- Products
- Learn
- Local User Groups
- Partners
- More
MVP 2026: Submissions
Are Now Open!
What's New in R82.10?
Watch NowOverlap in Security Validation
Help us to understand your needs better
CheckMates Go:
Maestro Madness
Hi Everyone,
I have a scenario where we have an existing R77.30 cluster and a couple of standalone branch Gateways (r77.20) being managed by an R77.30 SMS. We've purchased an additional two gateways, but due to regulatory requirements we need these to be managed by a separate SMS. Obviously we'll go R80.10 for the new cluster and GW.
This is all simple enough, but we want to copy our existing policies and objects from the R77.30 SMS to the new R80.10 one. My plan is as follows:
1. Do advanced upgrade with DB migration to pull everything accross to the R80.10 SMS
2. Start up the R80.10 SMS in a isolated network (no access to any of the existing Gateways) and delete the existing R77.30 gateways and all references to them from the policies, VPN Communities etc.
3. Save all changes
4. Hook R80.10 back up to production network and build a new cluster with my R80.10 gateways
5. Push policy
My main priority is obviously not to impact or disrupt anything on the existing R77.30 SMS and gateways.
Appreciate any and all feedback!
To me, that sounds like a reasonable approach.
Note that by default the existing gateways should not reach out to the new management.
Obviously if you were to push policy from the new management... that would change ![]()
Thanks Dameon, I appreciate the feedback - that was my understanding also but nice to have confirmation.
did that exactly as explained except my case has MDSM not MDS
and it took me 7 days to get all up&running for my Customer.
Good stuff!
Jerry
You probably wanted to say, "not SMS".
yes indeed Valeri - MDS = SMS in my vocabulary ![]()
MDS is the old name of MDSM, hence some confusion in the comments
correct - don’t even start about inheritance of Provider-1 ... 😛
We do not avoid hard topics on CheckMates, so you should not hold anything back, my friend
I won't mate, I won't
Cheers
ps. SMS acronym came back from the grave, it's been widely used long before R77 then stopped because of the MDS/MDSM and now it's back - quite a story isn't it Valeri?
have a lovely day folks !
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 19 | |
| 16 | |
| 7 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 4 | |
| 4 |
Tue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsTue 16 Dec 2025 @ 05:00 PM (CET)
Under the Hood: CloudGuard Network Security for Oracle Cloud - Config and Autoscaling!Thu 18 Dec 2025 @ 10:00 AM (CET)
Cloud Architect Series - Building a Hybrid Mesh Security Strategy across cloudsAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY