Management Migration Issue R77.30 to R80.10

[AMON_HERMANN]

Hello , 

I'm trying to migrate a R77.30 management to R80.10. I Get some errors when I'm using the R80.10 migration tools on my R77.30 Management . Can you help me resolve this issue please 

Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:

pre_upgrade_verification_report.html

pre_upgrade_verification_report.xls

pre_upgrade_verification_report.txt (text file)

-------------------------------------

[12 Jul 16:10:38] <-- PreupgradeVerifierRunner::exec

[12 Jul 16:10:38] [ActivitiesManager::exec] ERR: Activity 'PreupgradeVerifierRunner' failed

[12 Jul 16:10:38] [ActivitiesManager::exec] WRN: Activities execution finished with errors

[12 Jul 16:10:38] [ActivitiesManager::exec] WRN: Activities 'PreupgradeVerifierRunner' have failed

[12 Jul 16:10:38] [ActivitiesManager::exec] Designated exit code is 1

[12 Jul 16:10:38] --> CleanupManager::Instance

[12 Jul 16:10:38] <-- CleanupManager::Instance

[12 Jul 16:10:38] --> CleanupManager::DoCleanup

[12 Jul 16:10:38] [CleanupManager::DoCleanup] Starting to perform cleanup

[12 Jul 16:10:38] .--> NoSpaceNotifierCleaner::exec

[12 Jul 16:10:38] [NoSpaceNotifierCleaner::exec] Starting notificator about lack of space during export

[12 Jul 16:10:38] ..--> GetConfig

[12 Jul 16:10:38] ..<-- GetConfig

[12 Jul 16:10:38] [NoSpaceNotifierCleaner::exec] Indication about gzip execution failure is: 0

[12 Jul 16:10:38] ..--> GetFreeDiskSpace

[12 Jul 16:10:38] [GetFreeDiskSpace] Directory '/opt/CPsuite-R77/fw1/tmp/migrate/' has 210366959616 bytes of free space

[12 Jul 16:10:38] ..<-- GetFreeDiskSpace

[12 Jul 16:10:38] ..--> UpgradeMacroReplacer::Instance

[12 Jul 16:10:38] ..<-- UpgradeMacroReplacer::Instance

[12 Jul 16:10:38] ..--> CanonicalizePath

[12 Jul 16:10:38] [CanonicalizePath] Canonicalizing path '/var/CPbackup/backups/'

[12 Jul 16:10:38] [CanonicalizePath] Resulting path: '/var/CPbackup/backups/'

[12 Jul 16:10:38] ..<-- CanonicalizePath

[12 Jul 16:10:38] ..--> GetFreeDiskSpace

[12 Jul 16:10:38] [GetFreeDiskSpace] Directory '/var/CPbackup/backups/' has 106605129728 bytes of free space

[12 Jul 16:10:38] ..<-- GetFreeDiskSpace

[12 Jul 16:10:38] .<-- NoSpaceNotifierCleaner::exec

[12 Jul 16:10:38] .--> DirCleaner::exec

[12 Jul 16:10:38] [DirCleaner::exec] Going to remove directory '/opt/CPsuite-R77/fw1/tmp/migrate/'

[12 Jul 16:10:38] .<-- DirCleaner::exec

[12 Jul 16:10:38] [CleanupManager::DoCleanup] Completed the cleanup

[12 Jul 16:10:38] <-- CleanupManager::DoCleanup

On my R77.30 MGMT 

# df -h

Filesystem            Size  Used Avail Use% Mounted on

/dev/mapper/vg_splat-lv_current

                      117G   11G  100G  10% /

/dev/hda1             289M   24M  251M   9% /boot

tmpfs                 7.8G     0  7.8G   0% /dev/shm

/dev/mapper/vg_splat-lv_log

                      208G  699M  196G   1% /var/log

]#

This is Check Point's software version R77.30 - Build 503

# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80

================================

Action items before upgrade:

================================

Errors found! To create a working environment, the errors must be corrected.

==============================================================================

Title: Objects with non-Unicode characters

-----

* Description: The database contains objects with non-Unicode characters. Remove the non-Unicode characters or follow the instructions in sk114739 before running the upgrade process.

These tables contain objects with non-Unicode characters:

fw_policies

sem_fw_policies

sem_network_objects

Warnings: It is recommended to resolve the following problems.

==============================================================

Title: Deactivate IPS protections by type (Client/Server)

-----

* Description: Deactivating IPS protections by type (Client/Server) will be supported for pre R80 gateways only.

When deactivating Client or Server protections, it will not be supported for R80.10 gateway.

We recommend you to move to the new tag based activation for Client/Server protections.

Profiles name:

No_Protection 

Title: Network Exceptions Acceleration Limitation

-----

* Description: Network exceptions accelerations may not be supported on R80.10 gateways

Some of the network exceptions that were configured before the upgrade and caused the HTTP traffic to be accelerated, may not accelerate traffic after you upgrade the GW to R80.10. See sk117588

Title: Legacy Default Profiles are not supported

-----

* Description: The Database has Legacy Default Profiles.

They will be deleted:

Endpoint_Full_Access,

Endpoint_Helpdesk,

Endpoint_RemoteHelpAndMediaRecovery,

Admin

Title: Application Control deprecated categories

-----

* Description: Rulebase contains Application Control categories or group of categories that were deprecated.

For deprecated categories list and recommended substitutes please refer to sk106783.

The following categories are deprecated:

The category: "Web Based Instant Messaging" in rule Num. 2 of "HUB-FW-Internet" policy is deprecated, it will be replaced with "Instant Chat"

The category: "Supports File Transfer" in rule Num. 2 of "HUB-FW-Internet" policy is deprecated, it will be replaced with "File Storage and Sharing"

Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:

pre_upgrade_verification_report.html

pre_upgrade_verification_report.xls

pre_upgrade_verification_report.txt (text file)

[Exp1:0]# ./migrate export test.tgz

Execution finished with errors. See log file '/opt/CPshrd-R77/log/migrate-2017.07.13_15.40.47.log' for further details

# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80timed out waiting for input: auto-logout

King regards 

[PhoneBoy]

This is your issue right here.

* Description: The database contains objects with non-Unicode characters. Remove the non-Unicode characters or follow the instructions in sk114739 before running the upgrade process.

These tables contain objects with non-Unicode characters:

fw_policies

sem_fw_policies

sem_network_objects

Refer to the following SK: "The database contains objects with non-Unicode characters" error from R80.10 Pre-Upgrade Verificati... 

[PhoneBoy]

Were you able to upgrade successfully after applying sk114739 https://community.checkpoint.com/people/herma55c079d8-b33f-4dc8-9c5c-570276a0b0dc‌?

I'm curious if there is anything we can do to improve the error messages around this (or the upgrade process in general).

[AMON_HERMANN]

Hi Dameon , 

I tried to apply the SK114739 , but I have the same issue during the Pre-upgrade Verifier . 

[PhoneBoy]

I recommend utilizing this: R80.x Upgrade Verification and Environment Simulation service 

This will upload the necessary information to us and open a TAC case.

Please send me the SR in a private message and we can investigate further.

[Prabulingam_N1]

Dear Amon,

So once you ran the "Check_Point_R80_Encoding_Detection_sk109795.zip", you might have got the one encode.

You might have placed the correct encoding of that in "db_encoding.txt in the $FWDIR/conf/ directory".

Now did you had any chance for clearing the "Warnings".

Also when you ran pre-upgrade verifier for 2nd time (after encoding done) - what was the "Error message"

Regards, Prabulingam.N