 Re: R55 to R60 Advice
Random thoughts:
* Why not go to R61, rather than R60?
* What version are your Edge devices? I think there can be problems if they are pre-5.0.
* Check the release notes. On page 18 of the R61 release notes, there is this section:
"After upgrading a pre-NGX SmartCenter Server to NGX, existing VPN connections will be dropped the first time policy is installed if the enforcement modules are not also upgraded to NGX. New connections will succeed as expected. For connections with static source-destination ports (for example, GRE connections), reinitialize them by running cpstop/cpstart on the module."
From memory, this also applies to R60.
* What behaviour did you see with your VPNs? What were your logs telling you? What happened when you tried to initiate traffic? Error messages? Did they even try to form a tunnel? |