R60 to R65 licence concerns

[chickey]

Hi Guys,
I'm upgrading our management station from R60 to R65 but my enforcement modules are still in a mixture of R60 and R55(IPSO 3.8).

It's been working fine in this fashion but i want to upgrade the management station to R65 and then upgrade the enforcement modules to R65 next week. I've done an upgrade in a test environment and it went fine but i'm concerned about the licencing. I don't want to upgrade all the licences as i need to be able to push out policicies while the enforcement modules are still on R55.

Should i still be able to manage the R55 firewalls with NG licences from the R65 management server which has an already upgraded NGX license?

Ta
Col.

[lammbo]

Assuming that you use central licensing, all of your licenses that are on the SCS have already been upgraded to NGX licenses when you went to R60.

In theory, the same backwards compatibility packages in R60 are present and functional in R65 as well. It should not be an issue.

Maybe someone else has already been in this situation and confirm it works in real life and not just in theory.

[mcnallym]

In terms of licenseing, R60 and R65 are both NGX so no change required there.

If you still have R55 gateways out there in place then keep the licenses attached to those gateways on NG until you come to upgrade the gateways to NGX, then upgrade the license then.

R55 boxes cannot read NGX licenses so you need to keep NG licenses for the gateways, however you do not need to retain the NG license for the SMARTCenter once that has gone to NGX as it has an NGX license that it uses instead.

You can still manage R55 gateways with R65 Management Server, in fact if you are still stuck on NG FP3 for some gateways then you can manage those as well.

[chickey]

Hi Thanks for the reply. I contacted our vendor and got bot all help unfortunatly. As i'd done a test upgrade and all looked ok i went for it as i still had the original management station to switch back to if worst case it was required.

As it turned out it was extremely smooth, as you mentioned the fact that i'd upgraded the required license files to NGX already i was able to push out a policy no problem after the upgrade.

Time for the enforcement modules now !

Col.

Originally Posted by mcnallym

In terms of licenseing, R60 and R65 are both NGX so no change required there.

If you still have R55 gateways out there in place then keep the licenses attached to those gateways on NG until you come to upgrade the gateways to NGX, then upgrade the license then.

R55 boxes cannot read NGX licenses so you need to keep NG licenses for the gateways, however you do not need to retain the NG license for the SMARTCenter once that has gone to NGX as it has an NGX license that it uses instead.

You can still manage R55 gateways with R65 Management Server, in fact if you are still stuck on NG FP3 for some gateways then you can manage those as well.