PDA

View Full Version : Upgrade from R70 to R80.10



arykustirin
2018-05-11, 09:48
My customer have Check Point UTM-1 37x with R70 image OS.
Now they purchase new Check Point 5100 and NGSM-410.
They already upgrade export from R70.
How if I want to restore or import from R70 upgrade export file to R80.10?

Please help and guide me.

Thanks and regards,

Ary Kustirin

Bob_Zimmerman
2018-05-11, 11:05
Typically, you should download the export tools for the version you're moving to, put them on the old system, and use them to generate the export. You then bring it over to the new system.

This export does not contain any of the OS-level configuration, only configuration made through SmartDashboard (and related tools).

arykustirin
2018-05-11, 19:20
Hi Zimmie,

The client already upgrade export in their R70 environment. And they just give me the file from upgrade export proceeded.
And now I want to make R80.10 VM environment, and want to upgrade import the file this R80.10.

How can I do that?

Thanks,

Ary Kustirin



Typically, you should download the export tools for the version you're moving to, put them on the old system, and use them to generate the export. You then bring it over to the new system.

This export does not contain any of the OS-level configuration, only configuration made through SmartDashboard (and related tools).

msjouw
2018-05-12, 03:54
You will have to build at least a SMS in R75.40 to import the export file, as you cannot do it in one step, so you have to go back to the customer and give them the R75.40 export tools and do the export again. From there you can do the export with the upgrade tools from R80.10 and then import into R80.10.
How to do that is described completely in the R80.10 Installation and Upgrade manual.

arykustirin
2018-05-12, 07:31
Hi msjouw,

Many thanks for your information.
I already made R70 standalone installation in VM. And I already put the export file from the customer. I made upgrade import with success in this virtual environment. I can open the policy with R70 smart dashboard.

Do you suggest, I have to put the R75.40 migration tools to the R70 VM, and then do the export again?
After I made export with R75.40 migration tools in the R70 VM, is the export file can be just import in R80.10 environment?
I also already made R80.10 VM, but only for Security Management Server.
I think the export file from R70 still build standalone, with gateway and management still integration.

Thanks and regards,

Ary Kustirin


You will have to build at least a SMS in R75.40 to import the export file, as you cannot do it in one step, so you have to go back to the customer and give them the R75.40 export tools and do the export again. From there you can do the export with the upgrade tools from R80.10 and then import into R80.10.
How to do that is described completely in the R80.10 Installation and Upgrade manual.

msjouw
2018-05-12, 10:51
Ok you have a R70 SMS, you need to:

create a R75.40 SMS VM as well
then first export the R70 with the R75.40 export tools
move the export file to the R75.40 VM and import the file
make sure all is working by checking with Dashboard (R75.40)
now get the latest R80.10 (march this year) and put them on the R75.40 machine and create a new export with those tools.
move the export file to the R80.10 SM and import there

arykustirin
2018-05-12, 20:46
Hi Msjouw,

I already make R75.40 VM, and I take out R75.40 export tools.
I move the R75.40 export tools to the R70 VM.
In the R70 VM, I make upgrade export with the R75.40 export tools.
But there are error when I make upgrade export. The error message says ;

Migrating from the current management version is not supported. For information on what platforms are supported for upgrade please refer ti the release notes.
Execution finished with errors. See log file...
1393

I can not export R70 with R75.40 export tools.
Maybe you have any suggestion for that?

By the way, the R70 export file that I got from customer, has built by standalone system. I mean, in the R70 export files has include gateway and management configuration information.
I need to make this separated, so I just want to management configuration included (distributed system). Because, in the next R80.10, I just want to import management configuration information, like network objects, rule, and policy.

Thanks and regards,

Ary Kustirin





Ok you have a R70 SMS, you need to:

create a R75.40 SMS VM as well
then first export the R70 with the R75.40 export tools
move the export file to the R75.40 VM and import the file
make sure all is working by checking with Dashboard (R75.40)
now get the latest R80.10 (march this year) and put them on the R75.40 machine and create a new export with those tools.
move the export file to the R80.10 SM and import there

msjouw
2018-05-13, 11:06
That meas you have to do another step in between, I know that 71.30 can be imported to the R75.40 so you should be ok with taht extra step in between.

Bob_Zimmerman
2018-05-14, 10:00
It sounds like this is the full list of steps:


Import customer's config into R70 VM
Disable firewall functionality on the R70 VM
Update to R70.30
Build a new R75.40 VM
Use R75.40 upgrade tools on the R70 VM to generate a new export
Import the configuration you just exported into the R75.40 VM
Generate new "software blade" versions of your licenses
Add the new licenses with SmartUpdate, and remove the old NGX licenses
Build a new R80.10 VM
Use R80.10 upgrade tools on the R75.40 VM to generate a new export
Import the configuration you just exported into the R80.10 VM


Really, you can do step 2 almost anywhere in the process. I would do it early because it's easy and it saves you a little time with subsequent VM builds. All you should need to do for it is to uncheck "Firewall" and related settings in the object's config in SmartDashboard, remove the topology, and save.