Migration from a Standalone Problem

Joni_M — Fri, 14 Jun 2024 17:50:43 GMT

Hello all
I have Standalone environment MGM+SG , but on Standalone i have + 4 SG , i don't use MDS
No i want to Migration from a Standalone environment to a Distributed environment
What do I have:
1) Standalone (MGM+SG) OpenServer
R81.20 Jumbo Hotfix Take 65
Kernel 3.10.0-1160.15.2cpx86_64
Build 631
2) New installed only Managment Server OpenServer
R81.20 Jumbo Hotfix Take 65
Kernel 3.10.0-1160.15.2cpx86_64
Build 631

What am I doing ( sk179444 )
1) Export database from Standalone
./migrate_server export -v R81.20 -l -skip_upgrade_tools_check /var/log/db
All OK
2) Transfer to New Server and import
./migrate_server import -v R81.20 -skip_upgrade_tools_check -l /home/admin/db.tgz
And get error:
Database migration between Standalone and Management only machines is not supported
I try use solution sk85900 but don't help.
Import error and say

Failed to import. See /opt/CPsuite-R81.20/fw1/log/upgrade_client.elg or /opt/CPsuite-R81.20/fw1/log/cpm.elg for more details

/opt/CPsuite-R81.20/fw1/log/cpm.elg ( cat /opt/CPsuite-R81.20/fw1/log/cpm.elg | grep ERR )

14/06/24 20:42:40,497 ERROR coresvc.internal.FwmProxyManagerImpl [taskExecutor-25]: Asking for SendlogServicePortType proxy for other domain (41e821a0-3720-11e3-aa6e-0800200c9fde, my domain a0eebc99-afed-4ef8-bb6d-fedfedfedfed).
14/06/24 20:42:40,849 ERROR coresvc.internal.FwmProxyManagerImpl [taskExecutor-26]: Asking for SendlogServicePortType proxy for other domain (41e821a0-3720-11e3-aa6e-0800200c9fde, my domain a0eebc99-afed-4ef8-bb6d-fedfedfedfed).
14/06/24 20:42:40,952 ERROR coresvc.internal.CloudAppSvcImpl [qtp1701719853-96]: The Management Server isn't connected to Infinity Portal
14/06/24 20:42:41,950 ERROR logSharingStatuses.logSharingStatusesReports.LogSharingIsLogExporterEnabledStatusesReport [pool-4-thread-1]: Didn't find any exporter
14/06/24 20:42:41,951 ERROR logSharingStatuses.utils.CloudHttpUtils [pool-4-thread-1]: Failed to send request to the cloud. Error: The Management Server is not connected to Infinity Portal
14/06/24 20:42:41,951 ERROR services.logSharingStatuses.LogSharingStatusesSvcImpl [pool-4-thread-1]: Exception while getting domain UID. java.lang.RuntimeException: Error while sending request to the cloud
14/06/24 20:43:10,039 ERROR coresvc.internal.FwmProxyManagerImpl [taskExecutor-29]: Asking for SendlogServicePortType proxy for other domain (41e821a0-3720-11e3-aa6e-0800200c9fde, my domain a0eebc99-afed-4ef8-bb6d-fedfedfedfed).
14/06/24 20:43:10,337 ERROR coresvc.internal.FwmProxyManagerImpl [taskExecutor-74]: Asking for SendlogServicePortType proxy for other domain (41e821a0-3720-11e3-aa6e-0800200c9fde, my domain a0eebc99-afed-4ef8-bb6d-fedfedfedfed).
14/06/24 20:43:15,249 ERROR coresvc.internal.FwmProxyManagerImpl [taskExecutor-68]: Asking for SendlogServicePortType proxy for other domain (41e821a0-3720-11e3-aa6e-0800200c9fde, my domain a0eebc99-afed-4ef8-bb6d-fedfedfedfed).

/opt/CPsuite-R81.20/fw1/log/upgrade_client.elg

Checking if postgres is up
postgres is up
code: "generic_internal_error"
message: "Internal error. For more info search for incident
Executed command failed. Changes are discarded

what could be the error? what log should I look at?

Thanks

Re: Migration from a Standalone Problem

PhoneBoy — Fri, 14 Jun 2024 23:06:03 GMT

The supported standalone to distributed migration procedure on current releases is: https://support.checkpoint.com/results/sk/sk179444

Re: Migration from a Standalone Problem

the_rock — Sat, 15 Jun 2024 00:22:13 GMT

The sk Phoneboy gave you is what works, 100%. I had one customer follow it recently and worked well.

Andy

Re: Migration from a Standalone Problem

Joni_M — Sat, 15 Jun 2024 04:38:14 GMT

I use this sk179444

Export work , import give me error

Re: Migration from a Standalone Problem

Joni_M — Sat, 15 Jun 2024 04:44:55 GMT

I use this sk179444

Export work , import give me error

If i just use sk179444 when i import DB i get error

Database migration between Standalone and Management only machines is not supported

Re: Migration from a Standalone Problem

PhoneBoy — Mon, 17 Jun 2024 22:53:22 GMT

Best to get the TAC involved here: https://help.checkpoint.com

topic Migration from a Standalone Problem in Firewall and Security Management

Migration from a Standalone Problem

Re: Migration from a Standalone Problem

Re: Migration from a Standalone Problem

Re: Migration from a Standalone Problem

Re: Migration from a Standalone Problem

Re: Migration from a Standalone Problem