topic Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration in Spark Firewall (SMB)

Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

Zeppln — Tue, 19 Aug 2025 15:54:44 GMT

Hello everyone!

Here's the situation, a client is trying to migrate a standalone deployment (Gaia R80.40) to Smart 1 Cloud (R82). Currently, they have an open server for the standalone deployment. They have a new Quantum Spark 1600 SMB appliance which they intend to use as the Gateway on-premise. Since the manager can only be migrated to the Infinity Portal, we first need to migrate from standalone to a distributed deployment. I have read the procedure from sk154033 (https://support.checkpoint.com/results/sk/sk154033) and I have some questions.

Are there considerations to take into account regarding the current standalone version (R80.40) and synchronizing the new SMB appliance into the distributed deployment? Should I upgrade first before creating the secondary SMS and SG in SmartConsole? What SG configurations I must emulate in the SMB appliance, or is there a way to save the current config and upload it into the SMB appliance?

Thanks for the support!

Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

Danny — Tue, 19 Aug 2025 19:22:04 GMT

Since R80.40 is no longer supported, and SMB environments are typically small, and you're facing three migrations —

Standalone to distributed
Open server to SMB
SmartCenter to Smart-1 Cloud

Therefore I recommend setting up the new SMB appliance from scratch, managing it centrally with a new Smart-1 Cloud instance, and manually migrating the security rules.

Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

PhoneBoy — Tue, 19 Aug 2025 19:24:45 GMT

In order to import the "standalone" gateway to Smart-1 Cloud, you would need to upgrade management to at least R81.10.
Since your goal is to be at a version above R81.10, you should instead use https://support.checkpoint.com/results/sk/sk179444 to go to R81.20.
You can then import that configuration in Smart-1 Cloud and use the same policy/objects now with the 1600 (possibly with some minor adjustments).

Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

Zeppln — Tue, 19 Aug 2025 20:24:02 GMT

Thanks for the insight!

When setting up a new S1C instance, which configurations should I prioritize or which configs should be taken into consideration so the S1C instance works the same as the current deployment? When setting up the SMB appliance, is there a way to migrate configs from the current deployment such as static routes, interfaces and other info or I should manually configure them in the SMB (manually 1 by 1 just like the security policy)?

Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

Zeppln — Tue, 19 Aug 2025 20:26:45 GMT

Thanks for the comments!

So in case I try this route, I should upgrade my deployment first to R81.20, then proceed to the migration to distributed deployment and then the upload the manager to S1C. Is there an sk to follow the procedure to import those configs so I use the same policy/objects?

Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

G_W_Albrecht — Wed, 20 Aug 2025 16:42:35 GMT

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-Guide/Topics-Smart-1-Cloud/Using-the-Settings.htm?cshid=recommended#RecommendedMigrate

Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

the_rock — Wed, 20 Aug 2025 19:34:58 GMT

Just a thought, but maybe not a bad idea to get in touch with professional services, Im positive they could assist with this.

Andy

Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

G_W_Albrecht — Thu, 21 Aug 2025 07:02:28 GMT

Configuring Gateway and Cluster Objects

Re: Standalone (GAIA R80.40) to distributed deployment (Spark 1500) migration

PhoneBoy — Thu, 21 Aug 2025 15:02:45 GMT

The SK I linked explains the process.