https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-Rules-from-Smart-1-Cloud-to-on-premises-management/m-p/276897#M105369 <P>Hi everyone,</P><P>I'm working on a migration process from Smart-1 Cloud management to on-premise. All policies, rules, and NATs were created manually in the on-premise management system, and the process involves synchronizing the gateways with the on-premise management system. I can successfully synchronize the gateways and management system, however, some traffic between Azure VNETs is not working. I see through tcpdump and firewall monitor that the firewall processes the traffic between the networks, but the applications are not working.</P><P>I would like to know if anyone has done this type of change, if they have any recommendations, etc.</P> Wed, 13 May 2026 13:55:51 GMT jslimma_soloiro 2026-05-13T13:55:51Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-Rules-from-Smart-1-Cloud-to-on-premises-management/m-p/276897#M105369 <P>Hi everyone,</P><P>I'm working on a migration process from Smart-1 Cloud management to on-premise. All policies, rules, and NATs were created manually in the on-premise management system, and the process involves synchronizing the gateways with the on-premise management system. I can successfully synchronize the gateways and management system, however, some traffic between Azure VNETs is not working. I see through tcpdump and firewall monitor that the firewall processes the traffic between the networks, but the applications are not working.</P><P>I would like to know if anyone has done this type of change, if they have any recommendations, etc.</P> Wed, 13 May 2026 13:55:51 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-Rules-from-Smart-1-Cloud-to-on-premises-management/m-p/276897#M105369 jslimma_soloiro 2026-05-13T13:55:51Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-Rules-from-Smart-1-Cloud-to-on-premises-management/m-p/276899#M105370 <P>Hi,<BR /><BR />You mention you migrated all manually. Did you check the Implied Rules and the Global Properties?<BR />For example:<BR /><BR />Merge manual proxy ARP configuration. If this was enabled on Smart-1 Cloud, but not migrated to the on-prem SmartCenter, NAT can fail.<BR /><BR />Do you see anything in SmartLog? Did you perform a zdebug of kernel debug?<BR /><BR />Martijn</P> Wed, 13 May 2026 14:14:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-Rules-from-Smart-1-Cloud-to-on-premises-management/m-p/276899#M105370 Martijn 2026-05-13T14:14:56Z