{"id":520,"date":"2011-01-31T20:21:27","date_gmt":"2011-01-31T20:21:27","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2011\/01\/31\/upgrading-a-checkpoint-manager-from-r654-to-r7x\/"},"modified":"2021-07-30T14:49:28","modified_gmt":"2021-07-30T14:49:28","slug":"upgrading-a-checkpoint-manager-from-r654-to-r7x","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Firewalls\/Checkpoint\/upgrading-a-checkpoint-manager-from-r654-to-r7x.html","title":{"rendered":"Upgrading a CheckPoint Manager from R65.4 to R7x"},"content":{"rendered":"
NGX R65 HFA40 is a standard HFA and can be installed both on Security Gateways and on SmartCenter servers.
\nR65.4 is a Management-based package that in addition to NGX R65 HFA40, also contains various new features and plug-ins.
\nUpgrading from R65.4 can present some significant issues, due the release being a dead end. You will therefore need to consider the below options before moving forward with the upgrade.<\/p>\n
The following is taken from the release notes for R70:<\/p>\n
Note<\/strong><\/em> : We have found that you can move to R70 from R65.4, but you have to do the following: R65.4 > R65 > R70. This involves removing all traces of R65.4 \u2013 including some elements that are not covered in the standard uninstall.<\/p>\n 1. Before upgrading, run the following command on the manager to delete a problematic soft link:<\/p>\n 2. Take an upgrade_export of the existing config. Sample Output :<\/p>\n Installation Application is about to stop all Check Point Processes. ************************************************************************<\/p>\n Package Name\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Status ************************************************************************<\/p>\n Note:<\/em><\/strong> This will remove most of the elements that you need to remove, however you will still need to remove the VOIP plugin if install (check using \u201cfwm ver\u201d).<\/p>\n 5. To remove the VOIP plugin, you must first run the verifier to ensure that there are no VOIP objects being used in the Rule base. To do this, run the following:<\/p>\n 6. You will need to remove, or change the objects reported in this verifier before you move on. You cannot remove the VOIP plugin until this verifier reports back blank. 8. Check the un-install using \u201cfwm ver\u201d \u2013 and it should read R65 flat. If the GUI fails to startup after the upgrade you may need to run the following if fwm is failing after a few seconds:<\/p>\n 1. Run cpstop. 3. Reboot.<\/p>\n The following is taken from the release notes for R71:<\/p>\n To upgrade R65.4 to R71, you will need to run the following:<\/p>\n NGX R65 HFA40 is a standard HFA and can be installed both on Security Gateways and on SmartCenter servers. R65.4 is a Management-based package that in addition to NGX R65 HFA40, also contains various new features and plug-ins. Upgrading from R65.4 can present some significant issues, due the release being a dead end. You will … Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[],"yoast_head":"\nUpgrade Procedure (R70)<\/strong><\/h4>\n
rm -f \/opt\/CPsuite-R65\/fw1\/PA\/conf\/PA\/PA<\/pre>\n
\n3. Backup the networking from the device (Interfaces, default gateway, and routes).
\n4. Uninstall R65.4 using the uninstall utility:<\/p>\n\/opt\/CPUninstall\/R65.4\/UnixInstallScript \u2013u<\/pre>\n
***********************************************************\r\nWelcome to Check Point NGX R65.4 Uninstall Utility\r\n***********************************************************<\/pre>\n
\nDo you wish to continue (y\/n) [y] ? y
\nstopping Check Point Processes…
\nUninstalling Connectra NGX R66 management plug-in package…Done!
\nUninstalling Connectra NGX R66 management Compatibility package…Done!
\nUninstalling VPN-1 NGX R65.2.100 management plug-in package…Error!
\nUninstalling VPN-1 NGX R65 with Messaging Security management plug-in hotfix package…Done!
\nUninstalling VPN-1 NGX R65 with Messaging Security management plug-in package…Done!
\nUninstalling SmartProvisioning NGX R65.4 management plug-in package…Done!
\nUninstalling VPN-1 Power VSX NGX R65 management plug-in package…Done!
\nUninstalling VPN-1 Power VSX NGX R65 management Compatibility package…Done!<\/p>\n
\nConnectra NGX R66 management plug-in\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Succeeded
\nConnectra NGX R66 management Compatibility\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Succeeded
\nVPN-1 NGX R65.2.100 management plug-in\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Failed
\nVPN-1 NGX R65 with Messaging Security management plug-in hotfix Succeeded
\nVPN-1 NGX R65 with Messaging Security management plug-in\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Succeeded
\nSmartProvisioning NGX R65.4 management plug-in\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Succeeded
\nVPN-1 Power VSX NGX R65 management plug-in\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Succeeded
\nVPN-1 Power VSX NGX R65 management Compatibility\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Succeeded<\/p>\n\/opt\/CPPIvoip-R65\/bin\/plugin_preuninstall_verifier<\/pre>\n
\n7. Once the report is blank run the following:<\/p>\n\/opt\/CPPIvoip-R65\/bin\/plugin_uninstall<\/pre>\n
\n9. You can now run through the normal R70 upgrade, using the file \u201cCheck_Point_R70_CD1.Splat.iso\u201d, and the following:<\/p>\nmount \u2013o loop [path to iso] \/mnt\/cdrom ; cd \/mnt\/cdrom\r\npatch add cd<\/pre>\n
GUI Issues<\/strong><\/h4>\n
\n2. Delete the following files:<\/p>\n$FWDIR\/conf\/applications.C\r\n$FWDIR\/conf\/applications.C.backup\r\n$FWDIR\/conf\/CPMILinksMgr.db\r\n$FWDIR\/conf\/CPMILinksMgr.db.private<\/pre>\n
Upgrading to R71<\/strong><\/h3>\n
\n
\n