Upgrading from R55 to R65

[Dj_Lien]

I’m doing an upgrade of a Windows (yeah I know….) R55 to SPLAT R65. The plan is to upgrade the Windows box to R65, export/import the objects/rules into the same box after I’ve upgraded it to SPLAT.

I’ve had SPLAT already running on the box fine so I know there is going be any issues with the hardware. I was just wondering is it as easy as, upgrading, exporting & then importing…. Seems a bit too easy..

[RayPesek]

Is the SmartCenter on the firewall or separate?

I'd make an upgrade_export of the R55 box before you start and put it away for safekeeping.

If the SmartCenter is on the firewall, no, it's not quite that easy but close. You need to make sure you know how each interface is IP'd, what static routes are set, what proxy ARPs are set, etc.

I'd also take this time and move the SmartCenter to a separate box. You life will be much easier in the event of a failure.

Ray

[Dj_Lien]

Thanks for the reply Ray.

The smartcenter is on the same box. I took a ghost image of the firewall before I started, so I can roll back easy.

I used upgrade_export & it created a 1.6gb file.... which I could not re-import via TFTP or CD. Looks like where it's been an upgrade of an early 4.1/NG there are some folders that are 500mb+. I trashed the logs but it was still quite big... Going back to the drawing board on this.

[RayPesek]

Try getting rid of some of the database revisions. That should shrink it quite a bit.

Ray

[Dj_Lien]

Originally Posted by RayPesek

Try getting rid of some of the database revisions. That should shrink it quite a bit.

Got it down from 1.6gb to 50mb :)

Do you "patch add" after you have set-up the firewall or before you have run through the config.

Can anyone point me to any documentation on upgrading/migrating? As I keep hitting snags.... & I'm pretty sure most questions I have, would have been answered in this.

[RayPesek]

"patch add" to do what? Install HFA's? I just install them manually. I know "patch add" can do version upgrades of SPLAT, but you'll already be at R65.

You won't be able to install an HFA until you run through sysconfig and get the at least the packages installed that you need.

The upgrade guide is usually good enough. What specific questions do you have?

Ray

[Dj_Lien]

Originally Posted by RayPesek

The upgrade guide is usually good enough. What specific questions do you have?

I've upgraded the Windows box to R65 fine. I'm having 'issues' migrating to Secure Platform now.

I seem lost on what to do next. I went through the user guides online & they only seem to cover upgrading, like for like, not doing a migration.

My question is how do I get the FW & SmartCenter from the Windows box onto SPLAT. I assumed it would have been a case of upgrade the Windows version, backup up everything & then re-import into SPLAT... this does not seem the case...

[mcnallym]

upgrade_export your SMARTCenter config.

Build SPLAT with the interfaces and routes etc

import your config into the Check Point Software on the SPLAT box. It IS that simple.

[Dj_Lien]

Originally Posted by mcnallym

import your config into the Check Point Software on the SPLAT box. It IS that simple.

Think I've worked it out after a search of this forum.. thanks for all your help.... need to brush up on my unix I think lol :)