Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Korkut_Ozcan
Explorer

How to Check Point upgrade R77.30 to R80

Pre-R80 Management Server Migration Tool - sk108623 - Download

Target Version and Products:

[Expert@PoC-mgmt:0]# ./pre_upgrade_verifier --help

This is Check Point Pre-Upgrade Verifier for version R80.

Usage: pre_upgrade_verifier -p SecurityManagementPath -c CurrentVersion -t TargetVersion [-u | -a][-f FileName] [-w]

  Or: pre_upgrade_verifier -p SecurityManagementPath -c CurrentVersion -i [-f FileName] [-w]

        -p Path of the installed Security Management Server (FWDIR).

        -c Currently installed version.

        -t Target version.

        -i Check originality of Inspect files only.

        -u Perform plug-in related checks.

        -a Skip main train version checks, perform plug-in related checks only.

        -f Output in file.

        -w Web format file.

where the Currently installed version is one of the following:

NGX_R65 (aliases: 6.0.1.0)

R70 (aliases: R70_R70, 6.0.1.6)

R71 (aliases: R71_R71, 6.0.1.7)

R75 (aliases: R75_R75, 6.0.2.0)

R75.20 (aliases: R75.20_R75.20, 6.0.2.1)

R75.40 (aliases: R75.40_R75.40, 6.0.2.5)

R75.40VS (aliases: R75.40VS_R75.40VS, 6.0.3.0)

R76 (aliases: R76_R76, 6.0.3.5)

R77 (aliases: R77_R77, 6.0.4.0)

where the Target version is one of the following:

R70 (aliases: R70_R70, 6.0.1.6)

R71 (aliases: R71_R71, 6.0.1.7)

R75 (aliases: R75_R75, 6.0.2.0)

R75.20 (aliases: R75.20_R75.20, 6.0.2.1)

R75.40 (aliases: R75.40_R75.40, 6.0.2.5)

R75.40VS (aliases: R75.40VS_R75.40VS, 6.0.3.0)

R76 (aliases: R76_R76, 6.0.3.5)

R77 (aliases: R77_R77, 6.0.4.0)

R80 (aliases: R80_R80, 6.0.4.8)</pre>

Analyzes of the currently configuration;

#./pre_upgrade_verifier -p $FWDIR -c R77 -t R80

================================

Action items before upgrade:

================================

Warnings: It is recommended to resolve the following problems.

==============================================================

Title: Application Control deprecated categories

-----

* Description: Rulebase contains Application Control categories or group of categories that were deprecated.

For deprecated categories list and recommended substitutes please refer to sk106783.

To resolve the problem, fix the following categories:

The category: "Social Plugins" in rule Num. 12 of "PoC-Standard" policy is deprecated

The category: "Tunnels" in PoC_Block_APP group is deprecated

The category: "Facebook File Sharing" in PoC_Block_APP group is deprecated

The category: "Torrent Trackers" in PoC_Block_APP group is deprecated, it is recommended to replace it with "P2P File Sharing"

The category: "MySpace Games" in PoC_Block_APP group is deprecated

Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:

pre_upgrade_verification_report.html

pre_upgrade_verification_report.xsl

pre_upgrade_verification_report.txt (text file)

[Expert@fetrofermgmt:0]# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80

No errors found by the Pre Upgrade Verifier.

[[Expert@PoC-mgmt:0]# ./migrate export PoC-pre-R80.tgz

You are required to close all clients to Security Management Server

or execute 'cpstop' before the Export operation begins.

Do you want to continue? (y/n) [n]? y

Copying required files...

Compressing files...

The operation completed successfully.

Location of archive with exported database: /var/log/pre_upgrade_r80/PoC-pre-R80.tgz

2 Replies
Daniel_Dor
Employee Alumnus
Employee Alumnus

Do you have something like that for R77.20 to R77.30?

0 Kudos
Prabulingam_N1
Advisor

Hi Daniel,

You can do the same by running Pre-upgrade verifier of R77.30 in your current R77.20.

Copy R77.30 Migration tools from usercenter and keep it in R77.20's location $FWDIR/bin/upgrade_tools.

Extract it and run ./pre_upgrade_verifier. This will tell you the compatibility of R77.30 with existing R77.20 movement.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events