How to split Endpoint database from SMS

[hugothebas]

Hello!

I have a situation where on the primary SMS, that manages all the gateways, customer have also enabled Endpoint Management, now they want to split functions, I mean, they want the SMS just for managing the gateways and a dedicated Endpoint Management Server to manage the endpoints and policies.

I could not find any documentation that describes this scenario.

If I just take a migrate export from SMS and import on the new server, I'll have all the unused objects and policies imported too, that's what I would like to avoid.

Is there a way that I can split the endpoints database from the SMS and import on a new server?

Thanks.

[the_rock]

Super valid question...maybe TAC would have process for it, but personally, Im not aware of any method to "split" the database.

Andy

[Amir_Senn]

Hi,

Not an EP expert, but have one question - do you want to move it to a completely different environment or just another machine?

I wonder if adding another Check Point Host to your environment and defining it as EP server might do the trick.

[hugothebas]

Hello, Amir, the perfect solution would be as you said, on a new machine attached to the same environment, but the documentation says that for a dedicated EPM Server, I need to follow the installation procedure for a "Primary SMS", if that's true, I don't see how I can add another primary SMS to the actual environment.

Thanks!

[PhoneBoy]

Suggest you consult with TAC for the correct procedure here.
As I recall, it depends on the client blades used.

[hugothebas]

Yes, I'm afraid I'll need to get in touch with TAC. I was avoiding it, because sometimes involving TAC requires much time. CheckMates would have been a faster solution.

Thanks anyway.

[the_rock]

I totally get what @Amir_Senn mentioned. Now, here is the issue you may encounter, in my humble opinion...so in your current situation, I bet option to uncheck endpoint is probably greyed out and not sure there is an easy way to do it. If there was, then you could indeed create another CP host and check endpoint option on that host.

Andy