Migrating R80.10 SmartCenter to R80.10 CMA? Meet your best friend

Document created by Robert Decker Employee on Mar 5, 2018Last modified by Robert Decker Employee on Mar 11, 2018
Version 2Show Document
  • View in full screen mode

Currently, the only way to move the policy and objects from the R80.10 SMC to R80.10 CMA is to use Management API based tool - ExportImportPolicyPackage.

You can also migrate from one R80.10 CMA to another R80.10 CMA, as long as the source CMA has not assigned a global policy.


Follow the instructions to download, instal and use the tool.

Use a "-h" command line switch to see all available usage options.

It is supported both on Windows and Linux machines, with Python version 2.7.9 (or 2.7.14) installed.


The tool is an open source, so you are welcome to contribute your ideas and improvements.

We also have an active thread here on CheckMates - https://community.checkpoint.com/docs/DOC-1938.


It’s recommended to test the migration first in lab and to follow the below disclaimer for checking if this option is feasible or not due to too many problematic objects in the Management server database.



Notice: There are some types of objects that the script might not be able to export. In such a case, an appropriate dummy object will be exported instead, and a message will be logged into the log files to notify you of this. In the Check Point SmartConsole you can easily replace each of these objects by searching "export_error" in the search field, see where each object is used, create the necessary object manually, then replace it.



4 people found this helpful