Nokia IP265 Security Guide - Page 29

Turn off Check Point SVN Foundation R55 and also any other R55

Get Nokia IP265 - Security Appliance PDF manuals and user guides View all Nokia IP265 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 29 highlights

For older Nokia VPN Appliance modules, the Crypto Officer may need to upgrade the supplied IPSO and/or or the Check Point firmware so that the module is running a FIPS 140-2 validated configuration. If the desired and installed IPSO/Check Point firmware versions match the validated configuration, no additional action is required. Otherwise the procedures described in one of the following two scenarios must be followed: 3.1.2.1 SCENARIO 1 - Upgrade Check Point VPN-1 module to NGX (R60) This scenario applies if module came preinstalled with Check Point VPN-1 version R55p running on IPSO 3.9. The Crypto Officer must delete this version and install NGX (R60): A. Delete Check Point VPN-1 version R55p: 1. Access the device via Voyager, the web-based management interface, Click on the 'Manage Installed Packages' link on the 'Config' page (i.e., from the home page follow the Config->Manage Installed Packages sequence of links) 2. Turn off Check Point VPN-1 Pro/Express R55p 3. Turn off Check Point SVN Foundation R55 and also any other R55 packages that may have been installed such as Eventia Reporter or User Authority Server 4. Click on 'Apply' to make the changes and 'Save' to make the changes permanent 5. Now click on the 'Delete Packages' link. This should show you the list of packages available for deletion 6. Click on the 'Delete' radio button for all the packages and 'Apply' and 'Save' 7. You can also optionally delete the R55 tgz file from the /opt/packages directory on the above page 8. Now access the device console, exit and login again if you have a currently active session, and follow the instructions below to install the NGX with (R60) and HFA-03 B. Install Check Point NGX (R60) from the system console: 1. FTP (with user ID and password) the Check Point packages to the system from a remote location and place them under any directory, © Copyright 2005, 2006, 2007 Nokia Page 29 of 43 This document may be freely reproduced and distributed whole and intact including this Copyright Notice.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
For older Nokia VPN Appliance modules, the Crypto Officer may need to
upgrade the supplied IPSO and/or or the Check Point firmware so that the
module is running a FIPS 140-2 validated configuration.
If the desired and installed IPSO/Check Point firmware versions match the
validated configuration, no additional action is required. Otherwise the
procedures described in one of the following two scenarios must be
followed:
3.1.2.1
SCENARIO 1 – Upgrade Check Point VPN-1 module to NGX (R60)
This scenario applies if module came preinstalled with Check Point VPN-1
version R55p running on IPSO 3.9. The Crypto Officer must delete this
version and install NGX (R60):
A. Delete Check Point VPN-1 version R55p:
1. Access the device via Voyager, the web-based management
interface,
Click on the ‘Manage Installed Packages’ link on the
‘Config’ page (i.e., from the home page follow the Config->Manage
Installed Packages sequence of links)
2. Turn off Check Point VPN-1 Pro/Express R55p
3. Turn off Check Point SVN Foundation R55 and also any other R55
packages that may have been installed such as Eventia Reporter or
User Authority Server
4. Click on ‘Apply’ to make the changes and ‘Save’ to make the
changes permanent
5. Now click on the ‘Delete Packages’ link. This should show you the
list of packages available for deletion
6. Click on the ‘Delete’ radio button for all the packages and ‘Apply’
and ‘Save’
7. You can also optionally delete the R55 tgz file from the
/opt/packages directory on the above page
8. Now access the device console, exit and login again if you have a
currently active session, and follow the instructions below to install
the NGX with (R60) and HFA-03
B. Install Check Point NGX (R60) from the system console:
1. FTP (with user ID and password) the Check Point packages to the
system from a remote location and place them under any directory,
© Copyright 2005, 2006, 2007
Nokia
Page 29 of 43
This document may be freely reproduced and distributed whole and intact including this Copyright Notice.