Security Gateway upgrade - From SecurePlatform r77.30 to Gaia r80.10

[g0t0]

Hi,

First of all, sorry if this topic has been answered before.

I will have to do an upgrade on a security gateway cluster from Secureplatform (yeah, I know) to Gaia r80.10 and I will need to clarify some things.

I'm planning to do a connectivity upgrade on a 4800 appliance two member cluster as explained below:

https://sc1.checkpoint.com/documents/Best_Practices/Cluster_Connectivity_Upgrade/html_frameset.htm

So my questions are:

- In case of a necessity to rollback after a r80.10 clean install on a member, can I revert to a SPLAT r77.30 snapshot on a r80.10 installation?

- I didn't notice anything on the limitations regarding this upgrade. Has anyone aware of any?

- Am I missing something?

Thanks in advance.

Sergio.

[FedericoMeiners]

Is this a distributed (Gateways separed from management) or stand alone (Gateway + management in the same box) environment.

If these are only gateways then copy/paste the show configuration output, snapshot is not necessary in most cases unless you have some configurations such as two factor authentication with RSA SecureID or some custom configuration in your gateway, you can always backup these specific files alone anyway.

I remember having some issues with snapshots from SPLAT in Gaia R77.30, you can always install again that version and restore the snapshot or backup from there.

Regards,

[g0t0 · Accepted solution]

Hi,
Thanks for the reply

It is distributed (2 gateways HA+ mgmt). I believe I don't have clish on SPLAT to execute the show configuration.
I thought about the snapshot because I have cumulative upgrades on that appliances since r75.40. So it would be difficult installing all those versions and then restore the backup (I think the backup should be restored at the same version that it was taken). Or I could just reinstall SPLAT r77.30 and restore the backup?

[g0t0 · Accepted solution]

Hi,

Just for the heads up on this upgrade. Everything went smoothly apart some problems with licensing.

The "snapshot --ftp" didn't worked in secureplatform and i does only work locally. You cannot upload the snapshot fater because this snapshot resides on some obscure partition.

I went for the connectivity upgrade regardless and all went well with no disruption of service. I follow this doc:

https://sc1.checkpoint.com/documents/Best_Practices/Cluster_Connectivity_Upgrade/html_frameset.htm

Again, thanks for the reply.

Sergio.