Hello KS Wong, There's a way to upgrade 4.0/Solaris to NG/Nokia, but it's a little ugly.
First, install the oldest version of FireWall-1 that you can on the Nokia. If you have a 540, this is a late version of 4.1. If you have access to an older Nokia box like a 330, 440, or 650, you should be able to install the same version you have for Solaris. I think a 110 will also run late versions of 4.0. The whole idea is that it's a lot easier to upgrade once it's on the Nokia side. If you have to upgrade on the Sun, it goes patch-by-patch with no backout, and you need a 4.1 CD. On Nokia you can pull full distributions up through 4.1 SP-3 off their support site. There is a resolution on the Nokia support site (5231?) which explains how to migrate between platforms. You should read it, but it basically says to copy over the following files from $FWDIR/conf: objects.C (objects and policy properties) *.W (individual rulebases) rulebases.fws (policy editor rulebase list) fwauth.NDB (VPN and user passwords and definitions) Next, upgrade the Nokia to NG. Nokia is pretty good about documenting which versions will upgrade to other versions, so you can skip a lot of steps. (See their resolutions 1947 and 10339, as well as 5231). Their tech support may also be willing to help. For someone experienced with the process, it should take about 4 hours, not counting the time to download the software off the 'net. Consider carefully which would take longer: this process, hand-copying the rulebase and objects, or starting from scratch. Regards, -Jim MacLeod At 06:38 PM 1/25/2002, Wong Kong Seng (Central) wrote: >Hi all, > >I just would like to know if it's possible to migrate all existing rules >residing in my Checkpoint 4.0 running on Sun platform to Checkpoint NG >running on Nokia IP530 platform? > >I have been told that it requires that the user to manually add back all >rules and objects one by one? Is there a faster way to perform this >migration? > >Any help is greatly appreciated. > >Thanks > >KS Wong > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
