Checkpoint R80 upgrade – Quick and dirty
I’ve been trying to upgrade my Checkpoint management server lately, but had too many issues. Now it was time to get it up and running. This is my quick notes from the procedure to upgrade Checkpoint Management server from R77.30 to R80.
Fix / Check / Export old management server
#Transfer pre-R80-migration via sftp to management server
#Unpack it; tar -zvxf Check_Point_R80_migration_tools_PreR80.Gaia.tgz
Check pre_verify file, fix all issues…
./pre_upgrade_verifier -c R77 -t R80 -p $FWDIR -f pre_verfiy
Fix all issues found in the pre_verify phase.
This could be renaming/deleting objects, change rules, fix policy e.g.
Migrate export of old config from management server
# -l switch to get logs aswell
./migrate export -l <R80-upgrade-mgnt-file>
Answer Yes to everything (Close all management clients, approve logswitch)
New R80, install from R80 ISO.
Run startup-wizzard, and choose same IP and hostname as old management server.
Transfer R80-migrate file and unpack
Transfer <R80-upgrade-mgnt-file> file
Run ./migrate import -l R80-upgrade-mgnt-file