Upgrading to SunScreen 3.1

You can upgrade previous versions of SunScreen EFS, SPF-200, or Firewall-1 to SunScreen 3.1 as described in the following sections.

Upgrading From Previous Versions of SunScreen

If you are presently running SunScreen EFS 1.1, 2.0, or 3.0 and you want to use the same configurations when you upgrade to SunScreen 3.1, read the information and instructions in "Upgrade Overview (SunScreen EFS 1.1, 2.0, or 3.0)". Since SunScreen 3.1 uses ordered packet filtering rules and ordered NAT mappings, you must review your packet filtering rules after the conversion is complete to verify the filtering order is correct. NAT mappings have changed considerably since the release of EFS1.1 and EFS 2.0. See the SunScreen 3.1 Reference manual for detail on NAT mappings.

To avoid corruption of your existing configurations, do not attempt to manually remove or add packages. Upgrading is not an initial installation, and the upgrade script removes packages as needed.

Upgrading From SPF-200 to SunScreen 3.1

You can upgrade the machine that presently operates as your SPF-200 Screen to become a SunScreen 3.1 Screen operating in stealth mode. You can also transfer your SPF-200 configurations to a new machine, and perform the conversion on the new machine. This second method is recommended and will decrease network downtime.

Since SunScreen 3.1 uses ordered packet filtering rules and ordered NAT mappings, you must review your packet filtering rules after the conversion is complete to verify the filtering order is as you want. NAT mappings have changed considerably since the release of SPF-200. See the SunScreen 3.1 Reference manual for detail on NAT mappings.

Instructions for upgrading from SPF-200 are in "Upgrading From SunScreen SPF-200 to SunScreen 3.1 in Stealth Mode."

Converting From FireWall-1 to SunScreen 3.1

If you are presently using FireWall-1 and plan to use a similar security policy on SunScreen, you have two ways to do this:

• You can convert the FireWall-1 machine to become the SunScreen Screen.

• You can convert the FireWall-1 security policies and use them on a SunScreen machine.

Conversion instructions are in "Converting FireWall-1 to SunScreen in Routing Mode.".