HFA_06 to the managemnet server the only option is to install on the gateway. I am wondering if i need to download a completely different update for the Secureplatform. All options within smartupdate for the secureplatform are greyed out.
Reply With Quote
  #6 (permalink)  
Old 2008-04-12
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 724
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Smartcenter server update

That's because there's only one update package now.
__________________
Its all in the documentation.
Reply With Quote
  #7 (permalink)  
Old 2008-04-14
chipone chipone is offline
Member
 
Join Date: 2007-04-17
Posts: 37
Rep Power: 0
chipone has an average reputation (10+)
Default Re: Smartcenter server update

Using smartupdate and viewing the secureplatform doesn't show any hot fixes applied , the only Hot fixes installed are on the gateways which is why i started the thread is there any Hof fixes on secureplatforms.

Can someone who is running secureplatform and a separate gateway please check smartupdate and report the status of the secureplatform.

Thanks
Reply With Quote
  #8 (permalink)  
Old 2008-04-14
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 724
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Smartcenter server update

Quote:
Originally Posted by chipone View Post
Can someone who is running secureplatform and a separate gateway please check smartupdate and report the status of the secureplatform.
I see four entries for SecurePlatform, here are their versions:
R60
R60_03
R60_04
R60_05

The gateway is currently on HFA 05.
__________________
Its all in the documentation.
Reply With Quote
  #9 (permalink)  
Old 2008-04-15
chipone chipone is offline
Member
 
Join Date: 2007-04-17
Posts: 37
Rep Power: 0
chipone has an average reputation (10+)
Default Re: Smartcenter server update

when i view the secureplatform i only see r60, my gateways are showing
R60,
R60 -HFA04
R60- HFA05

I have downloaded the latest hotfix R60- HFA06 vPN pro/express Nokia IPSO which is in the repository and done a verify and ask for the gateways which checks the gateways are valid and OK.

I have downloaded the secureplatform HFA_06 to the repository and however when i try to pre-install verifier it comes up with the message no suitable targets found and ends. Am i doing something wrong.
Reply With Quote
  #10 (permalink)  
Old 2008-04-15
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 857
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: Smartcenter server update

Am in mistaken in thinking that your only SPLAT box is the Primary SMARTCenter. You cannot update the Primary SMARTCenter via SMARTUpdate.

You need to run the HFA on a SMARTCenter manually. You can upgrade a secondary SMARTCenter via SMARTUpdate but not the Primary.
Reply With Quote
  #11 (permalink)  
Old 2008-04-16
chipone chipone is offline
Member
 
Join Date: 2007-04-17
Posts: 37
Rep Power: 0
chipone has an average reputation (10+)
Default Re: Smartcenter server update

Yes i'm trying to updated the primary SPLAT from Smartupdate, however i cannot update the secondary either as their are no option to update this only.

If i try to launch smartupdate from the secondary it asks to become the primary active.
Reply With Quote
  #12 (permalink)  
Old 2008-04-16
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,598
Rep Power: 4
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Smartcenter server update

You cannot use SmartUpdate on a SmartCenter. You must update from the command line.
Reply With Quote
  #13 (permalink)  
Old 2008-04-17
chipone chipone is offline
Member
 
Join Date: 2007-04-17
Posts: 37
Rep Power: 0
chipone has an average reputation (10+)
Default Re: Smartcenter server update

Do you have a procedure how to do this.

I.e. which hotfix to download and how to apply this on the server.
Reply With Quote
  #14 (permalink)  
Old 2008-04-17
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,598
Rep Power: 4
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Smartcenter server update

All depends what version you want to run.

Me, I'd go with an upgrade to R65 and then patch it HFA02.

The gateways can still run R60 if you want.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 00:53.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0