Prerequisites for Upgrading and Migrating of Security Gateways and Clusters
Prerequisites:
-
Make sure you use the latest version of this document (see the Important Information page for links).
-
See the R81.20 Release Notes for:
-
Supported upgrade paths
-
Minimum hardware and operating system requirements
-
Supported Security Gateways
-
-
Make sure to read all applicable known limitations in the R81.20 Known Limitations SK.
-
Before starting an upgrade of your Security Gateway
Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. and Cluster
Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Members, you must upgrade the Management Server
Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..
-
On your Security Gateways and Cluster Members:
Make a copy of all custom configurations in the applicable directories and files.
The upgrade process replaces all existing files with default files. You must not copy the customized configuration files from the current version to the upgraded version, because these files can be unique for each version. You must make all the custom configurations again after the upgrade.
List of the most important directories
-
$FWDIR/boot/modules/
-
$FWDIR/conf/
-
$FWDIR/lib/
-
$FWDIR/database/
-
$CVPNDIR/conf/
-
$PPKDIR/boot/modules/
-
/var/ace/
List of the most important files
Note - Some of these files do not exist by default. Some files are configured on each VSX Gateway and VSX Cluster Member, and some files are configured for each Virtual System.
-
$FWDIR/boot/modules/fwkern.conf
-
$FWDIR/boot/modules/vpnkern.conf
-
$FWDIR/conf/fwaffinity.conf
-
$FWDIR/conf/fwauthd.conf
-
$FWDIR/conf/local.arp
-
$FWDIR/conf/discntd.if
-
$FWDIR/conf/cpha_bond_ls_config.conf
-
$FWDIR/conf/resctrl
-
$FWDIR/conf/vsaffinity_exception.conf
-
$FWDIR/database/qos_policy.C
-
$PPKDIR/conf/simkern.conf
: -
$PPKDIR/conf/sim_aff.conf
: -
$CPDIR/tmp/.CPprofile.sh
-
$CPDIR/tmp/.CPprofile.csh
-
/var/ace/sdconf.rec
-
/var/ace/sdopts.rec
-
/var/ace/sdstatus.12
-
/var/ace/securid
List of the most important files
Note - Some of these files do not exist by default. Some files are configured on each VSX Gateway and VSX Cluster Member, and some files are configured for each Virtual System.
-
$FWDIR/boot/modules/fwkern.conf
-
$FWDIR/boot/modules/vpnkern.conf
-
$FWDIR/conf/fwaffinity.conf
-
$FWDIR/conf/fwauthd.conf
-
$FWDIR/conf/local.arp
-
$FWDIR/conf/discntd.if
-
$FWDIR/conf/cpha_bond_ls_config.conf
-
$FWDIR/conf/resctrl
-
$FWDIR/conf/vsaffinity_exception.conf
-
$FWDIR/database/qos_policy.C
-
$PPKDIR/conf/simkern.conf
-
$PPKDIR/conf/sim_aff.conf
-
/var/ace/sdconf.rec
-
/var/ace/sdopts.rec
-
/var/ace/sdstatus.12
-
/var/ace/securid
-
-
Licenses and Service Contracts:
-
Make sure you have valid licenses installed on all applicable Check Point computers - source and target.
-
Make sure you have a valid Service Contract that includes software upgrades and major releases registered to your Check Point User Center account (see Contract Verification).
The contract file is stored on the Management Server and downloaded to Check Point Security Gateways during the upgrade process.
For more information about Service Contracts, see sk33089.
-