CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 9 of 9

Thread: Upgrade from R70 to R80.10

  1. #1
    Join Date
    2011-07-06
    Location
    Jakarta - Indonesia
    Posts
    6
    Rep Power
    0

    Post Upgrade from R70 to R80.10

    My customer have Check Point UTM-1 37x with R70 image OS.
    Now they purchase new Check Point 5100 and NGSM-410.
    They already upgrade export from R70.
    How if I want to restore or import from R70 upgrade export file to R80.10?

    Please help and guide me.

    Thanks and regards,

    Ary Kustirin

  2. #2
    Join Date
    2007-03-30
    Location
    DFW, TX
    Posts
    198
    Rep Power
    12

    Default Re: Upgrade from R70 to R80.10

    Typically, you should download the export tools for the version you're moving to, put them on the old system, and use them to generate the export. You then bring it over to the new system.

    This export does not contain any of the OS-level configuration, only configuration made through SmartDashboard (and related tools).
    Zimmie

  3. #3
    Join Date
    2011-07-06
    Location
    Jakarta - Indonesia
    Posts
    6
    Rep Power
    0

    Smile Re: Upgrade from R70 to R80.10

    Hi Zimmie,

    The client already upgrade export in their R70 environment. And they just give me the file from upgrade export proceeded.
    And now I want to make R80.10 VM environment, and want to upgrade import the file this R80.10.

    How can I do that?

    Thanks,

    Ary Kustirin


    Quote Originally Posted by Bob_Zimmerman View Post
    Typically, you should download the export tools for the version you're moving to, put them on the old system, and use them to generate the export. You then bring it over to the new system.

    This export does not contain any of the OS-level configuration, only configuration made through SmartDashboard (and related tools).

  4. #4
    Join Date
    2008-07-31
    Location
    Netherlands, Europe
    Posts
    1,133
    Rep Power
    11

    Default Re: Upgrade from R70 to R80.10

    You will have to build at least a SMS in R75.40 to import the export file, as you cannot do it in one step, so you have to go back to the customer and give them the R75.40 export tools and do the export again. From there you can do the export with the upgrade tools from R80.10 and then import into R80.10.
    How to do that is described completely in the R80.10 Installation and Upgrade manual.
    Regards, Maarten.
    Triple MDS on R77.30, MDS on R80.10, VSX, GAIA.

  5. #5
    Join Date
    2011-07-06
    Location
    Jakarta - Indonesia
    Posts
    6
    Rep Power
    0

    Smile Re: Upgrade from R70 to R80.10

    Hi msjouw,

    Many thanks for your information.
    I already made R70 standalone installation in VM. And I already put the export file from the customer. I made upgrade import with success in this virtual environment. I can open the policy with R70 smart dashboard.

    Do you suggest, I have to put the R75.40 migration tools to the R70 VM, and then do the export again?
    After I made export with R75.40 migration tools in the R70 VM, is the export file can be just import in R80.10 environment?
    I also already made R80.10 VM, but only for Security Management Server.
    I think the export file from R70 still build standalone, with gateway and management still integration.

    Thanks and regards,

    Ary Kustirin

    Quote Originally Posted by msjouw View Post
    You will have to build at least a SMS in R75.40 to import the export file, as you cannot do it in one step, so you have to go back to the customer and give them the R75.40 export tools and do the export again. From there you can do the export with the upgrade tools from R80.10 and then import into R80.10.
    How to do that is described completely in the R80.10 Installation and Upgrade manual.

  6. #6
    Join Date
    2008-07-31
    Location
    Netherlands, Europe
    Posts
    1,133
    Rep Power
    11

    Default Re: Upgrade from R70 to R80.10

    Ok you have a R70 SMS, you need to:
    • create a R75.40 SMS VM as well
    • then first export the R70 with the R75.40 export tools
    • move the export file to the R75.40 VM and import the file
    • make sure all is working by checking with Dashboard (R75.40)
    • now get the latest R80.10 (march this year) and put them on the R75.40 machine and create a new export with those tools.
    • move the export file to the R80.10 SM and import there
    Regards, Maarten.
    Triple MDS on R77.30, MDS on R80.10, VSX, GAIA.

  7. #7
    Join Date
    2011-07-06
    Location
    Jakarta - Indonesia
    Posts
    6
    Rep Power
    0

    Smile Re: Upgrade from R70 to R80.10

    Hi Msjouw,

    I already make R75.40 VM, and I take out R75.40 export tools.
    I move the R75.40 export tools to the R70 VM.
    In the R70 VM, I make upgrade export with the R75.40 export tools.
    But there are error when I make upgrade export. The error message says ;

    Migrating from the current management version is not supported. For information on what platforms are supported for upgrade please refer ti the release notes.
    Execution finished with errors. See log file...
    Click image for larger version. 

Name:	error-02-02.png 
Views:	10 
Size:	14.8 KB 
ID:	1393

    I can not export R70 with R75.40 export tools.
    Maybe you have any suggestion for that?

    By the way, the R70 export file that I got from customer, has built by standalone system. I mean, in the R70 export files has include gateway and management configuration information.
    I need to make this separated, so I just want to management configuration included (distributed system). Because, in the next R80.10, I just want to import management configuration information, like network objects, rule, and policy.

    Thanks and regards,

    Ary Kustirin




    Quote Originally Posted by msjouw View Post
    Ok you have a R70 SMS, you need to:
    • create a R75.40 SMS VM as well
    • then first export the R70 with the R75.40 export tools
    • move the export file to the R75.40 VM and import the file
    • make sure all is working by checking with Dashboard (R75.40)
    • now get the latest R80.10 (march this year) and put them on the R75.40 machine and create a new export with those tools.
    • move the export file to the R80.10 SM and import there

  8. #8
    Join Date
    2008-07-31
    Location
    Netherlands, Europe
    Posts
    1,133
    Rep Power
    11

    Default Re: Upgrade from R70 to R80.10

    That meas you have to do another step in between, I know that 71.30 can be imported to the R75.40 so you should be ok with taht extra step in between.
    Regards, Maarten.
    Triple MDS on R77.30, MDS on R80.10, VSX, GAIA.

  9. #9
    Join Date
    2007-03-30
    Location
    DFW, TX
    Posts
    198
    Rep Power
    12

    Default Re: Upgrade from R70 to R80.10

    It sounds like this is the full list of steps:

    1. Import customer's config into R70 VM
    2. Disable firewall functionality on the R70 VM
    3. Update to R70.30
    4. Build a new R75.40 VM
    5. Use R75.40 upgrade tools on the R70 VM to generate a new export
    6. Import the configuration you just exported into the R75.40 VM
    7. Generate new "software blade" versions of your licenses
    8. Add the new licenses with SmartUpdate, and remove the old NGX licenses
    9. Build a new R80.10 VM
    10. Use R80.10 upgrade tools on the R75.40 VM to generate a new export
    11. Import the configuration you just exported into the R80.10 VM


    Really, you can do step 2 almost anywhere in the process. I would do it early because it's easy and it saves you a little time with subsequent VM builds. All you should need to do for it is to uncheck "Firewall" and related settings in the object's config in SmartDashboard, remove the topology, and save.
    Zimmie

Similar Threads

  1. Time to upgrade! I am available for contracts to upgrade your Check Point Software.
    By security4it in forum Employment/Consulting Opportunities For Check Point Administrators
    Replies: 0
    Last Post: 2015-10-04, 12:58
  2. r65.70 upgrade --> r71.10 full connectivity upgrade issues
    By lordbigsack in forum Installing And Upgrading
    Replies: 1
    Last Post: 2012-01-13, 12:55
  3. Delayed R60 gateway upgrade after mangement/gateway combo upgrade to R75
    By netstorm in forum Security Management Server (Formerly SmartCenter Server ((Formerly Management Server))
    Replies: 3
    Last Post: 2012-01-05, 09:41
  4. licence upgrade and hardware upgrade
    By symon in forum Licensing
    Replies: 5
    Last Post: 2011-01-21, 05:00
  5. R65 to R70 Upgrade Failure - Patch upgrade failed
    By Felix001 in forum Installing And Upgrading
    Replies: 8
    Last Post: 2010-05-28, 13:43

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •