topic migrate import in Firewall and Security Management

migrate import

Luis_Miguel_Mig — Fri, 19 Feb 2021 19:29:47 GMT

Does migrate import override or merge the existent configuration in the manager?

Re: migrate import

Vincent_Bacher — Fri, 19 Feb 2021 19:42:45 GMT

override

Re: migrate import

Luis_Miguel_Mig — Sat, 20 Feb 2021 12:02:42 GMT

So even if the new manager has gateways, policy packages and objects in general with different names , right?

Re: migrate import

PhoneBoy — Sat, 20 Feb 2021 18:09:30 GMT

I believe the migration tools won’t even allow you to proceed unless the import is done on a freshly installed management server.
The tool is not meant to merge multiple management domains together.

Re: migrate import

the_rock — Sat, 20 Feb 2021 21:13:28 GMT

Glad you asked that question...so, the answer is override, BUT, here is something I observed in the past. Say you have bunch of stuff on your current mgmt and you use smart move tool to migrate stuff from Cisco over to CP mgmt server. Well, if you do that, you will NOT lose any existing config at all and it would import all the Cisco stuff there as well.

Andy

Re: migrate import

PhoneBoy — Sat, 20 Feb 2021 22:00:49 GMT

Yes, because SmartMove is creating everything using our management APIs.
We have a similar Python script that will use the API to export/import rules and objects to/from a Check Point management domain, though it is limited by what the API supports.
In both cases, it results in adding rules/objects to the existing management server.

A migrate export/import is more of a low-level backup/restore of the management database.

Re: migrate import

gunturhakim — Tue, 23 Feb 2021 09:47:40 GMT

Hi Vincent

thanks for make it clear, so I don't make a mistake when I want to import,

bandungbest regards