topic Hand-edited Files to Check After Gateway Upgrade/Fresh-load in Firewall and Security Management

Hand-edited Files to Check After Gateway Upgrade/Fresh-load

Timothy_Hall — Mon, 19 Apr 2021 14:08:02 GMT

While the possible list of hand-edited files such as fwkern.conf to check after a security gateway has been upgraded/migrated has been discussed in a number of posts (Security Gateway Migration & Save virtual server configurations on a VSX member), I just stumbled over a new (to me) SK that officially documents these files for the first time and thought I'd post it here for future reference:

sk160392: List of Check Point Configuration Files on a Security Gateway that need to be re-configured after performing a clean installation on a Security Gateway

Re: Hand-edited Files to Check After Gateway Upgrade/Fresh-load

JozkoMrkvicka — Mon, 19 Apr 2021 18:06:40 GMT

I would like to see the sk updated with hand-edited files on SMS/MDS. To have all needed info within one single article.

Or to have nice looking PDF which can everyone print and put it on (virtual) whiteboard 😉

Re: Hand-edited Files to Check After Gateway Upgrade/Fresh-load

John_Tomasetti — Tue, 27 Apr 2021 16:51:32 GMT

It's a good start, but they missed some. I'm sure there will be more as people read this sk.

These bite me every time I do an upgrade.

$FWDIR/lib/implied_rules.def (see sk31692)
$FWDIR/conf/trac_client_1.ttm
$FWDIR/conf/ipassignments.conf
/etc/ssh/sshd_config (for R80.30 and below)

Re: Hand-edited Files to Check After Gateway Upgrade/Fresh-load

mk1 — Wed, 28 Apr 2021 09:48:37 GMT

Absolutely agree!

Re: Hand-edited Files to Check After Gateway Upgrade/Fresh-load

G_W_Albrecht — Wed, 28 Apr 2021 10:12:20 GMT

There is a lot more!

vpn_route.conf

ftp.def

vpn_table.def

base.def

table.def

communities.def

Duplicated on the SMS for every GW type we find:

user.def

crypt.def

Better to note in a central place in which files which changes have been made when...

Re: Hand-edited Files to Check After Gateway Upgrade/Fresh-load

Code-E_911 — Thu, 19 Dec 2024 14:33:30 GMT

Does anyone know what happened to the above SK160392 as it has been removed and deleted.