topic Re: Upgrading Security Gateway from R77.30 to R80.20 in General Topics

Upgrading Security Gateway from R77.30 to R80.20

Di_Junior — Mon, 04 Mar 2019 21:38:06 GMT

Dear Mates

I have to do an upgrade for one of our Security Gateway from an old appliance running R77 to a new one running R80.20.

I would like to know if there is a similar procedure like when upgrading a Management Server where we can just export the database from the old machine, and import it into the new one.

How can I accomplish that with upgrading a security gateway. It is not a cluster environment.

Thanks in advance

Re: Upgrading Security Gateway from R77.30 to R80.20

Mark_Mitchell — Mon, 04 Mar 2019 22:06:51 GMT

Hi Dialungana,

In essence the upgrade is relatively simple for swapping out the appliances. Depending on the new hardware and the difference between the interfaces etc it could be summarised as the below.

1) apply offline base configuration on new appliance with correct interface IPs and routing along with the rest of the Gaia configuration.

2) During a maintenance window turn off old appliance and bring online the new one. (Could be done by disabling and enabling ports on your switch)

3) Update the gateway object within SmartConsole, version, reset SIC. Make sure your interface topology is correct within SmartConsole to what has been configured within Gaia.

4) Install Policy.

And you should be good to go. This assumes that you have a dedicated management server and that is running R80.20 and you wish to keep the same gateway name and IP addresses.

Just out if interest which appliances are you migrating from and to?

Regards

Mark

Re: Upgrading Security Gateway from R77.30 to R80.20

Maarten_Sjouw — Tue, 05 Mar 2019 06:34:14 GMT

To get the current configuration from the R77.30 gateway run the following clish command:

show configuration

In most situations these parts of the configuration are the ones you need to check and move to the new appliance:

interfaces
static routes
dynamic routing, if any (also check in the WebUI if there is any dynamic routing configured)
SNMP
DNS & NTP
user accounts

Keep in mind that between R77 and R80 the hashes have changed, so do NOT copy password hashes!!

Re: Upgrading Security Gateway from R77.30 to R80.20

Di_Junior — Thu, 07 Mar 2019 08:53:40 GMT

Hi there,

Migrating from 4200 NGFW to 5200 NGTP.