topic Re: Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway in Firewall and Security Management

Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

pizzaprophet — Wed, 27 Nov 2024 13:47:37 GMT

I have a Quantum 6200 ClusterXL consisting of two 6200 gateways. I want to migrate the configuration (policies, objects) over to a 3600 appliance.

I was hoping it'd be as easy as taking a backup of the primary 6200 unit and restoring that backup on the 3600. I am able to restore the backup, but in SmartConsole, I am unable to delete the cluster and replace it with a 3600.

What's the recommended procedure here?

Re: Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

G_W_Albrecht — Wed, 27 Nov 2024 13:57:49 GMT

Where is the SMS ? You only talk about the cluster, not the management...

Re: Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

pizzaprophet — Wed, 27 Nov 2024 14:02:25 GMT

Sorry, the SMS is on the primary cluster unit.

Re: Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

G_W_Albrecht — Wed, 27 Nov 2024 14:06:35 GMT

Should rather be active on the standby unit ! Open SR# with TAC - this is the most feared configuration that i suggest to always avoid ...

Re: Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

AkosBakos — Wed, 27 Nov 2024 14:17:40 GMT

Hi @pizzaprophet

We are talking about Full-HA setup?

If yes:

Here is an SK "How to migrate Full HA environment to Distributed environment"

https://support.checkpoint.com/results/sk/sk44201

I suggest you to create a distributed setup. This is a good point to do this 🙂

And @G_W_Albrecht are right, avoid of this setup.

Akos

Re: Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

pizzaprophet — Wed, 27 Nov 2024 14:36:34 GMT

ok thanks. Yes, it's a Full HA setup. Unfortunately I don't currently have the option to run the SMS anywhere else than on the appliances

that guide says "Migration of Full HA environment to Distributed environment is not supported in R80.x"

@G_W_Albrecht @AkosBakos

Re: Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

G_W_Albrecht — Wed, 27 Nov 2024 14:55:37 GMT

The guide is correct, but also see https://community.checkpoint.com/t5/General-Topics/Migrate-R80-40-Full-HA-to-distributed-Management/m-p/167314 - that was one of our partners that succeeded inb doing that. Might also give you an insight on how complicated this is. Ask CP TAC - this is the best option...

Re: Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

PhoneBoy — Wed, 27 Nov 2024 16:13:32 GMT

This will provide an export/import option that, with a small amount of work, should help in the migration process: https://community.checkpoint.com/t5/API-CLI-Discussion/Python-tool-for-exporting-importing-a-policy-package-or-parts-of/m-p/41100#M2829