topic Re: SIC question in Firewall and Security Management

SIC question

the_rock — Thu, 28 Aug 2025 18:31:22 GMT

Hey guys,

Please forgive me if this sounds like a weird question, but just wanted to see if its even possible.

Here is the situation. Customer is replacing old fw with 9100 and though site is 1 hour away, there were wondering if this can be done. So go through first time wizard at their location, put sic key, all that, copy current config, but NOT connect it to mgmt yet, as IP addressing would be the same.

They asked me if that SIC key would work once cutover is ready to be done WITHOUT having to enter anything on the object itself representing that fw in smart console. I cant, for the life of me, see how that would work, say even if sic key was the same as the original fw, but they said they heard from someone while back you can move some sort of sic key file from the fw to management for this to work.

I personally dont think its possible, Im fairly positive SIC key would need to be reset from smart console fw object, but just wanted to confirm.

Best,

Andy

Re: SIC question

the_rock — Thu, 28 Aug 2025 18:56:43 GMT

Hey guys,

Just confirmed the only way would be via snapshot.

Andy

Re: SIC question

emmap — Fri, 29 Aug 2025 02:10:04 GMT

A snapshot or a backup will include SIC certs etc, but it's not supported to restore a snapshot or backup between different appliance models. I'm not aware of any way to shortcut the SIC reset/recreate on Mgmt, but if they're concerned about leaving themselves in the lurch on a rollback we would recommend they snapshot the Mgmt server before starting anything. That way if they have to roll back to the old gateways they can restore the Mgmt snapshot to restore SIC to the old gateways. Remember, resetting SIC in SmartConsole does not affect the connected gateway at all - but then they should already have swapped cables to the new gateways before resetting it anyway.

Re: SIC question

the_rock — Fri, 29 Aug 2025 11:48:40 GMT

Hi Emma,

Thank you for that, great explanation, as always. In all honesty, since they told me there are 4 sites and furthest one is little less than 2 hour drive, Im not overly worried. If they really want to be on safe side, someone can always drive there, rather than worry if person on site would be able to perform SIC reset if need be : - )

Cheers,

Andy