topic Migration of R77.30 SMS to R81 MDS in Firewall & Security Management

Migration of R77.30 SMS to R81 MDS

Ramasubramaniya — Thu, 02 Sep 2021 12:19:01 GMT

Hi Team,

We have a SMS running on Smart-1 appliance with version Gaia R77.30, it has exactly 200 policies and 50 NAT rules.

Currently the hardware is EOL and it doesn't support R81 too. So we have decided to migrate it to MDS running on open server as a new CMA. Since the no of policies is very minimum and we do not have an option to upgrade it we are thinking to create a CMA and manually write all the policies. Is there any way to export Policies and Objects from the SMS to file or something and import to the MDS via CLI?

Re: Migration of R77.30 SMS to R81 MDS

G_W_Albrecht — Thu, 02 Sep 2021 13:19:22 GMT

First, upgrade at least to R80.20 JT > 117. Then, perform the needed steps from sk156072: Domain Migration in R80.x

Re: Migration of R77.30 SMS to R81 MDS

PhoneBoy — Thu, 02 Sep 2021 23:03:41 GMT

If it's at all possible to upgrade your existing Smart-1 Appliance to R80.20 and a recent JHF, you can the use the migration tools to bring that into your CMA.
Otherwise, you can migrate export/migrate import into an R80.40 VM, then use the migration tools to bring that into a CMA.
I kinda like the second approach because you still have the original Smart-1 appliance as a backup of sorts.

Re: Migration of R77.30 SMS to R81 MDS

Ramasubramaniya — Fri, 03 Sep 2021 11:00:40 GMT

Hi,

Thanks for the response. Management not agreeing to provide the new VM for the upgrade. The plan is to do the manual migration of rules. That's why asking any feasible way to write a rules manualy

Re: Migration of R77.30 SMS to R81 MDS

Dorit_Dor — Fri, 03 Sep 2021 12:46:30 GMT

Here is idea - try it only after you make sure you have snapshot to revert as i didnt check myself

When you do cpuse upgrade, you get second image on the box - at that point you can technically move between two versions on the same box (not very friendly as it needs boot every time but you can use the new version to get the rules).