cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Upgrade to R80.20

Hi

I have to upgrade my Production MDS from R 77.30 to R 80.20. So I am running a Test Upgrade in a Lab Environment so that I can replicate it to my Production Environment.

I took a Back-Up from my R77.30 Production MDS and restored it in an R77.30 VM in my Lab. I Changed the MDS IP, CMA IP, and Lead Interface. I attached an Eval License, then I logged in to the R77.30 (VM) Smart Dashboard, disabled the automatic IPS updates and installed the database. I copied the R80.20 Security Management Clean Install ISO File into the R77.30 VM and ran the Pre Upgrade Verifier.

The Pre Upgrade gave me the below three warnings but it said I can upgrade it.

1. Legacy DHCP Relay Services - Change in Behavior in R80 and Higher

2. Deactivate IPS Protections by type (Client/Server)

3. OPSEC was modified in R80

Since the verification report said I can upgrade it, I took the export from my LAB MDS and copied that file to another R80.20 VM. When I try to import this to my LAB R80.20 VM, the MDS Database upgrade is Succesful but the CMA Database upgrade failed. I see the below error in the log file and the FWM Process of the CMA in the R80.20 VM doesn't come up. I am stuck here.

Anyhelp here would be much appreciated.

[23 May 12:02:44] [DbUpgrader::ExecuteCpdb] Executing cpdb using the following arguments: "/opt/CPmds-R80.20/customers/Santander_US_Pri_Mgmnt/CPsuite-R80.20/fw1/bin/cpdb" up --no-ngm-db-drop --no-ngm-stop --src_version 6.0.4.0 --src_hfa_level 30 --src_path "/opt/CPmds-R80.20/customers/Santander_US_Pri_Mgmnt/CPsuite-R80.20/fw1/tmp/migrate/main_db/" --db_path "/opt/CPmds-R80.20/customers/Santander_US_Pri_Mgmnt/CPsuite-R80.20/fw1/conf/" --default_path "/opt/CPmds-R80.20/customers/Santander_US_Pri_Mgmnt/CPsuite-R80.20/fw1/conf/defaultDatabase" --db_type cma --db-migration

[23 May 12:02:44] [runShellCommand] Executing command: '"/opt/CPmds-R80.20/customers/Santander_US_Pri_Mgmnt/CPsuite-R80.20/fw1/bin/cpdb" up --no-ngm-db-drop --no-ngm-stop --src_version 6.0.4.0 --src_hfa_level 30 --src_path "/opt/CPmds-R80.20/customers/Santander_US_Pri_Mgmnt/CPsuite-R80.20/fw1/tmp/migrate/main_db/" --db_path "/opt/CPmds-R80.20/customers/Santander_US_Pri_Mgmnt/CPsuite-R80.20/fw1/conf/" --default_path "/opt/CPmds-R80.20/customers/Santander_US_Pri_Mgmnt/CPsuite-R80.20/fw1/conf/defaultDatabase" --db_type cma --db-migration'

[23 May 12:25:44] [runShellCommand] Execution result: 1, exit code: -1

[23 May 12:25:44] [DbUpgrader::ExecuteCpdb] ERR: cpdb completed with error code '-1'

[23 May 12:25:44] ...<-- DbUpgrader::ExecuteCpdb

[23 May 12:25:44] ..<-- DbUpgrader::UpgradeMainDatabase

[23 May 12:25:44] [DbUpgrader::exec] ERR: Failed to upgrade main database

[23 May 12:25:44] .<-- DbUpgrader::exec

[23 May 12:25:44] <-- ConditionalExecutor::exec

[23 May 12:25:44] [ActivitiesManager::exec] ERR: Activity 'ConditionalExecutor' failed

[23 May 12:25:44] [ProgressUpdater::UpdateProgressToGaia] Progress Updated to '70.2128

[23 May 12:25:44] [ActivitiesManager::exec] WRN: Activities execution finished with errors

[23 May 12:25:44] [ActivitiesManager::exec] WRN: Activities 'ConditionalExecutor' have failed

[23 May 12:25:44] [ActivitiesManager::exec] Designated exit code is 1

[23 May 12:25:44] --> CleanupManager::Instance

[23 May 12:25:44] <-- CleanupManager::Instance

[23 May 12:25:44] --> CleanupManager::DoCleanup

[23 May 12:25:44] [CleanupManager::DoCleanup] Starting to perform cleanup

0 Kudos
13 Replies

Re: Upgrade to R80.20

I would open a TAC case for this one. They can collect a CPinfo from you and should be able to recreate the issue to determine the root cause. Whatever is causing the issue, it is probably very specific to an object or configuration in your database.

Re: Upgrade to R80.20

Hi

I did open a case with Checkpoint TAC. 

In my first attempt of the Upgrade, I got this error then TAC suggested me to disable the automatic IPS updates and try again. I did that and I got the same error again.

The case is still open, but I opened a post here hoping to get some help regarding the problem that I am having

0 Kudos

Re: Upgrade to R80.20

Really dumb question, but I'm assuming free disk space is not an issue?

0 Kudos

Re: Upgrade to R80.20

The VM has 950 GB disk assigned to it

 

[Expert@R8020vamgmt01:0]# df -h     
FilesystemSizeUsedAvailUse%Mounted on
/dev/mapper/vg_splat-lv_current150G9.2G141G7%/
/dev/sda1291M25M251M9%/boot
tmpfs7.8G4.0K7.8G1%/dev/shm
/dev/mapper/vg_splat-lv_log150G3.6G147G3%/var/log

 

Re: Upgrade to R80.20

Have you seen this sk?

0 Kudos

Re: Upgrade to R80.20

Hi

Do you know the Path to those files?

I couldn't find that in my VM.

Re: Upgrade to R80.20

Did you look in either $FWDIR/log or $CPDIR/log?

0 Kudos

Re: Upgrade to R80.20

checked the files and SK

The error is different.

JozkoMrkvicka
Platinum

Re: Upgrade to R80.20

Do you have Global Policies on R77.30 ? If yes, firstly you need to import GP on R80.20 using "import_global_policies" command and after that do import itself.

And have a look here for similar issues:

Installation & Upgrade problems from R77.x to R80.x

Kind regards,
Jozko Mrkvicka

Re: Upgrade to R80.20

Hi

I do not have global policies. I just have one TACACS+ global object for authentication. other than that I do not have any global policies.

0 Kudos
Employee+
Employee+

Re: Upgrade to R80.20

Hi

Let me see if I can help you as well.

1) Did TAC help you with this issue?

2) Can you share the SR number so that I can also followup internally?

3) I will involve R&D see if we have a quick solution to the problem.

Best wishes

Tal

0 Kudos
Employee+
Employee+

Re: Upgrade to R80.20

Hi Ravindra,

Also if you prefer you can contact me directly at tfridman@checkpoint.com

Best wishes

Tal

0 Kudos

Re: Upgrade to R80.20

Hi

I Opened a case with TAC. I send the export files and back up files whenever asked but no success so far.

Case N.O: 6-0001567206

I would really appreciate any help.

0 Kudos