CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Disaster Recovery
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-10-27
Senior Member
 
Join Date: 2006-01-25
Posts: 926
Rep Power: 3
melipla has an average reputation (10+)
Default Restore procedure question

Hi,

I have a quesiton about restoring a backup. Currently the basic steps I have are:

Install SPLAT.
sysconfig -> install products -> reboot
Install HFA -> reboot
Restore backup -> reboot.

My question is, do I need to install the HFA or is the HFA contained in the backup?

Thanks
__________________
Its all in the documentation.
Reply With Quote
  #2 (permalink)  
Old 2006-10-27
Senior Member
 
Join Date: 2006-01-26
Location: Moscow, Russia
Posts: 706
Rep Power: 3
kva.kva has an average reputation (10+)
Default Re: Restore procedure question

If you use backup/restore commands, imho better after installation CP apply HFA which was installed on system before backup, restore from backup and then apply last HFA.

Last edited by kva.kva; 2006-10-27 at 13:06.
Reply With Quote
  #3 (permalink)  
Old 2006-10-27
Senior Member
 
Join Date: 2006-01-25
Posts: 926
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Restore procedure question

Quote:
Originally Posted by kva.kva View Post
If you use backup/restore commands, imho better after installation CP apply HFA which was installed on system before backup, restore from backup and then apply last HFA.
Hmm. Well I ask because if I skip over the HFA installation, and just do the restore, when the firewall comes back up, a cp ver -k will report that an HFA is installed....so I wanted to know if that was the case or not.

I've been installing the same HFA that the backup was taken with "just in case", but it adds a lot of time to a recovery procedure...if its unnecessary then I'd like to skip it and save myself the time.

As for applying the latest HFA ...well I don't want to complicate the "recovery" by adding an unknown, so that's why I left that out.

Thanks.
__________________
Its all in the documentation.

Last edited by melipla; 2006-10-27 at 13:31.
Reply With Quote
  #4 (permalink)  
Old 2006-10-27
Senior Member
 
Join Date: 2006-07-28
Location: New Zealand
Posts: 857
Rep Power: 3
northlandboy has an average reputation (10+)
Default Re: Restore procedure question

You must install the same HFA as you previously had. The reason that the version check commands report the HFA installed is because it's included in the dynamic data, which is restored from a backup. However, the binaries in $FWDIR/bin have not been updated. So while it may report that it has been updated, it will not have been.

For a different take on it, consider what happens with the Nokia flash-based platforms. With those, you can just replace the package file under /opt/packages/installed with one from a system that has the HFA installed - but then it will report that it doesn't have the HFA installed, even though it will actually be running the newer code.

Try running some of the other commands, like cpshared_ver, to pick up on the differences.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 06:11.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0