https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160369#M28258 <P>Hi George,</P> <P>Are you able to share additional information, is parallel hardware available etc?</P> Tue, 25 Oct 2022 14:12:37 GMT Chris_Atkinson 2022-10-25T14:12:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160336#M28257 <P>Hi to all,</P><P>We need some feedback for an upcoming project. We currently have a VSX cluster with 3 VS and a Management server. We need to convert somehow this environment to 3 Physical clusters, one for each VS. We need your expertise for the best way to accomplish this with minimal downtime and a way to revert back fast in case of issues. Thank you.</P><P>George</P> Tue, 25 Oct 2022 10:42:44 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160336#M28257 George_Georgio1 2022-10-25T10:42:44Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160369#M28258 <P>Hi George,</P> <P>Are you able to share additional information, is parallel hardware available etc?</P> Tue, 25 Oct 2022 14:12:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160369#M28258 Chris_Atkinson 2022-10-25T14:12:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160373#M28259 <P>Prepare new clusters in the lab, copy the topoligy and routing from each of the VSs to the relevant physical machines. VS VIPs will correspond to new physical cluster VIPs.<BR /><BR />You will need two more addresses for physical interfaces on each cluster, per network/interface, per cluster.&nbsp;<BR /><BR />Consider using private interfaces on the cluster for management purposes only. This will allow you to connect new environment to your production SMS before the network switchover.&nbsp;<BR /><BR />Push the same policies, disconnect VSX, connect new clusters to your production network. If you did not make any topology mistakes, this should work right away.&nbsp;</P> Tue, 25 Oct 2022 14:31:21 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160373#M28259 _Val_ 2022-10-25T14:31:21Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160375#M28260 <P>Hi Chris, yes all the parallel hardware are available.</P> Tue, 25 Oct 2022 14:39:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160375#M28260 George_Georgio1 2022-10-25T14:39:36Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160376#M28261 <P>Hi Val,</P><P>Thank you for the answer, this is what we had in mind. Do you believe all 3 VS should be replaced at once? what if the customer wants replacement in stages? Currently, we only have two trunks (IN and OUT) for all 3 VS VLANs. Do you think this is possible?</P> Tue, 25 Oct 2022 14:43:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160376#M28261 George_Georgio1 2022-10-25T14:43:32Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160380#M28262 <P>Not at all, you can do gradual migration, per VS</P> Tue, 25 Oct 2022 14:52:31 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/VSX-Cluster-with-3-VSs-to-3-Physical-clusters/m-p/160380#M28262 _Val_ 2022-10-25T14:52:31Z