We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways

[CHIN_FW]

We want to upgrade our management station from R81.20 to R82 and followed by the upgrade of Gateways. The gateway devices are 3000 appliances.

My approach was can I build a parallel environment with R82 version management station and move all the gateways under R82 ? instead of upgrading the existing management

will this work ?

[G_W_Albrecht · Accepted solution]

Yes - migrate server export from old SMS can be imported into a new R82 SMS (with the sameIP and name !), replicating the old one. GWs will have SIC to SMS and can be upgraded from Dashboard easily.

[the_rock · Accepted solution]

Yes, 100% will work. Just follow below, as @G_W_Albrecht said and best part is, if IP address is the same as current mgmt, you wont even need to reset SIC for anything.

https://support.checkpoint.com/results/sk/sk135172

Andy

[CHIN_FW]

Thanks for the update.

So If I understand it correctly, will build a new parallel environment of MDS keep the IP address details same as the old MDS and then unplug the old one from the network an plug in the new one, the Gateways should come back online on the new MDS ?

The SIC will continue to work ?

[the_rock]

Yes.

[CHIN_FW]

Thanks Andy

[the_rock]

No problem, you are welcome.

[Magnus-Holmberg]

MDS get more tricky but it will work.

Gateways are connected to the CMA and not the MDS per say.
SIC can be reset without gateway restart if needed: https://support.checkpoint.com/results/sk/sk86521

If using VM for the MDS just add an additional NIC that you can connect to your jumpgate.
So its easier for you to work with the box in parallel 🙂

If you planning to change CMA names etc now is the time to do it as check point still dont allow CMA name change in an easy way.