Begin typing here…

More documents

Recommendations

Info

How to Upgrade to a Management Server 7. If they exist, Remove the $FWDIR/conf/CPMILinksMgr.* and $FWDIR/conf/applications.*. 8. Copy the SIC key from the Check Point registry on the production machine to the registry on the duplicate machine. See Appendix D for a detailed description of copying Check Point’s SIC regis try entries. 9. Install Check Point NG FP3 software on the duplicate machine using the NG FP3 CD, and select the Upgrade Option to automatically upgrade the software and database format. 10. Run the PreUpgrade_Verifier tool on the duplicate machine to fix potential upgrade problems that need to be addressed prior to upgrade. This is a read only tool, which will not change the database. 11. Disconnect the production machine from the network and connect the duplicate machine. 12. Test your upgraded machine according to the instructions listed under Appendix E. 13. If the duplicate machine will function as the production machine, go to step 15. 14. If the duplicate machine works as expected, backup the production machine. 15. Upgrade the production machine: � Uninstall Check Point software. � Go over steps 2-10. 16. Disconnect the duplicate machine; connect the production machine. 17. Test your production machine according to Appendix E. 18. Done. Check Point Software Technologies Ltd 11
How to Upgrade to a Management Server Appendix A - Duplicate machine with a different IP address or hostname This appendix specifies the steps that should be taken in case the duplicate machine has a different IP address or host name. 1. Before stopping the production machine, add rules that allow the new duplicate machine to access the modules it is managing: � Create a Management Object that includes the duplicate machine’s IP address: � When the production machine Management Server software version is 4.1 –From the Policy Editor: Manage > Network Objects > New…> Workstation and mark it as a Management Station. � When the production machine Management Server software version is NG – From the Policy Editor: Manage > Network Objects > New…> Check Point > Host/Gateway and mark it as Secondary Management. Note: If this object already exists, make sure it is marked as a Management. � Create a rule, on the production machine, which allows FireWall-1 and CPD (NG only) services from the above object you have just created, to go to all managed gateways. � Install the rule on all managed gateways. � Delete the rule once you have completed this process. 2. Continue with the instructions given under section 2.2 or 3.2. Do not copy the $CPDIR/conf/cp.license file. 3. Update the primary management object on the duplicate machine. 3.1. Start the Check Point Management Server on the duplicate machine by applying the cpstart command. 3.2. Connect to the SmartDashboard (Policy Editor). 3.3. If a new primary management object was created, its IP address and topology should be configured to match the duplicate machine. If the same primary object exists, edit its IP address and topology to match its new configuration. Check Point Software Technologies Ltd 12
Page 1 and 2: How to Upgrade to a Management Serv
Page 11: How to Upgrade to a Management Serv

Begin typing here…

Create successful ePaper yourself

Delete template?

Save as template?