Thanks guys.
I totally forgot about upgrade/export/import feature.
I have done so, and things started right up without issue on the new
machine.
Thanks for the tip on SIC reset. I'll file these notes in my documentation
folder and disaster plan notes.
Regards,
Vic
I agree with Lino, upgrade_export is a lot better.
Just be sure you have the same hostname and IPs on the new machine before
doing an upgrade_import (located on the same folder) of the obtained file.
Regarding a SIC reset, doing so on the dashboard objects should cause no
problems with the remote machines (gateways) as long as you are sure about
the activation key configured on them, if you change it for for something
different it is sure SIC won't work unless you get access to those machines
and change the activation key via cpconfig command in the CLI.
Regards
On 8/10/06, Lino Eduardo Avila RodrÃguez <[EMAIL PROTECTED]> wrote:
I think you're talking about SIC errors??
Why don't you try to use upgrade_export tool? This works for the
management
object.
The location is $FWDIR/bin/upgrade_tools
Or you can download it from the checkpoint website.
It works better than copying directories and it makes a good backup.
Cheers,
Lino E. Avila
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Vic G
Sent: Jueves, 10 de Agosto de 2006 11:58 a.m.
To: [email protected]
Subject: [FW-1] Transfer of FW1 to new computer - SID trouble
Trying to move the complete system from one computer to another.
I thought I read on here a while back, I could do the following:
(System is FW1 NG-AI R55 FP15 on Win2k3 server).
1. Create new system, same FDQN, IP addresses, etc 2. Install FW1 NG-AI
R55,
upgrade to FP15 on new box.
3. Turn off FW services on both systems.
4. XCOPY the system/R55 directory contents from old machine, to new
machine.
5. Turn off old, bring up new machine.
All went well, except the 2 remote enforcement points will not
communicate.
THey are complaining about SID errors. Remote sites are not manned, I was
scared to attempt to reset the SID's on this main unit...
Is there any way to xfer the SID information from the old system to the
new
one? Evidently, it is not carried in the configuration folders under R55
directory...
Thanks,
Vic
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
[EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options,
email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
--
Sergio Alvarez
(506)8301342
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================