CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-02-28
Junior Member
 
Join Date: 2006-06-13
Location: Netherlands
Posts: 26
Rep Power: 0
efdsa has an average reputation (10+)
Default export from 4.1 to R61

Hi,
We have a prehistoric 4.1 fw (with local management) on windows. I need to export the policies and objects to an R61 (secure platform) managementserver. Is there a (n easy) way to achieve this. It contains hundreds of objects an numurous rules so I don't like the idea to manually rebuild everything.
Thanks!
Cheers.
Ed
Reply With Quote
  #2 (permalink)  
Old 2007-02-28
Senior Member
 
Join Date: 2006-04-27
Location: Twillight zone
Posts: 464
Rep Power: 3
abusharif has an average reputation (10+)
Default Re: export from 4.1 to R61

step in upgrading there i think is 4.1->NG->r54->R61.
You can also see ofiller/odumper tools which can be found at http://www.cpug.org/check_point_resources.htm
Reply With Quote
  #3 (permalink)  
Old 2007-03-01
Junior Member
 
Join Date: 2006-06-13
Location: Netherlands
Posts: 26
Rep Power: 0
efdsa has an average reputation (10+)
Default Re: export from 4.1 to R61

Hi,
The situation is different as it seems (perhaps easier). The 4.1 gateway and mngt are seperate. So the question is, can I easily upgrade the mngt server from 4.1 to R55 (windows NT). Just run the CD setup? Or are there other steps I need to think about? Thanks guys.
Cheers.
Ed
Reply With Quote
  #4 (permalink)  
Old 2007-03-01
Senior Member
 
Join Date: 2006-06-08
Location: UK
Posts: 149
Rep Power: 3
Joncon has an average reputation (10+)
Default Re: export from 4.1 to R61

No doubt it can be done but I certainly wouldn't say it would be easy. 2 things to consider:-

1. Why not build an NGX box from scratch. It will most probably be quicker than the numerous upgrade steps (and upgrade_export / upgrade_import) you will have to do to get updated from 4.1. Additionally you will have a 'clean' build.

2. Why do you want to put the management station on NT? Using SPLAT would surely be the obvious (and free) choice?

I would seriously consider starting from scratch and it will also give you the opportunity to get rid of any uneeded / vulnerable rules and configs etc. Just my opinion.

Joncon
Reply With Quote
  #5 (permalink)  
Old 2007-03-01
Senior Member
 
Join Date: 2006-11-23
Posts: 159
Rep Power: 2
antonyso88 has an average reputation (10+)
Default Re: export from 4.1 to R61

4.1 can't directly upgrade to R61.

You must consider upgrade 4.1 into NG first then upgrade to R61.

Also, for your situation. I recommend you build the management on a new server. It's because the hardware and software requirement is different. And same reason for the gateway.

I've experience upgrade NG FP2 into R61. Don't worry. It's working fine and no problem. Let us know if you have any other problems.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:21.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0