topic Re: MDS to SMS database migration in Firewall and Security Management

MDS to SMS database migration

Abhishek_Kumar1 — Wed, 30 Oct 2024 12:18:49 GMT

I have exported the Database from MDS server and try import in new SMS server, while i am trying to import DB i am getting below error.

Waiting until CPM server is up

WaitUntilNgmServerIsUp: FWM is sending domains 41e821a0-3720-11e3-aa6e-0800200c9fde#a0eebc99-afed-4ef8-bb6d-fedfedfedfed to CPM

E R R O R !!! Validation failed for Object 'FRGRESMCBIR002' @ 'network_objects': Validation error in field 'IPS' at object 'FRGRESMCBIR002' @ 'Network Objects' --> The referenced object 'No_protection' from table 'profiles' does not exist in the database (Object contain invalid reference)

Could you please help on this?

Thanks in advance for your support

Re: MDS to SMS database migration

G_W_Albrecht — Wed, 30 Oct 2024 14:43:37 GMT

Did you follow https://support.checkpoint.com/results/sk/sk156072 ?

Re: MDS to SMS database migration

Abhishek_Kumar1 — Wed, 30 Oct 2024 14:53:11 GMT

Thnx for your quick response,

we follow the below link to export the database, while doing import in target SMS server i am getting error.

even not able to connect Smart console also, it saying domain doesn't exist.

we also raise a support case, but not getting solution.

Error

E R R O R !!! Validation failed for Object 'FRGRESMCBIR002' @ 'network_objects': Validation error in field 'IPS' at object 'FRGRESMCBIR002' @ 'Network Objects' --> The referenced object 'No_protection' from table 'profiles' does not exist in the database (Object contain invalid reference)

Re: MDS to SMS database migration

AkosBakos — Wed, 30 Oct 2024 17:44:40 GMT

Hi @Abhishek_Kumar1

To be 100% sure:

Did you choose the appropriate version in the TARGET_VERSION part?

mgmt_cli export-management [version "<TARGET_VERSION."] domain-name "<NAME_of_DOMAIN>" file-path "/var/log/<NAME_of_DOMAIN>_exported.tgz" --domain 'System Data' --format json

And a few basic question:

Did you check the file MD5 after you moved the file to the destination server? (#md5sum)

Did you tried export again the database?

What are the versions?

Akos

Re: MDS to SMS database migration

the_rock — Wed, 30 Oct 2024 17:59:08 GMT

I totally see the point @AkosBakos is making, I would double check on that.

Andy

Re: MDS to SMS database migration

Abhishek_Kumar1 — Wed, 30 Oct 2024 19:47:07 GMT

Thanks for your Help,

we have use below link to Export and import database from R81.10 MDS to R81.10 SMS server.

we connected with Checkpoint TAC, they have shared below steps to follow. but we are not able to connect GUIDBEdit getting an error. i am attaching Error for your reference.

Take the necessary backups
Download the SQL script sofaware_ufp_properties.sql from the case attachments
Transfer the script to the problematic Management Server to some directory (for example, /var/tmp)
Connect to the command line on the problematic Management Server
Log in to the Expert mode
Go to the directory where you put the script:
cd /var/tmp
Run the SQL script:
psql_client cpm postgres -f sofaware_ufp_properties.sql
Start the FWM process manually (see sk97638😞
cpwd_admin start -name FWM -path "$FWDIR/bin/fwm" -command "fwm"
Make sure the FWM process is up and running:
cpwd_admin list | grep -E "PID|FWM"
Make sure all SmartConsole applications are closed
Connect with Database Tool (GuiDBedit) to the Management Server

Source MDS and Target SMS is in same version R81.10