Checkpoint: Upgrade schlägt fehl (R75.40 auf R77.20 Gaia)

Ich wollte letztens einen Firewall (Security Gateway Appliance 4600 im Cluster) – die noch auf Gaia R75.40 lief – auf die aktuelle Version Gaia R77.20 upgraden und lief in einen Fehler.

Der eigentlich Upgrade-Vorgang lief sauber durch – bei der ersten Installation der Policy erhielt ich jedoch diese Fehlermeldung:


R77.20 Network Security export Standard.Set:
R77.20 Network Security Standard:
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/updates.def^, line 16603: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/updates.def^, line 49566: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/updates.def^, line 89976: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53276: ERROR: function or table ^pgm_len_block_code^ undefined
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53277: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53278: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53279: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53280: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53281: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53282: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53283: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53284: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53285: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53286: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53287: ERROR:
[Manufacturer Serial Number: 12345678910 ]syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53288: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53289: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53290: ERROR: syntax error
R77.20 Network Security ^/opt/CPsuite-R77/fw1/conf/Standard.pf^, line 53291: ERROR: syntax error
R77.20 Network Security Error compiling IPv6 flavor.
R77.20 Network Security Compilation failed.
R77.20 Network Security Operation ended with errors.

CheckpointUpgradeError

Das Problem war hier der Switch auf dem die Firewall verbunden war.

Nachdem wir das ca. 8 Jahre alte Modell durch einen neuen – in diesem Fall einen HP Procurve Switch – ersetzt haben, lief das Upgrade (nach vorhergehenden Revert auf die R75.40) sauber durch. 🙂

2 Kommentare

Kommentar verfassen