topic Re: Migration of UTM1 272 R75.30 to CP 3200 R77.30 in Endpoint

Migration of UTM1 272 R75.30 to CP 3200 R77.30

Danny_Lim — Wed, 11 Mar 2020 04:51:25 GMT

Hi,

Customer plan to upgrade the hardware from UTM 1 272 (version R75.30) to CP 3200 (R77.30)

We are planning to upgrade the CP3200 to R80.xx as well since R77.30 already EOL

I would like to explore the possible option on this migration.

Scenario A

-------------------------

1./ Upgrade the CP3200 from R77.30 to R80.20

2./ Export out the configuration on UTM-1 272 and imported into CP3200 (R80.20)

Scenario B

-------------------------

1./ Export out the configuration on UTM-1 272 and import into CP3200 (R77.30)

2./ Upgrade the CP3200 from R77.30 to R80.20

Question:

a./ Which scenario is more prefer and simplified.

b./ Do we have any tools to export out the configuration from UTM-1 272 (R75.30) and import into CP3200 (either R77 or R80.xx)

c./ Do upgrade from R77.30 to R80.20 required step upgrade ?

d./ Is there any unforeseen issue will be raised on this migration ?

Re: Migration of UTM1 272 R75.30 to CP 3200 R77.30

Maarten_Sjouw — Wed, 11 Mar 2020 06:01:47 GMT

To start with, is this a centrally manged situation or not, it does not sound like it.
You would need to upgrade the R75.30 to R77 first, watch out this is R77 not R77.30 or any other subversion. See this table: http://downloads.checkpoint.com/dc/download.htm?ID=18761

Another method would be to install a R77 management server, use the migration tools from this installation ISO to export the management from the UTM-1 272, import it into your VM and now you can us it in the following step.

Now do a clean install of the 3200 with R80.30, skip the R80.20, download the latest upgrade tools for R80.30 and run the export on the UTM-1 272 (or the management server VM), import the file into the 3200 and you can run all your verifications in a separate network before replacing the UTM with the newly installed 3200.

Re: Migration of UTM1 272 R75.30 to CP 3200 R77.30

G_W_Albrecht — Wed, 11 Mar 2020 10:32:35 GMT

Under these circumstances, i would take notes and screenshots from the present configuration and completely rebuild it from scratch in R80.30 ! This could save a lot of time, i think...