Security

i have NSM 2007.3r4 running on a linux server version 4, and i am going to upgrade to the latest NSM version 2010.2 and to be installed on a new server running Linux version 5.

my questions:

1- the NSM installation CD i got from juniper is for NSM 2007.3, can i directly download the latest NSM 2010 version from juniper portal and then install it on the new server?

2- how can i migrate the old NSM server database to the new server?

For Quetion 1:

Yes , you can do that but make sure that your Linux machine meets the below requirements for NSM 2010.2 :

RHEL 32-bit ES/AS 4.0-Update 7 or 32-bit ES/AS 5.0-Update 3

For Question 2 :

If you took database from your 2007.3r4  Vesrion , you can  only apply it to a server with the same NSM version

If you want to apply it on an 2010 NSM server , you should install 2007.3r4  then  apply the database backup then upgrade to 2010

but take care as the upgrade to 2010 is only supported  from versions 2008.2RX, 2009.1RX, and 2010.1.

Regarding taking the backup & applying it on another srevre with the same version , you can follow the below  :

KB12285

KB4581

http://forums.juniper.net/t5/Intrusion-Prevention/How-to-save-NSM-Configuration/m-p/298/highlight/true#M13

thank you for the reply and the links provided.

if you could please send to me the links for downloading the NSM 2010.2 (all the required softwares)

https://softserv.juniper.net/download/2010.2---05122010/NetScreen-Security_Manager/#sw

https://softserv.juniper.net/download/2007.3---11282007/NetScreen-Security_Manager/#sw

I think you should have a juniper account to access these links

i downloaded the NSM files from the site, and i started the migration process.

so now i am getting the data base backup as described in the links you sent. what is the important database i have to get a backup for; i got a backup for the Gui and the Dev servers.

are there any other important files have to be backed up in order to get the same NSM data base after restoration process.

Thanks in Advance

Gui & Dev servers are the necessary files to have the comlete backup

You can  also backup the logs if you you want ( optional)

yes i have to backup the log file (if you mean by the log; the traffic log, alerts, alarms, attacks......), so how can i backup this?.

i have another questions please:

1- is there a need to add the managed devcies again to the new installed NSM? or restoring the Gui and Dev will do this?

2- what is the type of data restored when restoring the Gui and Dev servers?

As per my knowledge , to backup logs you need to copy the files :

  /var/netscreen/DevSvr/logs/

For Q1 : no need , restoring will do it

For Q2 : frankly i don't know the exact details , but you will have a server the same as the other one

Hi SSH

thank you for the reply.

sorry but i have a lot of questions about this, i am working on the upgrade process now and each time there is a queston light in my head.

1- the old NSM has a license installed in it (to add 25 device), do i have to install the license again on the new server and on which step pf the migration?

2- i want to assign the new NSM a new IP address, so i think restoring the previous database will also restore the old IP address, so is the solution by changing the IP address to the new one after the resotartion?

Hi mahmood ,

Q1- Frankly i don,t know if it is required or the base license will cover that

Q2- Refer to the below KB  , you will find the step of changing ip address

KB14200

But you can use an easire method for changing the Server IP address

1- Apply the Backup file on a server having the same ip & don't try to  change the IP

2-Verify the NSM cleint connectivity to make sure that your migration worked fine

3- use KB9692 to change the NSM server IP

Hi SSHSSH

i have been able to upgrade the NSM 2007 to 2010 and in the steps we you mensioned in the case updates and on the attached links (it was straight forward).

also i updated the NSM user interface to NSM 2010.2 UI (on both, the NSM server itslf and on my PC), but i have a problem that i cant connect to the NSM using the new UI.

i recieve the below message:

<

"this build version of the GUI is incompatible with the GUI server build version"

Gui Build: LGB13z1bc

GUI Server version: LGB13z1n39

>

although i have installed the same version for both the NSM server and NSM UI, but i cant connect!!, any explanation.

Have you completely unistalled the previous NSM  version from the windows machine before installing  NSM 2010  ? if you didnot do that ,  Unistall & install again

If that didnot help , take a copy of windows client installer from NSM server & install it on the windows machine  :

/usr/netscreen/GuiSvr/lib/webproxy/webapps/download/installers/windows/install.exe

*******************  Mark My Post as Accepted if it solved your problem*******************

Hello SSHSSH

I was able to upgarde it, and thanks for your help.

if you could please provide me for your e-mail....

Regards

Mahmoud