https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207264#M39178 <P>Without any special configurations done by modifying config files on the GWs, should be pretty easy.<BR /><BR />You need to build the same topology on the new GWs: interfaces, VLANs, static routes. If you have any dynamic routing set up, it also should be copied over.&nbsp;</P> <P>I would also keep the same hostnames as don't he old appliances. Once ready to migrate, you need to disconnect the old cluster, reconnect the new one, re-establish SIC with the new GWs and push policy.</P> Tue, 27 Feb 2024 12:28:45 GMT _Val_ 2024-02-27T12:28:45Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207261#M39168 <P>Hi there,</P><P>&nbsp;</P><P>I have to migrate the configuration from 5200 r80.40 to 6200 r81.10</P><P>What is the best practice to do this?</P><P>Is there a guide there to follow or migration tool?</P><P>&nbsp;</P><P>Thanks,</P><P>Nikola</P> Tue, 27 Feb 2024 11:34:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207261#M39168 NPEN 2024-02-27T11:34:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207264#M39178 <P>Without any special configurations done by modifying config files on the GWs, should be pretty easy.<BR /><BR />You need to build the same topology on the new GWs: interfaces, VLANs, static routes. If you have any dynamic routing set up, it also should be copied over.&nbsp;</P> <P>I would also keep the same hostnames as don't he old appliances. Once ready to migrate, you need to disconnect the old cluster, reconnect the new one, re-establish SIC with the new GWs and push policy.</P> Tue, 27 Feb 2024 12:28:45 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207264#M39178 _Val_ 2024-02-27T12:28:45Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207265#M39179 <P>Thanks for the reply.</P><P>How about the all security policies, VPNs and objects?</P><P>Nikola</P> Tue, 27 Feb 2024 12:32:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207265#M39179 NPEN 2024-02-27T12:32:15Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207272#M39180 <P>Unless you are running a stand-alone configuration, with management and GW on the same appliance, those are saved and preserved on your SMS.<BR /><BR />Do you run a stand-alone? If yes, the suggestion above does not apply.</P> Tue, 27 Feb 2024 13:11:52 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207272#M39180 _Val_ 2024-02-27T13:11:52Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207273#M39181 <P>the old device 5200 is configured with&nbsp;<EM>Security Gateway и Security Management Server.</EM></P><P><EM>The device is not a part of cluster.</EM></P><P><EM>Nikola</EM></P> Tue, 27 Feb 2024 13:13:59 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207273#M39181 NPEN 2024-02-27T13:13:59Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207275#M39183 <P>Oooookay, management and gateway on the same box are called a standalone configuration.<BR /><BR />You need to install a new standalone R81.10 6000 appliance and configure the same topology as mentioned above. Then you need to perform an advanced upgrade as mentioned in the <A href="https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Installation_and_Upgrade_Guide/Topics-IUG/Upgrading-Mmgt-Server-or-Log-Server-from-R80_20-and-higher-with-Advanced-Upgrade.htm?Highlight=advanced%20upgrade" target="_self">Installation and Upgrade guide</A>. Check the functionality, and when happy, swap the appliances.<BR /><BR />Also, considering the questions you ask, you may want to look for additional help when doing this, you may need some expert assistance.<BR /><BR /></P> Tue, 27 Feb 2024 14:03:31 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migrate-from-5200-to-6200/m-p/207275#M39183 _Val_ 2024-02-27T14:03:31Z