Export - Import utilities are for the smartcenter and they work..
When you import an existing config you also import the root CA keys
so any existing trust (SIC) will be valid with the new mgmt server.
As for the upgrade of the module, I don't upgrade CP modules.
Uninstalling the complete CP products and installing a new
NG / AI firewall is really easy and clean. Your existing settings
are erased either way (*.def) .. Just install a new module,
send cert (establish SIC) and push the policy...
cheers,
- yinal ozkan
--- Michael Schwartzkopff <ccse_fw1 AT MULTINET DOT DE> wrote:
> Am Montag, 24. November 2003 11:54 schrieben Sie:
> > hi,
> >
> > use the config_export and import tool from checkpoint -
> > http://www.checkpoint.com/techsupport/downloadsng/utilities.html#upgrade_ve
> >rify
> >
> > cheers
> > reinhard
>
> Hi,
>
> ever tried this on a module? Well: I get the error:
>
> Upgrade_import (2) launched...
> Error: This SmartCenter Server is not Primary.
>
> since this is a gateway, in a distrubuted environment. Upgrading the manager
> works smooth. No problems with that.
>
> But now we want to bulid a test environment with the new management server and
> a clone of one of the gateways. So we have to copy the old gateway setup to a
> test system and try if everything works. Of course we could initialize SIC
> new. But it would be much better to have the identical SIC on the test
> gateway without (!) upgrading the gateway. Is that possbile somehow? Thanks
> for any hints.
>
> Michael Schwartzkopff
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
