topic Re: migrate R75.40 to R80.30 Failed in Firewall and Security Management

migrate R75.40 to R80.30 Failed

mukai — Mon, 14 Oct 2019 01:09:01 GMT

migrate from R75.40 to R80.30

Export succeeded with migrate tool

Import to R80.30 failed and FWM process does not start

Contents of migrate log

/opt/CPshrd-R80.30/log/migrate-xxxx

・

[14 Oct 1:52:24] [ExecCommandGetOutput] Going to execute command: '/opt/CPsuite-R80.30/fw1/bin/upgrade_phase -d 41e821a0-3720-11e3-aa6e-0800200c9fde -s end'
[14 Oct 2:10:51] [ExecCommandGetOutput] ERR: Command completed with error code 4
[14 Oct 2:10:51] ..<-- ExecCommandGetOutput
[14 Oct 2:10:51] [CommandRunner::exec] Command's output:
-------------------------------------
Failed to upgrade phase
-------------------------------------
[14 Oct 2:10:51] [CommandRunner::exec] ERR: Command execution had failed
[14 Oct 2:10:51] .<-- CommandRunner::exec
[14 Oct 2:10:51] <-- ConditionalExecutor::exec
[14 Oct 2:10:51] [ActivitiesManager::exec] ERR: Activity 'ConditionalExecutor' failed
[14 Oct 2:10:51] [ActivitiesManager::exec] WRN: Activities execution finished with errors
[14 Oct 2:10:51] [ActivitiesManager::exec] WRN: Activities 'ConditionalExecutor' have failed
[14 Oct 2:10:51] [ActivitiesManager::exec] Designated exit code is 1
[14 Oct 2:10:51] --> CleanupManager::Instance
[14 Oct 2:10:51] <-- CleanupManager::Instance
[14 Oct 2:10:51] --> CleanupManager::DoCleanup
[14 Oct 2:10:51] [CleanupManager::DoCleanup] Starting to perform cleanup
[14 Oct 2:10:51] .--> DirCleaner::exec
[14 Oct 2:10:51] [DirCleaner::exec] Going to remove directory '/opt/CPsuite-R80.30/fw1/tmp/migrate/'
[14 Oct 2:10:51] .<-- DirCleaner::exec
[14 Oct 2:10:51] .--> ImportFailureMarker::exec
[14 Oct 2:10:51] [ImportFailureMarker::exec] Checking if cleaner is active
[14 Oct 2:10:51] [ImportFailureMarker::exec] Cleaner is active, starting cleanup
[14 Oct 2:10:51] [ImportFailureMarker::exec] Checking migrate's exit code
[14 Oct 2:10:51] [ImportFailureMarker::exec] Migration had failed, creating a marker file
[14 Oct 2:10:51] ..--> UpgradeMacroReplacer::Instance
[14 Oct 2:10:51] ..<-- UpgradeMacroReplacer::Instance
[14 Oct 2:10:51] [ImportFailureMarker::exec] Created a marker file
[14 Oct 2:10:51] .<-- ImportFailureMarker::exec
[14 Oct 2:10:51] [CleanupManager::DoCleanup] Completed the cleanup
[14 Oct 2:10:51] <-- CleanupManager::DoCleanup

end

Please tell me the solution

Re: migrate R75.40 to R80.30 Failed

PhoneBoy — Tue, 15 Oct 2019 23:41:26 GMT

Best bet is to involve the TAC.
It's possible you may need to get a particular hotfix and apply a specific procedure to make this succeed.

Re: migrate R75.40 to R80.30 Failed

mukai — Wed, 16 Oct 2019 23:42:41 GMT

thank you for your comment
Since there is no support contract, I will investigate a little more.
Is there a valid source of information?

Re: migrate R75.40 to R80.30 Failed

Tal_Paz-Fridman — Thu, 17 Oct 2019 07:23:12 GMT

Perhaps @Ofer_Barzvi can shed some light on this?

Re: migrate R75.40 to R80.30 Failed

mukai — Sat, 19 Oct 2019 02:42:07 GMT

Self-less

I tried many things and did the following:

・Upgrade from R75.40 to R77.20

・Delete unnecessary policy files with the cp_merge delete_policy command

・With reference to sk120119, delete rule A__xxxxxxx in anti_malware_rulebases_rules

I was able to import

cui message

・
・
・
The import operation completed successfully.
Do you wish to start Check Point services? (y/n) [y]?

It's difficult to migrate

Re: migrate R75.40 to R80.30 Failed

PhoneBoy — Sat, 19 Oct 2019 18:12:04 GMT

You will definitely have issues if you do not update the various Threat Prevention signatures prior to taking the export/import.