Checkpoint Upgrade

[alexellis]

Hi


I'm running FW1/vpn1 version 4.1 sp5 on a nokia ip 330 with ipso 3.4.1 running, I am planning to upgrade to NGfp3 under checkpoints suggestions, I will be upgrading to sp6 first.

Am I right in thinking that I have to also update my version of ipso before I upgrade NG ??

Please help, the bosses want it done tonight !

 

[ChrisAC]

Always best to get the latest IPSO!

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[rn4it]

Before you move forward, just to give you a heads up on a couple issues I've come across.
first- when attempting to upgrade from FW-1 4.1sp6 to NGFP&FP3 we would receive an error dbeditgui.exe, when we contact Nokia TAC it turned out to be a known issue with IP330's with 256MB of RAM. This may have been corrected, but at our time we had to recreate all the objects and rules.
second- If you need multiple IP's / interface there is a weird issue, typically it works out to be no more then 4 IP's this would include your VIP if you're running VRRP as well.

Other then that for the most part things are going well with FP3, there are hotfixes you may want to add, but see what they fix first.

good luck

 

[Bry144]

We had horrible trouble upgrading to ng FP3. Basically, tons of known issues when upgrading from and original 4.1 (which we upgraded to ng fp1 over a year ago) to ng fp3. Main problem was our mgt server user db corrupted. Had to rebuild our mgt server, and manually upgrade. Lots of gotchas.

 

[rn4it]

My favourite was if you manually edited the objects.C in 4.1 it would error while going through the upgrade. Which was a know issue, so after manually rebuilding our rulebase and objects, we're not manually editing the objects_5_0.C file.

 

[SteffenR]

Last year I asked Check Point itself and a lot of specialists for advices. The result was "Don´t upgrade - make a new setup". That is not the fastest way but the most secure to get a running system.

 

[brianpaterson]

Wait for fp4, it will save you a world of pain.

B-)
Brian, CCSE
brian@domain-integrity.com

 

[javelin911]

Anyone know where I can download a copy of FW1 with service pack 6?
I currently am running FW1 on an NT machine, and am trying to move it to a 2000 server.
The version we have with service pack 2 will not install.
After contacting Checkpoint, they will not (can not) send us a copy of the software with the service pack built in (not supporting it anymore?)

Help anyone?

 

[javelin911]

In my previous post I have checkpoint 4.1 sp2, I believe I need 4.1 sp5 to install on 2k.