hi,
are you using upgrade_export and _import for the migration?
if yes - are you using the r75.1 upgrade_export to export the
ipso-config? you should ...
br
reinhard
At 00:10 10.12.2011, you wrote:
Hello,
We are testing migrating from an IPSO cluster (VRRP) running R65 to a new
SPLAT cluster on R75.1
Objects and Policy appear to migrate fine and the security policy rules and
NAT appear to work fine but we are unable to re-establish the VPN tunnels.
This happens when we leave it in the default Simplified mode, after the
import the original policy is in traditional mode. The current policy uses
Traditional Mode configurations so when it is imported and defaults to
Simplified we change it back and then when we try to push policy
it complains that one of the Checkpoint Objects (another cluster that is
internal to the network and never has had VPN) doesn't have VPN turned on.
Yet none of the encrypt rules are applied to that gateway.
Has anyone had experience with a similar migration or any suggestions on
cause of the problem?
Regards
--
"The wild requires that we learn the terrain, nod to all the plants and
animals and birds, ford the streams and cross the ridges and tell a good
story when we get back home."
Gary Snyder
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
--
Reinhard Stich [email protected]
Arrow ECS Internet Security AG, 1100 Wien, Wienerbergstrasse 11
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
Scanned by Check Point Total Security Gateway.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
