Error when applying HFA_0x to early NGX install on IPSO

[tomrowan]

Hi all,

I have a client who was an early adopter of NGX on IPSO 3.9 and I need to upgrade to HFA_03 to fix some issues. The firewall hasn't been touched for 265 days. I've rebooted it on principle.

Problem:
When I try to apply any of the HFA_0x files, I get:

"In order for this package to be installed, VPN-1 Pro/Express NGX R60 needs to be installed first. ..... The package was checked and found not to be suitable for installation !"

Well, that seems fair enough. Only, NGX R60 *is* installed.

fw ver -k:
This is Check Point VPN-1(TM) & FireWall-1(R) NGX (R60) - Build 458
kernel: NGX (R60) - Build 458

Does anyone have either:

a) A mechanism to force the install?
b) any other ideas?

I've noted the SU/cpms utility which seems to have an install option, but I can't work out the command line string.

This problem is true for all HFA files I've tried (01 through 03).

Thanks in advance,

Tom Rowan
CCSE+, Nokia NSA (Instructor)

[donshoutarp]

look in the folder /opt/CPshared/. The "5.0" symlink should point to /opt/CPsuite-R60/svn. (ls -la /opt/CPshared)

If it does not cd to /opt/CPshared and create the link by this command:
ln -s /opt/CPsuite-R60/svn 5.0

I had similar issues and this fixed it.

[Boonsa]

Originally Posted by donshoutarp

If it does not cd to /opt/CPshared and create the link by this command:
ln -s /opt/CPsuite-R60/svn 5.0

Good shout!

I had exactly this problem and your solution fixed it and I was able to install HFA-03 at last! :)

Just to note, my procedure was as above, but:

1. cd /opt
2. no CPshared folder existed
3. mkdir CPshared
4. cd CPshared
5. ln -s /opt/CPsuite-R60/svn 5.0
6. install hfa-03

Many thanks!

John

[thebuffman]

Originally Posted by donshoutarp

look in the folder /opt/CPshared/. The "5.0" symlink should point to /opt/CPsuite-R60/svn. (ls -la /opt/CPshared)

If it does not cd to /opt/CPshared and create the link by this command:
ln -s /opt/CPsuite-R60/svn 5.0

I had similar issues and this fixed it.

I too have to return a thank you for this solution. Thank God for CPUG.ORG cuz Nokia support's reply to this was "are you certain you downloaded the correct upgrade?" What a waste of time.

Kudos to you!