Urgent: migrate global objects and global rules from NG Feature Pack 3 to NGx R61

Good morning guys,
   
  I need your advice on this.
   
  I am in the process of rolling Provider-1 NGx R61 very
shortly.  
   
  We're currently running Provider-1 NG Feature Pack 3 with
HFA_318. 
We have several set of global objects and global rules in
our P-1 
Feature Pack 3 environment.  Instead of having to recreate
new global 
objects and new global rules in NGx environment, I can
migrate my 
existing global objects and global rules in my existing NG
Feature 
Pack 3 environment over to NGx.  It is very straight forward
and easy.
   
  That being said, are there any caveats that I should be
aware of?
I remembered that there are limitations between upgrading
and install
a new system from scratch (i.e.  some features are not
available 
with the upgrade).  Should I be worried with the
"migrate_global_policies"?
  I do not want it to come back and bite me later on and
checkpoint
came back and told me that is not the right way to go.
   
  As always, TIA.
   
  cisco4ng

 			
---------------------------------
See the all-new, redesigned Yahoo.com.  Check it out.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

On 7/31/06, cisco4ng <cisco4ngyahoo.com> wrote:
> I remembered that there are limitations between
upgrading and install
> a new system from scratch (i.e.  some features are not
available

If your global objects are just networks and hosts, you may
use odumper
and ofiller to move them from one server to another, and
it's like if you
create them from the scratch (ofiller.chatscope.com). The
download package
has documentation on how to play with the Global database in
a P-1
environment 

>   I do not want it to come back and bite me later on
and checkpoint
> came back and told me that is not the right way to go.

If you want an official answer, ask via an official way:
open a support ticket
and ask for it on your specific scenario. For sure you will
have an answer that
will cover your back later. - you will
get valuable experiences and
answers over here, but none of them will be
"official", including this one 

Good luck.

- Martín.

-- 
**** ¿Hoy qué haz hecho para ahorrar agua? - What have you
done today
to save water? - O que você têm feito hoje para conservar a
água?
** Mi página web: http://gama.fime.uanl
.mx/~mhoz/
* "Somos consecuencia del pasado, y causa de nuestro
futuro."
** My Linux - http://www.slackware.com
== My BSD - http://www.openbsd.org

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hi Martin,
  I will open a checkpoint TAC case to make it official;
however, I consider most people
  in this forum are much more knowledgable than Checkpoint
TAC.  People in this list
  offer suggestions/solutions instead of
"upgrade" like checkpoint TAC.
   
  We do  have global rules, not just global objects (i.e
networks and hosts).  But I really
  your freeware (odumper and ofiller).  I am suprised that
Cisco is not snatching you 
  away to beef up their Cisco Pix security product lines.
   
  Thanks again.
   
  cisco4ng

Martin Hoz <martinhozGMAIL.COM> wrote:
  On 7/31/06, cisco4ng wrote:
> I remembered that there are limitations between
upgrading and install
> a new system from scratch (i.e. some features are not
available

If your global objects are just networks and hosts, you may
use odumper
and ofiller to move them from one server to another, and
it's like if you
create them from the scratch (ofiller.chatscope.com). The
download package
has documentation on how to play with the Global database in
a P-1
environment 

> I do not want it to come back and bite me later on and
checkpoint
> came back and told me that is not the right way to go.

If you want an official answer, ask via an official way:
open a support ticket
and ask for it on your specific scenario. For sure you will
have an answer that
will cover your back later. - you will
get valuable experiences and
answers over here, but none of them will be
"official", including this one 

Good luck.

- Martín.

-- 
**** ¿Hoy qué haz hecho para ahorrar agua? - What have you
done today
to save water? - O que você têm feito hoje para conservar a
água?
** Mi página web: http://gama.fime.uanl
.mx/~mhoz/
* "Somos consecuencia del pasado, y causa de nuestro
futuro."
** My Linux - http://www.slackware.com
== My BSD - http://www.openbsd.org

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================


 		
---------------------------------
Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the
US (and 30+ countries) for 2¢/min or less.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================