R81.10 Migration

[Simon_Macpherso]

Hello all,

We plan to migrate the database from an existing R81.10 SMS to a new R81.10 SMS on new hardware. Currently management is R80.40 but we will be upgrading to R81.10 prior to the migration. 

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Installation_and_Upgrade_Gui...

In terms of the ICA, can anyone verify the post-migration requirements.

Below is a start of requirements

• SIC - re-establish SIC to all gateways
• VPN -  generate new certificates for IPSEC VPNs and upload policy to all gateways
• Users - generate new certificates for users managed on the internal database

Are the any other additional considerations?

Regards,

Simon

[Norbert_Bohusch]

What you mean by migration?

Manual transfer or using migration tools?

If you use the migration tools you don't have to change anything. The whole CA with all certificates is part of the migration!

[Simon_Macpherso]

Using migration tools. 

We are also changing the management IP from an internal to an external IP - will SIC be impacted in this scenario?

[Tal_Paz-Fridman]

SIC should not be impacted as it is based on the object name not the IP.

If there is connectivity between the new machine and the other Check Point machines, like Security Gateways, it will work.

However you must make sure beforehand that Security Gateways will accept connections from the new IP address.

[Christian_Koehl]

Please take a note on your licenses. When you change the IP of your Management station, new licenses are needed.