Migrate Policy Package from Management to Standalone Firewall

[tropicanaslim]

Hi Checkmates,

As per the subject, is there any possibility of exporting the policy package "Branch-Policy" from Open Server Management to a Standalone (3800) Firewall?

Context :

• My cust has several branches; some branches outside the region will be managed locally, not via Management.
• We plan to scratch the FW and import the policy from management.

Is it a good process? Does anyone have any previous experience with it and how to solve it?

I know this is not the best practice, but sometimes we can't follow the best practice because business is business 🙂 

Thanks!

[Tal_Paz-Fridman · Accepted solution]

Please look at the following options:

Script to Export and Import Policy Package:

https://github.com/CheckPointSW/ExportImportPolicyPackage

Option to convert Management to Standalone (if possible in your case. Perhaps first Export/Import the machine as a whole and then make the conversion):

sk118033 https://support.checkpoint.com/results/sk/sk118033

[G_W_Albrecht]

A StandAlone Firewall is not best practice as you do not have HA clustering available and a defective on GW will also mean a damaged SMS. I would suggest to evaluate Smart-1 Cloud Management as an alternative.