John is upgrading a cluster from NGX R65 to R77. John knows that you can verify the upgrade
process using the pre-upgrade verifier tool. When John is running Pre-Upgrade Verification, he
sees the warning message:
TitlE. Incompatible pattern.
What is happening?
A.
The actual configuration contains user defined patterns in IPS that are not supported in R77. If
the patterns are not fixed after upgrade, they will not be used with R77 Security Gateways.
B.
R77 uses a new pattern matching engine. Incompatible patterns should be deleted before
upgrade process to complete it successfully.
C.
Pre-Upgrade Verification tool only shows that message but it is only informational.
D.
Pre-Upgrade Verification process detected a problem with actual configuration and upgrade will
be aborted.
is it correct?
The old exam 156-315.71 exam the answer is C.
I am not 100% sure but it states he only sees a warning, from that I would think the answer is C
I think A should be correct.
see sk37291
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk37291
Thanks for link Carlos. It is A. (end of that article)
Solution ID sk37291
Product Security Management
Version R70
Date Created 22-Feb-2009
Last Modified 24-Aug-2015
Symptoms
During Pre-Upgrade Verification, you may see the following message:
“Title: Incompatible pattern.
* Description: R70 uses a new, more advanced pattern matching engine. Additional capabilities of the new engine resulted in changes to syntax of regular expressions, and because of that some user-defined regular expressions should be rewritten to be compatible with the new syntax. Failing to do so will prevent enforcement of those user-defined regular expressions on NGX R70 gateways and result in security issues.
Please redefine the following regular expression(s) in order for them to be compatible with the new syntax. You can refer to Appendix A of R70 IPS Admin Guide for detailed explanations about the new syntax:”
Cause
This warning may appear when the user has defined patterns for use in SmartDefense (including Web Intelligence protections) that are not supported by the new Pattern Matching Regular Expression engine used in R70.
After the message is displayed, you will see a list of the patterns that do not match and the reason they are not supported.
Solution
Please list the patterns that require fixing and what the issue is. You may choose to correct these patterns before or after upgrading to R70, according to the instructions provided in Appendix A (Regular Expressions) in the Check Point IPS Administration Guide Version R70.
If the patterns are not fixed after upgrade, they will not be used with R70 Security Gateways (all other processes will work as expected). You may fix them at a later time by locating the patterns in the SmartDashboard and correcting them.
This solution is about products that are no longer supported and it will not be updated
A. The actual configuration contains user defined patterns in IPS that are not supported in R77. If the patterns are not fixed after upgrade, they will not be used with R77 Security Gateways.