Customized files (upgrade R77.20 to R80.10)

[Jesus_Cano]

Hi, 

Im planning the upgrade from R77.20 to R80.10. So im worry about the customized files by end-customer in R770.20. Please, what is the correct procedure to migrate customized files from R77 to R80? copy the file and put in the same directory in R80? copy all the lines?.......

These are the customized files:

In gateways: “$FWDIR/conf/local.arp” and “$FWDIR/conf/ipassignment.conf” 

In SMS: “$FWDIR/conf/user.def.FW1” and “$FWDIR/conf/user.def”

Thanks a lot

[G_W_Albrecht]

This is an easy question as you DO know where changes have been made. And for example, for table.def we find in sk98339 Location of 'table.def' files on Security Management Server:

  All changes to a "table.def" file will be overwritten when upgrading to a new version. Therefore, before the upgrade, these files should be backed up. After the upgrade, all the changes must be made again manually. Do not copy the old files over the new ones, because the syntax and the contents change between the versions. 

[Jesus_Cano]

OK, i understand but why are you sending me a link about file "table.def"?. This is not a customized file from customer.

So I have to create the file if it is not ,and add the custom lines in the file. I understand that the files will be or should be created in the same directory as in R77. And that there will be no changes in the new R80 about  to understand the lines R77.20  in the new version.

[G_W_Albrecht]

What i did was to refer you to the sk including how to handle the changed files - in your  case, the sk98239 Location of 'user.def' files on Security Management Server would have been more appropriate 😉 These files change its places on the SMS...

The other files mentioned do not change places - we have sk30197 Configuring Proxy ARP for Manual NAT explaining the $FWDIR/conf/local.arp file, and the ipassignment.conf file can be found in sk33422  Office Mode IP and ipassignment.conf file.

[Jesus_Cano]

ah ok, sorry for the missunderstading. So the gw files are not changing the directory but in SMS those files (“$FWDIR/conf/user.def.FW1” and “$FWDIR/conf/user.def”) are changing the directory in R80 , right?.

anyway i think i could run (find / -name "*user.def") in order to find the exact directory, right? and then add all the customized lines.

[G_W_Albrecht]

It is a two sides story: user.def gets duplicated for new GW as well as SMS versions - so for combination GW + SMS there is one user.def; same SMS with different version GW has a different user.def.

[HeikoAnkenbrand]

Hi Jesus,

There are still some files you should look at:

user.def

table.def

tabel.def.FW1

crypt.def                 >>> vpn setiings

fwkern.conf           >>> permanent fw settings

trac_client_1.ttm   >>> if you use secure client

/var/ace/*             >>> RSA token authentication

ipassignment.conf

discntd.if               >>> disconnected if on ClusterXL

...

I'm not copying the files from R77.x to R80.10. I add the changed lines to the corresponding files.

Regards

Heiko

[Jesus_Cano]

Yes i know, customer told me the files that they know that have been modified. I will ask for taking those files too.

So i dont know how checkpoint doesnt have any script or any tool or anything to do easier this migration with custom files... This will save many customer complainings :S

[HeikoAnkenbrand]

Hi Jesus,

When you start "migrate export" on the management server, you will see many files that have been edited.

Unfortunately there is no script for this.

There is only one script to collect files when you switch from SPLAT to GAIA.

Regards

Heiko