SUMMARY: Firewall-1 Upgrade

From: Reichert, Alan (aareichert@tasc.com)
Date: Tue May 11 1999 - 13:26:02 CDT


This summary is delayed, but I did not get too many notes on this one.
I did get a number of "me too" or "I'm gonna do that, too" replies.

Two replies of note:

One from William lavery:

> Make sure you get all the patches. There are a few patches. And be
careful with assigning NAT in object.
> Assign it through the rule base. I was told that problems could arise.

Yep, been there, done that on the NAT stuff, but we did get that figured out
here.

Another from Sebastian Masso:

>A friend of mine just forwarded your posting to me because I have just gone
>through the upgrade from hell. I assume that you are upgrading from the
>Solstice to Checkpoint version? Anyway I just did such an upgrade on a
>Solaris 2.5.1 machine.
>
>
>I would advice the following:
>
>1) Obvious, but do a full system backup.
>2) Do not de-install the Solstice 3.0b version, even after the upgrade. The
>upgrade still requires some of the old version.
>3) If when you run fwconfig, after the upgrade, you do not see all the
options
>that fwconfig should give for V4. Then the upgrade has not taken fully and
>you are going to have major poblems. I am facing a complete install of V4
>on a freshly installed Solaris 2.5.1 :-(
>
>
>If the upgrade works then you are looking at a couple of hours, if it half
>works (which is what I have-see item 3 above) then your firewall will be up
>but you are looking at a complete days work to do a fresh install and get
>it 100% working.

Good advice, and a little note of what to watch for.

Thanks, all.

- Alan



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:13:19 CDT