I have had similar issues, but the size limitation is around 2 gig. This is due to an issue with gtar. As Matt said the best option is to remove database revisions. Typically any more that 10 is excessive. At the very least remove database revs from past versions (R55).
A way to tell if this is your problem is to find the somewhat exported file and check the size. If it is around 2 gig and you need everything on the system you can get a newer gtar from Check Point. David. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]] On Behalf Of Matthew Odendaal Sent: Friday, October 01, 2010 10:47 AM To: [email protected] Subject: Re: [FW-1] R71 upgrade What size are the exported configurations? A common problem is that if the exported configuration is more than a few hundred megabytes, the import often fails. This is usually due to having too many database revisions in the config. Removing old or unnecessary database revisions before performing the upgrade_export usually helps resolve the problem. Personally, I have had a number of problems with importing configurations that are more than about 500 MB in size. Another problem that I've seen is that sometimes the IPS database doesn't translate correctly. Make sure that you update your SmartDefense / IPS database before you perform the export. Regards Matthew -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]] On Behalf Of Gary Scott Sent: 01 October 2010 05:24 PM To: [email protected] Subject: Re: [FW-1] R71 upgrade Thanks M. N., I did use the upgrade_exports that came on the R71 and R71.10 CD's, copied them to the SCS's, and my SCS's are plugged into the network. I am seeing the same failure on several managers. ________________________________ From: M. N. <[email protected]> To: [email protected] Sent: Fri, October 1, 2010 11:16:58 AM Subject: Re: [FW-1] R71 upgrade Gary, Make sure you are using the upgrade_export version that came with R71.10. Just copy it over your R65 box and use it. This fixed our issues completely. Also make sure your new SCS is plugged into the network. -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]] On Behalf Of Gary Scott Sent: Friday, October 01, 2010 10:26 AM To: [email protected] Subject: [FW-1] R71 upgrade Has anyone had any success running the upgrade_export utility for R71 or R71.10 against a manager running R65 or R70? I am seeing a failure on windows and splat, new or old installs. Thanks, Here are the logged errors: [1 Oct 9:01:47] --> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] <-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] --> AddExpansionMacro [1 Oct 9:01:47] <-- AddExpansionMacro [1 Oct 9:01:47] --> SetupMacroExpansions [1 Oct 9:01:47] .--> GetAceDir [1 Oct 9:01:47] [GetAceDir] Checking ACEDATA environment variable [1 Oct 9:01:47] [GetAceDir] ACEDATA is not defined [1 Oct 9:01:47] .<-- GetAceDir [1 Oct 9:01:47] .--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] .<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] .--> AddExpansionMacro [1 Oct 9:01:47] [AddExpansionMacro] Setting macro 'ACEDIR' to '/var/ace/' [1 Oct 9:01:47] .<-- AddExpansionMacro [1 Oct 9:01:47] .--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] .<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] .--> AddExpansionMacro [1 Oct 9:01:47] [AddExpansionMacro] Setting macro 'UAGDIR' to '/opt/CPuas-R65' [1 Oct 9:01:47] .<-- AddExpansionMacro [1 Oct 9:01:47] .--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] .<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] .--> AddExpansionMacro [1 Oct 9:01:47] [AddExpansionMacro] Setting macro 'SECUREXLDIR' to '/opt/CPppak-R65' [1 Oct 9:01:47] .<-- AddExpansionMacro [1 Oct 9:01:47] .--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] .<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] .--> AddExpansionMacro [1 Oct 9:01:47] [AddExpansionMacro] Setting macro 'SVRDIR' to '/opt/CPrt-R65' [1 Oct 9:01:47] .<-- AddExpansionMacro [1 Oct 9:01:47] <-- SetupMacroExpansions [1 Oct 9:01:47] --> CommandLineArgsManager::CommandLineArgsManager [1 Oct 9:01:47] [CommandLineArgsManager::CommandLineArgsManager] Found argument: ./upgrade_export [1 Oct 9:01:47] [CommandLineArgsManager::CommandLineArgsManager] Found argument: hpguy-export-r71 [1 Oct 9:01:47] <-- CommandLineArgsManager::CommandLineArgsManager [1 Oct 9:01:47] --> CommandLineArgsManager::ParseCommandLine [1 Oct 9:01:47] .--> CommandLineArgsManager::ParseExePath [1 Oct 9:01:47] ..--> SplitPath [1 Oct 9:01:47] [SplitPath] Splitting path './upgrade_export' [1 Oct 9:01:47] [SplitPath] Result: Directory part: './' File part: 'upgrade_export' [1 Oct 9:01:47] ..<-- SplitPath [1 Oct 9:01:47] ..--> AddExecutableExtension [1 Oct 9:01:47] ..<-- AddExecutableExtension [1 Oct 9:01:47] ..--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] ..<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] ..--> AddExpansionMacro [1 Oct 9:01:47] [AddExpansionMacro] Setting macro 'EXEPATH' to './' [1 Oct 9:01:47] ..<-- AddExpansionMacro [1 Oct 9:01:47] .<-- CommandLineArgsManager::ParseExePath [1 Oct 9:01:47] .--> CommandLineArgsManager::InitApplicationConfig [1 Oct 9:01:47] ..--> GetConfig [1 Oct 9:01:47] ...--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] ...<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] ...--> ReadFwsetFile [1 Oct 9:01:47] ....--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] ....<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] [ReadFwsetFile] Going to read file './migrate.conf' [1 Oct 9:01:47] [ReadFwsetFile] ERR: Failed to open file: No such file or directory [1 Oct 9:01:47] ...<-- ReadFwsetFile [1 Oct 9:01:47] [GetConfig] ERR: Failed to get config file [1 Oct 9:01:47] ..<-- GetConfig [1 Oct 9:01:47] .<-- CommandLineArgsManager::InitApplicationConfig [1 Oct 9:01:47] [CommandLineArgsManager::ParseCommandLine] ERR: Failed to initialize configuration file for application [1 Oct 9:01:47] <-- CommandLineArgsManager::ParseCommandLine [1 Oct 9:01:47] --> IsRunningInteractively [1 Oct 9:01:47] .--> GetConfig [1 Oct 9:01:47] ..--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] ..<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] ..--> ReadFwsetFile [1 Oct 9:01:47] ...--> UpgradeMacroReplacer::Instance [1 Oct 9:01:47] ...<-- UpgradeMacroReplacer::Instance [1 Oct 9:01:47] [ReadFwsetFile] Going to read file './migrate.conf' [1 Oct 9:01:47] [ReadFwsetFile] ERR: Failed to open file: No such file or directory [1 Oct 9:01:47] ..<-- ReadFwsetFile [1 Oct 9:01:47] [GetConfig] ERR: Failed to get config file [1 Oct 9:01:47] .<-- GetConfig [1 Oct 9:01:47] [IsRunningInteractively] Running interactively [1 Oct 9:01:47] <-- IsRunningInteractively ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
