2003 Check Point Software Technologies Ltd.

Proprietary & Confidential

Upgrading 4.1 to NG




2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Agenda
System requirements
Pre and Post Upgrade Verifier tools
Upgrade paths
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Minimum Hardware Requirements
Windows or Linux

SmartCenter Server or VPN/FireWall
Module
CPU Intel Pentium II 300+ MHz or equivalent
Disk space 40 Mbytes (software installation
only)
Memory 128 Mbytes

2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Minimum Hardware Requirements
Solaris

SmartCenter Server or VPN/FireWall
Module
CPU Architecture UltraSPARC II
Disk space 40 Mbytes (software installation
only)
Memory 128 Mbytes

NOTE: Solaris 2.7 is not supported in
FP3! Only 2.8 or above.
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Minimum Hardware Requirements
SMART Clients

On Windows
CPU Intel Pentium II 300 MHz or equivalent
Disk space 55 Mbytes (software installation only)
Memory 128 Mbytes

On Solaris
CPU Architecture UltraSPARC II
Disk space 100 Mbytes (software installation only)
Memory 128 Mbytes

2003 Check Point Software Technologies Ltd. Proprietary & Confidential
SecurePlatform System Requirements
Hardware
PC with Pentium CPU or above
Disk Space: 400MB
Memory: 512MB RAM for VPN-1/FireWall-1 Check
Point Performance Pack
128MB RAM for other products
At least two Network Interface Cards

For installation, either
a bootable CD ROM drive, or
a floppy diskette drive and a CD ROM drive, or
a floppy diskette drive and remote installation facility

2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Upgrade paths to NG FP3
Upgrade In-Place
Upgrade existing software on the
production machine

Upgrade to another machine
Replace your production machine as a part
of the upgrade process.
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
General Upgrade Process
Decide on an In-place Upgrade or a New Install
to upgrade or change hardware
More complex if platform changed - Windows to Unix
involves converting files (dos2unix command)
Backup 4.1 files
Run the Pre-Upgrade Verifier program
Check for conflicts w/objects, policies, users, etc.,
Proceed with chosen process
Reboot, run Post-Upgrade Verifier if necessary
and test
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Upgrade to another machine
Process
On the Old Management Server Machine
Run the most recent Pre-Upgrade Verifier tool and fix
relevant issues. Use the Post-Upgrade Verifier if
recommended.
Copy the configuration files to your new machine.
On the New SmartCenter Server Machine
Install NG FP3 Software, with exact same products
that were installed on the origin machine
Run the upgrade script
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Upgrade Verifiers
Pre-Upgrade Verifier
Analyzes the database and warns of
potential upgrade problems
Should always be used before starting the
upgrade
Post-Upgrade Verifier
Corrects fatal problems
Should be used only upon the
recommendation of the Pre-Upgrade Verifier
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Pre-Upgrade Verifier - Usage
pre_upgrade_verifier -p MngPath -c
CurrentVersion -t TargetVersion [-f FileName]
-p Path for $FWDIR.
If SmartCenter is not installed path for the directory
contains the copied Conf directory.
-c Current version: 4.1 or above
-t Target version: NG_FP2, NG_FP3
-f Write the output into a file

Example:
pre_upgrade_verifier . c 4.1 t NG_FP3
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Pre-Upgrade Verifier Specification (1)
Read-Only tool never changes the
database
Parses management configuration files to
search for the problems, thus notifies
customers specific problems
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Pre-Upgrade Verifier Specification (2)
Warns about:
Drop Supports
Features and CP versions we stopped supporting officially (like
4.0 modules, FWZ, etc.)
Changes of behavior
Deliberate change of behavior (change in objects name validity
in NG)
Configuration Errors
Problems that already exist, but may get worse with the upgrade
(differences between properties of cluster members)
Version-specific limitations
Upgrade limitations that were found since the version was
released; Typically, will be corrected with the next CP-Suite
Version (Interoperable Device loses VPN configuration)
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Pre-Upgrade Verifier
Platform And Operating Systems Support
Windows NT, Windows 2000
Solaris 2.6, Solaris 2.7, Solaris 8
Linux 6.1, Linux 7.0, Linux 7.1, Linux 7.2,
Linux 7.3
IPSO 3.5, IPSO 3.6
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Post-Upgrade Verifier - Usage
post_upgrade_verifier -p MngPath
-p Path for $FWDIR.

Example:
post_upgrade_verifier .
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Post-Upgrade Verifier Specification
Corrects fatal database errors caused by
the upgrade

Changes the database; should be used
only if recommended by the Pre-Upgrade
Verifier

2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Post-Upgrade Verifier
Platform And Operating Systems Support
Operation Systems supported by NG FP3:

Windows NT, Windows 2000
Solaris 8, Solaris 9
Linux 7.0, Linux 7.2, Linux 7.3
IPSO 3.5, IPSO 3.6
2003 Check Point Software Technologies Ltd. Proprietary & Confidential
Download copies of documents from:

ftp://ftp.ts.checkpoint.com/pub/gdeskin/Upgrade.zip