Firewall-1

Re: [FW-1] Checkpoint Provider-1 MDS, please help

Subject: Re: [FW-1] Checkpoint Provider-1 MDS, please help
From: chkp tech <chkptech AT GMAIL DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Sat, 11 Feb 2006 13:18:55 -0600
Martin is correct here, and I believe that the HFA process will not replace
.def files that are modified by the HFA.  They are placed in the directory
with base.def.hfa and require a manual rename of the files so that this type
of issue doesn't cause problems.  I know this for a fact in R55/R60, but in
FP3, you'd have to check the release notes.

Also, you might want to get an mds_backup of your managers/containers and
then do a restore just to make sure that you've got a good backup.  This
will also allow you to apply the HFA and see what it does in your
environment.  I know the first complaint would be that you don't have any
hardware that matches the current 8GB RAM/500GB disk ;) but you can perform
the mds_restore and start the MDS/CMAs manually.

Jason


On 2/11/06, Martin Hoz <martinhoz AT gmail DOT com> wrote:
>
> On 2/10/06, cisco4ng <cisco4ng AT yahoo DOT com> wrote:
> >
> >   I would like to upgrade the MDS infrastructure from HFA_318 to
> HFA_327.
> > The problem is that on about 200 CMAs, we have made a lot of changes in
> > the user.def, base.def, etc... Furthermore, we've also made lot of
> changes
> > with dbedit and/or gui-dbedit with these CMAs.  If I am not mistaken,
> > when upgrading from HFA_318 to HFA_327, a lot of these settings will be
> > overwritten by the HFA.  If that is true, then I will be in big trouble.
> >   Is there a way to upgrade my MDS infrastructure from HFA_318 to
> HFA_325
> > without losing the settings for each of my CMAs?  I don't know if I can
> > back up ALL 250 CMAs individual settings.  Furthermore, how can I verify
> > that ALL of my settings remain after the HFA upgrade?  In other words,
> is there
> >   a safe way to do this?
> >
> <snip>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>