Migrate Standalone 5600 to HA Cluster of 5600s

[Jonathan_Langle]

I am looking for some documentation on this procedure. We currently have a 5600 on R80.10 configured as a stand alone appliance. We are planning to buy another 5600 to turn this into an HA Cluster. Is there some documentation to follow with the procedure or guidance?

Thanks.

[AndréTinoco]

Hello Jonathan,

You want to migrate Standalone to FullHA or want to use the 5600 just as FW HA Cluster and have a separate Management Server (Distributed environment)?

Regards,

André Tinoco

[PhoneBoy]

It depends on what your end state is, specifically if you will have a third appliance (or VM) for management.
Getting to a Full HA config (where management is on both cluster members) is discussed in this thread in some detail: https://community.checkpoint.com/t5/Enterprise-Appliances-and-Gaia/Standalone-to-Full-HA-Member-VLAN...

However, I do not recommend the Full HA approach.
A separate management appliance/VM will provide a better overall experience.
The process for Migrating from Standalone to Distributed in R80.x is described here: https://community.checkpoint.com/t5/Policy-Management/Migrating-policies-from-standalone-gateway-to-...

[AndréTinoco]

I agree. Maybe you can play "Game of Licenses" and get a way of getting the new 5600 without MNG HA, and use the MNG License you have right now on a separate management appliance/VM.
The quality of life would increase significantly with a distributed solution.