Pre-R80 Management Server Migration Tool – sk108623Download

Target Version and Products:

[[email protected]:0]# ./pre_upgrade_verifier --help

This is Check Point Pre-Upgrade Verifier for version R80.

Usage: pre_upgrade_verifier -p SecurityManagementPath -c CurrentVersion -t TargetVersion [-u | -a][-f FileName] [-w]
   Or: pre_upgrade_verifier -p SecurityManagementPath -c CurrentVersion -i [-f FileName] [-w]
        -p Path of the installed Security Management Server (FWDIR).
        -c Currently installed version.
        -t Target version.
        -i Check originality of Inspect files only.
        -u Perform plug-in related checks.
        -a Skip main train version checks, perform plug-in related checks only.
        -f Output in file.
        -w Web format file.

where the Currently installed version is one of the following:
NGX_R65 (aliases: 6.0.1.0)
R70 (aliases: R70_R70, 6.0.1.6)
R71 (aliases: R71_R71, 6.0.1.7)
R75 (aliases: R75_R75, 6.0.2.0)
R75.20 (aliases: R75.20_R75.20, 6.0.2.1)
R75.40 (aliases: R75.40_R75.40, 6.0.2.5)
R75.40VS (aliases: R75.40VS_R75.40VS, 6.0.3.0)
R76 (aliases: R76_R76, 6.0.3.5)
R77 (aliases: R77_R77, 6.0.4.0)

where the Target version is one of the following:
R70 (aliases: R70_R70, 6.0.1.6)
R71 (aliases: R71_R71, 6.0.1.7)
R75 (aliases: R75_R75, 6.0.2.0)
R75.20 (aliases: R75.20_R75.20, 6.0.2.1)
R75.40 (aliases: R75.40_R75.40, 6.0.2.5)
R75.40VS (aliases: R75.40VS_R75.40VS, 6.0.3.0)
R76 (aliases: R76_R76, 6.0.3.5)
R77 (aliases: R77_R77, 6.0.4.0)
R80 (aliases: R80_R80, 6.0.4.8)

Analyzes of the currently configuration;
#./pre_upgrade_verifier -p $FWDIR -c R77 -t R80

[[email protected]:0]#  ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80


================================
Action items before upgrade:
================================


Warnings: It is recommended to resolve the following problems.
==============================================================


Title: Application Control deprecated categories
-----
* Description: Rulebase contains Application Control categories or group of categories that were deprecated.
For deprecated categories list and recommended substitutes please refer to sk106783.


To resolve the problem, fix the following categories:

The category: "Social Plugins" in rule Num. 12 of "PoC-Standard" policy is deprecated
The category: "Tunnels" in PoC_Block_APP group is deprecated
The category: "Facebook File Sharing" in PoC_Block_APP group is deprecated
The category: "Torrent Trackers" in PoC_Block_APP group is deprecated, it is recommended to replace it with "P2P File Sharing"
The category: "MySpace Games" in PoC_Block_APP group is deprecated



Pre-upgrade verification report can also be found in /opt/CPsuite-R77/fw1/log in the following formats:
pre_upgrade_verification_report.html
pre_upgrade_verification_report.xsl
pre_upgrade_verification_report.txt (text file)
[[email protected]:0]# ./pre_upgrade_verifier -p $FWDIR -c R77 -t R80
No errors found by the Pre Upgrade Verifier.
[[email protected]:0]# ./migrate export PoC-pre-R80.tgz


You are required to close all clients to Security Management Server
or execute 'cpstop' before the Export operation begins.

Do you want to continue? (y/n) [n]? y


Copying required files...
Compressing files...

The operation completed successfully.

Location of archive with exported database: /var/log/pre_upgrade_r80/PoC-pre-R80.tgz

Check Point CheckMates

Leave a Comment