CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Results 1 to 14 of 14

Thread: Nokia IP290 and IP390 upgrade to R77 advice?

  1. #1
    Join Date
    2011-06-02
    Location
    U.K
    Posts
    9
    Rep Power
    0

    Default Nokia IP290 and IP390 upgrade to R77 advice?

    Hi Everyone

    I have few Nokia IP 290 and IP 390 firewalls appliances running on IPSO 6.2 and Checkpoint R75.30 software version, The management server is on Windows 2003 server running R75.30.


    I would like to upgrade these Management server and gateways to CP R77 version, Is is even possible with the current IPSO 6.2 level? OR will I have to replace these IP 290 & 390 appliances with new ones in order to upgrade CP R77 version?

    Please let me know, I will appreciate your help and input on this matter.

    Thanks

    Cisco_singh

  2. #2
    Join Date
    2007-07-29
    Posts
    20
    Rep Power
    0

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Quote Originally Posted by Cisco_singh View Post
    Hi Everyone

    I have few Nokia IP 290 and IP 390 firewalls appliances running on IPSO 6.2 and Checkpoint R75.30 software version, The management server is on Windows 2003 server running R75.30.


    I would like to upgrade these Management server and gateways to CP R77 version, Is is even possible with the current IPSO 6.2 level? OR will I have to replace these IP 290 & 390 appliances with new ones in order to upgrade CP R77 version?

    Please let me know, I will appreciate your help and input on this matter.

    Thanks

    Cisco_singh
    checkout the upgrade wizard...very useful...takes all the guesswork out of it...

    https://supportcenter.checkpoint.com...wupgradewizard

  3. #3
    Join Date
    2007-06-04
    Posts
    3,314
    Rep Power
    17

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    In order to upgrade your IP Appliances to Check Point R77 then you will need to upgrade to the latest IPSO 6.2 MR4.

    Check Point advises upgrading to IPSO 6.2 MR4, ONLY if upgrading to R77.

    The upgrade wizard however is very useful is giving you the correct links to download the files you need, along with any intermediate steps you may need to get from the version upgrading from to the target version.

  4. #4
    Join Date
    2013-11-24
    Posts
    1
    Rep Power
    0

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    If you would like to stay on IPSO, you can go to IPSO MR4a and R77 or you can go to GAiA R77 (I've had nothing bad happen on my IP290 with GAiA) and the upgrade process to GAiA is fairly easy as you can use an FTP server or a USB drive if the appliance has a USB port with sk83200.

  5. #5
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,252
    Rep Power
    14

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Also you may want to consider upgrading your IP290 and IP390 to 2GB of RAM if they are not already, I believe they originally shipped with 1GB of RAM. With 1GB RAM if you turn on more than 3 or 4 blades the box will have to dip into virtual memory/swap which will absolutely kill performance.

    Also depending how many times these boxes have been upgraded before, there may not be enough free disk space to complete the upgrade. Be sure to closely read the requirements for free disk space before attempting the upgrade; a R77 reload from scratch/reconfigure may be necessary to ensure enough space. In that case I would definitely switch the OS to Gaia as well.

    If you are able to upgrade in place either IPSO or Gaia would be acceptable in my opinion.

  6. #6
    Join Date
    2011-06-02
    Location
    U.K
    Posts
    9
    Rep Power
    0

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Thanks a lot for your input all , Much appreciated.

    This gives me good information get started, Just one more thing is how do I go about upgrading the existing Management server?


    The existing Management server (R75.30) is on a VM running Windows 2003 server OS, I would like to get this upgraded to R77 without losing any information. Is there a migration tool to perform this upgrade OR Am I right to use a Upgrade_export and then use Upgrade_Import to restore the current CP Database?

    Thanks

    Cisco_singh

  7. #7
    Join Date
    2009-08-22
    Posts
    19
    Rep Power
    0

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Quote Originally Posted by Cisco_singh View Post
    Is there a migration tool to perform this upgrade OR Am I right to use a Upgrade_export and then use Upgrade_Import to restore the current CP Database?
    Cisco_singh
    To my mind, in a virtualized environment, you'd better do a fresh install of R77 on a new VM (with same hostname/IP address) and use the migrate export/import. Less prone to bugs and you'd be able to install a Windows 2008R2 OS, at least...
    I will help you test the upgraded SmartCenter before putting it in production too.

  8. #8
    Join Date
    2011-06-02
    Location
    U.K
    Posts
    9
    Rep Power
    0

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Quote Originally Posted by tatapoum View Post
    To my mind, in a virtualized environment, you'd better do a fresh install of R77 on a new VM (with same hostname/IP address) and use the migrate export/import. Less prone to bugs and you'd be able to install a Windows 2008R2 OS, at least...
    I will help you test the upgraded SmartCenter before putting it in production too.
    Thanks for the info, Checking on the upgrade directory (C:\WINDOWS\FW1\R75\fw1\bin\upgrade_tools) on existing Windows 2003 server, I only have the following files available:

    1. migrate.conf
    2. migrate.exe
    3. upgrade_export.exe
    4. upgrade_import

    Where can I find migrate export/import files for R75.30 on Windows 2k server?

    Thanks in advance

    Cisco_singh

  9. #9
    Join Date
    2007-06-04
    Posts
    3,314
    Rep Power
    17

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Quote Originally Posted by Cisco_singh View Post
    Thanks for the info, Checking on the upgrade directory (C:\WINDOWS\FW1\R75\fw1\bin\upgrade_tools) on existing Windows 2003 server, I only have the following files available:

    1. migrate.conf
    2. migrate.exe
    3. upgrade_export.exe
    4. upgrade_import

    Where can I find migrate export/import files for R75.30 on Windows 2k server?

    Thanks in advance

    Cisco_singh
    Those will be the EXISTING migration tools. You would need to download the R75.30 Management Migration Tools for Windows from the Check Point website and extract into a directory on the Server you want to export from

    You then from that directory run the command

    migrate export filename_of_export.tgz

    export being a parameter that you supply to the migrate command to tell that exporting, as opposed to import to say that importing the specified file.

  10. #10
    Join Date
    2011-06-02
    Location
    U.K
    Posts
    9
    Rep Power
    0

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Thanks a lot everyone for you input and help on this, much appreciated.

    I am going to run this in my virtual lab and see how the upgrade goes from R75.30 to R77.

    Regards

    Cisco_singh

  11. #11
    Join Date
    2016-08-11
    Posts
    11
    Rep Power
    0

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Quote Originally Posted by Cisco_singh View Post
    Thanks a lot everyone for you input and help on this, much appreciated.

    I am going to run this in my virtual lab and see how the upgrade goes from R75.30 to R77.

    Regards

    Cisco_singh
    Hi,


    Did this went well?

    Im about to do the same

  12. #12
    Join Date
    2013-03-05
    Posts
    58
    Rep Power
    7

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Quote Originally Posted by jlobera View Post
    Hi,


    Did this went well?

    Im about to do the same
    We have a couple of 290s runnig at IPSO 6.2MR5 with R77.30, it works fine, only installation with QoS takes about 5 minutes.

  13. #13
    Join Date
    2016-08-11
    Posts
    11
    Rep Power
    0

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Quote Originally Posted by peter42 View Post
    We have a couple of 290s runnig at IPSO 6.2MR5 with R77.30, it works fine, only installation with QoS takes about 5 minutes.
    You updated from MR3 directly to MR5?


    Thanks

  14. #14
    Join Date
    2013-03-05
    Posts
    58
    Rep Power
    7

    Default Re: Nokia IP290 and IP390 upgrade to R77 advice?

    Quote Originally Posted by jlobera View Post
    You updated from MR3 directly to MR5?


    Thanks
    No from MR4.

Similar Threads

  1. Tcpdump traffic loss on IP390/IP290
    By lamerz in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 1
    Last Post: 2010-12-16, 12:09
  2. IP290/IP390 IPSO 6.2/R70 Memory Recommendation
    By footerest in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 2
    Last Post: 2009-09-10, 13:53
  3. Memory upgrade for NOKIA IP390
    By checkpointnewbie in forum Installing And Upgrading
    Replies: 2
    Last Post: 2009-03-24, 22:35
  4. Upgrade from Nokia IP390 to UTM-1 570
    By phelanre in forum Check Point UTM-1 Appliances
    Replies: 7
    Last Post: 2008-10-04, 19:56
  5. advice needed -- upgrade Nokia based R61
    By paninfo in forum Installing And Upgrading
    Replies: 6
    Last Post: 2006-10-06, 19:06

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •