Yet another R55 to R60 question.

[chickey]

Hi Guys sorry for another question regarding question re NGX updating but i'm planning on doing it tomorrow so wana get confirmation regarding the licences.

I have 3 enforcement modules running ipso 3.8 and NG_AI_R55 which i intended to leave for the moment. I have a Management server running on windows and version NG_AI_R55 of smartcenter. I want to upgrade the mangement station only but i'm concerned that if i run the licence upgrade tool it'll upgrade all the licences in the smart center repository and i won't be able to push out a policy to the enforcement modules. Is there a way i can only upgrade the smartcenter licence without touching the other licences or am i reading things wrong and i can just upgrade them all and still be able to push out a policy to the firewalls.

Thanks
Col

[RayPesek]

Check the upgrade guide. I'm pretty sure it says that you need to upgrade all of the licenses at one time. It will generate messages about a possible incompatibility between the licenses but they still work fine.

Ray

[northlandboy]

If I was you, I would just manually upgrade the SC license myself in UserCenter.

I wouldn't bother with the license upgrade tool for just one license. For that matter, I'm almost always working in places where the mgmt server can't connect to the Internet, so there's not much point mucking around with trying to copy files to other systems, etc...

After upgrade, you should still see your NG-level licenses there.

Note that since the modules are still running NG, they need to have NG-level licenses. They won't recognise NGX licenses until they are also NGX. Only the mgmt license actually needs to be upgraded at this point.

[chickey]

Thanks for the input guys, i upgraded just the smart center license manually as recommended and put it in the repository before upgrading. I then did an inplace upgrade choosing not to upgrade the licenses automatically and it installed fine. The only changes i had to make were to upgrade the secureclient license to NGX as thats local to the FW manaement server and also had to disable the SNMP service before it would let the install run as it updates some files which SNMP uses.

Thanks for the advice, i just need to upgrade IPSO and the packages on the other 3 firewalls now :)

Thanks
Col