CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 3 of 3

Thread: pre upgrade check - INSPECT manual changes

  1. #1
    Join Date
    2014-11-23
    Posts
    32
    Rep Power
    0

    Default pre upgrade check - INSPECT manual changes

    Has anyone come across the following warning when running the pre upgrade checker (I am trying to upgrade from R77.20 to R80.10 and have downloaded the R80.10 Upgrade tools)

    Warnings: It is recommended to resolve the following problems.
    ================================================== ============

    Title: INSPECT manual changes
    -----
    * Description: Some changes in Security Gateway behaviour require manual changes
    in INSPECT files. These files are overwritten with new versions when you upgrade
    . Sometimes, you must apply the changes again on the new INSPECT files. In other
    cases, there are new GUI options to set.
    * Impacts: If changes are lost after the upgrade, the Security Gateway might not
    work as expected.
    * To Do: Check if changes are needed in the new version, if so, merge them manually to the relevant file.

    This problem will occur in the following files:

    R80 Gateways (c:\windows\fw1\r77\fw1\\lib)
    "implied_rules.def"

    Thanks

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,621
    Rep Power
    9

    Default Re: pre upgrade check - INSPECT manual changes

    Quote Originally Posted by PeterSmith78 View Post
    Has anyone come across the following warning when running the pre upgrade checker (I am trying to upgrade from R77.20 to R80.10 and have downloaded the R80.10 Upgrade tools)

    Warnings: It is recommended to resolve the following problems.
    ================================================== ============

    Title: INSPECT manual changes
    -----
    * Description: Some changes in Security Gateway behaviour require manual changes
    in INSPECT files. These files are overwritten with new versions when you upgrade
    . Sometimes, you must apply the changes again on the new INSPECT files. In other
    cases, there are new GUI options to set.
    * Impacts: If changes are lost after the upgrade, the Security Gateway might not
    work as expected.
    * To Do: Check if changes are needed in the new version, if so, merge them manually to the relevant file.

    This problem will occur in the following files:

    R80 Gateways (c:\windows\fw1\r77\fw1\\lib)
    "implied_rules.def"

    Thanks
    My guess is ldap across Vpn was enabled but to find out for sure do a install in a VM and compare the fresh install with your to see the difference.

  3. #3
    Join Date
    2016-06-10
    Posts
    19
    Rep Power
    0

    Default Re: pre upgrade check - INSPECT manual changes

    have you ever modified implied_rules.def manually?
    these modifications do not survive upgrades. it is a warning, not an error, you can continue upgrading, but that data will be lost unless you back it up somewhere and re-edit the file post-upgrade.

    I would appreciate if you could tell me what changes have you made there comparing to the defaults - so that we will add those as Management settings in the future and they will be stable and survive upgrades.

Similar Threads

  1. Time to upgrade! I am available for contracts to upgrade your Check Point Software.
    By security4it in forum Employment/Consulting Opportunities For Check Point Administrators
    Replies: 0
    Last Post: 2015-10-04, 12:58
  2. Replies: 7
    Last Post: 2015-02-19, 10:18
  3. Replies: 0
    Last Post: 2015-02-16, 17:58
  4. Replies: 1
    Last Post: 2012-01-11, 15:30
  5. SmartUpdate or Manual Upgrade
    By rubber_chicken in forum Installing And Upgrading
    Replies: 3
    Last Post: 2006-08-30, 22:39

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •