topic Migration assistance needed for HA 2 node Cluster - 5100s to 9100s in Firewall and Security Management

Migration assistance needed for HA 2 node Cluster - 5100s to 9100s

Joe_Kanaszka — Wed, 18 Dec 2024 17:35:57 GMT

Hey everyone.

The last time I did a migration was back in 2017, so I'm a bit rusty.. LOL

We have a small environment:

Running R81.20 Take 53 (patched for CVE-2024-24919).
(2) 5100 Security Gateway appliances in a (2) node HA Cluster.
Management server is a VM on VMware
Logging/Smart Event server is on a Smart-1 600-S appliance.
I would like to migrate my 5100 Security Gateway appliances to the new 9100s
Ideally I'd like to upgrade my environment to the latest JHF of R81.20

Can someone point me to a good SK or maybe if they have the time, explain the steps that I'll need to take?

Thank you!

Re: Migration assistance needed for HA 2 node Cluster - 5100s to 9100s

the_rock — Wed, 18 Dec 2024 16:27:47 GMT

Hey Joe, how goes it man? 🙂

Here is what I always follow with clients when it comes to simply replacing the hardware and never had an issue.

Andy

Solved: Re: Replace/Upgrade Cluster - Check Point CheckMates

Re: Migration assistance needed for HA 2 node Cluster - 5100s to 9100s

Joe_Kanaszka — Wed, 18 Dec 2024 17:35:29 GMT

Hey man! Thanks again for your help. Exactly what I was looking for!

Re: Migration assistance needed for HA 2 node Cluster - 5100s to 9100s

the_rock — Wed, 18 Dec 2024 17:40:05 GMT

Glad we can help brother, always a pleasure!

Happy holidays to you and family and the best in 2025.

Andy

Re: Migration assistance needed for HA 2 node Cluster - 5100s to 9100s

HienTM — Thu, 02 Jan 2025 04:36:34 GMT

Happy New Year 2025 to all.

We here got the same situation as with Joe, except we have Smart-1 405 appliance as management server and monitor/log server for the HA cluster. All licenses also centrally installed on this appliance.

We also need to replace the Smart-1 405 with newer model Smart 600. Could you guys please help to give some direction on how to do the migration? We suppose that for the first part we should follow the steps pointed out by the_rock to replace security gateways 5100 with 9100 with Smart-1 405 in place, then only after that do Smart-1 405 to 600 migration?

Thank you very much.

Hien