CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have sign-ups from twelve different countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 7/14, 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartDashboard
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-02-26
Kheiron Kheiron is offline
Junior Member
 
Join Date: 2007-04-02
Posts: 8
Rep Power: 0
Kheiron has an average reputation (10+)
Default Export rulebase from R60 to R55

Is this even possible?

I've tried using the upgrade_export tool on the R60 machine and copied the .tgz file to the R55 machine.
However, when I run the upgrade_import tool on the .tgz file, at one point it gives me an error message saying:
Error: Failed to read the configuration info of the production machine

Is there something I'm doing wrong?
Is there another way to copy the entire rulebase from one to the other without upgrading the R55 to R60 first?
Reply With Quote
  #2 (permalink)  
Old 2008-02-26
Routerkid1 Routerkid1 is offline
Senior Member
 
Join Date: 2006-12-16
Posts: 119
Rep Power: 2
Routerkid1 has an average reputation (10+)
Default Re: Export rulebase from R60 to R55

I do think you will be able to as the upgrade_export is for like versions and higher versions like R60 to R65 for example. Why do you want to go back to R55? Run the following and post the results back ./upgrade_import -d exportname.tgz
Reply With Quote
  #3 (permalink)  
Old 2008-02-26
Kheiron Kheiron is offline
Junior Member
 
Join Date: 2007-04-02
Posts: 8
Rep Power: 0
Kheiron has an average reputation (10+)
Default Re: Export rulebase from R60 to R55

Unfortunately, I will not be able to paste anything like that here due to overly-protective company security policies.

But to answer your question, the reason we're moving back is simple:
The client upgraded from R55 to R60 on a new appliance about 2 months ago.
They still have the licence for the R55 machine though as they are planning on using it temporarily (for a week or two) while they move the R60 machine to a new premises.

However, the rulebase has changed significantly since the upgrade and now the two machines are grossly out of sync. So in order for them to remove the R60 machine, the R55 machine has to have an identical rulebase.
I was trying to avoid having to manually go through every rule but it seems that's unavoidable.

Thanks anyway. But if anybody else has a suggestion, I'd really appreciate it.
Reply With Quote
  #4 (permalink)  
Old 2008-02-26
Thorpuse Thorpuse is offline
Senior Member
 
Join Date: 2007-07-16
Posts: 323
Rep Power: 1
Thorpuse has an average reputation (10+)
Default Re: Export rulebase from R60 to R55

Why don't you just generate a 30-day R60 eval license? Or get your reseller to generate one for you?
Reply With Quote
  #5 (permalink)  
Old 2008-02-26
Kheiron Kheiron is offline
Junior Member
 
Join Date: 2007-04-02
Posts: 8
Rep Power: 0
Kheiron has an average reputation (10+)
Default Re: Export rulebase from R60 to R55

lol .... to be quite honest, I was also hoping to avoid the hassle of doing a complete rebuild of this machine and sorting out the licensing, etc.

This is due to be implemented within the next 30 odd hours so I don't really have the time, since I have other clients to deal with as well.
Reply With Quote
  #6 (permalink)  
Old 2008-02-27
RayPesek RayPesek is offline
Senior Member
 
Join Date: 2006-03-19
Location: Northern Ohio
Posts: 862
Rep Power: 3
RayPesek has an average reputation (10+)
Default Re: Export rulebase from R60 to R55

If they truly upgraded to a new machine, then the old license is no longer usable legally. If they bought a new machine with a brand new license, then it is.

Can you set it up as a distributed environment, with a separate SmartCenter? An R60 SmartCenter can manage an R55 gateway without any problems at all.

Ray
Reply With Quote
  #7 (permalink)  
Old 2008-03-12
gladiatorkev gladiatorkev is offline
Member
 
Join Date: 2006-04-04
Posts: 60
Rep Power: 3
gladiatorkev has an average reputation (10+)
Default Re: Export rulebase from R60 to R55

Hi,

The "upgrade_export - to ugrade_import" tool is not made for migrating from Higher to lower versions but the Vice-versa.

Hence, the problems you are facing.


Regards
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 16:48.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0