We took an FP3 HF2 gateway straight from IPSO 3.6 FCS 3 to IPSO 3.7.1 build 10 with absolutely no issues. The IPSO release notes say you have to be on FP3 HF2 or later to use IPSO 3.7x.
It was an IP120, though, not an IP440, if that makes a difference.
Ray
From: "Grabowski, David" <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [FW-1] Upgrade from NG FP3 to NG with AI easy? Date: Fri, 20 Aug 2004 14:35:12 -0400
The FW-1 documentation seems to indicate that you can do an in-place upgrade of NG FP3 to R55. So I figured that I could do this on our IP440's.
Not quite. R55 required a new version of IPSO, but FP3 won't run on it (well, maybe it does, but I decided not to try it).
Here's the procedure that I followed -- which I made up as I went along. YMMV, but it worked for me.
- Copy all binaries to IP440. - Look at your environment variables and note the values for CPDIR, FWDIR, and LD_LIBRARY_PATH - Upgrade IPSO. Reboot. This will *disable* NG FP3. - In voyager, re-enable NG FP3. DO NOT REBOOT. - At the IPSO command line, set CPDIR, FWDIR, and LD_LIBRARY_PATH to the values you listed above. - Upgrade to R55
On one of our four modules, this procedure did not work because we were missing a symbolic link for /opt/CPShared. Recreating the symlink made it work fine.
Watch the output of the upgrade scripts carefully, and take all warnings seriously.
> -----Original Message----- > From: Alan Choyna [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 19, 2004 9:34 PM > To: [EMAIL PROTECTED] > Subject: [FW-1] Upgrade from NG FP3 to NG with AI easy? > > > We've upgraded one of our Nokia IP440's to NG FP3 from 4.1 > SP6, and all is > well now after the usual post upgrade tweaking. > > Now it's time to ponder the upgrade of our backup IP440, and > wonder if we > can go to NG with AI. > > l'm wondering about 3 things: > 1) Ease of upgrade > 2) stability > 3) performance hit > > Is it an easy upgrade from NG FP3? (l will have upgraded to > NG FP3 before > proceeding). > > Which is the most stable release to install? (l have heard of > issues with > certain releases and patches) > > Is there a big performance hit compared to NG FP3? Our ip440 > seems to run > fine with NG FP3, but from what l understand AI can add a lot > of overhead > to a system. Can any of you comment on that?, especially any > IP440 users. > My client has many popular news web sites and get over 40 million page > views a month, so performance degradation would be a big issue. > > Thanks in advance, > > Alan. > > > Alan C. Choyna > Senior Consultant > > Pathfinder Associates, LLC > > <http://www.pathfinderassoc.com/>http://www.pathfinderassoc.com > Internet Strategy Business Consultants > <mailto:[EMAIL PROTECTED]>mailto:[EMAIL PROTECTED]<mailt o:[EMAIL PROTECTED]>.com
Business telephone (312) 372-1058. Mobile (773) 255-6662
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ##################################################################################### CONFIDENTIAL: This e-mail, including its contents and attachments, if any, are confidential. It is neither an offer to buy or sell, nor a solicitation of an offer to buy or sell, any securities or any related financial instruments mentioned in it. If you are not the named recipient please notify the sender and immediately delete it. You may not disseminate, distribute, or forward this e-mail message or disclose its contents to anybody else. Unless otherwise indicated, copyright and any other intellectual property rights in its contents are the sole property of Mizuho Securities USA Inc. E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Although we routinely screen for viruses, addressees should check this e-mail and any attachments for viruses. We make no representation or warranty as to the absence of viruses in this e-mail or any attachments. Please note that to ensure regulatory compliance and for the protection of our customers and business, we may monitor and read e-mails sent to and from our server(s). #####################################################################################
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
_________________________________________________________________ Check out Election 2004 for up-to-date election news, plus voter tools and more! http://special.msn.com/msn/election2004.armx
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
