- Products
- Learn
- Local User Groups
- Partners
- More
This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
- Products
- Learn
- Local User Groups
- Upcoming Events
- Americas
- EMEA
- Czech Republic and Slovakia
- Denmark
- Netherlands
- Germany
- Sweden
- United Kingdom and Ireland
- France
- Spain
- Norway
- Ukraine
- Baltics and Finland
- Greece
- Portugal
- Austria
- Kazakhstan and CIS
- Switzerland
- Romania
- Turkey
- Belarus
- Belgium & Luxembourg
- Russia
- Poland
- Georgia
- DACH - Germany, Austria and Switzerland
- Iberia
- Africa
- Adriatics Region
- Eastern Africa
- Israel
- Nordics
- Middle East and Africa
- Balkans
- Italy
- Bulgaria
- Cyprus
- APAC
- Partners
- More
- ABOUT CHECKMATES & FAQ
- Sign In
- Leaderboard
- Events
Scaling Check Point Automation with Arodonata
7 October @ 5pm CET / 11am EDT
What's New in Check Point SASE
The State of Ransomware Q2 2026:
This Quarter's Trends, and Their Impact on Your Defenses
AI Security Masters
Implementing the AI Security Trifecta
CheckMates Go:
Half is Not Enough
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- CheckMates
- :
- Products
- :
- Hybrid Mesh
- :
- Firewall & Security Management
- :
- Move Policy Manager from physical appliance to VM
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
This widget could not be displayed.
1 Solution
Accepted Solutions
Morning,
I will need some support to move my Policy Manager actually under a physical Appliance to a VM.
My trouble is :
For the moment my physical Appliances are used for Policy manager/log/endpoint server (HA), I would to keep under those Appliances LOG and Endpoint Server and keep the actual IP.
and move only Policy manager Role under a new VM with new IP.
My Understanding is :
Install new policy manager Under my vm
export/import database under new vm
link all the Gateways to the new Policy manager ip
probably need to change all licences as they have a new ip for the PM.
But
How can is say to the gateways that the log server is Under a different IP.
and most important part should I rebuild completly my pysical Appliances (log/enpoint)or can I just remove PM role?
Attached a drawing to explain probably better what I would like to do.
Many thanks for your support.
Ben.
Jump to solution
Jump to solution
Move Policy Manager from physical appliance to VM
Move Policy Manager from physical appliance to VM
Morning,
I will need some support to move my Policy Manager actually under a physical Appliance to a VM.
My trouble is :
For the moment my physical Appliances are used for Policy manager/log/endpoint server (HA), I would to keep under those Appliances LOG and Endpoint Server and keep the actual IP.
and move only Policy manager Role under a new VM with new IP.
My Understanding is :
Install new policy manager Under my vm
export/import database under new vm
link all the Gateways to the new Policy manager ip
probably need to change all licences as they have a new ip for the PM.
But
How can is say to the gateways that the log server is Under a different IP.
and most important part should I rebuild completly my pysical Appliances (log/enpoint)or can I just remove PM role?
Attached a drawing to explain probably better what I would like to do.
Many thanks for your support.
Ben.
Morning,
I will need some support to move my Policy Manager actually under a physical Appliance to a VM.
My trouble is :
For the moment my physical Appliances are used for Policy manager/log/endpoint server (HA), I would to keep under those Appliances LOG and Endpoint Server and keep the actual IP.
and move only Policy manager Role under a new VM with new IP.
My Understanding is :
Install new policy manager Under my vm
export/import database under new vm
link all the Gateways to the new Policy manager ip
probably need to change all licences as they have a new ip for the PM.
But
How can is say to the gateways that the log server is Under a different IP.
and most important part should I rebuild completly my pysical Appliances (log/enpoint)or can I just remove PM role?
Attached a drawing to explain probably better what I would like to do.
Many thanks for your support.
Ben.
2 Replies
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
After export/import, make the necessary configuration changes to support your new management server.
That includes relicensing.
If the current management server is a Check Point Appliance, you need to acquire Open Server management licenses as licenses for Check Point appliances are not transferable to VMs.
When you push policy to the gateways from the new management server, the gateways should log where they are configured to log per your new management server.
That includes relicensing.
If the current management server is a Check Point Appliance, you need to acquire Open Server management licenses as licenses for Check Point appliances are not transferable to VMs.
When you push policy to the gateways from the new management server, the gateways should log where they are configured to log per your new management server.
After export/import, make the necessary configuration changes to support your new management server.
That includes relicensing.
If the current management server is a Check Point Appliance, you need to acquire Open Server management licenses as licenses for Check Point appliances are not transferable to VMs.
When you push policy to the gateways from the new management server, the gateways should log where they are configured to log per your new management server.
That includes relicensing.
If the current management server is a Check Point Appliance, you need to acquire Open Server management licenses as licenses for Check Point appliances are not transferable to VMs.
When you push policy to the gateways from the new management server, the gateways should log where they are configured to log per your new management server.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @GuilletB,
Old SMS R80.10 or R80.30?
Migration from old to new server (with update to R80.30) and use the same IP on the new SMS.
1) Download R80.30 migration tools.
2) Copy the tool via winscp to your old server.
3) Extract the migration tool to a folder:
# tar xzvf migration...
4) Start migrate export.
# ./migrate export /var/log/migrate_file
New SMS R80.30
5) Copy migrate_file.tgz via winscp to your new R80.30 server to folder /var/log/migrate_file.tgz
6) Now change to folder:
# cd $FWDIR/bin/upgrade_tools
7) Now start migrate import:
# ./migrate import /var/log/migrate_file.tgz
➜ CCSM Elite, CCME, CCTE, CCVS ➜ www.checkpoint.tips
Hi @GuilletB,
Old SMS R80.10 or R80.30?
Migration from old to new server (with update to R80.30) and use the same IP on the new SMS.
1) Download R80.30 migration tools.
2) Copy the tool via winscp to your old server.
3) Extract the migration tool to a folder:
# tar xzvf migration...
4) Start migrate export.
# ./migrate export /var/log/migrate_file
New SMS R80.30
5) Copy migrate_file.tgz via winscp to your new R80.30 server to folder /var/log/migrate_file.tgz
6) Now change to folder:
# cd $FWDIR/bin/upgrade_tools
7) Now start migrate import:
# ./migrate import /var/log/migrate_file.tgz
➜ CCSM Elite, CCME, CCTE, CCVS ➜ www.checkpoint.tips
