AnsweredAssumed Answered

Management Migration Issue R77.30 to R80.10

Question asked by AMON HERMANN on Jul 13, 2017
Latest reply on Aug 8, 2017 by Prabulingam N

Hello , 

I'm trying to migrate a R77.30 management to R80.10. I Get some errors when I'm using the R80.10 migration tools on my R77.30 Management . Can you help me resolve this issue please 

 

Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:

pre_upgrade_verification_report.html

pre_upgrade_verification_report.xls

pre_upgrade_verification_report.txt (text file)

-------------------------------------

[12 Jul 16:10:38] <-- PreupgradeVerifierRunner::exec

[12 Jul 16:10:38] [ActivitiesManager::exec] ERR: Activity 'PreupgradeVerifierRunner' failed

[12 Jul 16:10:38] [ActivitiesManager::exec] WRN: Activities execution finished with errors

[12 Jul 16:10:38] [ActivitiesManager::exec] WRN: Activities 'PreupgradeVerifierRunner' have failed

[12 Jul 16:10:38] [ActivitiesManager::exec] Designated exit code is 1

[12 Jul 16:10:38] --> CleanupManager::Instance

[12 Jul 16:10:38] <-- CleanupManager::Instance

[12 Jul 16:10:38] --> CleanupManager::DoCleanup

[12 Jul 16:10:38] [CleanupManager::DoCleanup] Starting to perform cleanup

[12 Jul 16:10:38] .--> NoSpaceNotifierCleaner::exec

[12 Jul 16:10:38] [NoSpaceNotifierCleaner::exec] Starting notificator about lack of space during export

[12 Jul 16:10:38] ..--> GetConfig

[12 Jul 16:10:38] ..<-- GetConfig

[12 Jul 16:10:38] [NoSpaceNotifierCleaner::exec] Indication about gzip execution failure is: 0

[12 Jul 16:10:38] ..--> GetFreeDiskSpace

[12 Jul 16:10:38] [GetFreeDiskSpace] Directory '/opt/CPsuite-R77/fw1/tmp/migrate/' has 210366959616 bytes of free space

[12 Jul 16:10:38] ..<-- GetFreeDiskSpace

[12 Jul 16:10:38] ..--> UpgradeMacroReplacer::Instance

[12 Jul 16:10:38] ..<-- UpgradeMacroReplacer::Instance

[12 Jul 16:10:38] ..--> CanonicalizePath

[12 Jul 16:10:38] [CanonicalizePath] Canonicalizing path '/var/CPbackup/backups/'

[12 Jul 16:10:38] [CanonicalizePath] Resulting path: '/var/CPbackup/backups/'

[12 Jul 16:10:38] ..<-- CanonicalizePath

[12 Jul 16:10:38] ..--> GetFreeDiskSpace

[12 Jul 16:10:38] [GetFreeDiskSpace] Directory '/var/CPbackup/backups/' has 106605129728 bytes of free space

[12 Jul 16:10:38] ..<-- GetFreeDiskSpace

[12 Jul 16:10:38] .<-- NoSpaceNotifierCleaner::exec

[12 Jul 16:10:38] .--> DirCleaner::exec

[12 Jul 16:10:38] [DirCleaner::exec] Going to remove directory '/opt/CPsuite-R77/fw1/tmp/migrate/'

[12 Jul 16:10:38] .<-- DirCleaner::exec

[12 Jul 16:10:38] [CleanupManager::DoCleanup] Completed the cleanup

[12 Jul 16:10:38] <-- CleanupManager::DoCleanup

 

On my R77.30 MGMT 

# df -h

Filesystem            Size  Used Avail Use% Mounted on

/dev/mapper/vg_splat-lv_current

                      117G   11G  100G  10% /

/dev/hda1             289M   24M  251M   9% /boot

tmpfs                 7.8G     0  7.8G   0% /dev/shm

/dev/mapper/vg_splat-lv_log

                      208G  699M  196G   1% /var/log

]#

 

This is Check Point's software version R77.30 - Build 503

 

 

 

# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80

 

 

================================

Action items before upgrade:

================================

 

Errors found! To create a working environment, the errors must be corrected.

==============================================================================

 

 

Title: Objects with non-Unicode characters

-----

* Description: The database contains objects with non-Unicode characters. Remove the non-Unicode characters or follow the instructions in sk114739 before running the upgrade process.

 

These tables contain objects with non-Unicode characters:

 

fw_policies

sem_fw_policies

sem_network_objects

 

 

 

Warnings: It is recommended to resolve the following problems.

==============================================================

 

 

Title: Deactivate IPS protections by type (Client/Server)

-----

* Description: Deactivating IPS protections by type (Client/Server) will be supported for pre R80 gateways only.

 

When deactivating Client or Server protections, it will not be supported for R80.10 gateway.

We recommend you to move to the new tag based activation for Client/Server protections.

 

Profiles name:

No_Protection 

 

 

Title: Network Exceptions Acceleration Limitation

-----

* Description: Network exceptions accelerations may not be supported on R80.10 gateways

 

Some of the network exceptions that were configured before the upgrade and caused the HTTP traffic to be accelerated, may not accelerate traffic after you upgrade the GW to R80.10. See sk117588

 

 

Title: Legacy Default Profiles are not supported

-----

* Description: The Database has Legacy Default Profiles.

 

They will be deleted:

Endpoint_Full_Access,

Endpoint_Helpdesk,

Endpoint_RemoteHelpAndMediaRecovery,

Admin

 

 

Title: Application Control deprecated categories

-----

* Description: Rulebase contains Application Control categories or group of categories that were deprecated.

For deprecated categories list and recommended substitutes please refer to sk106783.

 

 

The following categories are deprecated:

 

The category: "Web Based Instant Messaging" in rule Num. 2 of "HUB-FW-Internet" policy is deprecated, it will be replaced with "Instant Chat"

The category: "Supports File Transfer" in rule Num. 2 of "HUB-FW-Internet" policy is deprecated, it will be replaced with "File Storage and Sharing"

 

 

 

Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:

pre_upgrade_verification_report.html

pre_upgrade_verification_report.xls

pre_upgrade_verification_report.txt (text file)

[Exp1:0]# ./migrate export test.tgz

Execution finished with errors. See log file '/opt/CPshrd-R77/log/migrate-2017.07.13_15.40.47.log' for further details

# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80timed out waiting for input: auto-logout

 

King regards 

Outcomes