Configuring Check Point NGX VPN-1/FireWall-1

Chapter 4: Upgrading to NGX

Introduction

You have a current Check Point environment for managing security in your infrastructure. Version NGX is available with many enticing new features; the bells and whistles pique your interest. With NGX media in hand you are ready to invest the resources to forge ahead with the upgrade. The technologist inside you wants the green flag, but the pragmatist is looking for yellow.

This chapter will guide you through the necessary steps to perform the NGX upgrade. You need to ensure that you have the necessary tools and perform the appropriate tests prior to starting the actual upgrade. There are various paths, depending on uptime requirements and hardware availability. In all upgrade scenarios it is equally important to have proper rollback procedures in the event of failure.

Backup

It seems ironic that the first step of any upgrade procedure is to perform system backups. Consider this step as your insurance for the worst-case scenario. In the event of a failure it is important to be able to restore functionality in a timely fashion. The SmartCenter Server is the single most important piece of your Check Point environment. The databases on this system contain everything (keys, objects, services, rules, etc.) that is required to maintain your security configuration. Rebuilding everything from scratch is unacceptable and in some cases impossible. Gateways are easier to rebuild if necessary, although another undesirable alternative.

Ensure that you have a valid current backup if you are using some type of enterprise software. Use the Export function...

UNLIMITED FREE
ACCESS
TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Category: Semiconductor Equipment Repair Services
Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.