topic Re: Can we import the config of an 1120 into a 1530 in Spark Firewall (SMB)

Can we import the config of an 1120 into a 1530

Steffen_Appel — Sat, 01 May 2021 06:34:48 GMT

We soon have to replace our 1100 devices with new ones (probably 1530):

Is it possible to directly import the config from the 1100 (R77.20.80) into the 1530 (R80.20.25 or higher)?

Re: Can we import the config of an 1120 into a 1530

MikeB — Fri, 30 Apr 2021 13:38:46 GMT

@KennyManrique , I'm sure you can help here!

Re: Can we import the config of an 1120 into a 1530

the_rock — Fri, 30 Apr 2021 14:41:53 GMT

@MikeB gave good answer, better to confirm but I am pretty positive that with Check Point, you can NOT import config from one appliance onto another, unless its same appliance model and same version. I am pretty sure logical reasoning for that is say if you have 4400 appliance and you want to import backup into, I dont know, lets say for argument's sake, 16000 box. Well, that would never work, as interface layout and config is totally different. Now, if 2 appliances you are talking about have exact same hardware features, then it might be doable, but most likely not supported.

I recall at some point Fortinet support had process to do this on 2 different models, but then they deleted it, as people were doing it, s*** would happen and they would then call support and complain. All in all, always better to follow vendor's recommendations...sort of goes without saying : )

Re: Can we import the config of an 1120 into a 1530

PhoneBoy — Fri, 30 Apr 2021 23:23:55 GMT

You can take the backup from an older SMB appliance running R77.20.87 and restore it onto a newer SMB appliance as of R80.20.15.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk170162&partition=Advanced&product=Quantum

Likewise, you can migrate 600/1100/1200R to 700/900/1400 using a similar procedure.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111334&partition=Basic&product=Quantum

Re: Can we import the config of an 1120 into a 1530

Steffen_Appel — Sat, 01 May 2021 06:36:27 GMT

So from a 1100, 2 steps are required, first step to an intermediate 1400, and then to a 1500, that‘s what I assumed unfortunately.

Re: Can we import the config of an 1120 into a 1530

G_W_Albrecht — Sat, 01 May 2021 09:55:44 GMT

This could be helpfull: Configuration transfer between different SMB models

Re: Can we import the config of an 1120 into a 1530

Steffen_Appel — Mon, 03 May 2021 08:05:59 GMT

And will SIC be transfered as well?

Re: Can we import the config of an 1120 into a 1530

G_W_Albrecht — Mon, 03 May 2021 13:00:14 GMT

This is not true:

- With SMB (not GAiA !) appliances this is possible with some limitations as shown in Configuration transfer between different SMB models.

- With SMB there is the direct procedure for configuration export/import between model series @PhoneBoy speaks of in his post.

- For GAiA this is possible as explained in How to Backup and Restore in Gaia

Re: Can we import the config of an 1120 into a 1530

PhoneBoy — Mon, 03 May 2021 13:53:02 GMT

It’s a full backup and restore, so I would expect it to.