Install Smartcenter R61 on solaris

[antonyso88]

Hi all,

I've installed a smartcenter in R61 on solaris box. After finished installation, i found there is not any FWDIR environment in the root account. Any idea? Moreover, how can i uninstall the software as i can't read any information from the checkpoint document?

[antonyso88]

I have some updated information...

I found all CheckPoint Environment Variable not exist. E.g. CPDIR, FWDIR, etc. Such that every command i given (e.g. cpconfig) always said not found.

Is it the environment need to input manually? Why i can't get the information from the checkpoint document?

[northlandboy]

Possibly you're using a non-standard shell.

. /opt/CPshrd-R61/tmp/.CPprofile.sh should be added to /.profile

Add it if it's not already there, or put it in /.bashrc if you use bash.

[antonyso88]

Thanks for your information. The problem is solved. I have got another problem.

I just success to import the NG FP2 objects, policy into my new R61 smartcenter with different IP address in using upgrade_export/import. What's the next step? Shall i create a new primary management object (i have secondary server) and delete the old management object? Any other issue to notify? I am very worry after i delete the old management object, i can't get back all my hundreds of policy and thousands of objects.

Any clue from checkpoint support?


My current environment
(Production Site) (Solaris) FW1+FW2(Not HA but same policy and setting) <-- (Solaris) Primary + Secondary SMARTCENTER
(DR Site) (Solaris) FW3 (Same policy as FW1 & FW2) <-- Primary + Secondary SMARTCENTER

New Environment
(Production Site) (Nokia IP390) FW1+FW2(HA) <-- (New Solaris Box) Primary + Secondary SMARTCENTER with different IP compare with current environment
(DR Site) (Nokia IP390) FW3 (Same policy as FW1 & FW2) <-- Primary + Secondary SMARTCENTER

2 Phases.
1st Phase -- Migrate Production site. That's what i am working
2nd Phase -- Migrate DR site.

[northlandboy]

Originally Posted by antonyso88

Any clue from checkpoint support?

You do realise we're not Check Point support? That's what your support contract is for.

Did you do an export from a secondary SmartCenter?

You can't just create a new primary mgmt.

Why not do the export from the primary mgmt, restore from that onto the system with new IP address. Build a new secondary mgmt, and sync it with the new primary.

Having primary/secondary mgmt servers at both sites is massive overkill.

Having primary & secondary mgmt servers for a standalone firewall seems particularly wasteful.

What's more important, mgmt or enforcement?

Oh well, if you want to spring for the hardware and licensing, good luck.

Personally I'd rather have a cluster for enforcement, and do backups of my mgmt station. Restore doesn't take long afterall

[antonyso88]

Thanks for your information.

My both sites is using same Primary & secondary management server.

I import the policy from my primary management server. I am now thinking to modify the primary management server object into new IP and new hostname. Is it possible?