topic Re: Migration of Domain Server between Multi-Domain Management Servers in General Topics

Migration of Domain Server between Multi-Domain Management Servers

Polina_1 — Thu, 19 Sep 2024 06:49:31 GMT

Hello,

We are currently facing the task of migrating Domain Server between MDS servers.
In https://support.checkpoint.com/results/sk/sk156072 there is the following requirement:
Before you export a database, you must:
- Update the Application Control signatures
- Update the Anti-Virus, Anti-Bot, and IPS signatures
- Discard or publish all sessions.

Am I correct in understanding that these actions must be performed only on the source Domain Server?

We do not have Internet access from the source MDS server. We need to perform offline updates of Application Control signatures, Anti-Virus, Anti-Bot, and IPS signatures. According to https://support.checkpoint.com/results/sk/sk103882, only the Application Control and IPS signatures can be updated on the Management Server. The other signatures are updated on the gateways.
Could you please tell me how this requirement from sk156072 should be implemented in this case? And what happens if we update only the Application Control and IPS signatures before export?

Re: Migration of Domain Server between Multi-Domain Management Servers

toblun — Thu, 19 Sep 2024 07:26:23 GMT

Hi,

You should only need to update on the exported domain server, just follow the mentioned SK.

I guess it would not be any issues regarding to only update app/ips before export but update everything as mentioned would be good choice since you still going to update those two.

Re: Migration of Domain Server between Multi-Domain Management Servers

Polina_1 — Thu, 19 Sep 2024 08:29:24 GMT

We could update all the signatures. I just don't understand how to update manually and offline Anti-Virus, Anti-Bot signatures on a domain server.
I looked at the functionality in SmartConsole and there is no manual update function.
Will we face domain import errors if we don't update Anti-Virus, Anti-Bot?

Re: Migration of Domain Server between Multi-Domain Management Servers

PhoneBoy — Thu, 19 Sep 2024 14:40:13 GMT

I haven't seen any reports of this on the community.
Anti-Virus and Anti-Bot mostly use ThreatCloud.

As long as you update IPS and App Control signatures before doing the export, you should be good.