Backup restoration on secure platform.

Dear All,

I am running Check Point NGX R62 with VPN module on
Microsoft windows
platform but due to its unreliability & frequent blue
screen crash i would
like to
migrate it on Secure Plat form.

when I tried to restore the old firewall configuration on
secure platform
based firewall, it gives an error message as follows:

"Failed to transfer data files from remote
server"

Appreciate if anyone of you could please confirm if this is
possible.

Thanks / Regards,

Syed Abdul Hameed
Engro Chemical Pakistan Limited

This email  is sent from Engro Chemical Pakistan Ltd. This
email  (and any attachments or hyperlinks within it) may
contain information that is  confidential, legally
privileged or otherwise protected from disclosure. If you 
are not the intended recipient of this email, you are not
entitled to use,  disclose, distribute, copy, print,
disseminate or rely on this email in any way.  If you have
received this email in error, please notify the sender
immediately  by telephone or email and destroy it, and all
copies of it. 

Steps have been taken to ensure that this email (and  any
attachments) are free from computer viruses and  the like.
However, it  is the recipient's responsibility to ensure
that it is actually virus free and Engro Chemical Pakistan
Ltd. takes no liability thereof. Any  emails that you send
to us may be monitored for the purposes of ascertaining 
whether the communication complies with the law and our
policies. 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

How did you try to restore the old firewall configuration?

The right way to go is using the upgrade_export tool on your
Windows machine
and the upgrade_import to load the config on the Secure
Platform machine.

Every Check Point installation (at least starting from NG
versions), comes
with these tools, although I have had issues in the past
which usually get
resolved downloading the latest versions of the tools from
the CP website,
which by the way is what Check Point recommends.

Hope this helps.

On 7/16/07, <Syed Abdul Hameed> <sahameedengro.com> wrote:
>
> Dear All,
>
> I am running Check Point NGX R62 with VPN module on
Microsoft windows
> platform but due to its unreliability & frequent
blue screen crash i would
> like to
> migrate it on Secure Plat form.
>
> when I tried to restore the old firewall configuration
on secure platform
> based firewall, it gives an error message as follows:
>
> "Failed to transfer data files from remote
server"
>
> Appreciate if anyone of you could please confirm if
this is possible.
>
> Thanks / Regards,
>
> Syed Abdul Hameed
> Engro Chemical Pakistan Limited
>
> This email  is sent from Engro Chemical Pakistan Ltd.
This email  (and any
> attachments or hyperlinks within it) may contain
information that
> is  confidential, legally privileged or otherwise
protected from disclosure.
> If you  are not the intended recipient of this email,
you are not entitled
> to use,  disclose, distribute, copy, print, disseminate
or rely on this
> email in any way.  If you have received this email in
error, please notify
> the sender immediately  by telephone or email and
destroy it, and all copies
> of it.
>
> Steps have been taken to ensure that this email (and 
any attachments) are
> free from computer viruses and  the like. However, it 
is the recipient's
> responsibility to ensure that it is actually virus free
and Engro Chemical
> Pakistan Ltd. takes no liability thereof. Any  emails
that you send to us
> may be monitored for the purposes of ascertaining 
whether the communication
> complies with the law and our policies.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>



-- 
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Yes, as another list member wrote, it is possible, and the
best route is
to use the upgrade_export and upgrade_import tools.
Some extra info to note:

You have to configure your interfaces and routing on the
SPLAT box
manually before doing the import, since the upgrade
export/import tools
don't include that info.

You will need to configure your interfaces in the new box as
similar as
possible to the Windows installation.  For example, if eth0
is the
external interface in the Windows install, it should be the
external
interface in the SPLAT box.

When I do an export/import, I use FTP to transfer the output
of the
upgrade_export from the source to the new server.  TFTP
usually failed
because of limitations on the file size it will transfer. 
Others on the
list use SCP.

One last bit of info that might be useful if you're not a
Linux guru is
that when you do the upgrade_export, on the SPLAT command
line, you'll
need to type a "./" (don't include the quotes) in
front of the command.


-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of <Syed
Abdul Hameed>
Sent: Tuesday, July 17, 2007 12:38 AM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] Backup restoration on secure platform.

Dear All,

I am running Check Point NGX R62 with VPN module on
Microsoft windows
platform but due to its unreliability & frequent blue
screen crash i
would
like to
migrate it on Secure Plat form.

when I tried to restore the old firewall configuration on
secure
platform
based firewall, it gives an error message as follows:

"Failed to transfer data files from remote
server"

Appreciate if anyone of you could please confirm if this is
possible.

Thanks / Regards,

Syed Abdul Hameed
Engro Chemical Pakistan Limited

This email  is sent from Engro Chemical Pakistan Ltd. This
email  (and
any attachments or hyperlinks within it) may contain
information that is
confidential, legally privileged or otherwise protected from
disclosure.
If you  are not the intended recipient of this email, you
are not
entitled to use,  disclose, distribute, copy, print,
disseminate or rely
on this email in any way.  If you have received this email
in error,
please notify the sender immediately  by telephone or email
and destroy
it, and all copies of it. 

Steps have been taken to ensure that this email (and  any
attachments)
are free from computer viruses and  the like. However, it 
is the
recipient's responsibility to ensure that it is actually
virus free and
Engro Chemical Pakistan Ltd. takes no liability thereof. Any
 emails
that you send to us may be monitored for the purposes of
ascertaining
whether the communication complies with the law and our
policies. 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

As an extra piece of info... adding to everything Kim
explained....

Be sure the hostname of the SPLAT machine is the same of the
Windows
machine, where your firewall resides right now, otherwise
the Internal
Certificate Authority will get corrupted when you do the
upgrade_import and
the only way around it is reseting it, which is a potential
headache.

On 7/17/07, Kim Longenbaugh <Kimlcolonialsavings.com>
wrote:
>
> Yes, as another list member wrote, it is possible, and
the best route is
> to use the upgrade_export and upgrade_import tools.
> Some extra info to note:
>
> You have to configure your interfaces and routing on
the SPLAT box
> manually before doing the import, since the upgrade
export/import tools
> don't include that info.
>
> You will need to configure your interfaces in the new
box as similar as
> possible to the Windows installation.  For example, if
eth0 is the
> external interface in the Windows install, it should be
the external
> interface in the SPLAT box.
>
> When I do an export/import, I use FTP to transfer the
output of the
> upgrade_export from the source to the new server.  TFTP
usually failed
> because of limitations on the file size it will
transfer.  Others on the
> list use SCP.
>
> One last bit of info that might be useful if you're not
a Linux guru is
> that when you do the upgrade_export, on the SPLAT
command line, you'll
> need to type a "./" (don't include the
quotes) in front of the command.
>
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of <Syed
> Abdul Hameed>
> Sent: Tuesday, July 17, 2007 12:38 AM
> To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
> Subject: [FW-1] Backup restoration on secure platform.
>
> Dear All,
>
> I am running Check Point NGX R62 with VPN module on
Microsoft windows
> platform but due to its unreliability & frequent
blue screen crash i
> would
> like to
> migrate it on Secure Plat form.
>
> when I tried to restore the old firewall configuration
on secure
> platform
> based firewall, it gives an error message as follows:
>
> "Failed to transfer data files from remote
server"
>
> Appreciate if anyone of you could please confirm if
this is possible.
>
> Thanks / Regards,
>
> Syed Abdul Hameed
> Engro Chemical Pakistan Limited
>
> This email  is sent from Engro Chemical Pakistan Ltd.
This email  (and
> any attachments or hyperlinks within it) may contain
information that is
> confidential, legally privileged or otherwise protected
from disclosure.
> If you  are not the intended recipient of this email,
you are not
> entitled to use,  disclose, distribute, copy, print,
disseminate or rely
> on this email in any way.  If you have received this
email in error,
> please notify the sender immediately  by telephone or
email and destroy
> it, and all copies of it.
>
> Steps have been taken to ensure that this email (and 
any attachments)
> are free from computer viruses and  the like. However,
it  is the
> recipient's responsibility to ensure that it is
actually virus free and
> Engro Chemical Pakistan Ltd. takes no liability
thereof. Any  emails
> that you send to us may be monitored for the purposes
of ascertaining
> whether the communication complies with the law and our
policies.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>



-- 
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Sergio Alvarez wrote:
> As an extra piece of info... adding to everything Kim
explained....
> 
> Be sure the hostname of the SPLAT machine is the same
of the Windows
> machine, where your firewall resides right now,
otherwise the Internal
> Certificate Authority will get corrupted when you do
the upgrade_import and
> the only way around it is reseting it, which is a
potential headache.
> 

My hunch says he tried to tftp the configuration from the
other machine 
which won't work as I suspect that he expected that the
other machine 
has an TFTP server on it.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================