- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Management Migration Issue R77.30 to R80.10
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Management Migration Issue R77.30 to R80.10
Hello ,
I'm trying to migrate a R77.30 management to R80.10. I Get some errors when I'm using the R80.10 migration tools on my R77.30 Management . Can you help me resolve this issue please
Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:
pre_upgrade_verification_report.html
pre_upgrade_verification_report.xls
pre_upgrade_verification_report.txt (text file)
-------------------------------------
[12 Jul 16:10:38] <-- PreupgradeVerifierRunner::exec
[12 Jul 16:10:38] [ActivitiesManager::exec] ERR: Activity 'PreupgradeVerifierRunner' failed
[12 Jul 16:10:38] [ActivitiesManager::exec] WRN: Activities execution finished with errors
[12 Jul 16:10:38] [ActivitiesManager::exec] WRN: Activities 'PreupgradeVerifierRunner' have failed
[12 Jul 16:10:38] [ActivitiesManager::exec] Designated exit code is 1
[12 Jul 16:10:38] --> CleanupManager::Instance
[12 Jul 16:10:38] <-- CleanupManager::Instance
[12 Jul 16:10:38] --> CleanupManager::DoCleanup
[12 Jul 16:10:38] [CleanupManager::DoCleanup] Starting to perform cleanup
[12 Jul 16:10:38] .--> NoSpaceNotifierCleaner::exec
[12 Jul 16:10:38] [NoSpaceNotifierCleaner::exec] Starting notificator about lack of space during export
[12 Jul 16:10:38] ..--> GetConfig
[12 Jul 16:10:38] ..<-- GetConfig
[12 Jul 16:10:38] [NoSpaceNotifierCleaner::exec] Indication about gzip execution failure is: 0
[12 Jul 16:10:38] ..--> GetFreeDiskSpace
[12 Jul 16:10:38] [GetFreeDiskSpace] Directory '/opt/CPsuite-R77/fw1/tmp/migrate/' has 210366959616 bytes of free space
[12 Jul 16:10:38] ..<-- GetFreeDiskSpace
[12 Jul 16:10:38] ..--> UpgradeMacroReplacer::Instance
[12 Jul 16:10:38] ..<-- UpgradeMacroReplacer::Instance
[12 Jul 16:10:38] ..--> CanonicalizePath
[12 Jul 16:10:38] [CanonicalizePath] Canonicalizing path '/var/CPbackup/backups/'
[12 Jul 16:10:38] [CanonicalizePath] Resulting path: '/var/CPbackup/backups/'
[12 Jul 16:10:38] ..<-- CanonicalizePath
[12 Jul 16:10:38] ..--> GetFreeDiskSpace
[12 Jul 16:10:38] [GetFreeDiskSpace] Directory '/var/CPbackup/backups/' has 106605129728 bytes of free space
[12 Jul 16:10:38] ..<-- GetFreeDiskSpace
[12 Jul 16:10:38] .<-- NoSpaceNotifierCleaner::exec
[12 Jul 16:10:38] .--> DirCleaner::exec
[12 Jul 16:10:38] [DirCleaner::exec] Going to remove directory '/opt/CPsuite-R77/fw1/tmp/migrate/'
[12 Jul 16:10:38] .<-- DirCleaner::exec
[12 Jul 16:10:38] [CleanupManager::DoCleanup] Completed the cleanup
[12 Jul 16:10:38] <-- CleanupManager::DoCleanup
On my R77.30 MGMT
# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current
117G 11G 100G 10% /
/dev/hda1 289M 24M 251M 9% /boot
tmpfs 7.8G 0 7.8G 0% /dev/shm
/dev/mapper/vg_splat-lv_log
208G 699M 196G 1% /var/log
]#
This is Check Point's software version R77.30 - Build 503
# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80
================================
Action items before upgrade:
================================
Errors found! To create a working environment, the errors must be corrected.
==============================================================================
Title: Objects with non-Unicode characters
-----
* Description: The database contains objects with non-Unicode characters. Remove the non-Unicode characters or follow the instructions in sk114739 before running the upgrade process.
These tables contain objects with non-Unicode characters:
fw_policies
sem_fw_policies
sem_network_objects
Warnings: It is recommended to resolve the following problems.
==============================================================
Title: Deactivate IPS protections by type (Client/Server)
-----
* Description: Deactivating IPS protections by type (Client/Server) will be supported for pre R80 gateways only.
When deactivating Client or Server protections, it will not be supported for R80.10 gateway.
We recommend you to move to the new tag based activation for Client/Server protections.
Profiles name:
No_Protection
Title: Network Exceptions Acceleration Limitation
-----
* Description: Network exceptions accelerations may not be supported on R80.10 gateways
Some of the network exceptions that were configured before the upgrade and caused the HTTP traffic to be accelerated, may not accelerate traffic after you upgrade the GW to R80.10. See sk117588
Title: Legacy Default Profiles are not supported
-----
* Description: The Database has Legacy Default Profiles.
They will be deleted:
Endpoint_Full_Access,
Endpoint_Helpdesk,
Endpoint_RemoteHelpAndMediaRecovery,
Admin
Title: Application Control deprecated categories
-----
* Description: Rulebase contains Application Control categories or group of categories that were deprecated.
For deprecated categories list and recommended substitutes please refer to sk106783.
The following categories are deprecated:
The category: "Web Based Instant Messaging" in rule Num. 2 of "HUB-FW-Internet" policy is deprecated, it will be replaced with "Instant Chat"
The category: "Supports File Transfer" in rule Num. 2 of "HUB-FW-Internet" policy is deprecated, it will be replaced with "File Storage and Sharing"
Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:
pre_upgrade_verification_report.html
pre_upgrade_verification_report.xls
pre_upgrade_verification_report.txt (text file)
[Exp1:0]# ./migrate export test.tgz
Execution finished with errors. See log file '/opt/CPshrd-R77/log/migrate-2017.07.13_15.40.47.log' for further details
# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80timed out waiting for input: auto-logout
King regards
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is your issue right here.
* Description: The database contains objects with non-Unicode characters. Remove the non-Unicode characters or follow the instructions in sk114739 before running the upgrade process.
These tables contain objects with non-Unicode characters:
fw_policies
sem_fw_policies
sem_network_objects
Refer to the following SK: "The database contains objects with non-Unicode characters" error from R80.10 Pre-Upgrade Verificati...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Were you able to upgrade successfully after applying sk114739 https://community.checkpoint.com/people/herma55c079d8-b33f-4dc8-9c5c-570276a0b0dc?
I'm curious if there is anything we can do to improve the error messages around this (or the upgrade process in general).
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Dameon ,
I tried to apply the SK114739 , but I have the same issue during the Pre-upgrade Verifier .
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I recommend utilizing this: R80.x Upgrade Verification and Environment Simulation service
This will upload the necessary information to us and open a TAC case.
Please send me the SR in a private message and we can investigate further.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dear Amon,
So once you ran the "Check_Point_R80_Encoding_Detection_sk109795.zip", you might have got the one encode.
You might have placed the correct encoding of that in "db_encoding.txt in the $FWDIR/conf/ directory".
Now did you had any chance for clearing the "Warnings".
Also when you ran pre-upgrade verifier for 2nd time (after encoding done) - what was the "Error message"
Regards, Prabulingam.N
