NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] 4.1 to NG management server upgrade doc needed



I have not tested these steps, but planning to upgrade it very soon.

Please see the document below. It outlines the procedure for upgrading
to FP1/FP2.

How to upgrade from VPN-1/FireWall-1 4.1 to VPN-1/FireWall-1 NG FP1 or
FP2.

    Goal   How to manually merge objects and rules from VPN-1/FireWall-1
4.1
with VPN-1/FireWall-1 NG FP1 or FP2.

    Fact   FireWall-1 NG FP2

    Fact   FireWall-1 NG FP1

    Fact   FireWall-1 4.1

    Fact   VPN-1 NG FP2

    Fact   VPN-1 NG FP1

    Fact   VPN-1 4.1

    Fact   FloodGate-1 NG

    Fact   FloodGate-1 4.1

    Fact   Upgrade from 4.1 to NG

    Fact   Management Module

    Fact   Backward Compatibility

    Fact   fw confmerge

    Fact   rulebases_5_0.fws

    Fact   rulebases.fws

    Fact   objects_5_0.C

    Fact   objects.C

    Fact   default_object.C

    Fact   fw cpmi_upgrade

    Fact   Upgrade

    Fact   Migrate

    Fix   To upgrade from VPN-1/FireWall-1 4.1 to VPN-1/FireWall-1 NG
FP1 or
FP2 using the upgrade script, proceed as follows:

1. create a new machine with the desired version (FP1 or FP2)

2. Download and unzip the upgrade.tgz file (md5:
bd419c84641cb465dc64b64c0fa64533) - it opens into a directory named
upgrade.

3. Place the 4.1 files under upgrade/4.1
    a. objects.C
    b. fwauth.NDB (on Windows machines this file is only the pointer to
the real database file, for example, fwauth.NDB522. In this case take
the real database file -fwauth.NDB522, rename it to fwauth.NDB and put
it in the \upgrade\4.1 directory
    c. rulebases.fws
    d. fgrulebases.fws (if FloodGate-1 is installed

4. Stop the FireWall-1 (cpstop)

5. cd to the <upgrade_directory> and issue:

Windows
    upgrade.bat \upgrade FP2 4.1 (upgrade from 4.1 to FP2)

Unix
    upgrade.csh /upgrade FP2 4.1 (upgrade from 4.1 to FP2)

6. Restart the FireWall (cpstart) and login to the GUI

Notes*
1. The upgrade script will backup any modified file into
<upgrade_directory>/backup/

2. If you are moving from a Windows machine to Unix do dos2unix on
objects.C and rulebases.fws

3. In order to keep further configuration files (such as gui-clients,
masters etc...), copy from VPN-1/FireWall-1 4.1 $FWDIR/conf directory to
VPN-1/FireWall-1 NG $FWDIR/conf the following files:
    xlate.conf,
    aftpd.conf,
    smtp.conf,
    sync.conf,
    masters,
    clients,
    fwmusers,
    gui-clients,
    slapd.conf,
    serverkeys,
    product.conf.

4. It is recommended to use the Upgrade Verifier Utility prior to the
actual upgrade. Click here to get the Upgrade Verifier Utility.

Thanks,

Jignesh

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]] On Behalf Of John
Gesualdi
Sent: Friday, August 02, 2002 7:37 AM
To: [email protected]
Subject: [FW-1] 4.1 to NG management server upgrade doc needed

    Does anyone have a document which list  all the steps required to
successfully upgrade a management station from vers4.1 to NG? Thanks.


--


John A. Gesualdi,    CCNP , CCDP, MCSE 2000
[email protected]
The Providence Journal Company
PhonePager=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.