Sanibonani bozakwethu namukelekile esifundweni sokufuduka kwaCheck Point R77.30 kuya kuR80.10 database.
Uma usebenzisa imikhiqizo ye-Check Point, ngokushesha noma kamuva umsebenzi wokuthutha imithetho ekhona kanye nemininingwane yolwazi ivela ngenxa yezizathu ezilandelayo:
- Lapho uthenga idivayisi entsha, udinga ukuthutha isizindalwazi usuke kudivayisi endala uye kudivayisi entsha (uye enguqulweni yamanje ye-GAIA OS noma ngaphezulu).
- Udinga ukuthuthukisa idivayisi yakho isuke enguqulweni eyodwa ye-GAIA OS iye enguqulweni ephezulu emshinini wangakini.
Ukuxazulula inkinga yokuqala, sebenzisa kuphela ithuluzi elibizwa nge-Management Server Migration Tool noma i-Migration Tool efanelekile kuphela. Ukuxazulula inkinga No. 2, isixazululo se-CPUSE noma Ithuluzi Lokuthutha singasetshenziswa.
Okulandelayo, sizocubungula zombili izindlela ngokuningiliziwe.
Buyekeza kudivayisi entsha
Ukufuduka Kwesizinda kuhilela ukufaka inguqulo yakamuva Yokuphatha emshinini omusha bese uthutha imininingo egciniwe isuka kuseva ekhona yokuphatha ukuvikeleka iye kwentsha isebenzisa Ithuluzi Lokuthutha. Le ndlela inciphisa ubungozi bokubuyekeza ukucushwa okukhona.
Ukuze uthuthe isizindalwazi usebenzisa Ithuluzi Lokuthutha, udinga ukuhlangana izidingo:
- Isikhala sediski samahhala kufanele sibe sikhulu izikhathi ezi-5 kunosayizi wengobo yomlando wesizindalwazi esithunyelwe.
- Izilungiselelo zenethiwekhi kuseva eqondiwe kufanele zifane nalezo ezisesiphakelini somthombo.
- Idala ikhophi yasenqolobaneni. Isizindalwazi kufanele sithunyelwe kuseva ekude.
Uhlelo lokusebenza lwe-GAIA seluvele luqukethe Ithuluzi Lokuthutha; lungasetshenziswa uma ungenisa inqolobane yolwazi noma ngokuthuthela enguqulweni yesistimu yokusebenza efana neyokuqala. Ukuze uthuthele imininingwane egciniwe uye enguqulweni ephezulu yesistimu yokusebenza, kufanele ulande Ithuluzi Lokuthutha lenguqulo efanelekile engxenyeni ethi βAmathuluziβ esizeni sokusekela se-Check Point R80.10: - Isipele nokufuduka kweSmartEvent / SmartReporter Server. Izinsiza 'zokwenza ikhophi yasenqolobaneni' kanye 'nokuthutha okuthekelisayo' azifaki idatha evela kusizindalwazi se-SmartEvent / SmartReporter.
Ukwenza ikhophi yasenqolobaneni nokuthutha, udinga ukusebenzisa izinsiza ze-'eva_db_backup' noma ze-'evs_backup'.
Qaphela: Isihloko se-CheckPoint Knowledge Base sk110173.
Ake sibheke ukuthi yiziphi izici eziqukethwe leli thuluzi:
Ngaphambi kokuthi uqhubekele ngqo ekuthuthweni kwedatha, kufanele uqale uvule i-zip yeThuluzi Lokuthutha elilandiwe kufolda β/opt/CPsuite-R77/fw1/bin/upgrade_tools/ β, ukuthekelisa isizindalwazi kufanele kwenziwe kusetshenziswa imiyalo evela kuhla lwemibhalo lapho ovule khona uziphu wethuluzi.
Ngaphambi kokuthi usebenzise umyalo wokuthekelisa noma wokungenisa, vala wonke amaklayenti e-SmartConsole noma uqalise i-cpstop Kuseva Yokuphathwa Kwezokuphepha.
ukuthi dala ifayela lokuthekelisa izizindalwazi zokuphatha kuseva yomthombo:
- Faka imodi yochwepheshe.
- Qalisa isiqinisekisi sangaphambi kokuthuthukisa: pre_upgrade_verifier -p $FWDIR -c R77 -t R80.10. Uma kukhona amaphutha, walungise ngaphambi kokuqhubeka.
- Qalisa: ./migrate export filename.tgz. Umyalo uthumela ngaphandle okuqukethwe kwesizindalwazi Seseva Yokuphathwa Kokuphepha kufayela le-TGZ.
- Landela imiyalelo. Isizindalwazi sithunyelwa efayeleni oliqambe emyalweni. Qiniseka ukuthi uyichaza njenge-TGZ.
- Uma i-SmartEvent ifakwe kuseva yomthombo, khipha imininingo egciniwe yomcimbi.
Okulandelayo, singenisa isizindalwazi seseva yezokuphepha esiyithumele. Ngaphambi kokuthi uqale: Faka i-R80 Security Management Server. Ake ngikukhumbuze ukuthi izilungiselelo zenethiwekhi Yeseva Yokuphatha entsha u-R80.10 kufanele zifane nezilungiselelo zeseva endala.
ukuthi ukungenisa ukucushwa iseva yokuphatha:
- Faka imodi yochwepheshe.
- Dlulisela (nge-FTP, i-SCP noma okufanayo) ifayela lokumisa elithunyelwe kuseva elikude, eliqoqwe kusuka kumthombo kuya kuseva entsha.
- Nqamula iseva yomthombo kunethiwekhi.
- Dlulisa ifayela lokumisa lisuka kuseva elikude liye kuseva entsha.
- Bala i-MD5 yefayela elidlulisiwe bese uqhathanisa ne-MD5 eyabalwa kuseva yoqobo: # md5sum filename.tgz
- Ngenisa isizindalwazi: ./migrate import filename.tgz
- Ihlolela isibuyekezo.
Emuva kokuqeda iphuzu lesi-7, sifingqa ukuthi ukuthuthwa kwesizindalwazi kube yimpumelelo kusetshenziswa Ithuluzi Lokuthutha; uma kwenzeka wehluleka, ungahlala uvula iseva yomthombo, ngenxa yalokho umsebenzi ungeke uthinteke nganoma iyiphi indlela.
Kubalulekile ukuqaphela ukuthi ukufuduka kusuka kuseva ezimele akusekelwe.
Isibuyekezo sendawo
I-CPUSE(Hlola Injini Yesevisi Yokuthuthukisa Iphuzu) Inika amandla izibuyekezo ezizenzakalelayo zemikhiqizo ye-Check Point ye-Gaia OS. Amaphakheji okuvuselela isofthiwe ahlukaniswe ngezigaba, okungukuthi ukukhishwa okukhulu, ukukhishwa okuncane kanye nama-Hotfixes. I-Gaia ithola ngokuzenzakalelayo futhi ibonise amaphakheji esibuyekezo sesofthiwe atholakalayo nemifanekiso ehlobene nenguqulo yesistimu yokusebenza ye-Gaia ongathuthukela kuyo. Usebenzisa i-CPUSE, ungenza ukufaka okuhlanzekile kwenguqulo entsha ye-GAIA OS, noma wenze isibuyekezo sesistimu ngokuthuthwa kwesizindalwazi.
Ukuze uthuthukele enguqulweni ephezulu noma ufake ukufakwa okuhlanzekile usebenzisa i-CPUSE, umshini kufanele ube nesikhala esanele samahhala (esingabelwe) - okungenani usayizi wokuhlukanisa impande.
Ukuthuthukiswa kwenguqulo entsha kwenziwa ku-partition entsha ye-hard drive, futhi ukuhlukaniswa "endala" kuguqulwa ku-Gaia Snapshot (isikhala esisha sokuhlukanisa sithathwa endaweni engabelwe ku-hard drive). Futhi, ngaphambi kokubuyekeza isistimu, kungaba okulungile ukuthatha isifinyezo bese usilayisha kuseva ekude.
Inqubo yokubuyekeza:
- Qinisekisa iphakheji yokuvuselela (uma ungakenzi kanjalo) - hlola ukuthi le phakheji ingafakwa yini ngaphandle kwezingxabano: chofoza kwesokudla kuphakheji - chofoza "Ukuqinisekisa".
Umphumela kufanele ube into enjengale:
- Ukufakwa kuvunyelwe
- Ukuthuthukisa kuvunyelwe
- Faka iphakheji: Chofoza kwesokudla iphakheji bese uchofoza "Thuthukisa":
I-CPUSE ibonisa isixwayiso esilandelayo kuphothali ye-Gaia: Ngemva kwalokhu kuthuthukiswa, kuzoba nokuqalisa kabusha okuzenzakalelayo(Izilungiselelo ze-OS ezikhona kanye Nokugcinwa Kwedatha Yephoyinti Lokuhlola kuyagcinwa). - Uzobona inqubekelaphambili yokuthuthwa kwedatha ehambisanayo ngemva kokuthuthukela ku-R80.10:
- Ukuthuthukisa Imikhiqizo
- Ingenisa Isizindalwazi
- Ilungiselela Imikhiqizo
- Ukudala Idatha ye-SIC
- Ukumisa Izinqubo
- Iqala Izinqubo
- Kufakiwe, ukuzihlola kuphumelele
- Isistimu izoqala kabusha ngokuzenzakalelayo
- Ifaka inqubomgomo ku-SmartConsole
Njengoba ubona, yonke into ilula kakhulu; uma kwenzeka inkinga, ungabuyela emuva kuzilungiselelo ezindala usebenzisa isifinyezo osithathile.
Hlanganisa
Isifundo sevidiyo esethulwe siqukethe ingxenye yethiyori nesebenzayo. Ingxenye yokuqala yevidiyo iphinda ingxenye yetiyori echaziwe, futhi isibonelo esisebenzayo sibonisa ukuthuthwa kwedatha kusetshenziswa zombili izindlela.
isiphetho
Kulesi sifundo, sibheke izixazululo ze-Check Point zokuvuselela nokuthutha izinto zolwazi kanye nemithetho yolwazi. Esimeni sedivayisi entsha, azikho ezinye izixazululo ngaphandle kokusebenzisa Ithuluzi Lokuthutha. Uma ufuna ukubuyekeza i-GAIA OS futhi unesifiso kanye nekhono lokuphinda usebenzise umshini, inkampani yethu yeluleka, ngokusekelwe kokuhlangenwe nakho okukhona, ukuthi uthuthe isizindalwazi usebenzisa Ithuluzi Lokuthutha. Le ndlela inciphisa ubungozi bokuthuthukela ekucushweni okukhona uma kuqhathaniswa ne-CPUSE. Futhi, lapho kubuyekezwa nge-CPUSE, amafayela amaningi amadala angadingekile agcinwa kudiski, futhi ukuwasusa, ithuluzi elengeziwe liyadingeka, elihlanganisa izinyathelo ezengeziwe kanye nezingozi ezintsha.
Uma ungafuni ukuphuthelwa izifundo ezizayo, bese ubhalisela iqembu lethu , ΠΈ . Uma nganoma yisiphi isizathu awukwazanga ukuthola idokhumenti edingekayo noma ukuxazulula inkinga yakho nge-Check Point, ungaxhumana ngokuphepha .
Source: www.habr.com