CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Results 1 to 7 of 7

Thread: Upgrade to 80.40

  1. #1
    Join Date
    2019-07-12
    Posts
    6
    Rep Power
    0

    Default Upgrade to 80.40

    Wondering if anyone has made the jump to 80.40 and is willing to share their experience. Any noticeable problems or issues as a result?

  2. #2
    Join Date
    2014-09-02
    Posts
    366
    Rep Power
    10

    Default Re: Upgrade to 80.40

    While you haven't said what version you're coming from, I say "go for it". Loads of new features and enhancements, and minimal fear/risk.

    We've updated numerous clients with very little issue - and nothing really worth note. It's currently the "recommended" version and becoming quickly adopted - at least from what I can see.

    I think my biggest (only?) early frustration was with a number of "missing" command in the Gaia CLI. As it turned out, CP had implemented what they call "Dynamic CLI", which extends the capabilities of CLISH by changing/moving commands in from bash/expert-mode (like fwaccel, cphaprob, cplic, etc.). While it took a bit of getting used to, it will eventually lead reduced need for leaving CLISH, giving most users a simpler CLI experience, and likely increasing security of the system a bit. It's discussed in sk144112.

    I'll skip a discussion of new features and reasons, as that's been covered well elsewhere (like here). I even did a webinar on "what's new" a couple of weeks ago. I should be able to send you a link to a recording via PM, if you'd like.

    -E

  3. #3
    Join Date
    2019-07-12
    Posts
    6
    Rep Power
    0

    Default Re: Upgrade to 80.40

    Thank you very much for the feedback! If you would please be willing to send a link to your webinar to me in a PM, I'd love to see it! At this time, I am looking to perform an in-place upgrade of two management devices and logging device from 80.20.

  4. #4
    Join Date
    2007-03-30
    Location
    DFW, TX
    Posts
    342
    Rep Power
    14

    Default Re: Upgrade to 80.40

    I upgraded my personal 2200 from R80.20 to R80.40 over the weekend. It has a 1.8 GHz dual-core processor, 4 GB of RAM, and a SATA SSD. Except for the SSD, it's pretty close to a worst-case scenario.

    All told, the upgrade took something like six hours, processor-bound. Memory consumption is up a hair, but not significantly. I wound up with kernel 3.10 and ext3 filesystems. I gather a clean install gives you xfs filesystems, which allows for larger volumes (potentially important for log servers).

    It looks like VSX has probably moved from VRFs to network namespaces. This system only has VRF/NetNS 0, but I only see network namespaces, and no entries in /proc for VRFs.

  5. #5
    Join Date
    2014-09-02
    Posts
    366
    Rep Power
    10

    Default Re: Upgrade to 80.40

    Quote Originally Posted by TheDroppedPacket View Post
    Thank you very much for the feedback! If you would please be willing to send a link to your webinar to me in a PM, I'd love to see it! At this time, I am looking to perform an in-place upgrade of two management devices and logging device from 80.20.
    Info sent.

    If you're only upgrading management devices, then definitely go for it. As always, just make sure you have [good] backups first - and take snapshots.

    -E

  6. #6
    Join Date
    2019-07-12
    Posts
    6
    Rep Power
    0

    Default Re: Upgrade to 80.40

    With the kernel changes and the partition changes that come with 80.40 (which I learned about in Eric's webinar), I was going to ask if there were any "gotchas" with an in-place upgrade. I am assuming the kernel will be upgraded in my case but the partitions will remain the same. (?) I really appreciate the feedback!

  7. #7
    Join Date
    2007-03-30
    Location
    DFW, TX
    Posts
    342
    Rep Power
    14

    Default Re: Upgrade to 80.40

    That would be my expectation. Kernels are easy to swap. It’s a single binary image stored on the disk. Point to a new one, done.

    Filesystems are much harder to swap (though not impossible; Apple recently replaced HFS+ with APFS on almost all devices with an OS update). They’re a big tree of pointers to individual blocks on disk, and most write the tree in subtly different ways. New filesystems are generally reserved for completely clean installations of an OS.

Similar Threads

  1. Time to upgrade! I am available for contracts to upgrade your Check Point Software.
    By security4it in forum Employment/Consulting Opportunities For Check Point Administrators
    Replies: 0
    Last Post: 2015-10-04, 12:58
  2. r65.70 upgrade --> r71.10 full connectivity upgrade issues
    By lordbigsack in forum Installing And Upgrading
    Replies: 1
    Last Post: 2012-01-13, 12:55
  3. Delayed R60 gateway upgrade after mangement/gateway combo upgrade to R75
    By netstorm in forum Security Management Server (Formerly SmartCenter Server ((Formerly Management Server))
    Replies: 3
    Last Post: 2012-01-05, 09:41
  4. licence upgrade and hardware upgrade
    By symon in forum Licensing
    Replies: 5
    Last Post: 2011-01-21, 05:00
  5. R65 to R70 Upgrade Failure - Patch upgrade failed
    By Felix001 in forum Installing And Upgrading
    Replies: 8
    Last Post: 2010-05-28, 13:43

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •