topic Re: Migrating VM to Smart-1 in Firewall and Security Management

Migrating VM to Smart-1

CyberBreaker — Fri, 14 Feb 2020 14:34:47 GMT

Hi,

I would like to know how can I migrate my VM management server to a Smart-1 hardware.

It will be in the same version, I just want to make my management sever from VM to a hardware based.

Thanks

Re: Migrating VM to Smart-1

HeikoAnkenbrand — Fri, 14 Feb 2020 16:54:08 GMT

Hi @CyberBreaker,

Proceed as follows:

1) Execute migrate export on VM

# cd $FWDIR/bin/upgrade_tools

# migrate export /var/log/migrate_file

2) Copy /var/log/migrate_file.tgz via winscp to your pc

3) Copy log files from $FWDIR/log/ via winscp to your pc

4) Install the same GAIA version on the Smart-1

5) Start the first configuration wizard and set the same IP (How in vmware in your old SMS!)

6) Copy the file via winscp from the pc to the Smart-1 /var/log/migrate_file.tgz.

7) Execute migrate import on the Smart-1

# cpstop

# cd $FWDIR/bin/upgrade_tools

# migrate import /var/log/migrate_file.tgz

8.) Import your logs to $FWDIR/log/ via winscp

9) Start the management server.

# cpstart

Re: Migrating VM to Smart-1

CyberBreaker — Fri, 14 Feb 2020 17:00:20 GMT

Hi @HeikoAnkenbrand ,

Thanks for the feedback.

Regarding the item number 1, your are just exporting the logs right? How about the configuration database of the VM security manager?

Thanks

Re: Migrating VM to Smart-1

HeikoAnkenbrand — Fri, 14 Feb 2020 17:18:41 GMT

No!

# migrate export

Exports the complete configuration of the management server. Everything you have configured in the SmartConsole (rules, nat rules, objects, VPN,...)

I just write the output to /var/log so that you don't fill the root partiton under linux.

PS:

Point 2 describes how to backup the logs.

Re: Migrating VM to Smart-1

CyberBreaker — Fri, 14 Feb 2020 17:20:58 GMT

Hi @HeikoAnkenbrand

Thanks, I just asked because I noticed you are inside the Log directory --> /var/log

Thanks for the big help 😊

Re: Migrating VM to Smart-1

Garrett_DirSec — Mon, 17 Feb 2020 14:45:08 GMT

@CyberBreaker

suggest you review the comparison table in the following:

Best Practices GAIA BACKUP

The use of migration tools (ie. 'migrate [import | export] <file>') is the standard for moving SmartCenter mgmt between platforms. In addition to standard scheduled "backup" strategy, the use of migration tools for "bare metal" backup on monthly basis is always a good idea.

Re: Migrating VM to Smart-1

Arthur_DENIS1 — Fri, 27 Nov 2020 08:39:38 GMT

Hi Heiko,

Thanks for this sharing, really usefull.

Just wondering about log indexing: with this method instead of migrate export -l, what about indexing of log files manually copyied ?

Re: Migrating VM to Smart-1

PhoneBoy — Mon, 30 Nov 2020 04:20:17 GMT

You have to manually trigger a reindex: https://community.checkpoint.com/t5/Logging-and-Reporting/SmartLog-only-look-back-14-days-how-to-reindex-90-days-back/td-p/23280