Combining two different management server configurations

ceyhun — Mon, 13 Jan 2020 14:42:53 GMT

I have the following structure.

Location A => Management + Gateway (Cluster) (R77.30)
Location B => Management + Gateway (Cluster) (R80.10)

We want the management server at location A to be disabled and the structure at that location is managed from the Management server at location B.

There are thousands of objects, many S2S and hundreds of NAT rules on the Management server at location A. How do we transfer objects on this management to management at location B, or how to plan scenario for the transition.

I want to gather management on location Management Server at location B. How can I do that? I'm waiting for your comments and ideas.

Finally, unfortunately I do not have an MDS license.

Thanks

Re: Combining two different management server configurations

PhoneBoy — Fri, 17 Jan 2020 01:52:08 GMT

There's no easy button for this.
For your location A management, it will make it a bit easier if you upgrade it to R80.30.
Then you can use this tool to export/import the bulk of the data: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Python-tool-for-exporting-importing-a-policy-package-or-parts-of/m-p/41100#M2829
Note this will require manually recreating certain types of objects/configurations.

topic Combining two different management server configurations in Firewall and Security Management

Combining two different management server configurations

Re: Combining two different management server configurations