topic Re: Geo Protection Expectation from R80.30 to R81.10 Upgrade. in Firewall and Security Management

Geo Protection Expectation from R80.30 to R81.10 Upgrade.

Kevin_Orrison — Tue, 01 Feb 2022 19:00:53 GMT

I am going to be upgrading our SMS from R80.30 to R81.10. I just recalled that Geo Protection policy changed in R81. Now using updatable objects in an access policy. I have found some info on this here in the community, but I need to know what to expect after my in place upgrade. Will the legacy Geo Policy be gone after my upgrade or will it stay in place since we are leveraging it now. According to the below SK it sounds like it might stay, but I just want to be sure I know what will happen after the upgrade.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk126172

The legacy policy is in shared policies

Re: Geo Protection Expectation from R80.30 to R81.10 Upgrade.

the_rock — Tue, 01 Feb 2022 19:52:45 GMT

Im pretty sure it will not stay, because I noticed it gone in 3 customer's environments, as well as 2 labs I did.

Re: Geo Protection Expectation from R80.30 to R81.10 Upgrade.

Kevin_Orrison — Tue, 01 Feb 2022 21:19:39 GMT

Can anyone verify for sure what happens after an in place upgrade?

Re: Geo Protection Expectation from R80.30 to R81.10 Upgrade.

the_rock — Wed, 02 Feb 2022 00:14:13 GMT

I will let CP people confirm for you, but Im 100% sure thats what happens based on my experience with those upgrades.

Re: Geo Protection Expectation from R80.30 to R81.10 Upgrade.

PhoneBoy — Wed, 02 Feb 2022 06:47:54 GMT

When you do an upgrade, if nothing is configured in the legacy Geo Policy, it should be hidden.
If there are rules there, it shouldn’t be hidden on upgrade.
At least that’s how I understand it.

Re: Geo Protection Expectation from R80.30 to R81.10 Upgrade.

Timothy_Hall — Wed, 02 Feb 2022 14:35:12 GMT

Can confirm what Dameon said, if the legacy Geo Policy is still in its default "out of the box" configuration with no changes made it will be hidden in R81+. If anything was touched at all in the Geo Policy at any point along the way it will still be visible in R81+.

Re: Geo Protection Expectation from R80.30 to R81.10 Upgrade.

the_rock — Wed, 02 Feb 2022 14:39:30 GMT

Thats interesting, because thats not my experience at all. With 2 customers, we made changes back in R80.20 in default geo policy, upgraded to R81, all was there, made more changes, then upgraded to R81.10 and default geo policy was gone.

Re: Geo Protection Expectation from R80.30 to R81.10 Upgrade.

Kevin_Orrison — Wed, 02 Feb 2022 15:04:43 GMT

I am using a non default specific policy for Geo Protection currently on R80.30. To be clear, it sounds like this should still be active and available in SmartConsole after my upgrade?