- Products
- Learn
- Local User Groups
- Partners
- More
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
Join our TechTalk: Malware 2021 to Present Day
Building a Preventative Cyber Program
Be a CloudMate!
Check out our cloud security exclusive space!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hello.
We have a productive Firewall Manager with R77.30 and manage 8 FW Cluster.
We would like to migrate one cluster after another cluster to our new R80 Firewall Manager.
- Is it possible to export (R77.30) / import (R80) only the Network Objects and Services
- Is it possible to export (R77.30) / import (R80) individual Policies.
Thank you in advance for any advice
Best regards
Carlos
Typically you'd use the cp_merge tool to do this, but cp_merge does not appear to be supported in R80 from my experience. Just bringing in the objects/policies during an upgrade is sometimes desirable after many many past upgrades on the same SMS, especially when you'd like to retain the default global settings for the target version and avoid bringing any possible old cruft forward.
I'd guess you could do a migrate export on your current SMS using the R80 migration tools, import the config into an intermediate Virtual Machine running R80, extract just the objects/policies from the R80 VM's mgmt_cli in command/text format, then import those commands into the target SMS's config via the mgmt_cli. I don't think there is any kind of existing tool to do this, but something like this sure would be handy...
--
My book "Max Power: Check Point Firewall Performance Optimization"
now available via http://maxpowerfirewalls.com.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY