Hello We've migrated objects and rules from an NT running FW1 version 4 to another NT running FW1 version 4.1 We followed the steps below per Checkpoint's tech support. On the new NT server, we can access the internet but the workstations couldn't. IP forwarding is enabled under tcp/ip. The steps were: The first step is to backup your existing conf directory to a safe place before beginning this procedure. Migrate objects (confmerge): 1. Copy the old objects.C file from the old 4.1 $FWDIR/conf directory to a temp directory, rename this file to objects.old 2. Copy the new objects.C from the new 4.1 $FWDIR/conf directory to the same temp directory, rename this file to objects.new 3. Run fw confmerge objects.old objects.new > objects.C 4. Copy the new objects.C to the 4.1 conf directory. 5. This completes the objects migration. Migrate users: Note: User GROUPS do not migrate. 1. First create all user GROUPS on the 4.1 management station via the 4.1 gui.=20 2. Within the 4.1 directory structure (bin) run fw dbexport -f filename. 3. Transfer file to the 4.1 box, if a new box is involved.=20 4. Within the 4.1 directory structure (bin) run fw dbimport -f filename 5. This completes the user migration. Migrate rules: 1. Within the 4.1 directory structure (conf) find the rulebases.fws file and copy this file to the 4.1 (conf) directory. 2. For NT, within the 4.1 directory structure (conf) run fw fwm -g=20 standard.W rulebasename1.W rulebasename2.W rulebasename3.W =20 You may have to give the full pathname to the executable. 3. This completes the rulebase migration. ------------------------------------------------------------------------------ Christopher T. Sia Email: [EMAIL PROTECTED] Controller Tel: (212)649 1649 Alfred P. Sloan Foundation Fax: (212)757 5117 New York, NY 10111 http://www.sloan.org -------------------------------------------------------------------------------- ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
