R81.20 ISO 634 - Database Import

[Simon_Macpherso]

We plan to perform a install of a R81.20 SMS.

We want to deploy the R81.20 ISO containing OS build 634.

The current SMS waws deployed with R81.20 ISO OS build 631.

Can the exported database be imported into a new server deployed with OS build 634?

If not, what would be the recommended course of action in this scenario?

Are there notable enhancements in OS build 634?

[Alex-]

I don't think it would make any difference. The new build incorporates the fix for the CVE-2024-24919 in the baseline OS, so you can only use Take 65 and above with that build but at least you're not vulnerable out of the box if you're not patched yet.

For the rest it's your usual R81.20 Gaia/Titan.

[PhoneBoy]

Shouldn't be an issue.

[Amir_Senn]

100% what Alex said.

Recommendation from me is upgrade to latest recommended JHF and use T631+JHF for baseline.

[rrbranco]

Try to export and import using the latest available version of the Upgrade Tools package related to the destination version.

https://support.checkpoint.com/results/sk/sk135172
Upgrade Tools package for upgrade from R80.20 and higher

[RamGuy239]

^ This.

By far the most common reason for database import to fail, is because people tend to configure the new SMS as a seperate virtual machine, without Internet access. Which is perfectly fine, but as the new deployment is stilling with no access to updates.checkpoint.com, things like migrate_server, hcp, cpinfo etc. Is not able to automatically update.

You are most likely exporting on R81.20 Build 631 with updated migrate_server script / upgrade tools, as this installation has internet access and thus is able to auto-update these scripts in the background. While your attempt at importing on R81.20 Build 634 is most likely taking place on a virtual machine without internet access, requiring you to manually update the migrate_server / upgrade tools before importing.

[dj0Nz]

I just wanted to add that this week I tried to import a R81.10 database in a SMS VM installed with the 634 ISO and it failed. After reinstalling it using the 631 ISO, import was successful. Identical procedure and same Jumbo used in both cases. TAC is involved.