How to migrate a policy package between Security Management servers

[RemoteUser]

Hi all,

i have one question regarding this sk:
https://support.checkpoint.com/results/sk/sk180923 

It's possible to migrate a policy package from real environment to LAB even if the management it's in smart1cloud?
Cause the point c

Download cp_mgmt_api_python_sdk from Check Point's GitHub.

This package is Check Point API Python Development Kit simplifies the use of Check Point Management APIs.

The kit contains the API library files and sample files demonstrating the library's capabilities.

1. Go to https://github.com/CheckPointSW/cp_mgmt_api_python_sdk

2. As the "pip" command is not available in GAIA, download the folder in a Zip file.

3. Extract the folder from the Zip file and upload it to the Management server.

How can i upload it to the mgmt if it's in cloud?

Thank

[the_rock]

Last time I did this and apologies if my memory is little fuzzy, but I recall doing migrate server to import all in the lab first, then using script from S1C to get correct format to re-import the right file from lab into S1C again.

Andy

[the_rock]

This is what Im referring to (attached)

Andy

[RemoteUser]

I don't think I understand correctly
Once I do the download what should I do?

(it is recommended to run the command below from within /var/log directory) I don't have access to management in ssh or anything.
How can I do that?

Thank u Andy

[the_rock]

Here is how I did it last time.

1) Followed below to export customer's config and then import in my lab:

https://support.checkpoint.com/results/sk/sk135172

2) Then, I downloaded script from S1C I showed in my screenshot

3) Ran it in the lab and when file was generated, got the file from the lab and imported in S1C

Hope that helps.

Andy

[G_W_Albrecht]

You did not export it from Smart-1 Cloud Management - i think you talk about exporting from On-Prem SMS then upload it to SMart-1 Cloud, and that is not the question here !

[RemoteUser]

That’s what I was afraid of because, in the SK mentioned by Andy, I have no way to access Management.
My question was is it possible to export Management S1C to a lab environment?

[G_W_Albrecht · Accepted solution]

No, this is not possible, as i wrote above - You could open a SR# with CP TAC to check if it is possible with their help, but i fear it is not...

Andy got it the other way round, how to export from Lab and import in Smart-1 Cloud...

[RemoteUser]

I understood thank you

[the_rock]

@G_W_Albrecht is right, you can contact TAC aboit it, since there is no regular ssh access available to customers in S1C. Sorry, when I read your post, I understood you were doing regular mgmt/lab to S1C, not the other way around. If you ask them to get you upgrade export .tgz file, then thats literally all you would need. 

Andy

[the_rock]

Ah yes, sorry, you are absolutely right, I misunderstood.

[G_W_Albrecht]

You can not - it is not possible to export from Smart-1 Cloud Management and import it in On-Prem SMS. You could open a SR# with CP TAC to check if it is possible with their help, but i fear it is not...

[PhoneBoy]

Just to clarify, you're trying to migrate a policy defined in Smart-1 Cloud to on-premise management for lab purposes?
Yes, the aforementioned script should work for this purpose as the APIs are the same.