This is a heads-up for anybody thinking of installing the T10. Make sure you have a backup in case it is not specific to my installation.
Backups are never a bad idea.
That said, I hope you're working with the TAC as that definitely does not sound like expected behavior.
Just to clarify, this is on a standalone gateway (FW + Management on same system), correct?
Nope, no tac. it's a test system with no coverage. But I have fed back to cp.
Backups / snapshots are always good;-)
Hello Declan , My name is Roman I would try to reproduce the issue you have encountered on. If it's possible, could answer on several questions below:
1) What Deployment agent version have you used?
2) What appliance/open server do you use?3) What method of Jumbo installation have you used, CPUSE Web or CPUSE CLI?4) Have you installed Jumbo over R80.10 GA or previous Jumbo HFs?5) Was it clean install of R80.10 GA or upgrade from previous versions?6) Does your environment include SA only or there additional GWs are managed by it?7) In general what do you mean when you say GW blew out? Is there some Check Point processes that are terminated? Or you don't see enforcement when you try to move some traffic through the GW? Thanks in advance! Roman
Re: Installing take 10 of R80.10 blew away the gateway part of a single gateway setup. Is that a known problem? I assume not.
reply from Roman Kats<https://community.checkpoint.com/people/roman39372b56-5450-4c97-9f2a-c8ab27d5ec0a?et=watches.email.thread> in Installation, Maintenance, and Upgrades - View the full discussion<https://community.checkpoint.com/message/6657-re-installing-take-10-of-r8010-blew-away-the-gateway-part-of-a-single-gateway-setup-is-that-a-known-problem-i-assume-not-?commentID=6657&et=watches.email.thread#comment-6657>
Declan Mc Gill
Senior Security Consultant
Dimension Data Switzerland
Tel: +41 21 631 00 74
Mob: +41 79 301 50 77
Dimension Data SA (Switzerland), Route du Bois-Genoud 1, Crissier, Vaud, 1023, Switzerland.
For more information, please go to www.dimensiondata.com<http://www.dimensiondata.com/>
<http://blog.dimensiondata.com/> <http://www.facebook.com/dimensiondata> <http://www.linkedin.com/company/dimension-data> <http://twitter.com/dimensiondatauk>
I still have the VM.
I can send you a snapshot or a backup.
This email and all contents are subject to the following disclaimer:
Hmmm. I have not experienced this issue. But my gateways are physical. I have been deploying 3200's with R80.10 & T10. I've done 2 methods. However, I reimaged all 3200s with ISOMORPHIC tool to R80.10. Then I downloaded T3 to PC and used CPUSE Import on the 3200 to bring in and apply T3. I believe I deployed 2 of the 3200's at this level. Then T10 was released. I downloaded the T10 to these two 3200's already deployed and installed with no problem. The rest of my 3200 that I needed to deploy, I followed the same process that I first outlined...except I replaced the CPUSE Import if T3 with T10 since it is inclusive. All I have left is to upgrade my two 5800 ClusterXL HA devices from R77.30 to R80.10.
We are centrally managed design...so our FW Mgt server is also R80.10 T10. My only issues with process has been the Topology import -- I have had to manually edit the 3200 I/F definitions to get policy installed. The other is cosmetic... my Laptop has a 4K display and SmartDashboard does not always display correctly on these high DPI screens!
Hi Declan McGill (and everyone else),
I'm Eran and I'm a manger in the R&D of CheckPoint, responsible for I/S in the Management Server.
First, thanks for raising this issue and I appreciate your cooperation with CheckPoint regarding this investigation, you helped us a lot to progress it.
Our team found the root cause of this issue and I would like to share with you some insights we have:
Retrieving data ...