R55 -> R62 upgrade: can't load policys

[Reaper]

I just finished testing R55 -> R62 upgrade in isolated test network. All worked fine. But when I tried it in live network, I run into trouble. After connecting new management server system works, but policy load from dashboard fails.

Server is R62 on Red Hat. Gateways are R55 on IPSO. The message i get in dashboard after trying to load policys:

Installation Targets Version Policy Type Details

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/lib/asm_dynamic_props.def", line 51: ERROR: cannot find <ADP_MSRPC_OVR_CIFS_MATCH_C2S> anywhere

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/lib/base.def", line 688: ERROR: cannot find <ADP_MSRPC_OVR_CIFS_MATCH> anywhere

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/lib/crypt.def", line 63: ERROR: unknown macro or function <RECORD_CONN_EX>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/lib/crypt.def", line 236: ERROR: unknown macro or function <RECORD_CONN_EX>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/lib/crypt.def", line 249: ERROR: unknown macro or function <RECORD_CONN_EX>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/lib/base.def", line 2743: ERROR: unknown macro or function <USER_PASS_CONNECTION>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/lib/base.def", line 2760: ERROR: unknown macro or function <USER_PASS_CONNECTION_SCV>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/lib/base.def", line 2859: ERROR: unknown macro or function <RECORD_CONN_EX>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: unknown macro or function <RECORD_CONN>

some.gateway.name NG AI Advanced Security "/opt/CPngcmp-R62/conf/Standard.pf", line 22696: ERROR: syntax error

some.gateway.name NG AI Advanced Security Compilation failed.

some.gateway.name NG AI Advanced Security Operation ended with errors.


I checked that /opt/CPngcmp-R62/lib/asm_dynamic_props.def is located on server, not gateway. So the problem must be there... I just wonder what i did wrong this time.

[kva.kva]

Before policy installation try to update SmartDefence
(problem like yours - http://secureknowledge.checkpoint.co...do?lid=sk32207)

[Reaper]

But I ma not using SmartDefense, only VPN. And the management server does not have access to public internet, how could the update take place?

I just tried - the same management server that did not work in live system works fine in isolated test network (policy loading successful). I am really confused.

[kva.kva]

I don't find asm_dynamic_props.def on my R62 (with updated SmartDefence). May be programmers decide to delete it and include to base.def file (I found some strings begining from "#include asm_dynamic_props.def")

[Reaper]

Ok, got it working. I did 2 things - downloaded latest upgrade export and import tools from CP site and installed CP on new Management server from scratch, using exported configuration. Previously i just used upgrade_import, did not reinstall CP packages.

Anyway, one of those things did help, i just don't know which one. I can install policys now, so case closed.