Installing and Uninstalling a Hotfix on Maestro Security Appliances
Check Point Maestro R80.20SP Administration Guide | 190
Installing and Uninstalling a Hotfix on Maestro
Security Appliances
In This Section:
This section describes the Full Connectivity installation and uninstall of an Offline CPUSE package.
Installing a Hotfix Package
Important:
n
It is
not supported to upgrade the CPUSE Agent on Maestro Security
Appliances.
n
For the
CPUSE
instructions, see
n
This procedure applies to Security Groups in both Security Gateway and VSX
mode.
In VSX mode, you must run all the commands in the context of VS0.
n
This procedure keeps the current connections.
n
Do
not
install the hotfix on all the Security Appliances in a specific Security Group
at the same time.
n
With this procedure, you install the hotfix on half of the Security Appliances at
one time.
The other half of the Security Appliances continues to handle traffic.
You divide all Security Appliances in a specific Security Group into two logical
groups - denoted below as "
A
" and "
B
".
1.
You install the hotfix on the Security Appliances in the Logical Group
A
through a Security Appliance in the Logical Group
A
.
Connect to that Security Appliance over a serial console.
2.
You install the hotfix on the Security Appliances in the Logical Group
B
through a Security Appliance in the Logical Group
B
.
Connect to that Security Appliance over a serial console.
Installation Procedure
1.
Perform the preliminary steps
For Offline CPUSE packages
Follow these steps if Security Appliances are
not
connected to the Internet or cannot reach
Check Point Cloud.
Step
Instructions
A
Make sure you have the applicable CPUSE Offline package (TGZ file) / exported
package (TAR file).
