Migrating VM to Smart-1

[CyberBreaker]

Hi, 

I would like to know how can I migrate my VM management server to a Smart-1 hardware.

It will be in the same version, I just want to make my management sever from VM to a hardware based.

Thanks

[HeikoAnkenbrand · Accepted solution]

Hi @CyberBreaker,

Proceed as follows:

1) Execute migrate export on VM

    # cd $FWDIR/bin/upgrade_tools

    # migrate export /var/log/migrate_file

2) Copy  /var/log/migrate_file.tgz via winscp to your pc

3) Copy log files from $FWDIR/log/ via winscp to your pc

4) Install the same GAIA version on the Smart-1

5) Start the first configuration wizard and set the same IP (How in vmware in your old SMS!)

6) Copy the file via winscp from the pc to the Smart-1 /var/log/migrate_file.tgz.

7) Execute migrate import on the Smart-1

    # cpstop

    # cd $FWDIR/bin/upgrade_tools

    # migrate import /var/log/migrate_file.tgz

8.) Import your logs to $FWDIR/log/ via winscp

9) Start the management server.

    # cpstart

[CyberBreaker]

Hi @HeikoAnkenbrand ,

Thanks for the feedback.

Regarding the item number 1, your are just exporting the logs right? How about the configuration database of the VM security manager?

Thanks

[HeikoAnkenbrand]

No!

# migrate export 

Exports the complete configuration of the management server. Everything you have configured in the SmartConsole (rules, nat rules, objects, VPN,...)

I just write the output to /var/log so that you don't fill the root partiton under linux.

PS:

Point 2 describes how to backup the logs.

[CyberBreaker]

Hi @HeikoAnkenbrand 

Thanks, I just asked because I noticed you are inside the Log directory --> /var/log

Thanks for the big help 😊

[Garrett_DirSec]

@CyberBreaker 

suggest you review the comparison table in the following:

Best Practices GAIA BACKUP

The use of migration tools (ie.   'migrate [import | export] <file>') is the standard for moving SmartCenter mgmt between platforms.    In addition to standard scheduled "backup" strategy, the use of migration tools for "bare metal" backup on monthly basis is always a good idea. 

[Arthur_DENIS1]

Hi Heiko,

Thanks for this sharing, really usefull.

Just wondering about log indexing: with this method instead of migrate export -l, what about indexing of log files manually copyied ?

[PhoneBoy]

You have to manually trigger a reindex: https://community.checkpoint.com/t5/Logging-and-Reporting/SmartLog-only-look-back-14-days-how-to-rei...