Moving a Cluster Between CMAs

RemoteUser — Fri, 14 Aug 2026 13:01:11 GMT

Hi Mates,

I have a question regarding CMA.

Let's say I have a cluster currently assigned to CMA-X. Is it possible to move the entire cluster from CMA-X to CMA-Y, assuming it's S1C?

Thanks!

Re: Moving a Cluster Between CMAs

Bob_Zimmerman — Fri, 14 Aug 2026 15:05:15 GMT

It's possible, but annoying. You have to migrate the policy including relevant objects, then use the process in sk86521 to reset SIC on the firewall and establish trust with the new management.

I'm currently prepping a change like this with an on-prem MDS. Not yet sure if there will be an outage when policy is first pushed from the new management (it's a whole new policy with new rules, even though the rules say to do the same thing).

topic Moving a Cluster Between CMAs in General Topics

Moving a Cluster Between CMAs

Re: Moving a Cluster Between CMAs