topic Migrate export from R77.30 Gaia on open server to R80.30 on Smart-1 in Firewall and Security Management

Migrate export from R77.30 Gaia on open server to R80.30 on Smart-1

Faizal_MS — Wed, 01 Jul 2020 17:36:04 GMT

Hi Everyone,

Would like to seek some advice on to do and what to look into. I am migrating from R77.30 Gaia on open server to R80.30 on Smart-1.

*The new appliance will still hold the same hostname and IP as the previous one.

My planned methods are to use migrate import/export to the new appliance. This management has a few firewalls managed under it with also VSXs firewalls. I have concerns on few matters:

1. Do we need to re-stablished the SIC's (for both normal and VSX firewalls) after import?

2. Does the firewall rules will be changed in its structure in R80.30. There are thousand lines of rules, so if there is any structure changes, we cant easily identify it.

Already open a case with support, but seems like they have different answers. So would like to seek further opinion and maybe any past experience to share.

Thank you.

Re: Migrate export from R77.30 Gaia on open server to R80.30 on Smart-1

firewall1-gx — Wed, 01 Jul 2020 19:54:48 GMT

Hi Dear,

I will try to explain for you a good way to provide this migration.

First all, look:

1 - If you doesn't need to change hostname (object hostname), it is not necessary to perform a new SIC between management server and firewalls, cluster or VSX for example.

To perform this migration, basically you must to export a migrate export using R80.30 binaries files on R77.30 machine. After that, you might only to import the migrate export generated in Smart-1 appliance.

Be careful and backup all your enviroment (snapshot/gaia backup/migrate export) before any action.

Good luck!

Regards.

Re: Migrate export from R77.30 Gaia on open server to R80.30 on Smart-1

Faizal_MS — Wed, 01 Jul 2020 20:16:28 GMT

Hi FGX,

Noted and hank you for sharing. Backups is definately the first thing in mind. Do you have any issues, especially on the firewall rules after it has been migrated?

Re: Migrate export from R77.30 Gaia on open server to R80.30 on Smart-1

firewall1-gx — Wed, 01 Jul 2020 20:22:04 GMT

Hi,

It's not expecting any issue unknow, only have in your mind that you're going to a new R80.x architecture and some objects shouldn't to work, but look URL below for complete list.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk117237&partition=Basic&product=Security

During migrate export process you'll advised if any conflict has been detected.

Regards,