topic Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud in Firewall and Security Management

Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

M_Soler — Wed, 28 Jun 2023 23:23:15 GMT

Hello ,

We want to migrate our SMS from on-premise to Smart-1 Cloud, I download the script from the checkpoint portal,

I run it in our SMS but in 17% we have an error:

Failed to run export or export file (export_file.tgz) not found. Exit code: 1

I tried the migrate export and it works well, but not the script from the portal.
our SMS (Vmware) is in R81.20 take 10 in it is not an MDS server
I checked this limitiations but we are not in it :

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-Guide/Topics-Smart-1-Cloud/Expected-Behavior-and-Known-Limitations.htm?Highlight=Migration#Migration

find the outputs of the df -h in my screenshot

I'm open for any idea

Thank you .

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

G_W_Albrecht — Thu, 29 Jun 2023 05:39:32 GMT

Let TAC look into the upgrade logs !

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

M_Soler — Thu, 29 Jun 2023 06:12:33 GMT

Thank you @G_W_Albrecht for your answer, I have already a case with TAC but it take a lot of time.

Do you know where I can found the logs related to the migration ?

Thank you again

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

G_W_Albrecht — Thu, 29 Jun 2023 07:54:19 GMT

No - you could look into the script itself.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Ian_Cresswell — Sat, 16 Dec 2023 11:34:34 GMT

did you have any success with TAC, I am having the exact same problem.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Stas_M — Sun, 17 Dec 2023 13:48:37 GMT

Hi @M_Soler and @Ian_Cresswell ,
I'm Smart-1 Cloud Customer Success engineer.
Please send details and your Service ID to MANAGEMENT_AS_A_SERVICE@checkpoint.com and I will take a look on logs.
Or alternatively you can ask TAC to open a task for Smart-1 Cloud team.
Regards,
Stas

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

M_Soler — Mon, 18 Dec 2023 08:48:30 GMT

For us the implied_rules.def was blocking the migration so what we do we take an implied_rules.def without any modification and we change it with our implied_rules.def, don't forget to save your original implied_rules.def to put it again after the migration

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Ian_Cresswell — Mon, 18 Dec 2023 09:24:03 GMT

I do have a TAC case open under our management server for this error but as it is a migration and not a break fix I am having difficulty getting help from TAC, I am also waiting for the paperwork to go through for our support on Smart-1 cloud which is further complicating the issue.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Ian_Cresswell — Mon, 18 Dec 2023 09:38:04 GMT

We have a problem with both tables.def and implied_rules.def.

I built a new Management server in Azure and replaced these two files, that fixed the error for tables.def but we still have the same problem with implied_rules.def.

I have downloaded the install .tgz from checkpoint so will extract the file from there and see if that lets me get past this error.

It seem the --ignore_warnings flag needs to be inside the script as if you append it to the end of command it is simply ignored.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Stas_M — Mon, 18 Dec 2023 10:41:44 GMT

Sure. Anyway, if you see that you got "hanged" with this issue drop us an email to above address and we will take care of it.
Regarding .def files. The .def files are not transferred during migration. If you changed them in on-prem and then attempted migration to Smart-1 Cloud you will get warnings. And if for some reason you can't skip them I suggest to replace all .def files with their defaults and then to attempt migration. Then to open SR for TAC to make changes in .def files.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Ian_Cresswell — Mon, 18 Dec 2023 10:56:43 GMT

Thanks

I add the line:

echo "--ignore_warnings" > migrate_flags

towards the end of the script after echo: "-force-upgrade-flow" > migrate flags

This allowed the script to complete, not sure if this is a recommended method?

I will try import the file to the Infinity Portal and see if everything works that side.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

M_Soler — Mon, 18 Dec 2023 11:25:52 GMT

From our side we try to ignore the warnings but the migration is always blocked, so we change the .def file with the default one and after that the TAC added our .def to our Smart-1 Cloud, and now all is working well.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

M_Soler — Mon, 18 Dec 2023 11:32:06 GMT

I think you don't have an other solution, and you will not have an issue to ignore the .def files because after the migration you open a case to remplace the default .def with yours , and all will be ok.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Stas_M — Mon, 18 Dec 2023 13:31:38 GMT

@Ian_Cresswell Well, you can use "--ignore_warnings" but the issue is that it will ignore all warnings and not only warnings about .def files.
So if you want to use it I recommend first to run it without this flag and see if you getting warnings about .def only and then to run it with "--ignore_warnings". However, personally I prefer the @M_Soler solution i.e. to replace .def files with the default .def files. This way migration will not hang on .def and you will still get other warnings.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

the_rock — Mon, 18 Dec 2023 13:33:48 GMT

Thats 100% true, I used it myself few times and it does work with that flag on, but definitely does not address the real issue as to why it fails in the first place.

Best regards,

Andy

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Ian_Cresswell — Mon, 18 Dec 2023 13:52:19 GMT

I did try that, I replaced the implied_rules.def with the file I extracted from Check_Point_R81.10_T335_Fresh_Install_and_Upgrade.tar but still got the same error regarding this file.

I had a similar problem with table.def but that was resolved once I replaced that file.

Not sure what else to do, do you have a suggestion where else I could get a copy of implied_rules.def?

I did not see any other errors or warnings in the Upgrade Report

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

the_rock — Mon, 18 Dec 2023 13:51:39 GMT

I can get you clean file from that version if you like, but no clue if it would work.

Let me know.

Andy

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

Ian_Cresswell — Mon, 18 Dec 2023 13:53:42 GMT

Yes please Andy, would appreciate that.

I am on R81.10 with the latest hotfix applied.

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

the_rock — Mon, 18 Dec 2023 13:54:31 GMT

OF COURSE mate, happy to try help you! Can you please message me directly with your email and I can send you the file securely?

Andy

Re: Error in the export when we want to migrate from on-premise SMS to Smart-1 cloud

the_rock — Mon, 18 Dec 2023 14:00:43 GMT

K, just sent it, its encrypted email, not sure if it may ask you to create an account, but if it gets too complicated, I gave you my direct email as well, so shoot me a message and we can connect offline. Im sure it wont take more than 2 IT dudes to send a file 🤣🤣

Andy