Checkpoint R80 upgrade – Quick and dirty

I’ve been trying to upgrade my Checkpoint management server lately, but had too many issues. Now it was time to get it up and running. This is my quick notes from the procedure to upgrade Checkpoint Management server from R77.30 to R80.

Download files from Checkpoint
Get latest R80 relase iso: SK45720
Get latest R80 pre-R80-migration file: SK45736
Get latest R80 R80-migrate file: SK48681

Fix / Check / Export old management server
#Transfer pre-R80-migration via sftp to management server
#Unpack it; tar -zvxf Check_Point_R80_migration_tools_PreR80.Gaia.tgz

Check pre_verify file, fix all issues…
./pre_upgrade_verifier -c R77 -t R80 -p $FWDIR -f pre_verfiy

Fix all issues found in the pre_verify phase.
This could be renaming/deleting objects, change rules, fix policy e.g.

Migrate export of old config from management server
# -l switch to get logs aswell
./migrate export -l <R80-upgrade-mgnt-file>
Answer Yes to everything (Close all management clients, approve logswitch)

New R80, install from R80 ISO.
Run startup-wizzard, and choose same IP and hostname as old management server.
Transfer R80-migrate file and unpack
Transfer <R80-upgrade-mgnt-file> file
Run ./migrate import -l R80-upgrade-mgnt-file

 

2 Coments

  • girish07/05/2017

    Hi Georg,

    I have to upgrade Management server and gateways from R77.30 to R80, would appreciate your help if you can provide details like which all issues faced and procedure of upgrades.

    Thanks in Advance 🙂

  • Lars-Georg S. Paulsen30/05/2017

    I have a pretty small setup, and I did not encounter any issues. The pre_upgrade_verifier can be run at any time and give you a good picture of what you need to do.

    I had to do some minor clean up of objects, that’s it.

  • Leave a Comments