[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] FP3 upgrade success

Platform: w2ksp2, NGfp2. IBM x220. mgmt+fw1

ok.. after my previous upgrade(-failure) story I didn't quite give up on w2k. I kept a copy of my non-working FP3 install and uninstalled it. I uninstalled all checkpoint products (FP3, FP2, FP1, 4.1SP5, 4.1SP2). I also manually removed the ELA Proxy that the uninstall program didn't quite remove, and I renamed the remaining FW1 directory.

After some reboots I was fairly certain that all CP products were removed and I then installed directly from the FP3 CD a fresh installation of FP3. This install went very well and I confirmed that it was working once it was finished.

I stopped the firewall service and I renamed the conf directory. I then copied in the conf directory from the previous non-working FP3 install. I then started the firewall service, but I was unable to install an old policy. I then ran the command "fwm upgrade sp3". After running this command I had to wait a few minutes for this command to complete (I got the prompt immediately, but this completes in the background).

And in order to preserve the S/key users I also had to manually copy the FWDIR/database/fwuserauth.keys file.

Now everything is working as far as I have checked, including securemote and site-to-site vpns.

I guess these experiences might be helpful for anyone trying to upgrade to FP3 on w2k.

Lars

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================