Migrate Checkpoint 80.10

Reply
Highlighted
L1 Bithead

Migrate Checkpoint 80.10

Hello,

I try a migration from checkpoint 8R0.10.

I've updated to the last bersion (1.1.12) and I see option "VERSION 80.10" in the checkpoint tab, but this option is grayed out.

I try with R80 option but It does nothing after "upload" is clicked.

 

Do I miss something ?

 

Thanks.


Accepted Solutions
Highlighted
L1 Bithead

I've deleted the project created before the upgrade and redone the whole procedure.

It's fine now.

 

 

View solution in original post


All Replies
Highlighted
L4 Transporter

If you have exported the json formatted files using the method:

 

https://live.paloaltonetworks.com/t5/Expedition-Articles/Migrating-Checkpoint-R80/ta-p/216298

 

If the file config source is from R80.10 you can use the R80 option and the parser will review the file source and determine which parser to use, either the R80 or R80.10.

 

Can you post a screenshot of the page after you click "upload"

Highlighted
L5 Sessionator

We have not enabled R80.10 because we have found that original Checkpoint config files are missing a lot of address objects that are refereed within groups.

Until we do not find a way to export from Checkpoint a complete configuration set, we do not want to enable a parser that will led to incorrect migrations

Highlighted
L1 Bithead

,ve tested with r80 and the screen is blocked on "reading config files"

2019-04-18 07_44_14-.png

Highlighted
L1 Bithead

I missed a message that appears for a very short time slot.

It seems to look on phase 8 of 10 : Calculating NAT Rules Zones based on Static Routes and interfaces.

I will let it run until tomorrow.

 

Highlighted
L1 Bithead

2019-04-18 15_12_30-Expedition Project - Internet Explorer.png

Highlighted
L1 Bithead

I've deleted the project created before the upgrade and redone the whole procedure.

It's fine now.

 

 

View solution in original post

Highlighted
L2 Linker

@dgildelaig , I noticed a new procedure on the Expedition (Exped 1.1.66.2) file import page for Checkpoint R80 or greater.  involves uploading and running a .jar file on the mgmt server.  do you have any documentation for the new procedure or is it that simple?  Also, how do I explain any risks with running the .jar file on a client's mgmt server?

D. Elliott
Highlighted
L5 Sessionator

Check the link we provide to download the jar file.

 

It is a file provided by Checkpoint, and they explain how to place it in their system and how to consume it.

I guess that if they see the source of the file, they can get some comfort as it is Chekpoint's software to patch Checkpoints software.

Highlighted
L2 Linker

Thank you @dgildelaig , I thought the .jar file was produced by paloalto.  The client did not recognize the file's origination and I'm not familiar with Checkpoint.  I could not have wished for a better answer. 

D. Elliott
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!