Tuesday, December 2, 2014

Checkpoint - how to install updates with CPUSE from Gaia CLISH


  1. First update CPUSE software 
    1. Download latest build from Usercenter
    2. Latest build of Check Point CPUSE - Gaia Software Updates(Solution ID: sk98228). At 02 Dic. 2014 build 714 is latest version.
    3. To check the current version of the Gaia Software Updates Agent, run[Expert@HostName]# cpvinfo $DADIR/bin/DAService | grep -E "Build|Minor"
    4. Transfer the updated Gaia Software Updates Agent package (GaiaSoftwareUpdatesAgent_<build>.tgz) to the machine into /tmp/DA.patch directory.
    5. Unpack the Gaia Software Updates Agent package:
    6. [Expert@HostName]# cd /tmp/DA.patch
    7. [Expert@HostName]# tar zxvf GaiaSoftwareUpdatesAgent_<build>.tgz

Install the Gaia Software Updates Agent RPM (starting in Build 553, the currently running agent will be automatically stopped during the RPM installation):


  • $DADIR/stop/dastop
  • dbget installer:stop
  • [Expert@HostName]# rpm -Uhv --force CPda-00-00.i386.rpm
  • Start the Gaia Software Updates Agent:
  • [Expert@HostName]# $DADIR/bin/dastart 


Installation instructions for Hotfixes / Minor version / Major version


  •  Log in to Clish shell.
  •  See the list of available packages for download:
  •  HostName> show installer available_packages 


 Num File Name                                             Type
1   Check_Point_Hotfix_R77_sk101186.tgz                   Hotfix
2   Check_Point_Hotfix_R77_sk100431.tgz                   Hotfix
3   Check_Point_R76_T265.tgz                              Major Version
4   Check_Point_Hotfix_R77_sk100195.tgz                   Hotfix
5   Check_Point_Hotfix_R77_sk98814.tgz                    Hotfix
6   Check_Point_R77_Hotfix_SK97566.tgz                    Hotfix
7   Check_Point_R75.46_Fresh_Install.tgz                  Major Version
8   Check_Point_hotfix_R77_sk96269.tgz                    Hotfix
9   Check_Point_R77_UDP_Hotfix_sk95056.tgz                Wrapper
10  Check_Point_SmartConsole_and_SmartDomain_Manager_R... Wrapper
11  Check_Point_R77.tgz                                   Major Version
12  Check_Point_R75_40VS_T157.tgz                         Major Version
13  Check_Point_Hotfix_R77_sk102673.tgz                   Hotfix
14  Check_Point_Hotfix_R77_sk102989.tgz                   Wrapper
15  Check_Point_R77.10.tgz                                Wrapper
16  Check_Point_R77_R77_20_T124.tgz                       Wrapper



  • Hostname>  installer download 16
  • verify download progress
  • Hostname> show installer  package_status

Check_Point_R77_R77_20_T124.tgz              - Downloading (1.05 MB/s)   - Progress: 92%


  • Hostname>  installer install 16
  • verify installation progress
  • Hostname> show installer  package_status


16  Check_Point_R77_R77_20_T124.tgz        Installing                   (0%)


after installing the upgrade package R77.20 the firewall will automatically reboot

1 comment:

  1. I think that possibly the line $DADIR/stop/dastop should be
    $DADIR/bin/dastop at least on R77.10.
    thanks this was really useful.

    ReplyDelete