Please help! Upgrading/Replacing Firewall-1 3.0b to/with NG

[Power_byte2002]

Hi,

We are using now FW-1 v. 3.0b (CPFW-FIG-250) on WindowsNT 4.0 and want to replace the whole system with Win2K3 and FW-1 NG (CPFW-FIG-100-NG or CPXP-SC1-50-NG). Could you please give me info for following questions:

1. Is it possible to install Firewall-1 version 3.0b in Windows2000 or Win2K3?
2. Is it possible to upgrade Firewall-1 3.0b to NG?
3. How can I backup the current rules + network objects in Firewall-1 v. 3.0b?
4. How can I restore the backup above in NG?

Thank you!

[tserreyn]

In order to upgrade you must do a staged upgrade.

3.0 to 4.1 then
4.1 to NG
NG to NGX (if wanted).

You can not directly upgrade the database.

If you are dealing with <100 rules and object, I would just rebuild the thing manually rather than even bothering with the upgrade process.

If you have more, then find someone with upgrade experience willing to help you with this process.

[intehnet]

definately rebuild the whole thing no matter what!
if there is more than 50 rules i'd recommend rebuilding it
if there is less than 50 rules, don't complain, it's small, rebuild it!! :)

moving from 3.0b to NG is a big move, it'd be worth recreating everything from scratch. please don't run 3.0b on a Win2k3 machine! it might work but it's still a very old firewall on what would seem to be a pretty capable machine

[flawless_cowboy]

installing FW-1 on windows, thats crazy talk!!

[thefunkygibbon]

i agree, just start from scratch. it's probably a good time to re-evaluate lots of rules/objects that you may have that are now obsolete,

also: if it must be on a intel server, stick it on secure platform not windows! you'll save yourself a server license and its much more secure and faster!

[intehnet]

Originally Posted by thefunkygibbon

also: if it must be on a intel server, stick it on secure platform not windows! you'll save yourself a server license and its much more secure and faster!

heed this advice.