topic Re: CheckPoint R65 UTM-1 directory paths and backups in General Topics

CheckPoint R65 UTM-1 directory paths and backups

Mig_Dorjee — Wed, 08 Aug 2018 00:40:50 GMT

Hello there,

We have a R65 in of our remote sites. We are in process of migrating to newer version hence I am trying to take "upgrade_export" backup along with "show configuration". When I login to this Firewall, it takes me directly to "CP#" mode which I believe is in Expert mode since it has # symbol (correct me if I am wrong) but when I attempt to issue "cd" command, it doesn't recognize as I want to be able to go to /var and /opt so I can run the ./export command to issue the backup and view. I have been searching online for this solution but have been unsuccessful doing so. Within this CP# mode, I am able to issue "backup" command but doesn't tell where it is stored. Although, it stores in /var/log, I cannot view because can't "cd" command is not recognized.

Next, I wanted to go to clish mode so I can issue "show configuration" command but it doesn't recognize clish mode. It displays "Unknown command "clish"".

Can someone please provide input to these? Thank you.

Re: CheckPoint R65 UTM-1 directory paths and backups

Danny — Wed, 08 Aug 2018 08:21:21 GMT

In NGX (R65) you are most likely logged in into the UserMode (admin) of SecurePlatform (SPLAT). This would explain why neither 'cd' nor' 'show configuration' nor 'clish' is working, while 'backup' can be run. Just enter the SystemMode (expert) with the command: expert

Re: CheckPoint R65 UTM-1 directory paths and backups

MartijnElzenaar — Wed, 08 Aug 2018 09:56:49 GMT

Exactly what Danny noticed, R65 sounds SecurePlatform to me as well. But since you noticed the "#" in the shell, I would also say that you're not in the user mode (cpshell) but rather in a different shell. Do you have access to the webinterface maybe? Can you add another user there and see if you can go to expert mode from this one?

Another thing I noticed, is that you mention upgrade_export. Is this remote location configured as standalone or distributed (centrally managed)? I'm asking this because it's not possible to use the upgrade_export on a FW node without management installed. This tool makes an export of the management database.

Also "show configuration" is a GAIA command and can't be used in SecurePlatform, as far as I remember.

Just a wild guess; is this one running on a nokia box maybe?

/Martijn

Re: CheckPoint R65 UTM-1 directory paths and backups

_Val_ — Wed, 08 Aug 2018 10:37:28 GMT

You need to type in expert, you are in something called "cpshell". If it is not a management, upgrade_export has no point. you can use backup and restore commands to keep it backed up. Look for SPLAT Admin Guide and SPLAT CLI Reference Guide for more info

Re: CheckPoint R65 UTM-1 directory paths and backups

G_W_Albrecht — Wed, 08 Aug 2018 10:47:03 GMT

As this looks like a Gateway-Only on SPLAT, it would be the most easy way to enter SPLAT WebGUI, note the IF and routing information and do a completly new install. For SecurePlatform / SPLAT commands, the last available guide is available here R70 SecurePlatform / SecurePlatform Pro Administration Guide.

Re: CheckPoint R65 UTM-1 directory paths and backups

G_W_Albrecht — Wed, 08 Aug 2018 11:10:28 GMT

According to https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowupgradewizard,

you can upgrade in 3 steps to R77.30:

1. Upgrade from R65 to R75 :

R75 Upgrade package for UTM-1/Power-1/Smart-1/SecurePlatform (using Web UI)

2. Upgrade from R75 to R76 :

R76 SecurePlatform Upgrade Package for Open Servers/Power-1/UTM-1/2012 Models/Smart-1 5,25,50/Data Center Security Appliances using WebUI and SmartUpdate

3. Upgrade from R76 to R77.30 :

R77.30 Gaia Clean Install / Upgrade (using Legacy CLI) from Gaia R75.4x,R76 on 2200 / 4000 / 12000 / 13000 / 21000 / Smart-1 / Threat Emulation TE250,TE1000,TE2000 / UTM-1 / Power-1 / IP Series / Open Servers (with support for SHA-256 based certificates)

R77.30 Gaia Upgrade package from SecurePlatform OS / Gaia OS R75.4x,R75.40VS,R76 on 2200 / 4000 / 12000 / 13000 / 21000 / Smart-1 / UTM-1 / Power-1 / IP Series / Open Servers using Gaia Portal / SecurePlatform WebUI or SmartUpdate