topic Re: Best way to replace a firewall with a new model ? in Firewall and Security Management

Best way to replace a firewall with a new model ?

carl_t — Tue, 29 Mar 2022 09:37:44 GMT

Hi Guys

I am in process of swapping out my gateways with new models.

What is the correct way of doing this?

Is it by creating new objects and a new policy, building it side by side via the management port, or would you use the existing object and modify it?

Cheers

Re: Best way to replace a firewall with a new model ?

the_rock — Tue, 29 Mar 2022 09:54:06 GMT

That can really be up for debate...I used old object before, modified it and it worked. Is it best method? Probably not, but it works. Personally, I prefer deleting existing object and simply creating new one, start from scratch and then you can just replace it in place of an old object. I actually did that for a customer on the weekend and worked perfect.

As far as policy, I would not touch it, as long as you plan to use same one, which I assume you would.

Re: Best way to replace a firewall with a new model ?

G_W_Albrecht — Tue, 29 Mar 2022 09:54:00 GMT

As always - that depends ! Usually, you just replace the hardware, do FTW and GAiA config, edit the GW object to contain the correct appliance model and port config, re-establish SIC and install policy.

Re: Best way to replace a firewall with a new model ?

G_W_Albrecht — Tue, 29 Mar 2022 10:53:44 GMT

Your opening words and mine are very similar - a GW cluster of high-end units replaced by even more high-end units is better constructed from scratch for less errors, i would assume.

Re: Best way to replace a firewall with a new model ?

the_rock — Tue, 29 Mar 2022 10:56:58 GMT

Thats also my experience with the process.