R80.10 upgrade rules verification

[Dan_Currens]

R77.30 combined Gateway and SmartCenter server that passed the pre-upgrade-verifier and upgraded to R80.10 through CPUSE.

The upgrade completed without issue.  But when it went to install the policy, two rules that passed the R77.30 Rules Verification did not pass the R80.10 Access Control policy verification and the policy did not install until I modified them. 

Are there some differences documented in R80.10 in how the policy is verified? 

In this case it was a good thing, the rules in violation did have issues.  Just didn't see where the issue was initially.

[paul_mallett]

Was the failure due to what was effectively rule duplication? I ask because I believe that redundancy detection was improved in R80.10 - the same was included in a hotfix for R77.30 (can't remember precisely which one).

[Dan_Currens]

Yes, it was essentially over lapped rules.

[Dan_Zaidman]

Hi Dan.

There is no documentation.

IMHO we have a better tool.

You can use the R80 desk to simulate the upgrade process and policy installation.

You can read more about this procedure at :

sk110267 - R80.x Upgrade Verification and Environment Simulation service.

Thanks

Dan Zaidman

[Vladimir]

Dan,

Unless I am misreading "R77.30 combined Gateway and SmartCenter server", the Upgrade Verification and Environment Simulation service will not work.

sk110267 states that "StandAlone installation is not supported:.

[Dan_Zaidman]

Hi Vladimir , you are right.

Stand Alone installation is not supported in the simulation service.

[PhoneBoy]

There were some bugs in the rulebase validation routines in R77.20 and R77.30 that were fixed in R80.10 and possibly recent jumbo hotfixes of R77.30.

As a result, some policies that installed ok prior to upgrading to R80.10 will not install after you upgrade.

These issues are not caught by the pre-upgrade verifier.

[Eyal_Rashelbach]

Hi Dan,

I hope that following our help you to succeed with your migrating to R80.10
I appreciate if you share your experience with us in our R80.10 Survey 

if needed I will be happy to assist you with personal attention.

Eyal Rashelbach

R80 Desk Manager, Solution Center | Check Point Software Technologies