cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted
g0t0
Iron

Security Gateway upgrade - From SecurePlatform r77.30 to Gaia r80.10

Jump to solution

Hi,

 

First of all, sorry if this topic has been answered before.

I will have to do an upgrade on a security gateway cluster from Secureplatform (yeah, I know) to Gaia r80.10 and I will need to clarify some things.

I'm planning to do a connectivity upgrade on a 4800 appliance two member cluster as explained below:

https://sc1.checkpoint.com/documents/Best_Practices/Cluster_Connectivity_Upgrade/html_frameset.htm

 

So my questions are:

 

- In case of a necessity to rollback after a r80.10 clean install on a member, can I revert to a SPLAT r77.30 snapshot on a r80.10 installation?

- I didn't notice anything on the limitations regarding this upgrade. Has anyone aware of any?

- Am I missing something?

 

Thanks in advance.

 

Sergio.

0 Kudos
2 Solutions

Accepted Solutions
g0t0
Iron

Re: Security Gateway upgrade - From SecurePlatform r77.30 to Gaia r80.10

Jump to solution
Hi,
Thanks for the reply

It is distributed (2 gateways HA+ mgmt). I believe I don't have clish on SPLAT to execute the show configuration.
I thought about the snapshot because I have cumulative upgrades on that appliances since r75.40. So it would be difficult installing all those versions and then restore the backup (I think the backup should be restored at the same version that it was taken). Or I could just reinstall SPLAT r77.30 and restore the backup?

0 Kudos
g0t0
Iron

Re: Security Gateway upgrade - From SecurePlatform r77.30 to Gaia r80.10

Jump to solution
Hi,

Just for the heads up on this upgrade. Everything went smoothly apart some problems with licensing.

The "snapshot --ftp" didn't worked in secureplatform and i does only work locally. You cannot upload the snapshot fater because this snapshot resides on some obscure partition.

I went for the connectivity upgrade regardless and all went well with no disruption of service. I follow this doc:

https://sc1.checkpoint.com/documents/Best_Practices/Cluster_Connectivity_Upgrade/html_frameset.htm

Again, thanks for the reply.

Sergio.
0 Kudos
3 Replies

Re: Security Gateway upgrade - From SecurePlatform r77.30 to Gaia r80.10

Jump to solution

Is this a distributed (Gateways separed from management) or stand alone (Gateway + management in the same box) environment.

If these are only gateways then copy/paste the show configuration output, snapshot is not necessary in most cases unless you have some configurations such as two factor authentication with RSA SecureID or some custom configuration in your gateway, you can always backup these specific files alone anyway.

I remember having some issues with snapshots from SPLAT in Gaia R77.30, you can always install again that version and restore the snapshot or backup from there.

Regards,

https://www.linkedin.com/in/federicomeiners/
g0t0
Iron

Re: Security Gateway upgrade - From SecurePlatform r77.30 to Gaia r80.10

Jump to solution
Hi,
Thanks for the reply

It is distributed (2 gateways HA+ mgmt). I believe I don't have clish on SPLAT to execute the show configuration.
I thought about the snapshot because I have cumulative upgrades on that appliances since r75.40. So it would be difficult installing all those versions and then restore the backup (I think the backup should be restored at the same version that it was taken). Or I could just reinstall SPLAT r77.30 and restore the backup?

0 Kudos
g0t0
Iron

Re: Security Gateway upgrade - From SecurePlatform r77.30 to Gaia r80.10

Jump to solution
Hi,

Just for the heads up on this upgrade. Everything went smoothly apart some problems with licensing.

The "snapshot --ftp" didn't worked in secureplatform and i does only work locally. You cannot upload the snapshot fater because this snapshot resides on some obscure partition.

I went for the connectivity upgrade regardless and all went well with no disruption of service. I follow this doc:

https://sc1.checkpoint.com/documents/Best_Practices/Cluster_Connectivity_Upgrade/html_frameset.htm

Again, thanks for the reply.

Sergio.
0 Kudos