topic Re: Upgrading from SG3200 to SG3600 Standalone in Firewall and Security Management

Upgrading from SG3200 to SG3600 Standalone

mikehinnenkamp — Fri, 02 Jun 2023 15:07:45 GMT

Hello,

I have a project that involves replacement of existing standalone SG3200s to new SG3600s. We are running R81.10. I have 6 locations that I will have to do this upgrade at, and they all have site to site vpn tunnels.

Has anyone found a quick/best/supported way to do this migration? I have been searching for some instructions for this but haven't found any.

Thanks in advance.

Re: Upgrading from SG3200 to SG3600 Standalone

the_rock — Fri, 02 Jun 2023 18:37:18 GMT

I always found that when it comes to different hardware, its best to simply copy bits and pieces from show configuration output, as interfaces/ports would not be the same, but most other things most likely would be.

Andy

Re: Upgrading from SG3200 to SG3600 Standalone

mikehinnenkamp — Fri, 02 Jun 2023 18:49:28 GMT

How about on the manager side? Create a new object for it or reestablish SIC and update the model number?

Re: Upgrading from SG3200 to SG3600 Standalone

the_rock — Fri, 02 Jun 2023 18:51:11 GMT

Great question. On the manager side, follow this, works 100% of the time.

Andy

https://community.checkpoint.com/t5/Security-Gateways/Replace-Upgrade-Cluster/td-p/69216

Re: Upgrading from SG3200 to SG3600 Standalone

mikehinnenkamp — Fri, 02 Jun 2023 19:14:40 GMT

That seems to be for a cluster, would some of those steps also work for standalone? I found lots of documentation for cluster upgrades, but none for standalone.

Re: Upgrading from SG3200 to SG3600 Standalone

the_rock — Fri, 02 Jun 2023 19:40:32 GMT

Its exactly the same thing, except its standalone, but process is the same. I had done it before, you just ommit the steps needed for the cluster. Maybe, just to get an official CP answer, might be worth opening a TAC case

https://help.checkpoint.com

Andy