Hi,

Try an $FWDIR/bin/upgrade_export -d -n /var/tmp/export.tgz
I guess you see something about "Plugins" in combination with "error".

Options:
- Try the new upgrade_export/import tools by opening a SR
- Install "missing" Connectra Plugin and do the export/import again


If you try to upgrade_import an export from R6x to R65HFA02 (don't know
about other HFAs) try the following:
# gzip -d r6Xexport.tgz
# tar xf r6Xexport.tar ./configuration
# vi configuration

Add a line:
Plugins<TAB>NA

# tar uf r6Xexport.tar ./configuration
# gzip r6Xexport.tar
# mv r6Xexport.tar.gz r6Xexport.tgz


Of course this is not officially supported by checkpoint.

I hope I didn't miss anything.

Regards,
Simon Kowallik

cisco4ng wrote:
> "It seems that the upgrade tools do not work on any R65 HFA-02 version. (Any 
> platform.) On any R65 installation cpinfo is not working properly either. 
> (Which is a serious pain for support purposes.)"
> 
> I wonder how much efforts has checkpoint put into 
> Q&A HFA.  I am not the smart guy but I would think the 
> QA dude at checkpoint has common sense with testing
> ./upgrade_export /var/tmp/export.tgz and he/she would
> know that it fails.  
> 
> Hugo, when you said open a ticket, are you kidding me?
> This is a result of poor Checkpoint QA.  CP should 
> make the upgrade_export tool available so that users
> can download for it.
> 
> Customer A has issue.  Customer opened a tac case
> with CP.  CP response is to upgrade to the latest
> HFA.  Customer A upgrade to hfa02.  customer A still
> has issues.  CP wants the upgrade_export files.
> customer A runs upgrade_export and it fails.
> 
> In other words, customer used to have 1 issue.
> After upgrading to hfa02, customer now has 2 issues.
> The problem is worse than it was before.
> 
> 
> Hugo van der Kooij <[EMAIL PROTECTED]> wrote: -----BEGIN PGP SIGNED 
> MESSAGE-----
> Hash: SHA1
> 
> cisco4ng wrote:
>> can someone explain to me why my upgrade_export is not working?
>>    
>>   dca-Nokia[admin]# fw ver
>> This is Check Point VPN-1(TM) & FireWall-1(R) NGX (R65) HFA_02, Hotfix 602 - 
>> Build 006
> 
> It seems that the upgrade tools do not work on any R65 HFA-02 version.
> (Any platform.) On any R65 installation cpinfo is not working properly
> either. (Which is a serious pain for support purposes.)
> 
> So our strategy for the moment is on any installation or upgrade to
> replace both tools with the seperate tools from the Check Point site.
> 
> If you run into the issue: Open a support ticket.
> 
> Unless you open a support ticket Check Point will not be aware of the
> problem. The more people that will document this case to Check Point the
> higher the priority.
> 
> I will also work through the irregular channels to see if we can
> expedite this issue. Anyone who can properly document their case can
> send me a report outside the mailinglist with the following details:
>  - Hardware description (CPU, MEM, ....)
>  - Operating system details (type, build, ....)
>  - Check Point version(s) (complete)
>  - Exact errors seen
>  - Plain text message (no word files, HTML, ...)
>  - Proper subject: Check Point upgrade tools
> 
> Anything incomplete will be discarded. I am not going to waste time on
> those. So do not even try to use the reply button to generate the
> report. Create a fresh message in plain text.
> 
> Hugo.
> 
> - --
> [EMAIL PROTECTED]               http://hugo.vanderkooij.org/
> PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc
> 
>  A: Yes.
>  >Q: Are you sure?
>  >>A: Because it reverses the logical flow of conversation.
>  >>>Q: Why is top posting frowned upon?
> 
> Bored? Click on http://spamornot.org/ and rate those images.
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> 
> iD8DBQFHQ+KjBvzDRVjxmYERAsWMAJ93a2LBZPYgAVZ0hzLJFBRHZjq8NgCbBqSG
> FmxEm48YzhbBZwwLMaPCHFE=
> =5aSV
> -----END PGP SIGNATURE-----
> 
> Scanned by Check Point Total Security Gateway.
> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
> 
> 
>        
> ---------------------------------
> Be a better pen pal. Text or chat with friends inside Yahoo! Mail. See how.
> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to