Security Manager Recovery

[Peter2]

I have two 3800 appliances running as cluster now. But the security manager server is completely crashed without any backup.

I am new to Check Point systems. Please advise how can I rebuild the server and retrieve the configuration from the firewall. 

thanks.

[_Val_]

SW version?

[Peter2]

the firewalls are R80.40

[G_W_Albrecht]

If the SMS is crashed completely without a backup, the configuration is lost - you can not restore it from the compiled policy on the gateways.

[Peter2]

I only have the admin password of the gateway. After build a new SMS, how can I modify the gateway to use the new server. 

[genisis__]

I've had a similar scenario.  SMS harddrive crashed no backup.  We engaged Checkpoint Professional services to extract the policies from the gateways and the import these into the a clean build SMS.

The have the tools to do this.

[G_W_Albrecht]

Yes, that is possible - but not a cheap solution,so i prefer backups 😎.

[genisis__]

I agree - but in our case with the customer we had little choice.   I suspect it take 1 or 2hrs to do by Professional services but then charge the whole day.

[JC_S]

Professional Services actually CAN do that now

[genisis__]

I agree,

We had to get PS involved to rebuild a manager and policy using the policy from the gateways! 

[ANARINE]

Is there additional charge for this service from cp?

[genisis__]

Yes - we specifically had to engage PS, which indeed cost.

[PhoneBoy]

You may be able to piece together the configuration from various files in $FWDIR/state.
However, it will be a manual process.
Check Point Professional Services can also assist with this.

However, if you want to start over, you can build a new management server and make a new configuration.
You will have to go to each gateway and use cpconfig to perform a SIC reset.
This will allow you to establish SIC from the new management server and push a new policy to the gateways.

Note that resetting SIC generally causes an outage.