CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-05-01
danzaka danzaka is offline
Junior Member
 
Join Date: 2007-03-05
Posts: 25
Rep Power: 0
danzaka has an average reputation (10+)
Default Splat R55 (traditional mode) --> UTM-1 R65 message security (community mode)

All .

Is there an easy way to export the old configuration on my R55 and then import it to my R65 ?

R55 Has the firewall management and the firewall module on the same machine , and so do the R65 .

Also the policy i have on m y R55 is a traditional mode and on the new R65 i would like to work with community mode .

Is there a direct or indirect upgrade path that i can do ?

***** I tried to upgrade_export , i get unknown command (in normal mode ) , and Bash: upgrade_export: command not found ( in expert mode)..... *****

Last edited by danzaka; 2008-05-01 at 14:01.
Reply With Quote
  #2 (permalink)  
Old 2008-05-02
chuachongchee chuachongchee is offline
Senior Member
 
Join Date: 2007-09-17
Location: Singapore
Posts: 151
Rep Power: 1
chuachongchee has an average reputation (10+)
Default Re: Splat R55 (traditionalmode) --> UTM-1 R65 message security ( community mode)

You can export the config direct..

Try to use the upgrade_export from R55 in $FWDIR/bin/upgrade_tools

If you encounter problems, you can try to copy the upgrade_export from r65 and copy into the r55 machine..
Reply With Quote
  #3 (permalink)  
Old 2008-05-06
voodoosb voodoosb is offline
Junior Member
 
Join Date: 2007-07-31
Posts: 6
Rep Power: 0
voodoosb has an average reputation (10+)
Default Re: Splat R55 (traditional mode) --> UTM-1 R65 message security (community mode)

As for the upgrade_export tools you have to use the R55 one for the export then the R65 one for the import.

Just did this myself prepping for a smartcenter update.
Reply With Quote
  #4 (permalink)  
Old 2008-05-07
mcnallym mcnallym is offline
Senior Member
 
Join Date: 2007-06-04
Posts: 895
Rep Power: 2
mcnallym has an average reputation (10+)
Default Re: Splat R55 (traditional mode) --> UTM-1 R65 message security (community mode)

If you wish to export an R65 compatible configuration from the R55 box then you will need to have the R65 upgrade tools on the R55 box. The R55 tools will exports to an R55 compatible image.

To convert from traditional to community then you need to do this manually. There is no magic tool to do this.

Personally I would do the conversion on the R55 box first.

There is an option on the policy menu to convert but you need to stript the encrypt actions from the rulebase for it to work. You then manually build the community.

Make sure you save to a new filename before converting the new policy file to community.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 22:28.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0