topic Migrate open server firewall to VSX new virtual system in General Topics

Migrate open server firewall to VSX new virtual system

dehaasm — Tue, 21 Feb 2023 18:08:39 GMT

We are looking for an easy way to migrate a open server Check Point gateway cluster to a new 16000 gateway with VSX enabled, this gateway already has a Virtual System (VS) in production so we would like to add the vlans from the open server gateways to the new Virtual System as well as the policy available on the SMS.

I guess someone here would already have done this before, if so could you share your experience/procedure?

Thanks a lot!

Re: Migrate open server firewall to VSX new virtual system

PhoneBoy — Wed, 22 Feb 2023 02:32:49 GMT

Will the new gateway be managed by the same management as the old gateway?
Then you can create/configure the VS and install the existing policy on it.
Otherwise, you'll have to copy the existing policy to the new management (either using the migration tools or using the API, depending on if it's an existing management domain or a new one).

Re: Migrate open server firewall to VSX new virtual system

dehaasm — Thu, 23 Feb 2023 08:34:52 GMT

Yes I believe it is the same SMS, so basically configure the new VS with required VLAN/ports, install similar policy on it. Then to swap it move the cables from the old device to the new VSX device (with dedicated ports).