Big Jump from R55 to R65 ?

[linkstate]

Hi there guys,

I have an old (but stable) R55 on SPLAT 2.6 (if i can remember at the moment) and my manager wants to upgrade it to R65.

Can I just download the R65 packages from Checkpoint and start installating like mad or do you advise me to take some precautionary considerations ?

I know Checkpoint supports direct upgrade to R65 but that still scares me a little bit you know ...

Would like to hear your opinion.

Best Regards,

Linkstate

[northlandboy]

You'll probably be SPLAT 2.4.

Yes you can upgrade directly. It's a good thing to upgrade, since R55 is either unsupported or about to be very shortly unsupported (think they may have extended the support timeframe).

You'll want to have a backup of your existing system first, that you know you can restore from, but you should have that anyway, right?

You'll also need to upgrade your license to an NGX license.

[cciesec2006]

Originally Posted by northlandboy

You'll probably be SPLAT 2.4.

Yes you can upgrade directly. It's a good thing to upgrade, since R55 is either unsupported or about to be very shortly unsupported (think they may have extended the support timeframe).

You'll want to have a backup of your existing system first, that you know you can restore from, but you should have that anyway, right?

You'll also need to upgrade your license to an NGX license.

having been doing upgrade from NG with AI R55 to NGx R65 for the past 4 months,
I can offer the following advices:

- if you run both management server and enforcement module on the same machine,
the best way to do this is upgrade_export. Make sure the machine has identical
hostname, IP addresses as the old one,

- if you have run management server and enforcement module on different machine,
use upgrade_export on the management server. Just rebuild the enforcement module
and re-SIC with the management server.

Make sure you use the latest upgrade_export utility from Checkpoint or you will
have trouble with the upgrade_import,

DO NOT DO IN-LINE UPGRADE. IT WILL CREATE A LOT OF TROUBLE. upgrade_export
and upgrade_import are designed specifically for this, aside from backing up
the system. It has proven time and time again.

You need to have the NGx license ready as well.

[hotice_]

The only issues I've had in the past was exactly the database export utility.

Even with the latest one, I couldn't export and import cleanly without errors.

What I did was set up a VM with NGX R60 then went incremently.

Export NG 55, Import into NGX R60
Export NGX 60, Import into NGX R65...