Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Simon_Macpherso
Collaborator

R81.10 Migration

Hello all,

We plan to migrate the database from an existing R81.10 SMS to a new R81.10 SMS on new hardware. Currently management is R80.40 but we will be upgrading to R81.10 prior to the migration. 

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Installation_and_Upgrade_Gui...

In terms of the ICA, can anyone verify the post-migration requirements.

Below is a start of requirements

  • SIC - re-establish SIC to all gateways
  • VPN -  generate new certificates for IPSEC VPNs and upload policy to all gateways
  • Users - generate new certificates for users managed on the internal database

Are the any other additional considerations?

Regards,

Simon

0 Kudos
4 Replies
Norbert_Bohusch
Advisor

What you mean by migration?

Manual transfer or using migration tools?

If you use the migration tools you don't have to change anything. The whole CA with all certificates is part of the migration!

Simon_Macpherso
Collaborator

Using migration tools. 

We are also changing the management IP from an internal to an external IP - will SIC be impacted in this scenario?

0 Kudos
Tal_Paz-Fridman
Employee
Employee

SIC should not be impacted as it is based on the object name not the IP.

If there is connectivity between the new machine and the other Check Point machines, like Security Gateways, it will work.

However you must make sure beforehand that Security Gateways will accept connections from the new IP address.

 

Christian_Koehl
Contributor

Please take a note on your licenses. When you change the IP of your Management station, new licenses are needed.