NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] moving rules and objects from 4.1 to NG


  • To: [email protected]
  • Subject: Re: [FW-1] moving rules and objects from 4.1 to NG
  • From: "Roelandts, Guy" <[email protected]>
  • Date: Mon, 7 Jan 2002 13:53:07 +0100
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcGXb5YNBXzoTTlTSE+XZMvn1TCq2QACkBww
  • Thread-topic: Re: [FW-1] moving rules and objects from 4.1 to NG

Joe,

   Not sure this will work, the rule base in NG (FP1) is now called
rulebases_5_0.fws
 and I don't think you can copy the 4.1 rulebase.fws to this
rulebase_5_0.fws file. Also
 the trick with the fw m *.W does not work anymore, tried it this
week-end while
 migrating a 4.1 to NG FP1 firewall.

Met vriendelijke groeten - Bien a vous - Kind regards
Guy ROELANDTS
EMEA GS Internet Expertise Centre - CCSA & CCSE
Compaq Software Engineer - Belgium
E-mail : [email protected]
Tel: +32(02)729.77.44 (options 3 - 3 - 1)
Fax: +32(02)729.77.65
==========================================================
This message may contain confidential and/or proprietary information,
and is intended only for the person/entity to whom it was originally
addressed. The content of this message may contain private views and
opinions which do not constitute a formal disclosure or commitment
unless specifically stated. Should you receive this message by mistake
please inform the sender immediately.
==========================================================


-----Original Message-----
From: Joe Pampel [mailto:[email protected]]
Sent: 07 January 2002 12:12
To: [email protected]
Subject: Re: [FW-1] moving rules and objects from 4.1 to NG


If it's a new install (clean, not upgrade) I think you can probably
migrate the same way you'd
move from 4.1 to 4.1?  (setting up new machines..) This is what I do for
that:

from old FWDIR/conf to new FWDIR/conf directory:

fw stop... (and then back up the files you're about to work with!!!)
then:
1. copy over fwauth.mdb
2. copy over rulebases.fws
3. copy over all *.W files (your rule bases..)
4. Finally copy over objects.C and make a copy called objects.C.bak  I
did not research much, but when I did not copy the .bak file to be the
same as the main .C file the .C file got over written.

fw start..

you should have your rule base and objects unless NG has changed these
file formats. (YMMV!!)  It does work well in 4.1, the only caveat is
that you still lose users and user groups. (not sure how to save these,
or if they can me moved over cleanly..) Compared with rebuilding the
whole thing, it's a no brainer. I skip fw confmerge on new installs
since there is nothing to merge with..

hope that helps!

- Joe


>>> Tony Wong <[email protected]> 01/06/02 04:19PM >>>
I just setup and new NG box and would like to move the rules and objects
from my old 4.1 box to this new box. Any advice would be appreciated.

Thanks

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.