topic Security Manager Recovery in Firewall and Security Management

Security Manager Recovery

Peter2 — Wed, 10 Feb 2021 11:33:33 GMT

I have two 3800 appliances running as cluster now. But the security manager server is completely crashed without any backup.

I am new to Check Point systems. Please advise how can I rebuild the server and retrieve the configuration from the firewall.

thanks.

Re: Security Manager Recovery

_Val_ — Wed, 10 Feb 2021 13:59:06 GMT

SW version?

Re: Security Manager Recovery

Peter2 — Wed, 10 Feb 2021 14:24:10 GMT

the firewalls are R80.40

Re: Security Manager Recovery

G_W_Albrecht — Wed, 10 Feb 2021 15:30:27 GMT

If the SMS is crashed completely without a backup, the configuration is lost - you can not restore it from the compiled policy on the gateways.

Re: Security Manager Recovery

Peter2 — Thu, 11 Feb 2021 01:17:08 GMT

I only have the admin password of the gateway. After build a new SMS, how can I modify the gateway to use the new server.

Re: Security Manager Recovery

PhoneBoy — Thu, 11 Feb 2021 02:08:04 GMT

You may be able to piece together the configuration from various files in $FWDIR/state.
However, it will be a manual process.
Check Point Professional Services can also assist with this.

However, if you want to start over, you can build a new management server and make a new configuration.
You will have to go to each gateway and use cpconfig to perform a SIC reset.
This will allow you to establish SIC from the new management server and push a new policy to the gateways.

Note that resetting SIC generally causes an outage.

Re: Security Manager Recovery

genisis__ — Thu, 11 Feb 2021 09:56:48 GMT

I've had a similar scenario. SMS harddrive crashed no backup. We engaged Checkpoint Professional services to extract the policies from the gateways and the import these into the a clean build SMS.

The have the tools to do this.

Re: Security Manager Recovery

G_W_Albrecht — Thu, 11 Feb 2021 10:09:52 GMT

Yes, that is possible - but not a cheap solution,so i prefer backups 8).

Re: Security Manager Recovery

genisis__ — Thu, 11 Feb 2021 11:25:32 GMT

I agree - but in our case with the customer we had little choice. I suspect it take 1 or 2hrs to do by Professional services but then charge the whole day.

Re: Security Manager Recovery

JC_S — Tue, 01 Nov 2022 18:44:44 GMT

Professional Services actually CAN do that now

Re: Security Manager Recovery

genisis__ — Sun, 04 Dec 2022 12:43:32 GMT

I agree,

We had to get PS involved to rebuild a manager and policy using the policy from the gateways!

Re: Security Manager Recovery

ANARINE — Tue, 09 Apr 2024 08:50:30 GMT

Is there additional charge for this service from cp?

Re: Security Manager Recovery

genisis__ — Tue, 09 Apr 2024 09:00:29 GMT

Yes - we specifically had to engage PS, which indeed cost.