migration of IP530 to IP560.

[ideasunlmtd]

We are in the process of the migration of the F/W (Nokia) box from IP 530 to IP 560.



Activity



1) Need to migrate the F/W (Nokia) box from IP 530 to IP 560.

2) The existing configuration has to be uploaded to IP 560.

3) New management server has to be configured with NGX R60 (The existing SC is R55).

4) The Existing R55 configuration has to be uploaded to the new SC.



We have installed new SC with R60 and the R55 configuration has been uploaded successfully.

Installed the R60 Rapper in Nokia IP560 and the configuration has been uploaded successfully. The interface and the VRRP (Legacy, monitoring circuit) have been reconfigured as the physical interfaces for both IP560 and IP530 are different. In checkpoint SC both the gateways are the member of the Nokia cluster.



We are able to establish the SIC between SC and both the gateways (Even we are able to access the Voyager from SC). While pushing the policy (the local Default filters in both gateways are removed) for 1 F/W we are getting the error as Installation failed, Reason: Load on module failed remote connection closed (Kindly find the attachment). For the other F/W we are able to push the policy.



When we try to fetch the policy from the F/W it gives the error the error “SIC name doesn’t match-policy fetch failed”. The patches installed were VPN-1 Pro NGX R60 in both SC and the gateway. We have installed the HFA” VPN-1_R60_HFA_05_wrapper.ipso” in both the gateways (this is not installed in SC as this is giving some problem while installing)



As per some forum it was told to check the Policy Name/DB version/ Special characters has been taken care ( We have tried to install a new policy which has Implied rule and an any to any allowed rule) But still the error continues.



We have tried to install the HFA vpn1_HOTFIX1_R60_ipso in Gateways which says the SIS issue will be resolved but on nokia we are not able to install the same (We are able to install the same in windows). We have installed the demo mode for all these activity and now 7 more days to go in same setup.