So I had someone recently want to do a fresh install of a current production box. They wanted to go from an older version to a newer one. The gateway was currently plugged in and running and they had console access to it.
However, the box was on the other side of the country from where they were, and there was no one remotely at the location to help. They didn’t want to get on a plane, so what do they do ???
No worries. This is what you do:
First we need to re-run the First Time Configuration Wizard again
1. Login to Expert mode:
2. Delete the special file:
[Expert@HostName]# rm -i /etc/.wizard_accepted
3. Reboot the appliance to apply the changes (not required for Gaia OS):
4. Important Note: If this machine was configured as Security Management Server, and user will reconfigure the machine to be only the Security Gateway, then the following files must be removed from the machine (otherwise, intermittent SIC issues (e.g., ‘SIC error no. 147’) will arise during policy installation onto this Security Gateway):
[Expert@HostName]# rm -i $FWDIR/conf/ICA.crl
[Expert@HostName]# rm -i $FWDIR/conf/InternalCA.*
5. Next time user logs into the Gaia Portal, the First Time Configuration Wizard start automatically.
Note: The credentials for Gaia Portal are not reset to the default.
Now that we can get back into the Wizard:
You are prompted for installation choose “Install a Version from the Check Point Cloud” and do the following:
1. In the First Time Configuration Wizard, select Install a version from Check Point Cloud. Click Next.
2. Define the Connection to Check Point Cloud. Choose an interface to connect to the Internet, and configure connection parameters.
Click Next. This shows the versions that you can install from the Check Point Cloud.
3. Choose the version to install. Click Finish.
Then after installation is done, it will be back with the install set to 192.168.1.1 connect to it with your console and in the GAIA clish you will need to change it to the IP address that you wish it to be, add your routing as well, then connect to it and run the first time wizard.
(ex. set interface Mgmt ipv4-address 10.200.200.60 mask-length 24 )
(ex. set static-route default nexthop gateway address 10.200.200.1 on )
Now you will be up and running with the new O/S and you did not have to have anyone help, nor did you have to get on a plane 🙂