While in the WebUI on the management station, we did the upgrade from there. Upgrade took a little time, and then a reboot. When the reboot happened, it never came up. We went down to the datacenter and consoled into the box and sure enough, it was hanging up. So, we searched on a check point forum and found that one guy had actually run into this. Check Point didnt know what to do with this either, and while we were in somewhat of panic mode, we found this guys post and tried it out.
While consoled in, we booted up in maintenance mode. That means stopping the normal boot process and pressing "any key" to go into the menu options. Select "maintenance mode" and let it boot from there, which it did. Then the forum told us to edit the file /boot/grub/grub.conf . That meant to me using VI Editor, which I am almost clueless to. However, I did know enough to do the job. This file was missing 2 lines :
This is a small secction of what the file looked like AFTER THE UPGRADE, and BEFORE I EDITED IT:
------EXTRACT /boot/grub/grub.conf BEFORE-------
password --md5
splashimage=(hd0,0)/grub/splash.xpm.gz
kernel /vmlinuz ro root=/dev/mapper/vg_splat-lv_current vmalloc=256M p
anic=15 console=SERIAL 3 quiet
initrd /initrd
title Start in maintenance mode
lock
root (hd0,0)
------------------------------------------------
With what you see above, it wouldnt start in "Normal mode". So, below is what I had to do to get this going. I did the "vi /boot/grub/grub.conf" command, it opened the file, arrowed down under the "splashimage=....." line, and pressed "i" to insert characters. I put the next two lines in: "title Start in normal mode" and "root (hd0,0)". See below.
password --md5
splashimage=(hd0,0)/grub/splash.xpm.gz
title Start in normal mode
root (hd0,0)
kernel /vmlinuz ro root=/dev/mapper/vg_splat-lv_current vmalloc=256M p
anic=15 console=SERIAL 3 quiet
initrd /initrd
title Start in maintenance mode
lock
root (hd0,0)
------------------------------------------------
To finally get out of VI, I hit the "ESC" key, then ":wq". Im not sure what the colon means, but w means write (to save) and q means quit.
Then, I rebooted the management station and it came up with R75.20 just fine.
Funny enough, when we did upgrade the enforcement modules later on, we had to do the same thing on both of them. I still dont know why and Check Point TAC didnt seem to know either. Either way, fixed and upgraded.