Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Jesus_Cano
Collaborator

Customized files (upgrade R77.20 to R80.10)

Hi, 

Im planning the upgrade from R77.20 to R80.10. So im worry about the customized files by end-customer in R770.20. Please, what is the correct procedure to migrate customized files from R77 to R80? copy the file and put in the same directory in R80? copy all the lines?.......

These are the customized files:

In gateways: “$FWDIR/conf/local.arp” and “$FWDIR/conf/ipassignment.conf” 

In SMS: “$FWDIR/conf/user.def.FW1” and “$FWDIR/conf/user.def”

Thanks a lot

8 Replies
G_W_Albrecht
Legend
Legend

This is an easy question as you DO know where changes have been made. And for example, for table.def we find in sk98339 Location of 'table.def' files on Security Management Server:

  All changes to a "table.def" file will be overwritten when upgrading to a new version. Therefore, before the upgrade, these files should be backed up. After the upgrade, all the changes must be made again manually. Do not copy the old files over the new ones, because the syntax and the contents change between the versions. 

CCSE CCTE CCSM SMB Specialist
0 Kudos
Jesus_Cano
Collaborator

OK, i understand but why are you sending me a link about file "table.def"?. This is not a customized file from customer.

So I have to create the file if it is not ,and add the custom lines in the file. I understand that the files will be or should be created in the same directory as in R77. And that there will be no changes in the new R80 about  to understand the lines R77.20  in the new version.

0 Kudos
G_W_Albrecht
Legend
Legend

What i did was to refer you to the sk including how to handle the changed files - in your  case, the sk98239 Location of 'user.def' files on Security Management Server would have been more appropriate 😉 These files change its places on the SMS...

The other files mentioned do not change places - we have sk30197 Configuring Proxy ARP for Manual NAT explaining the $FWDIR/conf/local.arp file, and the ipassignment.conf file can be found in sk33422  Office Mode IP and ipassignment.conf file.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Jesus_Cano
Collaborator

ah ok, sorry for the missunderstading. So the gw files are not changing the directory but in SMS those files (“$FWDIR/conf/user.def.FW1” and “$FWDIR/conf/user.def”) are changing the directory in R80 , right?.

anyway i think i could run (find / -name "*user.def") in order to find the exact directory, right? and then add all the customized lines.

0 Kudos
G_W_Albrecht
Legend
Legend

It is a two sides story: user.def gets duplicated for new GW as well as SMS versions - so for combination GW + SMS there is one user.def; same SMS with different version GW has a different user.def.

CCSE CCTE CCSM SMB Specialist
HeikoAnkenbrand
Champion Champion
Champion

Hi Jesus,

There are still some files you should look at:

user.def

table.def

tabel.def.FW1

crypt.def                 >>> vpn setiings

fwkern.conf           >>> permanent fw settings

trac_client_1.ttm   >>> if you use secure client

/var/ace/*             >>> RSA token authentication

ipassignment.conf

discntd.if               >>> disconnected if on ClusterXL

...

I'm not copying the files from R77.x to R80.10. I add the changed lines to the corresponding files.

Regards

Heiko

➜ CCSM Elite, CCME, CCTE
0 Kudos
Jesus_Cano
Collaborator

Yes i know, customer told me the files that they know that have been modified. I will ask for taking those files too.

So i dont know how checkpoint doesnt have any script or any tool or anything to do easier this migration with custom files... This will save many customer complainings :S

HeikoAnkenbrand
Champion Champion
Champion

Hi Jesus,

When you start "migrate export" on the management server, you will see many files that have been edited.

Unfortunately there is no script for this.

There is only one script to collect files when you switch from SPLAT to GAIA.

Regards

Heiko

➜ CCSM Elite, CCME, CCTE
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events