Korkut Ozcan

How to Check Point upgrade R77.30 to R80

Discussion created by Korkut Ozcan on May 9, 2017
Latest reply on May 15, 2017 by Prabulingam N

Pre-R80 Management Server Migration Tool - sk108623 - Download

Target Version and Products:

[Expert@PoC-mgmt:0]# ./pre_upgrade_verifier --help

This is Check Point Pre-Upgrade Verifier for version R80.

 

 

Usage: pre_upgrade_verifier -p SecurityManagementPath -c CurrentVersion -t TargetVersion [-u | -a][-f FileName] [-w]

  Or: pre_upgrade_verifier -p SecurityManagementPath -c CurrentVersion -i [-f FileName] [-w]

        -p Path of the installed Security Management Server (FWDIR).

        -c Currently installed version.

        -t Target version.

        -i Check originality of Inspect files only.

        -u Perform plug-in related checks.

        -a Skip main train version checks, perform plug-in related checks only.

        -f Output in file.

        -w Web format file.

 

 

where the Currently installed version is one of the following:

NGX_R65 (aliases: 6.0.1.0)

R70 (aliases: R70_R70, 6.0.1.6)

R71 (aliases: R71_R71, 6.0.1.7)

R75 (aliases: R75_R75, 6.0.2.0)

R75.20 (aliases: R75.20_R75.20, 6.0.2.1)

R75.40 (aliases: R75.40_R75.40, 6.0.2.5)

R75.40VS (aliases: R75.40VS_R75.40VS, 6.0.3.0)

R76 (aliases: R76_R76, 6.0.3.5)

R77 (aliases: R77_R77, 6.0.4.0)

 

 

where the Target version is one of the following:

R70 (aliases: R70_R70, 6.0.1.6)

R71 (aliases: R71_R71, 6.0.1.7)

R75 (aliases: R75_R75, 6.0.2.0)

R75.20 (aliases: R75.20_R75.20, 6.0.2.1)

R75.40 (aliases: R75.40_R75.40, 6.0.2.5)

R75.40VS (aliases: R75.40VS_R75.40VS, 6.0.3.0)

R76 (aliases: R76_R76, 6.0.3.5)

R77 (aliases: R77_R77, 6.0.4.0)

R80 (aliases: R80_R80, 6.0.4.8)</pre>

 

Analyzes of the currently configuration;

#./pre_upgrade_verifier -p $FWDIR -c R77 -t R80

 

================================

Action items before upgrade:

================================

 

Warnings: It is recommended to resolve the following problems.

==============================================================

 

Title: Application Control deprecated categories

-----

* Description: Rulebase contains Application Control categories or group of categories that were deprecated.

For deprecated categories list and recommended substitutes please refer to sk106783.

 

 

To resolve the problem, fix the following categories:

 

 

The category: "Social Plugins" in rule Num. 12 of "PoC-Standard" policy is deprecated

The category: "Tunnels" in PoC_Block_APP group is deprecated

The category: "Facebook File Sharing" in PoC_Block_APP group is deprecated

The category: "Torrent Trackers" in PoC_Block_APP group is deprecated, it is recommended to replace it with "P2P File Sharing"

The category: "MySpace Games" in PoC_Block_APP group is deprecated

 

Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:

pre_upgrade_verification_report.html

pre_upgrade_verification_report.xsl

pre_upgrade_verification_report.txt (text file)

 

[Expert@fetrofermgmt:0]# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80

No errors found by the Pre Upgrade Verifier.

 

[[Expert@PoC-mgmt:0]# ./migrate export PoC-pre-R80.tgz

You are required to close all clients to Security Management Server

or execute 'cpstop' before the Export operation begins.

 

Do you want to continue? (y/n) [n]? y

 

Copying required files...

Compressing files...

 

 

The operation completed successfully.

 

 

Location of archive with exported database: /var/log/pre_upgrade_r80/PoC-pre-R80.tgz

Outcomes