CloudGuard Controller Release Updates

Introduction

CloudGuard Controller manages security in public and on-premises environments with one unified management solution.

The CloudGuard Controller dynamically learns about objects and attributes in Data Centers, such as changes in subnets, security groups, virtual machines, IP addresses and tags.

After using the vendor’s API to establish a trust relationship with a Data Center, CloudGuard Controller regularly checks the connected environments for changes in objects and object attributes used in the Security Policy and automatically push the changes to the Security Gateway.

202511030923001.png)

The CloudGuard Controller package is installed automatically on all relevant Check Point devices when Automatic Update downloads are enabled (see sk175504, section 2-B).

If Automatic Updates are disabled, you must first manually install the latest AutoUpdater Take and then install CloudGuard Controller package manually using the steps below.

Prerequisites

CloudGuard Controller self-updatable package requires Jumbo Hotfix Accumulator installed with the minimum version:

Manual Installation (Offline)

1. Transfer the offline package to the CloudGuard Controller server.

2. Connect to the command line on the CloudGuard Controller server.

3. Log in to the Expert mode.

4. Install the offline package:

   autoupdatercli install <full path to the .tar file>

   Example:

   autoupdatercli install /home/admin/Check_Point_CloudGuard_Controller_R81_20_AutoUpdate_T7_AutoUpdate.tar

5. Make sure the installation completed successfully:

   1. Examine this log file:

      /opt/CPInstLog/AutoUpdateLogs/CloudGuard_Controller

   2. Run:

      cpinfo -y CPUpdates 2>&1 | grep CLOUDGUARD_CONTROLLER The take number in the output must be the Take that you installed.

Note - The installation does not require cpstop; cpstart or a reboot. Once installed, no further action is required, the update will be applied immediately.

Important Notes for Security Management / Multi-Domain Security Server (MDS) in the High Availability mode:

• We recommend installing the CloudGuard Controller package on all servers in the Management High Availability environment in the same session - one after the other, so that all servers use the same package Take.

• At the end of the installation, we recommend to make sure that all servers in the Management High Availability environment use the same package Take. Run this command on each server with CloudGuard Controller package installed:

  cpinfo -y CPUpdates 2>&1 | grep CLOUDGUARD_CONTROLLER

Availability

Documentation

• R82.10 CloudGuard Controller Administration Guide

• R82 CloudGuard Controller Administration Guide

• R81.20 CloudGuard Controller Administration Guide

List of Resolved Issues and New Features per CloudGuard Controller Update

R82.10 Release

R82 Release

Installation Troubleshooting

These issues can rise when running the installation package:

• Issue 1: "A version of CloudGuard Controller bundle is already installed via AutoUpdater."

Solution: CloudGuard Controller bundle has already been installed for the first time and is configured to receive updates automatically. If you have no Internet access, follow the instructions for "Offline Package Installation Procedure" in the Installation Instructions section above.

• Issue 2: How to return to previous version of CloudGuard Controller package.

Solution: We highly recommend to use the latest take of CloudGuard Controller package. If you still want to revert to the previous Take:

1. Connect to the command line on the CloudGuard Controller server.
2. Log in to the Expert mode.
3. Revert the package to the previous Take: autoupdatercli revert CloudGuard_Controller The revert takes up to 1 minute.
4. Make sure CloudGuard Controller Bundle was reverted to the previous Take:
   1. Run: cpinfo -y CPUpdates 2>&1 | grep CLOUDGUARD_CONTROLLER The Take number in the output must be the one to which you reverted.
   2. Examine this log file: /opt/CPInstLog/AutoUpdateLogs/CloudGuard_Controller

Notes:

• CloudGuard Controller package is upgraded automatically each time a new take is released.
• You can safely revert to the previous Take. However, if you attempt to revert to any Take older than the previous one, the CloudGuard Controller server will reset completely to its initial installation state.

• Issue 3: How to totally remove CloudGuard Controller package

Solution:

1. Connect to the command line on the CloudGuard Controller server.
2. Log in to the Expert mode.
3. Remove the package: autoupdatercli revert-completely CloudGuard_Controller The revert takes up to one minute.
4. Make sure the CloudGuard Controller package was removed:
   1. Run: cpinfo -y CPUpdates 2>&1 | grep CLOUDGUARD_CONTROLLER
   2. Examine this log file: /opt/CPInstLog/AutoUpdateLogs/CloudGuard_Controller

• Issue 4: How to stop receiving future updates of CloudGuard Controller package

Solution:

1. Connect to the command line on the CloudGuard Controller server.
2. Log in to the Expert mode.
3. Run: autoupdatercli disable CloudGuard_Controller

• Issue 5: R81.10 Management Server does not get the latest CloudGuard Controller package

Symptoms:

1. This error shows in the /opt/CPInstLog/Autoupdater.log file: Problem with local certificate Error code: 10 ...Abandoned file removed from the system ...Failed to download metadata package for component auto_updater Solution: Refer to sk184474.

For additional troubleshooting instructions, refer to the sk115657 - ATRG: CloudGuard Controller.
If your issue is not resolved by one of the above solutions, contact Check Point Support and attach the /opt/CPInstLog/AutoUpdateLogs/CloudGuard_Controller log file.

Article Properties

Access Level: General

Status: Approved

Date Created: 2023-12-26

Last Modified: 2026-07-19