topic Re: Unable to export database for upgradation from R77.30 to R80.x in Firewall and Security Management

Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Tue, 09 Jun 2020 17:49:00 GMT

Hi Team,

This is Smart-210 appliane with R77.30 and it had previously EPM+smart Management enabled on single box. Even we had on-prem DOCS configured so this appliance was configured as a Reverse Proxy server.

Now we finally would like to take a upgrade job and facing hell lot of challenges while upgrading.

We even not able to the take database out and giving below errors. And while installing HFA is givining lot of dependency errors.

Any help is appreciated.

Re: Unable to export database for upgradation from R77.30 to R80.x

PhoneBoy — Wed, 10 Jun 2020 00:36:08 GMT

In that output, there is one license error and something about manual changes to implied_rules.def.
Neither of those should prevent an upgrade.
So what's the precise error you get when you run migrate export?
You may want to get the TAC involved also.

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Wed, 10 Jun 2020 04:40:28 GMT

I will involve the TAC but thought community might help. Something is terribly wrong with my installation I believe.

This is I am getting with puv script

./pre_upgrade_verifier -p $FWDIR -c R77 -t R80.40 -f xxxx-xxx.txt
ReadFwsetFromSqlFile: 2 Error reading from database for file /opt/CPsuite-R77/fw1/conf/grc_test_elements.sqlite. Error is:

And then

more /opt/CPsuite-R77/fw1/conf/grc_test_elements.sqlite.
/opt/CPsuite-R77/fw1/conf/grc_test_elements.sqlite.: No such file or directory

Surprisingly this is not even generating puv output.

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Wed, 10 Jun 2020 04:54:54 GMT

Looks like compliance blade issue. I disabled the compliance balde, isntalled the database and see what happens.

Any way I found sk112000 is that relevant to management server as well?

Re: Unable to export database for upgradation from R77.30 to R80.x

PhoneBoy — Wed, 10 Jun 2020 05:03:32 GMT

Don't believe so if it's not MDM.

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Wed, 10 Jun 2020 05:48:35 GMT

No luck - Any ways need to go to CCSP and then to GTAC thats a long route. All the upgrade options are failing.

Re: Unable to export database for upgradation from R77.30 to R80.x

shlomip — Wed, 10 Jun 2020 09:10:59 GMT

Hi @Blason_R ,

It could be that grc_test_elements.sqlite was updated during the PUV's execution. Retry after doing cpstop before the PUV and before the export.

If it still fails again open a support ticket together with latest $CPDIR/log/migrate*.log file

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Wed, 10 Jun 2020 09:18:13 GMT

Hello,

Thanks already opened but that is through ccsp support partner and I am sure it will take much time to reach to GTAC. again I dont think ccsp will be able to resolve. Hence I decided to ask community.

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Thu, 11 Jun 2020 04:53:39 GMT

Is this causing an issue?

Capsule Docs DLP Add-on

Endpoint Security Management R77 Plug-in

Is of is there a way to uninstall it? and then I can give a try?

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Thu, 11 Jun 2020 05:01:00 GMT

Hello,

So per this sk113602 - It would not be possible to upgrade the Management server from R77.30.03 to R80.xx. There is no any other alternative to at least take a database or rule base.

Since I am managing around 5 firewalls and multiple policies it would be very difficult to re-create the entire Mgmt server.

Any other alternative?

Re: Unable to export database for upgradation from R77.30 to R80.x

Oren_Shalgi — Thu, 11 Jun 2020 05:50:02 GMT

Hi,

The SK you have mentioned is about no upgrade to R80.10 - is that what you are attempting to do?

Upgrade to R80.20/R80.30/R80.40 is fully supported.

If still in trouble, I suggest you would contact Check Point Support for assistance.

Thanks,

Oren.

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Thu, 11 Jun 2020 05:55:52 GMT

Hi Oren,

sk113602 is exactly my scenario - Where currently I am on R77.30.03 and Capsule DOCS is installed [ though customer is not using right now] and it had EPM enabled again we disabled it since customer has stopped working DOCS/Workspace.

Per sk fwm ver is absolutely same and puv just fails even ./migrate export does not work. Hence wondering if there are no other option?

Thanks

Re: Unable to export database for upgradation from R77.30 to R80.x

Oren_Shalgi — Thu, 11 Jun 2020 05:58:53 GMT

Hi,

Which management version are you trying to upgrade to?

Oren.

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Thu, 11 Jun 2020 06:04:29 GMT

Preferably to R80.30.

Does that mean that SK was only applicable to when you are migrating to R80.10?

Re: Unable to export database for upgradation from R77.30 to R80.x

Oren_Shalgi — Thu, 11 Jun 2020 06:06:55 GMT

Yes.

If you encounter issues when attempting an upgrade to R80.30, please contact Check Point Support to take a closer look at your issue.

Thanks,

Oren.

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Thu, 11 Jun 2020 06:11:01 GMT

Thanks for the confirmation. I am already with them.

Re: Unable to export database for upgradation from R77.30 to R80.x

Kiril_Kaper — Fri, 12 Jun 2020 07:26:35 GMT

Hi,

Please share your Service Request number privately.

Thank you

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Fri, 12 Jun 2020 07:47:04 GMT

I sent some information in private. Would request you to please check and confirm.

Re: Unable to export database for upgradation from R77.30 to R80.x

Blason_R — Fri, 12 Jun 2020 08:04:26 GMT

Here are the error logs if someone needs to have a look at it? I just tried to run R80.40 verifier from CPUSE and it failed.

Re: Unable to export database for upgradation from R77.30 to R80.x

IdanC — Sun, 14 Jun 2020 13:45:58 GMT

Update: Resolved by sk112000