Prerequisites for Upgrading the Mobile Access Software Blade Configuration

Important - If you use the Mobile Access Software Blade and you have customized configuration, review the customized settings before you upgrade to R80.20. Do not copy the existing files, because the default files change between the versions. After the upgrade, make the applicable changes to the new files.

Prerequisites:

• Make sure you use the latest version of this document (see the Important Information page for links).
• See the R80.20 Release Notes for:
  • Supported upgrade paths
  • Minimum hardware and operating system requirements
  • Supported Security Gateways
• Make sure to read all applicable known limitations in the R80.20 Known Limitations SK.
• Before starting an upgrade of your Security Gateway and Cluster Members, you must upgrade the Management Server.
• Licenses and Service Contracts:
  • Make sure you have valid licenses installed on all applicable Check Point computers - source and target.
  • Make sure you have a valid Service Contract that includes software upgrades and major releases registered to your Check Point User Center account.

    The contract file is stored on the Management Server and downloaded to Check Point Security Gateways during the upgrade process.

    For more information about Service Contracts, see sk33089.

Procedure:

Step	Description
1	Open these files on the Management Server and write down all custom changes in the applicable files:
	Mobile Access configuration: $CVPNDIR/conf/cvpnd.C
	Apache configuration: $CVPNDIR/conf/httpd.conf $CVPNDIR/conf/includes/*
	Local certificates: $CVPNDIR/var/ssl/ca-bundle/*
	DynamicID - SMS OTP - Local Phone List: $CVPNDIR/conf/SmsPhones.lst
	RSA configuration: /var/ace/sdconf.rec
	Mobile Access Portal configuration (run these commands in Expert mode to see the applicable files): # find $CVPNDIR/ -name *.php -type f -exec ls {} \; # find $CVPNDIR/ -name *.gif -type f -exec ls {} \; # find $CVPNDIR/ -name *.jpg -type f -exec ls {} \;
2	Upgrade the Management Server to R80.20 using one of the supported methods.
3	Update the Mobile Access Endpoint Compliance: In SmartConsole, from the left navigation panel, click Security Policies. In the Shared Policies section, click Mobile Access > Open Mobile Access Policy in SmartDashboard. In SmartDashboard, click Mobile Access tab > open Endpoint Security On Demand > click Endpoint Compliance Updates > click Update Databases Now. Close SmartDashboard.
4	Manually edit the default files on the upgraded the Management Server to include your custom changes.