Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Dan_Currens
Explorer

R80.10 upgrade rules verification

R77.30 combined Gateway and SmartCenter server that passed the pre-upgrade-verifier and upgraded to R80.10 through CPUSE.

The upgrade completed without issue.  But when it went to install the policy, two rules that passed the R77.30 Rules Verification did not pass the R80.10 Access Control policy verification and the policy did not install until I modified them. 

Are there some differences documented in R80.10 in how the policy is verified? 

In this case it was a good thing, the rules in violation did have issues.  Just didn't see where the issue was initially.

0 Kudos
7 Replies
paul_mallett
Explorer

Was the failure due to what was effectively rule duplication? I ask because I believe that redundancy detection was improved in R80.10 - the same was included in a hotfix for R77.30 (can't remember precisely which one).

Dan_Currens
Explorer

Yes, it was essentially over lapped rules.

0 Kudos
Dan_Zaidman
Employee
Employee

Hi Dan.

There is no documentation.

IMHO we have a better tool.

You can use the R80 desk to simulate the upgrade process and policy installation.

You can read more about this procedure at :

sk110267 - R80.x Upgrade Verification and Environment Simulation service.

Thanks

Dan Zaidman

0 Kudos
Vladimir
Champion
Champion

Dan,

Unless I am misreading "R77.30 combined Gateway and SmartCenter server", the Upgrade Verification and Environment Simulation service will not work.

sk110267 states that "StandAlone installation is not supported:.

0 Kudos
Dan_Zaidman
Employee
Employee

Hi Vladimir , you are right.

Stand Alone installation is not supported in the simulation service.

0 Kudos
PhoneBoy
Admin
Admin

There were some bugs in the rulebase validation routines in R77.20 and R77.30 that were fixed in R80.10 and possibly recent jumbo hotfixes of R77.30.

As a result, some policies that installed ok prior to upgrading to R80.10 will not install after you upgrade.

These issues are not caught by the pre-upgrade verifier.

Eyal_Rashelbach
Employee
Employee

Hi Dan,

I hope that following our help you to succeed with your migrating to R80.10
I appreciate if you share your experience with us in our R80.10 Survey 

if needed I will be happy to assist you with personal attention.

Eyal Rashelbach


R80 Desk Manager, Solution Center | Check Point Software Technologies

0 Kudos