Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Explorer

R80.10 upgrade rules verification

R77.30 combined Gateway and SmartCenter server that passed the pre-upgrade-verifier and upgraded to R80.10 through CPUSE.

The upgrade completed without issue.  But when it went to install the policy, two rules that passed the R77.30 Rules Verification did not pass the R80.10 Access Control policy verification and the policy did not install until I modified them. 

Are there some differences documented in R80.10 in how the policy is verified? 

In this case it was a good thing, the rules in violation did have issues.  Just didn't see where the issue was initially.

0 Kudos
7 Replies
Highlighted
Explorer

Was the failure due to what was effectively rule duplication? I ask because I believe that redundancy detection was improved in R80.10 - the same was included in a hotfix for R77.30 (can't remember precisely which one).

Highlighted
Explorer

Yes, it was essentially over lapped rules.

0 Kudos
Highlighted
Employee+
Employee+

Hi Dan.

There is no documentation.

IMHO we have a better tool.

You can use the R80 desk to simulate the upgrade process and policy installation.

You can read more about this procedure at :

sk110267 - R80.x Upgrade Verification and Environment Simulation service.

Thanks

Dan Zaidman

0 Kudos
Highlighted
Champion
Champion

Dan,

Unless I am misreading "R77.30 combined Gateway and SmartCenter server", the Upgrade Verification and Environment Simulation service will not work.

sk110267 states that "StandAlone installation is not supported:.

0 Kudos
Highlighted
Employee+
Employee+

Hi Vladimir , you are right.

Stand Alone installation is not supported in the simulation service.

0 Kudos
Highlighted
Admin
Admin

There were some bugs in the rulebase validation routines in R77.20 and R77.30 that were fixed in R80.10 and possibly recent jumbo hotfixes of R77.30.

As a result, some policies that installed ok prior to upgrading to R80.10 will not install after you upgrade.

These issues are not caught by the pre-upgrade verifier.

Highlighted
Employee+
Employee+

Hi Dan,

I hope that following our help you to succeed with your migrating to R80.10
I appreciate if you share your experience with us in our R80.10 Survey 

if needed I will be happy to assist you with personal attention.

Eyal Rashelbach


R80 Desk Manager, Solution Center | Check Point Software Technologies

0 Kudos