Begin typing here…

More documents

Recommendations

Info

How to Upgrade to a Management Server 2. Install the Check Point NG FP3 software on the duplicate machine. Take extra care to install the exact same products that are installed on the production machine. There is no need to install a license at this stage as each new NG FP3 machine has a built- in evaluation license for 15 days. 3. Run the Manual Upgrade command on the new machine to change the database format into NG FP3 format: 3.1. Download the upgrade script from SecureKnowledge solution #SK11635. 3.2. Decompress the downloaded file to receive a structure of directories. Note: On Windows platforms, the manual upgrade script should be installed on the same disk drive as the Management Server installation. 3.3. Stop Check Point software on both machines by executing the cpstop command. 3.4. Copy the following files from the production machine to the 4.1 subdirectory on the duplicate machine: � $FWDIR/conf objects.C rulebases.fws fwauth.NDB* fgrulebases.fws (if exists) xlate.conf (if exists) aftpd.conf (if exists) smtp.conf (if exists) sync.conf (if exists) masters (if exists) clients (if exists) fwmusers (if exists) gui-clients (if exists) slapd.conf (if exists) serverkeys (if exists) product.conf (if exists) Check Point Software Technologies Ltd 3
How to Upgrade to a Management Server � $FWDIR/database InternalCA.DB (if exists) Note: In case your duplicate machine has an OS different from the duplicate machine, see Appendix B. 3.5. Restart the Check Point software on your production machine by executing the cpstart command to get it back into operation. 3.6. If $FWDIR/database/InternalCA.DB file exists, run fwm sic_reset on the duplicate machine. 3.7. Activate the Upgrade Script on the duplicate machine: � For UNIX platforms: upgrade.csh FP3 � For Windows platforms: upgrade.bat FP3; upgrade_script_directory is the path of the upgrade script, created after decompressing the script file. 4. Run the PostUpgrade_Verifier tool on the duplicate machine to validate integrity of the upgraded environment. 5. Use the Check Point Configuration Tool to initialize the Internal CA. 6. Disconnect the production machine from the network and connect the duplicate machine. 7. Test your duplicate machine according to the instructions listed under Appendix E. 8. If the duplicate machine will function as the production machine, go to step 12. 9. If duplicate machine works as expected, backup the production machine (backup the files as defined in sub-section 3.4). 10. Upgrade the production machine using the process defined above. 11. Disconnect new machine; connect the production machine. Check Point Software Technologies Ltd 4
Page 1 and 2: How to Upgrade to a Management Serv
Page 3: How to Upgrade to a Management Serv

Begin typing here…

Create successful ePaper yourself

Delete template?

Save as template?