Check Point – VSX Upgrade

Note to my self. Since i am not dealing with VSX Systems that often, please be reminded.

When dealing with VSX Gateways/Clusters to finalize the upgrade the SMS needs to Upgrade the VSX Objects in the SMS Database.

[Expert@CheckPointSMS:0]# vsx_util upgrade

******************************************************************************************
* Note: the operation you are about to perform changes the information in the management *
* database. Back up the database before continuing.                                      *
******************************************************************************************

Enter Security Management Server/main Domain Management Server IP address (Hit 'ENTER' for 'localhost'):
Enter Administrator Name: preussp
Enter Administrator Password:
Select VSX gateway/cluster object name:
  1)    CPVSXCLUSTER
Select: 1


You are about to change VSX version, please read sk97552.
Are you sure you want to continue [y/n]? y
Please select a version:
  1)    R81.20
Selected version: 1
Initializing VSLS groups
---- Starting change version operation...
        Starting upgrade operation for CPVSXCLUSTER
                Updating database
                Updating database succeeded
                Starting Policy compilation
                Policy compiled successfully
        Starting upgrade operation for VSX-FW-1
                Updating database
                Updating database succeeded
                Starting Policy compilation
                Policy compiled successfully
        Starting upgrade operation for VSX-FW-2
                Updating database
                Updating database succeeded
                Starting Policy compilation
                Policy compiled successfully
        Starting upgrade operation for VSX-FW-3
                Updating database
                Updating database succeeded
                Starting Policy compilation
                Policy compiled successfully
        Starting validation
                Validating CPVSXCLUSTER
                Validating policy failed!!
        **** Validation failed for CPVSXCLUSTER
        **** See sk179591.
        **** For further assistance contact Check Point Support.
                Validating VSX-FW-1
                Validating VSX-FW-2
                Validating VSX-FW-3
---- Finished upgrade operation.
**** Failed upgrading virtual devices.
---- Regenerating VSs
---- Finished VSs regeneration.



Database saved successfully.


===================== SUMMARY =====================
**** Upgrade operation finished with errors.
**** Please resolve errors above.
**** NOTE: If gateway/cluster member was upgraded using clean installation, run 'vsx_util upgrade' again in order to complete the operation.

Logging details are available at /opt/CPsuite-R81.20/fw1/log/vsx_util_upgrade_20240605_07_56.elg