topic Re: Moving a Gateway from One CMA to Another in General Topics

Moving a Gateway from One CMA to Another

RemoteUser — Fri, 04 Jul 2025 09:01:05 GMT

Hi guys

I’m currently managing our environment through Check Point Smart-1 Cloud (S1C) and need to move a Security Gateway (or Cluster) from one CMA to another CMA within the same Smart-1 Cloud account.

Is there an official or supported way to do this?

Re: Moving a Gateway from One CMA to Another

the_rock — Sun, 06 Jul 2025 21:39:22 GMT

Hey bro,

Not sure if process had changed, but 2 years ago, when customer and I worked with TAC on such request, they told us it would have to be manual procedure, ie delete it from current CMA and then create it on new one, establish SIC, etc. Im honestly not aware of any automated way to do this, but maybe things have changed, so I would certainly confirm with them.

Andy

Re: Moving a Gateway from One CMA to Another

_Val_ — Mon, 07 Jul 2025 10:43:04 GMT

Correct, there is no any way to move a GW between domains without delete and recreate.

Re: Moving a Gateway from One CMA to Another

the_rock — Mon, 07 Jul 2025 12:10:02 GMT

I would still double check with TAC, to be 100% positive, but as far as I know, thats the method.

Andy

Re: Moving a Gateway from One CMA to Another

Tal_Paz-Fridman — Tue, 08 Jul 2025 10:13:06 GMT

I’d like to clarify a few small points:

CMA (Customer Management Add-on) is a very old term. The correct term today is Domain or Domain Management Server, which refers to a dedicated server that hosts virtual Security Management Servers within a Multi-Domain Security Management (MDS) environment.

Please note that MDS is currently not supported in Smart-1 Cloud in the same way it is in on-premises deployments. Instead, we offer what’s called Multi-Management support in the cloud environment where several Managements can be connected to the same tenant.

Re: Moving a Gateway from One CMA to Another

the_rock — Tue, 08 Jul 2025 12:26:28 GMT

Good ol' Provider-1 : - )

Andy