topic Re: Upgrade Or Downgrade from R75.10 SPLAT in Firewall and Security Management

Upgrade Or Downgrade from R75.10 SPLAT

LeeBingKang — Mon, 28 Apr 2025 06:42:36 GMT

Hi All,

Recently, we are trying to upgrade an old machine which is in version R75.10 SPLAT. However, the verification was failed when we try to run the pre upgrade verifier from upgrade tool version 75.40, and 77.

With this, I would like to seek some assistance on this matter and appreciate for your feedback.

Thank you.

Re: Upgrade Or Downgrade from R75.10 SPLAT

Tal_Paz-Fridman — Mon, 28 Apr 2025 06:51:35 GMT

R75.10 reached end of Support in 2015:

https://www.checkpoint.com/support-services/support-life-cycle-policy/#software-support

I suggest contacting Check Point TAC for assistance

Re: Upgrade Or Downgrade from R75.10 SPLAT

LeeBingKang — Mon, 28 Apr 2025 08:02:37 GMT

Hi Tal_Paz-Fridman,

Thank you for providing feedback on my post.

May i know if CheckPoint side has the R75.20 SPLAT ISO with them?

Thank you.

Re: Upgrade Or Downgrade from R75.10 SPLAT

Tal_Paz-Fridman — Mon, 28 Apr 2025 08:05:10 GMT

I assume Check Point TAC (Support) does keep copies for these type of cases.

Re: Upgrade Or Downgrade from R75.10 SPLAT

the_rock — Tue, 29 Apr 2025 02:03:18 GMT

Your best bet is to open TAC case as @Tal_Paz-Fridman has stated and ask if they may have the file.

Andy

Re: Upgrade Or Downgrade from R75.10 SPLAT

Duane_Toler — Tue, 29 Apr 2025 05:10:27 GMT

You likely will need some hot fixes to get ready for R75.40 (should be your next target; not sure if you can go directly to R77.30). I think you can skip R75.45 and R75.47 for this.

Once you get a working R75.40 management server, do a migrate export for R77.30. At this point STOP.

Install a brand new R77.30 VM on Gaia. Import your exported R77.30 database and verify it works.

When you get to R77.30, then you need the latest jumbo HFA and the new migrate export tools. Run migrate_server to export for R80.40 (for your own safe keeping). Upgrade Gaia with the Blink image if you want and it’ll do the migrate export and import for you.

Verify R80.40 works, then do a migrate_server export for R81.20.

I’d suggest ANOTHER brand new VM install for R81.20, with recent HFA, and import the database export again.

For any troubles you encounter on the way, read the logs carefully. They will tell you what to do to get things fixed. You may need to get an eval license so you can get a fresh IPS database update along the way somewhere. You may also need license upgrades. You may encounter a CP.macro file that needs updating at various points. Usually this is shown in some error output fairly prominently.

Enjoy!

Re: Upgrade Or Downgrade from R75.10 SPLAT

PhoneBoy — Tue, 29 Apr 2025 21:50:40 GMT

Maybe try using these tools to extract the configuration and put into a newly build R77.30 VM, then upgrade that: https://community.checkpoint.com/t5/Scripts/Odumper-and-Ofiller-Exporting-Importing-R5x-R7x-Config/m-p/51536#M1082

Re: Upgrade Or Downgrade from R75.10 SPLAT

Hugo_vd_Kooij — Wed, 30 Apr 2025 08:47:11 GMT

One remark here. Don't use Blink images on Management.

Been there, done that and the system did a rollback every time. So I strongly recommend to not use blink images on Management.

Re: Upgrade Or Downgrade from R75.10 SPLAT

LeeBingKang — Fri, 02 May 2025 02:56:16 GMT

Hi Guys,

Thanks for all of your feedback on this matter.

me and colleague able to do the upgrade and there are 2 things which block us:

1. the upgrade tools - make sure all the file in the upgrade tools is with execute permission. To ensure this, better compress the upgrade tools from R77 machine (lab machine) before taking it out to your pc and put it to the R75.10 machine (lab machine).

2. use database extract by upgrade tools instead of backup restore - the upgrade tool failed to export the upgraded database when we backup restore (get from production machine) on the R75.10 machine (lab machine), but its success when we use database (create by migrate export from production machine) on the R75.10 machine (lab machine).

For the next upgrade version like R77.30, R80.40, and R81.20, there is no issue with the upgrade by using upgrade tools given by CheckPoint.

Re: Upgrade Or Downgrade from R75.10 SPLAT

the_rock — Fri, 02 May 2025 03:24:54 GMT

So all good now?

Andy

Re: Upgrade Or Downgrade from R75.10 SPLAT

LeeBingKang — Fri, 02 May 2025 07:40:05 GMT

Hi the_rock,

Should be looks good so far.

Re: Upgrade Or Downgrade from R75.10 SPLAT

the_rock — Fri, 02 May 2025 11:12:44 GMT

Glad you got it going!

Andy