Check Point Upgrade

Upgrade through CLI

Here we have a Security Gateway version R80.40 take 294, we will upgrade this to R81.20 take 634

Installing Deployment Agent

First set the expert password if has not, and then get into expert mode

Run the command below to allow SFTP access through user admin

chsh -s /bin/bash admin

Then copy the Deployment Agent and the Upgrade Image to the /home/admin/ directory

Next untar the Deployment Agent file

tar -zxvf DeploymentAgent_000002429_1.tgz 

Then run the installer

rpm -Uhv --force CPda-00-00.i386.rpm 

The command “rpm -Uhv –force” is used in Linux systems to forcefully upgrade or reinstall a package regardless of its current version or state. It overrides warnings and dependency checks, potentially causing conflicts if not used carefully.

Notice that after the DA installation the DAservice is stopped, to restart the service run this command

$DADIR/bin/dastart

Upgrading OS

Exit the expert mode, then locally import the Upgrade Image with this command

installer import local /home/admin/Check_Point_R81.20_T634_Fresh_Install_and_Upgrade.tar

Next show the imported package

show installer packages imported 

Next verify the package

installer verify 1

Finally run the upgrade

installer upgrade 1

After a reboot, the OS should be successfully upgraded

Upgrade through GUI

Here we have a Management Server running R80.40 take 294, we’ll upgrade this to R81.20 take 634 as well but through GUI

Installing Deployment Agent

On Upgrades » Status and Action, we can see here the Deployment Agent build is 1484

To upgrade the Deployment Agent, click on Install DA then install the package

Now we have Deployment Agent build 2429 installed

Upgrading OS

To upgrade the OS, hit Import Package then import the Upgrade Image

Next verify the imported image

After that, hit upgrade

The upgrade process takes a while and the server will reboots in the middle of it

After it finishes, we can see the version is now on R81.20 take 634 indicating a successfull upgrade