topic Re: Converting a Check Point 1400 security appliance from Local to Central Management in Spark Firewall (SMB)

Converting a Check Point 1400 security appliance from Local to Central Management

Sunny_Gill — Mon, 15 Nov 2021 13:25:27 GMT

A short video showing how to easily convert a 1400 Small Business Security Appliance from local to central management, in this short video from our Check Point community.

Re: Converting a Check Point 1400 security appliance from Local to Central Management

Softwhere — Thu, 04 Jun 2020 16:13:48 GMT

Just one question, how and where can a security mangement be installed?

I have downloaded and installed the "Check_point_SmartConsole_and_SmartDomain_Manager_R77.30".

Smart Dashboard wants username; password; and device if I put in the IP of the Windows Server or IP of the 1490 it cannot connect,

"defined as a GUI client"

If I remember correctly from years past we needed to enter the Server where the software was installed directly into the Firewall some how.

At any rate could use some help

Thanks,

Jeff

Re: Converting a Check Point 1400 security appliance from Local to Central Management

PhoneBoy — Thu, 04 Jun 2020 22:47:57 GMT

You have to download a current release (like R80.40) and install Security Management on either a VM or a supported Appliance/Open Server.
This requires a license.
SmartConsole/SmartDashboard cannot connect directly to a 1490 (or any other SMB appliance).

Re: Converting a Check Point 1400 security appliance from Local to Central Management

Softwhere — Fri, 05 Jun 2020 07:56:46 GMT

Thanks, where do I get a license only for Management Server, can I get it directly from Checkpoint or through Distributor?

Re: Converting a Check Point 1400 security appliance from Local to Central Management

PhoneBoy — Mon, 08 Jun 2020 03:14:43 GMT

Check Point sells through resellers/distributors.
Likely the SKU you're looking for is CPSM-NGSM5, which is the smallest management license we sell (for up to 5 gateways and includes SmartEvent/Compliance for 1 year).

Re: Converting a Check Point 1400 security appliance from Local to Central Management

gp_singh67 — Mon, 03 Aug 2020 18:55:14 GMT

During the course of shifting my SMB appliance from local to central server, what will happen to the policies already working on the appliance ? Will it get populated on the Central server automatically ?

Re: Converting a Check Point 1400 security appliance from Local to Central Management

PhoneBoy — Mon, 03 Aug 2020 19:02:01 GMT

When you switch from local to central management and before you've pushed an explicit policy from the central management to the gateway, a default policy allowing outgoing traffic will be enforced.

Re: Converting a Check Point 1400 security appliance from Local to Central Management

gp_singh67 — Tue, 04 Aug 2020 02:09:09 GMT

You mean to say I will have to push all the policies afreah ? I have only two 1490 appliances working in HA mode. Is it worth taking pain to migrate them to a central management server ? What benefits I may loose by not doing so.

Thanks for your time.

Re: Converting a Check Point 1400 security appliance from Local to Central Management

PhoneBoy — Tue, 04 Aug 2020 04:20:35 GMT

Yes, you will have to recreate the policy in the central management.
Let me turn the question around: what is your motivation for moving to central management in the first place?

Re: Converting a Check Point 1400 security appliance from Local to Central Management

gp_singh67 — Tue, 04 Aug 2020 17:13:07 GMT

One of the reason is better log monitoring and management of appliances. At present I have to replicate policies in both the firewalls manually. Though I don't have experience but I feel management server will make job easier.

Re: Converting a Check Point 1400 security appliance from Local to Central Management

PhoneBoy — Thu, 06 Aug 2020 01:33:20 GMT

It should as you can push the same policy to both gateway members and leverage SmartEvent.
Some features (don't have a list offhand) are only available when centrally managed.

Re: Converting a Check Point 1400 security appliance from Local to Central Management

gp_singh67 — Sun, 14 Mar 2021 05:52:59 GMT

Dear Sir,

I have two 1490 appliances working in HA Mode. What should be the sequence of operations for shifting them from local to central management ? Any downtime will be required for this process of shifting them from local to central management. I have done management server R80.40 and connected it to Smart Console.

Re: Converting a Check Point 1400 security appliance from Local to Central Management

gp_singh67 — Mon, 29 Mar 2021 05:57:30 GMT

Based on your advice I purchased CPSM-NGSM5 with three years licence. The migration work from Local to Central was planned to be done by our IT team. We installed CMS on VMWare platform and moved one 1490 SMB which was working on production mode in HA Cluster from local to central, but Logs are not being pushed from FW to CMS. I also created SR but checkpoint TAC saying they provide services only for production systems and not for Lab setup. Any advice ? While purchasing CMS I didn't foresee any such difficulties and thought It would be easy to migrate. -:(

Re: Converting a Check Point 1400 security appliance from Local to Central Management

G_W_Albrecht — Mon, 29 Mar 2021 08:20:46 GMT

Using SMBs as HA Cluster, you only define the policy on the active member ! The HA node will sync from the active member the changed policy. Central Management lifts some limitations of the 14x0 locally managed appliances - more cores, a more granular, layered rulebase, and provides added features using SmartDashboard.