[FW-1] remote upgrade question-pls help

["Sim, CT (Chee Tong)" <CheeTong.Sim@FW1-NOSPAMSIN.RABOBANK.COM>]

Hi..

I need to remotely upgrade my other branch's Checkpoint firewall (solaris)
from CP4.0 to CP2000 and at the same time, its external IP of the firewall
(which CP was installed on) needed to be changed. I need to ask a few
questions about the upgrading procedure as it involves change of IP as well.
(The new license that we get is for the new IP).

1) At first, should I do upgrade first or change the IP first? If we change
the external IP without stopping FW service, the FW deamon will stop right?
If I fwstop the FW service first, will I be disconnected from my telnet
session? I won't be able to log in to console as I am not at the branch. I
think the FW control the access to the solaris box if the FW service fail to
run.  How to disable it?

2) Even, after we changed the external IP of the FW and start to upgrade to
CP2000, we need to install the old policy again, but the FW external IP in
the old policy is the old one right? How we need to do about it.  Just
change it to new FW IP in the policy and install it right?

3)How many free space we need for the upgrade to CP2000? I used to encounter
the following problem when I upgraded my FW from CP4.0 to CP2000, it happen
when I tried to install the old policy to the new CP2000.  How to avoid?

Installing Security Policy foobar on all.all@firewall
Has only loopback (lo) interface, aborting..
Failed to load security policy: No such file or directory
Fetching Security policy from firewall failed

Thanks in advance
Tong






==================================================================
De informatie opgenomen in dit bericht kan vertrouwelijk zijn en
is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht
onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en
de afzender direct te informeren door het bericht te retourneren.
==================================================================
The information contained in this message may be confidential
and is intended to be exclusively for the addressee. Should you
receive this message unintentionally, please do not use the contents
herein and notify the sender immediately by return e-mail.


==================================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================