Upgrading from R55 to R60 - a few notes

[andrew]

I don't fully understand the difference between Express and Pro, anyway. It'd be pretty poor of Checkpoint to provide something in Express R55, then take it away in an upgrade without any documentation prior to, especially when it has such a negative impact on a site.

I talked to CP licensing and he seemed to think it would be available in Express, although I'm not sure he was completely clear on what I was talking about. What a headache.

Thanks for all of your help!

[andrew]

Well, still no resolution. CP asked for our CPINFO output but I haven't sent it over to them yet. I skimmed the file and it contained tons of log information, like the entries found in the Audit section in Tracker. Then cpinfo output was 17 mgs. Is that normal?

[Sergej]

Originally Posted by andrew

Well, still no resolution. CP asked for our CPINFO output but I haven't sent it over to them yet. I skimmed the file and it contained tons of log information, like the entries found in the Audit section in Tracker. Then cpinfo output was 17 mgs. Is that normal?

It is OK. 17megs is a small CPINFO file.

[Lackie]

It's just a text file, it should zip up nicely. I agree, 17M is small in some cases.

[andrew]

Well, finally, a resolution.

R60 has a pulldown in the FW object that allows you to set the operating system you're running on. My R60 install was set to 'Unknown' for the OS. Since ISP redun requires SPlat, the config tab wasn't there. Setting the OS to SPlat instantly made the redun setting available.

I'd actually seen this pulldown after upgrading, noticed it was Unknown, but didn't include changing it in my troubleshooting.

I looked at our R55 install at there is no place to set the OS, so it doesn't seem like it was a case of the setting failing to carry over, but rather a case that our prior version didn't include it at all.

Any other R55 to R60 upgraders experience an issue with the OS setting? Doesn't seem like you would, since as far I as know ISP redun is the only thing that is OS dependent.

[RayPesek]

FWIW, HFA 03 for NGX was posted today. You might want to peruse the release notes.

Ray

[Sergej]

Originally Posted by andrew

Well, finally, a resolution.

R60 has a pulldown in the FW object that allows you to set the operating system you're running on. My R60 install was set to 'Unknown' for the OS. Since ISP redun requires SPlat, the config tab wasn't there. Setting the OS to SPlat instantly made the redun setting available.

Sorry. It is so trivial for me, that I even did not think you did not set OS on the FW object. :)

Verdict is Checkpoint Express supports IPS redundancy? Correct?

[andrew]

Correct. We're up on R60 with ISP redun.

It also appears that HFA02 resolved our VoIP over VPN issue.

Upgrade complete!

[andrew]

Almost forgot to thank everyone for their input.

Thank you!