Upgrade Or Downgrade from R75.10 SPLAT

[LeeBingKang]

Hi All,

Recently, we are trying to upgrade an old machine which is in version R75.10 SPLAT. However, the verification was failed when we try to run the pre upgrade verifier from upgrade tool version 75.40, and 77.

With this, I would like to seek some assistance on this matter and appreciate for your feedback.

Thank you.

[Tal_Paz-Fridman · Accepted solution]

R75.10 reached end of Support in 2015:

https://www.checkpoint.com/support-services/support-life-cycle-policy/#software-support

I suggest contacting Check Point TAC for assistance 

[LeeBingKang]

Hi Tal_Paz-Fridman,

Thank you for providing feedback on my post.

May i know if CheckPoint side has the R75.20 SPLAT ISO with them?

Thank you.

[Tal_Paz-Fridman]

I assume Check Point TAC (Support) does keep copies for these type of cases.

[the_rock]

Your best bet is to open TAC case as @Tal_Paz-Fridman has stated and ask if they may have the file.

Andy

[Duane_Toler]

You likely will need some hot fixes to get ready for R75.40 (should be your next target; not sure if you can go directly to R77.30).  I think you can skip R75.45 and R75.47 for this.

Once you get a working R75.40 management server, do a migrate export for R77.30.  At this point STOP.

Install a brand new R77.30 VM on Gaia.  Import your exported R77.30 database and verify it works.

When you get to R77.30, then you need the latest jumbo HFA and the new migrate export tools. Run migrate_server to export for R80.40 (for your own safe keeping). Upgrade Gaia with the Blink image if you want and it’ll do the migrate export and import for you.

Verify R80.40 works, then do a migrate_server export for R81.20.

I’d suggest ANOTHER brand new VM install for R81.20, with recent HFA, and import the database export again.

For any troubles you encounter on the way, read the logs carefully. They will tell you what to do to get things fixed. You may need to get an eval license so you can get a fresh IPS database update along the way somewhere. You may also need license upgrades. You may encounter a CP.macro file that needs updating at various points. Usually this is shown in some error output fairly prominently.

Enjoy!

[Hugo_vd_Kooij]

One remark here. Don't use Blink images on Management.

Been there, done that and the system did a rollback every time. So I strongly recommend to not use blink images on Management.

[PhoneBoy]

Maybe try using these tools to extract the configuration and put into a newly build R77.30 VM, then upgrade that: https://community.checkpoint.com/t5/Scripts/Odumper-and-Ofiller-Exporting-Importing-R5x-R7x-Config/m...

[LeeBingKang · Accepted solution]

Hi Guys,

Thanks for all of your feedback on this matter.

me and colleague able to do the upgrade and there are 2 things which block us:

1. the upgrade tools - make sure all the file in the upgrade tools is with execute permission. To ensure this, better compress the upgrade tools from R77 machine (lab machine) before taking it out to your pc and put it to the R75.10 machine (lab machine).

2. use database extract by upgrade tools instead of backup restore - the upgrade tool failed to export the upgraded database when we backup restore (get from production machine) on the R75.10 machine (lab machine), but its success when we use database (create by migrate export from production machine) on the R75.10 machine (lab machine).

For the next upgrade version like R77.30, R80.40, and R81.20, there is no issue with the upgrade by using upgrade tools given by CheckPoint.

[the_rock]

So all good now?

Andy

[LeeBingKang]

Hi the_rock,

Should be looks good so far.

[the_rock]

Glad you got it going!

Andy