topic Migrate Standalone 5600 to HA Cluster of 5600s in General Topics

Migrate Standalone 5600 to HA Cluster of 5600s

Jonathan_Langle — Tue, 09 Apr 2019 14:27:55 GMT

I am looking for some documentation on this procedure. We currently have a 5600 on R80.10 configured as a stand alone appliance. We are planning to buy another 5600 to turn this into an HA Cluster. Is there some documentation to follow with the procedure or guidance?

Thanks.

Re: Migrate Standalone 5600 to HA Cluster of 5600s

AndréTinoco — Tue, 09 Apr 2019 22:15:46 GMT

Hello Jonathan,

You want to migrate Standalone to FullHA or want to use the 5600 just as FW HA Cluster and have a separate Management Server (Distributed environment)?

Regards,

André Tinoco

Re: Migrate Standalone 5600 to HA Cluster of 5600s

PhoneBoy — Wed, 10 Apr 2019 02:10:12 GMT

It depends on what your end state is, specifically if you will have a third appliance (or VM) for management.
Getting to a Full HA config (where management is on both cluster members) is discussed in this thread in some detail: https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/Standalone-to-Full-HA-Member-VLANs-Cluster-on-different-subnets/m-p/5049

However, I do not recommend the Full HA approach.
A separate management appliance/VM will provide a better overall experience.
The process for Migrating from Standalone to Distributed in R80.x is described here: https://community.checkpoint.com/t5/Policy-Management/Migrating-policies-from-standalone-gateway-to-new-management/m-p/14726

Re: Migrate Standalone 5600 to HA Cluster of 5600s

AndréTinoco — Wed, 10 Apr 2019 09:33:15 GMT

I agree. Maybe you can play "Game of Licenses" and get a way of getting the new 5600 without MNG HA, and use the MNG License you have right now on a separate management appliance/VM.
The quality of life would increase significantly with a distributed solution.