topic Migration of R75.47 CheckPoint SMS to R80.10 SMS on another infrastructure in Firewall and Security Management

Migration of R75.47 CheckPoint SMS to R80.10 SMS on another infrastructure

Xterminator — Tue, 27 Aug 2019 15:07:18 GMT

Greetings,

This is my first post here. I really enjoy the community, which posts also helped me to obtain CP Certifications. Nevertheless, I still feel like a rookie on many aspects. I have a question regarding management server migration:

My company acquired another, and the other infrastructure now falls under our responsibility.

The other company has a CheckPoint management server (R75.47) with 2 gateways which run version R80.10 and the IPSec+Policy Server, IPS, Monitoring, ClusterXL blades. They are running around 300 firewall rules.

This company has an R80.10 management server, standalone, with 3 VSX clusters with open servers, running various virtual systems. Some of the gateways are small checkpoint appliances.

The objective is to migrate the CheckPoint SMS from the other company to the one in this infrastructure, i believe that new VSX virtual systems will need to be created in order to run the new infrastructure.

What are the things/steps to be considered in order to plan this kind of migration? What could be the impacts in order to perform this activity?

Thanks a lot for your time.

Re: Migration of R75.47 CheckPoint SMS to R80.10 SMS on another infrastructure

Maarten_Sjouw — Wed, 28 Aug 2019 08:02:23 GMT

You are talking about 2 things here, a migration of a SMS from R75.47 to R80.10 (or higher) and after that merging both R80.xx SMS servers into 1.
For the latter you can use the export/import tools available in the developer part on this forum.
For the first part you should build yourself an new VM with a new install of a SMS R80.xx and use the upgrade tools to migrate the R75.47
This is a supported direct migration.
Once this is done you can use the above mentioned tools to do the merge.

Migration of R75.47 CheckPoint SMS to R80.10 SMS on another infrastructure

G_W_Albrecht — Wed, 28 Aug 2019 10:27:04 GMT

It is impossible that a customer has a CheckPoint management server (R75.47) with 2 gateways which run version R80.10 ! So, nothing can be suggested for that configuration as it is impossible...