topic Move Management Server to different IP in General Topics

Move Management Server to different IP

Johannes_Schoen — Mon, 03 Jun 2019 09:11:25 GMT

Dear Community,

I got a question regarding sk40993:
I want to move a management-server in to another subnet and need to change the ip.

The sk describes the procedure, but I'm wondering, when a policy push will be performed.
I would assume after changing the management-server-object-ip.

What do you think? Any suggestions?

Best Regards
Johannes

Re: Move Management Server to different IP

G_W_Albrecht — Mon, 03 Jun 2019 10:18:30 GMT

There will be no automatic policy install afterwards - because after changing SMS IP, you have to follow sk103356 to make a policy install successfull ! You have to renew SIC with all GWs, that is it...

Re: Move Management Server to different IP

Johannes_Schoen — Mon, 03 Jun 2019 10:25:29 GMT

Okay, so the policy will be pushed with the new management-src ip if I understand you right? (after the SIC was reinitialized? I had concerns regarding local firewall policy, that the new src ip will be blocked by policy.

Re: Move Management Server to different IP

G_W_Albrecht — Mon, 03 Jun 2019 10:42:03 GMT

SIC is renewed with the changed SMS IP - see the sk for details. This makes the policy install possible - it would not work without established SIC that refers to IP ! If your current rule set blocks this IP, establishing SIC will not work until you do a unloadlocal on the GWs...

Re: Move Management Server to different IP

Johannes_Schoen — Mon, 03 Jun 2019 11:39:41 GMT

Alright, thanks for your feedback.
We will provide the gateways with a corrsponding security policy before we start migrating.
Many thanks