There is official way to upgrade Check Point SPLAT solutions based on SPLAT.
Bellow I've described my way to upgrade CP Security Management server (SMART center).
My SMART center installed on the HP Proliant DL380g6 server.
First of all you have to check state and version :). I've done it using CP SmartView monitor.
As you can read at the upgrade procedure document, you have to check contracts files.
I've done it using SmartUpdate tool.
On the next stage you should do backup your system. I've used two method: backup (using backup script from the CPUG forum) and snapshot.
Here is backup script:
#!/bin/sh
-x
#
Set Check Point profile for library settings!
. /etc/profile.d/CP.sh
PATH=$PATH:/bin:/sbin:/usr/bin:/usr/sbin:/opt/CPsuite-R65/fw1/
FILENAME="`uname -n`"_"`/bin/date
+%m-%d-%Y_%H%M`"
###
update system clock
###/usr/sbin/ntpdate
4.2.2.2
###
###
create /var/tmp/upgrade_export
mkdir /var/tmp/upgrade_export
###
Enter /var/tmp directory
###
cd /var/tmp/upgrade_export
###
###
Remove the temp directory if exists
rm -rf $FILENAME
###
###
Create upgrade_export directory
mkdir /var/tmp/upgrade_export/$FILENAME
###
###
Enter temporary upgrade export directory
cd /var/tmp/upgrade_export/$FILENAME
###
###
Gather system important information
###
/bin/set_host >> info.txt
/bin/echo ------------- >> info.txt
/bin/save_ifconfig -a >> info.txt
/bin/echo ------------- >> info.txt
/bin/netstat -rnv >> info.txt
/bin/echo ------------- >> info.txt
/bin/cat /etc/hosts >> info.txt
/bin/echo ------------- >> info.txt
/bin/cat /etc/sysconfig/netconf.C >> info.txt
###
###
Start the upgrade_export process
###echo
Y | /opt/CPsuite-R65/fw1/bin/upgrade_tools/upgrade_export $FILENAME
${FWDIR}/bin/upgrade_tools/upgrade_export -n ${FILENAME}
###
###
pack up files and zip them up
cd /var/tmp/upgrade_export
tar -cf $FILENAME.tar $FILENAME
gzip $FILENAME.tar
###
###
Remove temporary directory
rm -rf $FILENAME
###
###
At this point what you may want is to transfer this $FILENAME.tar.gz file
###
to a safe external system with Secure Copy Protocol or scp.
###
Make sure to use the "admin" account when you get this file from the
SCP
###
server.
###
Enjoy !!!!!!
###
copy this file to a scp server
###/usr/bin/scp
$FILENAME.tar.gz root@192.168.1.1:/var/backups/.
### Finish
Script was placed at the admin home folder, and run from expert mode
[Expert@hostname-sc00]#
/home/admincp/backup-script
As the result you have one file at the /var/tmp/upgrade_export folder
This file you have to copy to the backup server. I've done it manually using WinSCP.
Next I've used the classical snapshot procedure.
Make sure that snapshot file successfully copied to the FTP-server.
And now you can do the upgrade procedure.
I've used many ways, but only one method was successfully.
It is upgrade through ILO-interface and ISO-file.
Well, logon to ILO.
Login to CP console.
Add image file.
Start path command.
We've already done snapshot.
After extract files there are welcome window.
Is reading license agreement.
Select the Upgrade option.
Notice about contract information.
Our contract verification succeeded.
Select source for upgrade (from CD).
Pre-upgrade verification procedure.
Warning message.
And next option:
Validation our installed products.
Upgrading.
Installing PSM.
And finish.
Reboot server.
After reboot I've noticed wonderful information at the CP console.
Then you can login through SSH and check version of SPLAT.
[hostname-sc00]#
ver
This is
Check Point SecurePlatform Pro R75.40 Build 069
[hostname-sc00]#
And using CP SmartView monitor.
That's all. Have a good upgrading!
