Upgrading from Windows R55 to Solaris R60

[rbarce]

Hi,

We upgraded our management module from windows R55 to solaris R60. We have successfully exported the objects from windows R55 and imported it to solaris R60. However we can not push the policy and the error we are getting is

c1-fw-ha NG AI Advanced Security Reason: Load on Module failed - failed to load Security Policy. ( message from member c1-fw2 )
c1-fw-ha NG AI Advanced Security Reason: Load on Module failed - failed to load Security Policy. ( message from member c1-fw1 )

our firewalls are still R55.

Anyhelp is highly appreciated.

Thanks

[kva.kva]

Check SIC status and try to unload policy (fw unloadlocal) on modules before loading new policy.

[kai11]

I have the same Problem. New Management on NGX-R61 (with trial-licence) , enforcement Module on NG-R55, with NG-licences.

Writing back the policy ends with errors:
FW-1: Warning: No valid license
VPN-1: ERROR: No license for encryption

Could it be a licence issue?

[kva.kva]

kai11
I have the same Problem. New Management on NGX-R61 (with trial-licence) , enforcement Module on NG-R55, with NG-licences.

Writing back the policy ends with errors:
FW-1: Warning: No valid license
VPN-1: ERROR: No license for encryption

Could it be a licence issue?

May be if you have SC NGX version and license is central (license for IP SC), you would need central license's version for module same as version your SC.
It's my guess.

[rbarce]

Originally Posted by kva.kva

Check SIC status and try to unload policy (fw unloadlocal) on modules before loading new policy.

sic is okay, policy still fails after unloading policy from the firewall.. :(

the error is


Gateway: c1-fw2, Interface: eth-s1p1c0
Standard.W: Security Policy Script generated into Standard.pf
Standard:
Compiled OK.
Installing VPN-1/FireWall-1 policy on: c1-fw-ha ...
VPN-1/FireWall-1 policy installation failed for Module c1-fw1 (member of c1-fw-ha)...
Reason: Load on Module failed - failed to load Security Policy.
VPN-1/FireWall-1 policy installation failed for Module c1-fw2 (member of c1-fw-ha)...
Reason: Load on Module failed - failed to load Security Policy.

VPN-1/FireWall-1 policy Installation for all modules of cluster c1-fw-ha was stopped.
VPN-1/FireWall-1 policy installation failed for:
c1-fw1 (member of c1-fw-ha) c1-fw2 (member of c1-fw-ha)

[mmoret]

Have you installed the Backward compatibility package on the management station?

Regards
Martijn

[rbarce]

Yes it was installed automatically.

We are still stuck :(