Re: Backup restoration on secure platform.

Dear Sergio,

Thanks for your response,

Infact i had done the fresh installation of secure platform
& firewall/vpn
module on intel based hardware machine and get this machine
connected with
TFTP server.
Having done the above i tried to restore the configuration
through  'Restore' command but it gives an error message.

I have done it before on windows platform several times
through
'upgrade_import' command but not sure how the same command
can be useful
incase of SPLAT as i didnt find this
command on secure platform as built-in, pls advise if i need
to copy this
utility on the machine & then try to restore the
configuration.

Thanks in advance for your help.

Regards,

Syed Abdul Hameed
Engro Chemical Pakistan Limited
Ph# 5611060-9 Ext: 626
Mobile # 0300-9265980
|-----------------------------+-----------------------------
--------------|
|Sergio Alvarez               |                             
             |
|<seralvarGMAIL.COM>         |                   
                       |
|Sent by: Mailing list for    |                             
           To|
|discussion of Firewall-1     |              
FW-1-MAILINGLISTAMADEUS.US.|
|<FW-1-MAILINGLISTAMADEUS.US.|               CHECKPOINT.COM 
            |
|CHECKPOINT.COM>              |                          
              cc|
|                             |                             
             |
|07/17/2007 06:00 PM          |                             
      Subject|
|                             |               Re: [FW-1]
Backup           |
|      Please respond to      |               restoration on
secure       |
| Mailing list for discussion |               platform.     
             |
|        of Firewall-1        |                             
             |
|<FW-1-MAILINGLISTAMADEUS.US.|                              
            |
|       CHECKPOINT.COM>       |                          
                |
|                             |                             
             |
|                             |                             
             |
|                             |                             
             |
|-----------------------------+-----------------------------
--------------|





How did you try to restore the old firewall configuration?

The right way to go is using the upgrade_export tool on your
Windows
machine
and the upgrade_import to load the config on the Secure
Platform machine.

Every Check Point installation (at least starting from NG
versions), comes
with these tools, although I have had issues in the past
which usually get
resolved downloading the latest versions of the tools from
the CP website,
which by the way is what Check Point recommends.

Hope this helps.

On 7/16/07, <Syed Abdul Hameed> <sahameedengro.com> wrote:
>
> Dear All,
>
> I am running Check Point NGX R62 with VPN module on
Microsoft windows
> platform but due to its unreliability & frequent
blue screen crash i
would
> like to
> migrate it on Secure Plat form.
>
> when I tried to restore the old firewall configuration
on secure platform
> based firewall, it gives an error message as follows:
>
> "Failed to transfer data files from remote
server"
>
> Appreciate if anyone of you could please confirm if
this is possible.
>
> Thanks / Regards,
>
> Syed Abdul Hameed
> Engro Chemical Pakistan Limited
>
> This email  is sent from Engro Chemical Pakistan Ltd.
This email  (and
any
> attachments or hyperlinks within it) may contain
information that
> is  confidential, legally privileged or otherwise
protected from
disclosure.
> If you  are not the intended recipient of this email,
you are not
entitled
> to use,  disclose, distribute, copy, print, disseminate
or rely on this
> email in any way.  If you have received this email in
error, please
notify
> the sender immediately  by telephone or email and
destroy it, and all
copies
> of it.
>
> Steps have been taken to ensure that this email (and
 any attachments)
are
> free from computer viruses and  the like. However, it
 is the recipient's
> responsibility to ensure that it is actually virus free
and Engro
Chemical
> Pakistan Ltd. takes no liability thereof. Any  emails
that you send to us
> may be monitored for the purposes of ascertaining
 whether the
communication
> complies with the law and our policies.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>



--
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================


This email is sent from Engro Chemical Pakistan Ltd. This
email (and any
attachments or hyperlinks within it) may contain information
that is
confidential, legally privileged or otherwise protected from
disclosure. If
you are not the intended recipient of this email, you are
not entitled to
use, disclose, distribute, copy, print, disseminate or rely
on this email
in any way. If you have received this email in error, please
notify the
sender immediately by telephone or email and destroy it, and
all copies of
it.

Steps have been taken to ensure that this email (and any
attachments) are
free from computer viruses and the like. However, it is the
recipient's
responsibility to ensure that it is actually virus free and
Engro Chemical
Pakistan Ltd. takes no liability thereof. Any emails that
you send to us
may be monitored for the purposes of ascertaining whether
the communication
complies with the law and our policies.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

<Syed Abdul Hameed> wrote:
> Dear Sergio,
> 
> Thanks for your response,
> 
> Infact i had done the fresh installation of secure
platform & firewall/vpn
> module on intel based hardware machine and get this
machine connected with
> TFTP server.
> Having done the above i tried to restore the
configuration
> through  'Restore' command but it gives an error
message.
> 
> I have done it before on windows platform several times
through
> 'upgrade_import' command but not sure how the same
command can be useful
> incase of SPLAT as i didnt find this
> command on secure platform as built-in, pls advise if i
need to copy this
> utility on the machine & then try to restore the
configuration.
> 

you haven't read the documentation.

after you do cpconfig, upgrade_import if found in:

$FWDIR/bin/upgrade_tool (logged in as expert)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

<Syed Abdul Hameed> wrote:
> Dear Sergio,
>
> Thanks for your response,
>
> Infact i had done the fresh installation of secure
platform & firewall/vpn
> module on intel based hardware machine and get this
machine connected with
> TFTP server.
> Having done the above i tried to restore the
configuration
> through  'Restore' command but it gives an error
message.
>
> I have done it before on windows platform several times
through
> 'upgrade_import' command but not sure how the same
command can be useful
> incase of SPLAT as i didnt find this
> command on secure platform as built-in, pls advise if i
need to copy this
> utility on the machine & then try to restore the
configuration.
>   
It isn't in the default path in expert mode go to:
$FWDIR/bin/upgrade_tools/
You should find both upgrade_import and upgrade_export in
that directory.

fj..




> Thanks in advance for your help.
>
> Regards,
>
> Syed Abdul Hameed
> Engro Chemical Pakistan Limited
> Ph# 5611060-9 Ext: 626
> Mobile # 0300-9265980
>
|-----------------------------+-----------------------------
--------------|
> |Sergio Alvarez               |                        
                  |
> |<seralvarGMAIL.COM>         |                   
                       |
> |Sent by: Mailing list for    |                        
                To|
> |discussion of Firewall-1     |              
FW-1-MAILINGLISTAMADEUS.US.|
> |<FW-1-MAILINGLISTAMADEUS.US.|              
CHECKPOINT.COM              |
> |CHECKPOINT.COM>              |                     
                   cc|
> |                             |                        
                  |
> |07/17/2007 06:00 PM          |                        
           Subject|
> |                             |               Re:
[FW-1] Backup           |
> |      Please respond to      |              
restoration on secure       |
> | Mailing list for discussion |               platform.
                  |
> |        of Firewall-1        |                        
                  |
> |<FW-1-MAILINGLISTAMADEUS.US.|               
                           |
> |       CHECKPOINT.COM>       |                     
                     |
> |                             |                        
                  |
> |                             |                        
                  |
> |                             |                        
                  |
>
|-----------------------------+-----------------------------
--------------|
>
>
>
>
>
> How did you try to restore the old firewall
configuration?
>
> The right way to go is using the upgrade_export tool on
your Windows
> machine
> and the upgrade_import to load the config on the Secure
Platform machine.
>
> Every Check Point installation (at least starting from
NG versions), comes
> with these tools, although I have had issues in the
past which usually get
> resolved downloading the latest versions of the tools
from the CP website,
> which by the way is what Check Point recommends.
>
> Hope this helps.
>
> On 7/16/07, <Syed Abdul Hameed> <sahameedengro.com> wrote:
>   
>> Dear All,
>>
>> I am running Check Point NGX R62 with VPN module on
Microsoft windows
>> platform but due to its unreliability &
frequent blue screen crash i
>>     
> would
>   
>> like to
>> migrate it on Secure Plat form.
>>
>> when I tried to restore the old firewall
configuration on secure platform
>> based firewall, it gives an error message as
follows:
>>
>> "Failed to transfer data files from remote
server"
>>
>> Appreciate if anyone of you could please confirm if
this is possible.
>>
>> Thanks / Regards,
>>
>> Syed Abdul Hameed
>> Engro Chemical Pakistan Limited
>>
>> This email  is sent from Engro Chemical Pakistan
Ltd. This email  (and
>>     
> any
>   
>> attachments or hyperlinks within it) may contain
information that
>> is  confidential, legally privileged or otherwise
protected from
>>     
> disclosure.
>   
>> If you  are not the intended recipient of this
email, you are not
>>     
> entitled
>   
>> to use,  disclose, distribute, copy, print,
disseminate or rely on this
>> email in any way.  If you have received this email
in error, please
>>     
> notify
>   
>> the sender immediately  by telephone or email and
destroy it, and all
>>     
> copies
>   
>> of it.
>>
>> Steps have been taken to ensure that this email
(and  any attachments)
>>     
> are
>   
>> free from computer viruses and  the like. However,
it  is the recipient's
>> responsibility to ensure that it is actually virus
free and Engro
>>     
> Chemical
>   
>> Pakistan Ltd. takes no liability thereof. Any 
emails that you send to us
>> may be monitored for the purposes of ascertaining 
whether the
>>     
> communication
>   
>> complies with the law and our policies.
>>
>> =================================================
>> To set vacation, Out-Of-Office, or away messages,
>> send an email to LISTSERVamadeus.us.checkpoint.com
>> in the BODY of the email add:
>> set fw-1-mailinglist nomail
>> =================================================
>> To unsubscribe from this mailing list,
>> please see the instructions at
>> http:
//www.checkpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> fw-1-ownerts.checkpoint.com
>> =================================================
>>
>>     
>
>
>
> --
> Sergio Alvarez
> (506)8301342
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>
>
> This email is sent from Engro Chemical Pakistan Ltd.
This email (and any
> attachments or hyperlinks within it) may contain
information that is
> confidential, legally privileged or otherwise protected
from disclosure. If
> you are not the intended recipient of this email, you
are not entitled to
> use, disclose, distribute, copy, print, disseminate or
rely on this email
> in any way. If you have received this email in error,
please notify the
> sender immediately by telephone or email and destroy
it, and all copies of
> it.
>
> Steps have been taken to ensure that this email (and
any attachments) are
> free from computer viruses and the like. However, it is
the recipient's
> responsibility to ensure that it is actually virus free
and Engro Chemical
> Pakistan Ltd. takes no liability thereof. Any emails
that you send to us
> may be monitored for the purposes of ascertaining
whether the communication
> complies with the law and our policies.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>   

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hello Syed,

Actually the problem is that you mixed two different ways of
backing up a
configuration, the restore command allows you to restore a
full Secure
Platform installation (including platform stuff such as IPs,
hostname,
routes, etc, as well as the Check Point configuration,
rules, objects, etc),
so it can only be done after getting the backups using the
Secure Platform
backup utility and off course it only works with Secure
Platform either on a
new machine of restoring the same one.

Now, the upgrade_export utility is available on all
platforms (Windows,
Secure Platform, Solaris, IPSO), and in fact allows you to
move from one
platform to another (as you are doing right now), because
the obtained file
can be used with the upgrade_import utility on any of them.

As other guys in the list already pointed, the
upgrade_export and import
utilities come by default with Secure Platform, but you must
go to the
appropriate path  to find them and be able to run them
($FWDIR/bin/upgrade_tools/).

You can try using the tools you will find there, actually I
almost always do
that with success, but as I mentioned before, sometimes
those tools might
give you some trouble, so in those cases it is better to
download and use
the latest version of them from the Check Point  website.

Another suggestion I have is to better get the
upgrade_export generated file
from the Windows machine and move it to your Secure Platform
box using FTP
(use binary mode), TFTP has given me problems a couple of
times.

I hope all this helps.

Regards




On 7/17/07, Franklin Jones <gratwyldwood.com> wrote:
>
> <Syed Abdul Hameed> wrote:
> > Dear Sergio,
> >
> > Thanks for your response,
> >
> > Infact i had done the fresh installation of secure
platform &
> firewall/vpn
> > module on intel based hardware machine and get
this machine connected
> with
> > TFTP server.
> > Having done the above i tried to restore the
configuration
> > through  'Restore' command but it gives an error
message.
> >
> > I have done it before on windows platform several
times through
> > 'upgrade_import' command but not sure how the same
command can be useful
> > incase of SPLAT as i didnt find this
> > command on secure platform as built-in, pls advise
if i need to copy
> this
> > utility on the machine & then try to restore
the configuration.
> >
> It isn't in the default path in expert mode go to:
> $FWDIR/bin/upgrade_tools/
> You should find both upgrade_import and upgrade_export
in that directory.
>
> fj..
>
>
>
>
> > Thanks in advance for your help.
> >
> > Regards,
> >
> > Syed Abdul Hameed
> > Engro Chemical Pakistan Limited
> > Ph# 5611060-9 Ext: 626
> > Mobile # 0300-9265980
> >
>
|-----------------------------+-----------------------------
--------------|
> > |Sergio Alvarez
> |                                           |
> > |<seralvarGMAIL.COM>
> |                                           |
> > |Sent by: Mailing list for    |
> To|
> > |discussion of Firewall-1     |
> FW-1-MAILINGLISTAMADEUS.US.|
> > |<FW-1-MAILINGLISTAMADEUS.US.|              
CHECKPOINT.COM
>               |
> > |CHECKPOINT.COM>              |
> cc|
> > |
> |                                           |
> > |07/17/2007 06:00
> PM          |                                   
Subject|
> > |                             |               Re:
[FW-1]
> Backup           |
> > |      Please respond to      |              
restoration on
> secure       |
> > | Mailing list for discussion |
> platform.                   |
> > |        of
> Firewall-1        |                                    
      |
> > |<FW-1-MAILINGLISTAMADEUS.US.|
> |
> > |       CHECKPOINT.COM>
> |                                           |
> > |
> |                                           |
> > |
> |                                           |
> > |
> |                                           |
> >
>
|-----------------------------+-----------------------------
--------------|
> >
> >
> >
> >
> >
> > How did you try to restore the old firewall
configuration?
> >
> > The right way to go is using the upgrade_export
tool on your Windows
> > machine
> > and the upgrade_import to load the config on the
Secure Platform
> machine.
> >
> > Every Check Point installation (at least starting
from NG versions),
> comes
> > with these tools, although I have had issues in
the past which usually
> get
> > resolved downloading the latest versions of the
tools from the CP
> website,
> > which by the way is what Check Point recommends.
> >
> > Hope this helps.
> >
> > On 7/16/07, <Syed Abdul Hameed>
<sahameedengro.com> wrote:
> >
> >> Dear All,
> >>
> >> I am running Check Point NGX R62 with VPN
module on Microsoft windows
> >> platform but due to its unreliability &
frequent blue screen crash i
> >>
> > would
> >
> >> like to
> >> migrate it on Secure Plat form.
> >>
> >> when I tried to restore the old firewall
configuration on secure
> platform
> >> based firewall, it gives an error message as
follows:
> >>
> >> "Failed to transfer data files from
remote server"
> >>
> >> Appreciate if anyone of you could please
confirm if this is possible.
> >>
> >> Thanks / Regards,
> >>
> >> Syed Abdul Hameed
> >> Engro Chemical Pakistan Limited
> >>
> >> This email  is sent from Engro Chemical
Pakistan Ltd. This email  (and
> >>
> > any
> >
> >> attachments or hyperlinks within it) may
contain information that
> >> is  confidential, legally privileged or
otherwise protected from
> >>
> > disclosure.
> >
> >> If you  are not the intended recipient of this
email, you are not
> >>
> > entitled
> >
> >> to use,  disclose, distribute, copy, print,
disseminate or rely on this
> >> email in any way.  If you have received this
email in error, please
> >>
> > notify
> >
> >> the sender immediately  by telephone or email
and destroy it, and all
> >>
> > copies
> >
> >> of it.
> >>
> >> Steps have been taken to ensure that this
email (and  any attachments)
> >>
> > are
> >
> >> free from computer viruses and  the like.
However, it  is the
> recipient's
> >> responsibility to ensure that it is actually
virus free and Engro
> >>
> > Chemical
> >
> >> Pakistan Ltd. takes no liability thereof. Any 
emails that you send to
> us
> >> may be monitored for the purposes of
ascertaining  whether the
> >>
> > communication
> >
> >> complies with the law and our policies.
> >>
> >>
=================================================
> >> To set vacation, Out-Of-Office, or away
messages,
> >> send an email to LISTSERVamadeus.us.checkpoint.com
> >> in the BODY of the email add:
> >> set fw-1-mailinglist nomail
> >>
=================================================
> >> To unsubscribe from this mailing list,
> >> please see the instructions at
> >> http:
//www.checkpoint.com/services/mailing.html
> >>
=================================================
> >> If you have any questions on how to change
your
> >> subscription options, email
> >> fw-1-ownerts.checkpoint.com
> >>
=================================================
> >>
> >>
> >
> >
> >
> > --
> > Sergio Alvarez
> > (506)8301342
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERVamadeus.us.checkpoint.com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http:
//www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-ownerts.checkpoint.com
> > =================================================
> >
> >
> > This email is sent from Engro Chemical Pakistan
Ltd. This email (and any
> > attachments or hyperlinks within it) may contain
information that is
> > confidential, legally privileged or otherwise
protected from disclosure.
> If
> > you are not the intended recipient of this email,
you are not entitled
> to
> > use, disclose, distribute, copy, print,
disseminate or rely on this
> email
> > in any way. If you have received this email in
error, please notify the
> > sender immediately by telephone or email and
destroy it, and all copies
> of
> > it.
> >
> > Steps have been taken to ensure that this email
(and any attachments)
> are
> > free from computer viruses and the like. However,
it is the recipient's
> > responsibility to ensure that it is actually virus
free and Engro
> Chemical
> > Pakistan Ltd. takes no liability thereof. Any
emails that you send to us
> > may be monitored for the purposes of ascertaining
whether the
> communication
> > complies with the law and our policies.
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to LISTSERVamadeus.us.checkpoint.com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http:
//www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-ownerts.checkpoint.com
> > =================================================
> >
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>



-- 
Sergio Alvarez
(506)8301342

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

sin wrote:

> 
> $FWDIR/bin/upgrade_tool (logged in as expert)
> 

$FWDIR/bin/upgrade_tools , forgot an s in my initial email.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================