MDS to SMS Migration?

[Raj_Khatri]

We are down to a single domain (CMA/CLM) and wondering if it's possible to migrate from an MDS to SMS?  We have a dedicated management server and a dedicated log server, both on R80.10.  MDS is running on a Smart1 appliance and MLM is running on an open-server.

[Maarten_Sjouw]

In the last couple of months this question has popped up a couple of times already.

Simple answer, it is not simple but there are 2:

• get professional services to do it
• build a SMS as a in between step and set it up as a secondary server to the CMA. Promote it to primary and remove the primary from the config, now export the SMS and import to the eventual final setup SMS.

[Norbert_Bohusch]

I know this was possible in R77.x but isn't HA with SMS for a DMS not possible in R80.x?

[Maarten_Sjouw]

You might be right here, have not been messing with this type of setup for a long time, I do indeed know it works with R77 but for R80, never tried nor needed it.

But as Lari already pointed out, my first answer is the only supported way.

[Chris_Atkinson]

Possible again as of R81.

High Availability for Domain Management Server with the Security Management Server. A Security Management Server can operate as a standby or an active Security Management in a Management High Availability setup.

Source: sk166715

[Lari_Luoma]

Official answer: Not supported unless Check Point Professional Services is involved.

[genisis__]

Has this position changed since R81.x? 

[G_W_Albrecht]

Should be possible starting in R80.20 with R80.20 Jumbo Hotfix Accumulator Take 117 and higher, see Migrating from Domain Management Server to Security Management Server in sk156072: Domain Migration in R80.x

[genisis__]

thanks.

[genisis__]

I've given this a go but the import fails, the export seemed to be fine and a html file was produced indicating this, the import failed but did not produce a html file telling me why.