topic Re: Change from Smart Console to local Gaia portal management in Firewall and Security Management

Change from Smart Console to local Gaia portal management

IvonSerg — Fri, 08 Nov 2024 11:39:07 GMT

Hi and have a Good day to all!

We're using cluster of 2 QUANTUM 3800 SECURITY GATEWAY, and they are now connected to Smart console server, which is not accessible for us and cluster is managed by Smart console.

However we have physical access to this cluster in server room and we have access rights through the serial cable in expert\clish mode.

What we want: is to disconnect cluster from management of Smart Console, and manage it locally with Gaia portal (currently web daemon-enable ON option is set), without resetting to defaults this cluster (to save licenses and a lot of tons of security rules for our infrastructure)

Is it possible? Maybe there is a way to export security rules from the whole cluster?

Thanks! Appreciate for any help!

Re: Change from Smart Console to local Gaia portal management

PhoneBoy — Fri, 08 Nov 2024 19:41:13 GMT

The only gateways that can have their security policy managed via a WebUI are Quantum Spark (SMB) appliances.
The 3800 appliances are regular Quantum gateways and must be managed through SmartConsole, which talks to a management server.
The management server can run on the gateway itself...is that the case in your environment?

Re: Change from Smart Console to local Gaia portal management

the_rock — Fri, 08 Nov 2024 20:14:26 GMT

I never heard of that being possible for regular Gaia appliances. Only SMB ones can be managed locally. Is there a way to do it? Maybe, some convoluted/unsupported way, but as far as officially supported one, I doubt it.

Andy

Re: Change from Smart Console to local Gaia portal management

IvonSerg — Fri, 15 Nov 2024 09:03:45 GMT

Hello! Appreciate for you fast response! Yes i think we're looking for solution like that (running management server on gateway itself), is it possible? If so, how?

Thanks!

Re: Change from Smart Console to local Gaia portal management

the_rock — Fri, 15 Nov 2024 12:25:38 GMT

You are probably referring to standalone setup, meaning its gateway + management as one appliance, not distributed (separate).

Andy

Re: Change from Smart Console to local Gaia portal management

PhoneBoy — Fri, 15 Nov 2024 13:27:05 GMT

It is possible, yes.
It will, however, require a complete reinstall of your cluster into a Full HA setup.
I'm fairly certain migrating distributed TO a Full HA setup won't be possible without having to resort to using an API-based solution like https://community.checkpoint.com/t5/API-CLI-Discussion/Python-tool-for-exporting-importing-a-policy-package-or-parts-of/m-p/41100#M2829
Migrating from a Full HA to a distributed environment will present its own challenges, since I'm not sure we have a supported method for doing so (this procedure only applies to R7x versions: https://support.checkpoint.com/results/sk/sk44201 )

In short, I would strongly advise against doing this.
I would consider looking at Smart-1 Cloud instead or maintaining your existing external management server.