Move Management Server to different IP

[Johannes_Schoen]

Dear Community,

I got a question regarding sk40993:
I want to move a management-server in to another subnet and need to change the ip.

The sk describes the procedure, but I'm wondering, when a policy push will be performed.
I would assume after changing the management-server-object-ip.

What do you think? Any suggestions?

Best Regards
Johannes

[G_W_Albrecht]

There will be no automatic policy install afterwards - because after changing SMS IP, you have to follow sk103356 to make a policy install successfull ! You have to renew SIC with all GWs, that is it...

[Johannes_Schoen]

Okay, so the policy will be pushed with the new management-src ip if I understand you right? (after the SIC was reinitialized? I had concerns regarding local firewall policy, that the new src ip will be blocked by policy.

[G_W_Albrecht · Accepted solution]

SIC is renewed with the changed SMS IP - see the sk for details. This makes the policy install possible - it would not work without established SIC that refers to IP ! If your current rule set blocks this IP, establishing SIC will not work until you do a unloadlocal on the GWs...

[Johannes_Schoen]

Alright, thanks for your feedback.
We will provide the gateways with a corrsponding security policy before we start migrating.
Many thanks