topic Re: How to replace Checkpoint firewall (Hardware RMA) R80 in Firewall and Security Management

How to replace Checkpoint firewall (Hardware RMA) R80

RCordova — Sat, 17 Jul 2021 15:58:08 GMT

We have an appliance running R80 that needs to be replaced. Is there a step by step document on how to this which will preserver all of it's settings and hotfixes?

Thanks

Re: How to replace Checkpoint firewall (Hardware RMA) R80

PhoneBoy — Sat, 17 Jul 2021 21:48:29 GMT

What appliance and what precise version of code?
There are several R80 versions.
Also, you may want to leverage CDT for this, since it will automate it to an extent: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111158

Re: How to replace Checkpoint firewall (Hardware RMA) R80

the_rock — Sat, 17 Jul 2021 23:16:19 GMT

Your best bet is to do backup/snapshot, as that would work, as long as exact same model of appliance, which in your case would be.

Re: How to replace Checkpoint firewall (Hardware RMA) R80

RCordova — Tue, 20 Jul 2021 14:02:16 GMT

Unfortunately the device is at a remote location and we do not have access to a thumb drive for the snapshot so we're going to build the new box with the same OS/patches. Then do the following:

- copy/paste the 'show configuration' from old box to the new box

- shut down old box and move cables to new

- establish SIC

- push policy

Does that sound correct? How will the licenses get moved over?

Thanks

Re: How to replace Checkpoint firewall (Hardware RMA) R80

the_rock — Tue, 20 Jul 2021 14:07:59 GMT

That sounds logical, yes. As far as licenses, make sure they are tied to same IP address and if not, then you may need to update them in your user center. If you get stuck, Im sure Account services could assist you with that part.

Re: How to replace Checkpoint firewall (Hardware RMA) R80

Bob_Zimmerman — Tue, 20 Jul 2021 18:08:49 GMT

If you're using an appliance, the license shouldn't get moved over. At a technical level, it will work, but at a license agreement level, the license is only valid for the exact hardware. The replacement box comes with a replacement license which you should use. I think the faulty box may need to be returned before the replacement device is added to your User Center account.

Using the replacement box's license will involve either activating it from inside the device's web UI (I don't know of a command-line way to do this) or generating it as either a local or central license in your User Center account, then applying it with the directions provided when you generate the license.