topic Re: replacing 1470 cluster with 1800s in Spark Firewall (SMB)

replacing 1470 cluster with 1800s

Danielcher — Wed, 09 Feb 2022 13:16:59 GMT

Hi all,

I'm preparing to replace the older 1470s cluster with an 1800 cluster. 1470 runs R77.20.

Is there a step-by-step document for how to migrate all configurations and policies?

Any recommendations or special considerations that I should note will be much appreciated.

Thanks in advance

Re: replacing 1470 cluster with 1800s

_Val_ — Wed, 09 Feb 2022 13:23:33 GMT

Locally or centrally managed?

Re: replacing 1470 cluster with 1800s

_Val_ — Wed, 09 Feb 2022 13:25:15 GMT

Also, did you try searching the community before asking? I think, it was discussed multiple times, for example: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Configuration-transfer-between-different-SMB-models/td-p/38898

Re: replacing 1470 cluster with 1800s

Danielcher — Wed, 09 Feb 2022 13:25:46 GMT

Centrally managed

Re: replacing 1470 cluster with 1800s

Chris_Atkinson — Wed, 09 Feb 2022 13:27:51 GMT

Please see sk170162 depending upon your management configuration per Val.

Re: replacing 1470 cluster with 1800s

G_W_Albrecht — Wed, 09 Feb 2022 18:32:03 GMT

Only the TP rules should need some changes, as 1500 Gateways have a unified profile for IPS, Anti-Virus, Anti-Bot and Threat Emulation. 14xx have 2, an IPS and an Anti-Virus, Anti-Bot and Threat Emulation profile.

Re: replacing 1470 cluster with 1800s

the_rock — Wed, 09 Feb 2022 18:47:36 GMT

Everyone gave you very good answers. I would definitely keep in mind show configuration command, as thats probably your best bet. I know in below link, it states backup can be restored between different appliances, if they are on same version/HFA, but thats definitely easier said than done, due to mismatch in interfaces, hardware, network, OS parameters

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108902

Re: replacing 1470 cluster with 1800s

G_W_Albrecht — Wed, 09 Feb 2022 19:55:19 GMT

This is a post about Embedded GAiA - so sk170162 applies. Embedded GAiA has a show config command instead as explained here: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Configuration-transfer-between-different-SMB-...