Firewall-1

Re: [FW-1] upgrading to HFA03 with test and how to downgrade to R60.

Subject: Re: [FW-1] upgrading to HFA03 with test and how to downgrade to R60.
From: Reinhard Stich <r.stich AT INTERNET-SECURITY DOT AT>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 12 Mar 2007 12:17:15 +0100
At 12:10 12.03.2007, you wrote:
Hello,
-Is there a simple way to proceed some kind of clean "roll-back" from
(for example) secureplatform R60 HFA3 to R60.

rpm -e CPsuite-R60-00 ? does it remove only HFA03?

no.

after the installation of any HFA it also creates an uninstall-script for the HFA in $FWDIR.

-During an upgrade to HFA03 on a R60 secureplatform, I would like to
check first, on the upgraded node, that applications going through the
FW are running correctly, before to upgrade the second node of the
cluster XL.

I thought to proceed that way :
1 Upgrade the slave (node B).
2 Reboot the slave

3 Proceed with cphastop on the Node A (primary still not upgraded)
=> the active node is now Node B.

Check the applications

4 And upgrade node A.

Do you have a better way to do this ?
The question behind that is also, Is it a problem to have two nodes with
different HFA version in the same cluster ?

check the release-notes for details about upgrading. you can have 2 R60 nodes with different HFA-version in a cluster - this is supported for an upgrade - without loosing connections.

br
reinhard


Thank you for your help.



=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

--
Reinhard Stich          r.stich AT internet-security DOT at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>