| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| I read all relevant Threads in the "Installing and upgrading" forum and the "NGX R65 Complete Upgrade Guide". It's the first time a will make a upgrade, therefore I plan to have good ways to revert to the old configuration. I would appreciate a check of my steps to do the upgrade. Given the following Installation: Management and Smartcenter Server is a Win2K Server The Enforcement Module runs on a Nokia IP350 Both are R61 The steps are: - running upgrade_export on the old Win2K Server - Installing "using Imported Configuration" and the Smart Center R65 on the new Win2k3 Server with an alternate IP-Adress - Choosing a 15 day Evaluation Lizense, because of the alternate IP-Adress assuming that the IP-Address of the management Station has to fit to the lizense as well. - Transferring the Backupfile to the new Win2k3 Server - Running upgrade_import on the new Win2k3 Server - This should restore the SIC as well. If not, resetting the SIC and establishing a new one (at first running cpconfig on the Nokia). - Now both Management Servers should be able to communicate with the Nokia - When this not worked I still have the old mangement server! - Disconnecting the old Win2K Server - Change the IP-Adress from the Win2k3 Server to the one the old one had. - Installing the Check Point Lizense on the new Win2k3 Server - Installing the rule set from the new Win2K3 Server for testing Purposes. - Switching the secondary role to primary (is this possible and/or nessecary?) - Create a configration Backup with Voyager on the Nokia with and without the Check Point option. - Disconnect all Ethernet Ports from the Nokia except for the Management Port. - Reimaging the Nokia to IPSO 4.2 - Restore the Voyager Backup without the Check Point option - Reconnect the internal Ethernet ports except the one for the Internet one and make a connectivty test to several Nodes on all internal Ports. - Install and activate the R65 package with all hotfixes - Restore the Voyager Backup with the Check Point option - Change version on FW-object to R65 in dashboard - Establish a SIC for the Management communication - Installing the policy again from the new Win2K3 Server - Reconnect the ethernet Internet connection I am unsure of the following point: - There are no Check Point CDs available to have access to the upgrade_export and upgrade_import Tools. I need this tools before I start the Install process. How can I get this tools? Searching fot upgrade tools I only found an "upgrade checker" for R65. Regards, Onurbi |
| |||
| Hi onurbi, Look under NGX utilities on the Check Point website. Link below. Check Point Software: NGX Utilities Regards Testing-123 |
![]() |
| Thread Tools | |
| Display Modes | |
| |