topic Re: Converting Cisco ASA to Checkpoint in Smart-1 cloud in SmartMove

Converting Cisco ASA to Checkpoint in Smart-1 cloud

Greg_P — Tue, 01 Feb 2022 22:30:17 GMT

I am new to Checkpoint and we have been working to convert our Cisco ASA's to Checkpoint 1570 and 3600 series Gateways.

The challenge we face is being able to convert the ASA configuration into Smart1 cloud.

We are converting ASA5505 to Quantum 1570 and ASA5512/45 to Quantum 3600

Any suggestions?

Re: Converting Cisco ASA to Checkpoint in Smart-1 cloud

the_rock — Wed, 02 Feb 2022 03:56:32 GMT

I have a good suggestion for you. Here is what I did couple times and worked fine...take show runs from Cisco, save as text file, then build mgmt server in the lab with same version that cloud one will have. Use smart move tool to convert the Cisco config (there is video and sk about it on support site -> https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk115416)

Once that's done, you go to cloud instance and download migrate tool from settings tab and that's what you run on your lab mgmt server to then get the file you can import into cloud. I did it twice and worked without issues. Be free to message me privately if you need guidance, I will be happy to help you.

Re: Converting Cisco ASA to Checkpoint in Smart-1 cloud

Ofir_Shikolski — Wed, 02 Feb 2022 11:31:14 GMT

Please view https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk115416

You will need to use SmartConnector :

# python3 smartconnector.py -m <> -c <> -k <>

From Smart-1 you can find the -m , -c and -k

https://portal.checkpoint.com/dashboard/smart-1cloud#/config/general

Management API key = -k

ofirs-xxx.maas.checkpoint.com = -m

4111926a-297c-41c5-8ed2-cf3ff9bxxxxx/web_api = -c

https://ofirs-xxx.maas.checkpoint.com/4111926a-297c-41c5-8ed2-cf3ff9bxxxxx/web_api/<api_command>

Re: Converting Cisco ASA to Checkpoint in Smart-1 cloud

Greg_P — Wed, 02 Feb 2022 15:54:22 GMT

I will check this out thanks for the suggestion.

Re: Converting Cisco ASA to Checkpoint in Smart-1 cloud

the_rock — Wed, 02 Feb 2022 15:55:51 GMT

Sure...keep us posted.

Re: Converting Cisco ASA to Checkpoint in Smart-1 cloud

Greg_P — Wed, 02 Feb 2022 16:54:13 GMT

Thanks for the response, I will look at these options.