SMS, Backup

[Khanh134752]

Hi everybody
I want to transfer all my GW to another SMS, is there any way to keep the configuration, policies and objects intact through the new SMS?

[PhoneBoy · Accepted solution]

There are two ways to do this:

• Using migrate_server which will take your existing SMS configuration and migrate to a NEWLY installed SMS (with no configuration) on different hardware/VM. This is by far the cleanest way to go since SIC will be re-established once policy is installed from the new SMS.
• If you are importing to an existing SMS that already has configuration, you will need to use something like ExportImportPolicyPackage which will copy most of the rules/objects, but will require some manual steps, including re-establishing SIC.

[Nguyen134854]

Can this method be used in case I change the IP of SMS?

[Bob_Zimmerman]

Sure. The IP of the management doesn't matter much. It's a little easier if you make a new secondary management object with the new address, and push policy to make all of the firewalls aware of it ahead of time.

Note that the new management MUST have the same hostname as the old management. Changing a management's hostname is pretty painful since it's tied to the management's certificate authority.

[the_rock · Accepted solution]

Migrate server is what you need, just use that as Phoneboy said. Related sk is https://support.checkpoint.com/results/sk/sk135172

I would simply use example shown, works just fine, just make sure to use right versions and obviously, file name can be anything you prefer.

Andy