Hand-edited Files to Check After Gateway Upgrade/Fresh-load

[Timothy_Hall]

While the possible list of hand-edited files such as fwkern.conf to check after a security gateway has been upgraded/migrated has been discussed in a number of posts (Security Gateway Migration & Save virtual server configurations on a VSX member), I just stumbled over a new (to me) SK that officially documents these files for the first time and thought I'd post it here for future reference:

sk160392: List of Check Point Configuration Files on a Security Gateway that need to be re-configure...

[JozkoMrkvicka]

I would like to see the sk updated with hand-edited files on SMS/MDS. To have all needed info within one single article.

Or to have nice looking PDF which can everyone print and put it on (virtual) whiteboard 😉

[John_Tomasetti]

It's a good start, but they missed some. I'm sure there will be more as people read this sk.

These bite me every time I do an upgrade.

$FWDIR/lib/implied_rules.def (see sk31692)
$FWDIR/conf/trac_client_1.ttm
$FWDIR/conf/ipassignments.conf
/etc/ssh/sshd_config (for R80.30 and below)

[mk1]

Absolutely agree!

[G_W_Albrecht]

There is a lot more!

vpn_route.conf

ftp.def

vpn_table.def

base.def

table.def

communities.def

Duplicated on the SMS for every GW type we find:

user.def

crypt.def

Better to note in a central place in which files which changes have been made when...