Hi, my migrate export file is about 5.1GB size, is it normal? i have about 60 GWs, 4 policy packages, total of about 1000 rules & most of blades enabled. i run r80.10 gaia, but it was around this size also on r77.30 Thanks
Please advise if there are any downsides in upgrading MDS HA to R80.10 or R80.20.M1 if the SmartEvent server in this environment will remain on R77.30 (it was exempt from the upgrade for reasons unknown to me and the hardware is not capable of running R80.XX). Thank you, Vladimir
If you have an R77.30 environment - MDS plus an SME server, it is up to you to decide which server you upgrade first. You can upgrade the MDS first and leave the SME for a later date - the SME will not be fully functional during this transition period, but it won't impact your MDS server functionality. I guess the downside is that your SME…
Please advise what tool is appropriate for exporting R77.30 MDM from appliance and restoring it on MDM running on VMware. For upgrades to R80.XX, the recommended tool is mds_setup, run from mounted ISO. I am looking for definitive instructions to refer a client to in order for them to generate the export file that will subsequently be used to…(Show moreShow less)
The documentation for the target version of MDM (specifically the Install and Upgrade guide) should tell you which tools are relevant. The difference between "backup" and "export" is backup is meant to be restored on the same version, an export is meant to be restored into a newer "target" version. mds_setup seems to call multiple tools. …
Has anyone encountered this before: during FTW, after management interface is defined with the same IP as the WebUI is using, the buttons are grayed-out and the process cannot progress further: The image is Check_Point_R77.30_Install_and_Upgrade_T5.Gaia.iso and I have tried it with multiple browsers (Chrome required a one-liner to work, but…(Show moreShow less)
Hi all, I'm trying to rename one of my customers dms name. It used to work in R77.x but in R80.x I can't get it to work. First i take a DMS backup with migrate export. After that delete the existing domain containing DMS and then create new domain and DMS. In R77.x it is possible to create the new domain and DMS without starting the DMS after…(Show moreShow less)
If I'm running a R80.10 MDM, and I am onboarding a new managed customer into this environment from their already existing managment server, it seems the import process that used to work for R77.30 MDM is broken. We used to be able to take a migrate export from the stand-alone manager and use the CMA import tools to bring this into a new domain…(Show moreShow less)
Dear Aleksei, Were you able to get confirmation if it is possible and supported to upgrade a R77.30 single management server to a multi-domain server running R80.10 using migrate export/import? Thanks for your help! Harald
Hi! All, Am facing an issue with generating the Primary MDS configuration export file using mds_setup utility (from R77.20 to R77.30 using R77.30 migration tools) . It's taking me around 5 Hours to finish and with an error message stating: ========================================================================= ..........................…(Show moreShow less)
We are currently looking at deploying 3 Smart-1 5050 Mgmt svr appliances in an Active/standby/standby posture. We've been looking through the checkpoint documentation looking for guidance on how best to use the multiple network interfaces (1 mgmt and 3 others Gig ports). Specifically of concern is what is the dedicated Mgmt port to be used for? Is…(Show moreShow less)
The only reason to add a management network would be to offload the transfer of your backup file to the backup server so it will not interfere with logging when under heavy load of the gateways. Just out of curiosity, why are you deploying 3 units? To spread a large number of domains over 3 boxes or really as HA?
Hi, We currently have about 8000 network objects and look for adding up to additional 70,000 host objects. What kind of impact are we expecting? Can someone share experience on the largest number of network objects they been working with in their system? Thanks.
You have to do it manually. Note that there is a limit to the size of CSV file we support. I don't remember the exact numbers offhand, but if you break it down in roughly 500 line chunks, you should see more consistent results.
I migrated an FWSM firewall to Checkpoint. The management server is on R80.10 and the gateways are running on R77.30. The FWSM had a large number of rules and objects. Post migration, we have 7000 rules and 5000 objects in the dashboard. I keep running to a problem where java process hogs up all the available CPU and I'm unable to do anything…(Show moreShow less)
Ok, problem solved for us, but the solution is probably useless to most of you reading due to the origin of the issue and the definitely not-recommended deployment: We were essentially testing the management server in the gns3 vm, which is virtualized via esxi. So, gaia was running as a nested vm. We have now created a dedicated vm on the same…