CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-04-19
onurbi onurbi is offline
Junior Member
 
Join Date: 2006-03-06
Posts: 3
Rep Power: 0
onurbi has an average reputation (10+)
Default Sure Steps from R61 to R65 with revert possibility

I read all relevant Threads in the "Installing and upgrading" forum and the "NGX R65 Complete Upgrade Guide".
It's the first time a will make a upgrade, therefore I plan to have good ways to revert to the old configuration.
I would appreciate a check of my steps to do the upgrade.

Given the following Installation:

Management and Smartcenter Server is a Win2K Server
The Enforcement Module runs on a Nokia IP350
Both are R61

The steps are:

- running upgrade_export on the old Win2K Server
- Installing "using Imported Configuration" and the Smart Center R65 on the new Win2k3 Server with an alternate IP-Adress
- Choosing a 15 day Evaluation Lizense, because of the alternate IP-Adress assuming that the IP-Address of the management Station has to fit to the lizense as well.
- Transferring the Backupfile to the new Win2k3 Server
- Running upgrade_import on the new Win2k3 Server
- This should restore the SIC as well. If not, resetting the SIC and establishing a new one (at first running cpconfig on the Nokia).
- Now both Management Servers should be able to communicate with the Nokia
- When this not worked I still have the old mangement server!
- Disconnecting the old Win2K Server
- Change the IP-Adress from the Win2k3 Server to the one the old one had.
- Installing the Check Point Lizense on the new Win2k3 Server
- Installing the rule set from the new Win2K3 Server for testing Purposes.
- Switching the secondary role to primary (is this possible and/or nessecary?)
- Create a configration Backup with Voyager on the Nokia with and without the Check Point option.
- Disconnect all Ethernet Ports from the Nokia except for the Management Port.
- Reimaging the Nokia to IPSO 4.2
- Restore the Voyager Backup without the Check Point option
- Reconnect the internal Ethernet ports except the one for the Internet one and make a connectivty test to several Nodes on all internal Ports.
- Install and activate the R65 package with all hotfixes
- Restore the Voyager Backup with the Check Point option
- Change version on FW-object to R65 in dashboard
- Establish a SIC for the Management communication
- Installing the policy again from the new Win2K3 Server
- Reconnect the ethernet Internet connection

I am unsure of the following point:

- There are no Check Point CDs available to have access to the upgrade_export and upgrade_import Tools. I need this tools before I start the Install process. How can I get this tools?
Searching fot upgrade tools I only found an "upgrade checker" for R65.

Regards,

Onurbi
Reply With Quote
  #2 (permalink)  
Old 2008-04-20
Testing-123 Testing-123 is offline
Member
 
Join Date: 2007-07-27
Posts: 74
Rep Power: 1
Testing-123 has an average reputation (10+)
Default Re: Sure Steps from R61 to R65 with revert possibility

Hi onurbi,

Look under NGX utilities on the Check Point website. Link below.

Check Point Software: NGX Utilities

Regards
Testing-123
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 20:23.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0