156-215.80 · Question #351
Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?
The correct answer is C. CPUSE offline upgrade. When the management server has no Internet access, CPUSE offline upgrade is the correct method because it uses a locally downloaded upgrade package.
Question
Customer's R80 management server needs to be upgraded to R80.10. What is the best upgrade method when the management server is not connected to the Internet?
Options
- AExport R80 configuration, clean install R80.10 and import the configuration
- BCPUSE online upgrade
- CCPUSE offline upgrade
- DSmartUpdate upgrade
How the community answered
(32 responses)- A6% (2)
- B3% (1)
- C88% (28)
- D3% (1)
Why each option
When the management server has no Internet access, CPUSE offline upgrade is the correct method because it uses a locally downloaded upgrade package.
Export and clean install is a valid fallback but is not the best method - it is more complex, time-consuming, and carries risk of configuration import errors compared to an in-place CPUSE upgrade.
CPUSE online upgrade requires the management server to have direct Internet access to the Check Point cloud repository, which is not available in this scenario.
CPUSE offline upgrade allows administrators to download the upgrade package from the Check Point Support Center on a machine with Internet access, transfer it to the management server, and run the upgrade locally via CPUSE. This is the supported and recommended in-place upgrade path that preserves the existing configuration without requiring Internet connectivity on the target server.
SmartUpdate is used for managing security gateway software packages, not for upgrading the management server itself.
Concept tested: Check Point CPUSE offline management server upgrade
Source: https://support.checkpoint.com/results/sk/sk92449
Topics
Community Discussion
No community discussion yet for this question.