[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Upgrade
Hi Andras, Before you go ahead and upgrade your firewalls I would recommend building a test system first. Recently I have been testing 4.1 SP5 Secure Client with and upgraded NG FP2 firewall. The client connection fails. Now, I'm sure its supposed to work but for me it didn't so if you have 2500 users, I wouldn't take the risk of trusting a PDF. There was a document on the knowledge base that explained how to confmerge objects and rules from 4.1 to NG FP1. This document has vanished. Therefore I am left wondering if the procedure for merging 4.1 to NG FP2 has been changed, perhaps it is necessary to use Secure Update instead? I don't have a copy of the NG FP2 getting started guide which probably explains it. You mention domain auth. I'm not sure what you mean, are you using Secure Domain Login? If so, this works very well on FP2 with an FP2 Secure Client, I have tested this. However like I said before the 4.1 clients didn't work for me and I'm still investigating why this is the case. jp -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of [email protected] Sent: 06 May 2002 10:01 To: [email protected] Subject: [FW-1] Upgrade Dear Members, I would like to upgrade our CP FW-1s to CP NGs. Current config: 1: CP FW-1 4.1 Enterprise (SP3) - OS: NT 4.0 SP3 2: CP VPN 4.1 3Des (SP3) - OS: NT 4.0 SP6 3: CP FW-1 4.1 (SP3)- OS: NT 4.0 SP6 After the upgrade the all OS would be w2k SP2 + hotfixes, and analogous NG versions. We have approx. 2500 VPN client(user) without technical experience. Q's: Have I upgrade the all VPN client if I upgrade the VPN FW? How could I backup and restore the old rules into new NGs? How could I backup and restore the old VPN users? (we currently use NT domain auth) How could I backup and restore the old log files? What will happend the NT domain if I upgrade the FW's OS? RTFM is welcome, just pls clarify where, and what. Sorry my poor english. Thanks, Best regards: Andras ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|