[chillyjim]

Did you see this one?

Symptoms

* The upgrade_export command fails following the upgrade to HFA_01 of NGX R60
* Upon launching the command, the following error message is displayed: "The procedure entry point CPPROD_SetHFSilentUninstall could not be located in the dynamic link library cpprod50.dll"
* Upon pressing the OK button of the error message window, a subsequent error message is displayed: "Error: FWDIR key is not define. Please fix it and try again"

Cause
The SmartCenter Server, residing on a Windows 2003 server, was upgraded from NGX R60 to HFA_01 of NGX R60. The SNMP daemon process remained running during this upgrade and had already locked the cpprod50.dll dynamic link library (dll) file. Consequently, this dll file could not be replaced with the newer one.
NOTE: This issue was only reported on Windows 2003 servers.
Solution
There are 2 available options to resolve the issue:
# Option 1 - Replace the existing cpprod50.dll file with the NGX R60 HFA_01 file version:

1. Obtain the needed cpprod50.dll file from the Check Point Download Center. Save the file to the SmartCenter Server host


2. Go to the "Program Files"\CheckPoint\CPShared\R60\lib\ directory and backup the existing cpprod50.dll file to a file named cpprod50.dll.r60bkp


3. Stop the SNMP process that is running on the SmartCenter Server host:

* Select Start menu > Settings > Control Panel > Administrative Tools > Services tool


* In the Services (Local) window, locate and select the SNMP service


* In the General tab, go to the Service status section (Service status displays as "Started"). Select the "Stop" button and then select the "OK" button
4. In this directory, replace the existing cpprod50.dll file with the downloaded, NGX R60 HFA_01 version of this file


5. Re-start the SNMP process on the SmartCenter Server host:
* Select Start menu > Settings > Control Panel > Administrative Tools > Services tool


* In the Services (Local) window, locate and select the SNMP service


* In the General tab, go to the Service status section (Service status displays as "Stopped"). Select the "Start" button and then select the "OK" button

# Option 2 - Re-perform the upgrade to HFA_01 of NGX R60:

1. Follow the installation guide procedure to uninstall HFA_01 of NGX R60 from the SmartCenter Server host


2. Reboot the SmartCenter Server host


3. Stop the SNMP process that is running on the SmartCenter Server host:

* Select Start menu > Settings > Control Panel > Administrative Tools > Services tool


* In the Services (Local) window, locate and select the SNMP service


* In the General tab, go to the Service status section (Service status displays as "Started"). Select the "Stop" button and then select the "OK" button

4. Follow the installation guide procedure to install HFA_01 of NGX R60

Check Point recommends implementing option 2, due to the concern that there may be other dll files which were locked during the initial upgrade and, therefore, not replaced.
NOTE: Starting with HFA_02 of NGX R60, Check Point will incorporate an upgrade process mechanism that will not allow the upgrade process to continue, if it identifies that certain processes are running. In such a case, the upgrade process will guide the security administrator to stop these processes before proceeding with the upgrade.