how to merge 2 R77.30 policies to a new R80.10 CMA

[CSPIT_Security]

how to merge 2 R77.30 policies to a new R80.10 CMA

The challenge is to Keep (merge) :

• Interfaces
• Rules
• Objects

From 2 clusters into 1

thanks,

Ottavio

[Dor_Marcovitch]

my recommendation is to do everything on a temp vm in r77.30 with the cp_merge util and importing the object and dealing with the conflicts the old way.

then copy the rules from one package to the other one so you will have both policies as one merged policy.

then export it with the SPECIAL migrate export tool of R80.10 for pre-R80.10 managment server, and import it to the CMA.

[Maarten_Sjouw]

Great idea, I would do it the same way.

Small remark, you can just copy the second policy into its separate policy, within 1 CMA/SMS you can have multiple policies, with their own install targets, which is what I would go for in this case.

[CSPIT_Security]

the thing is: the 2 R77.30 clusters are already in a multi domain R80.10

therefore their management CMAs are already R80.10 and I'm not sure that cp_merge is still working

Using cp_merge utility 

The cp_merge utility is not supported on Multi-Domain Management servers. This would also extend to the CMAs / Domain Management Servers contained within them.

[Dor_Marcovitch]

the python api tool on the community and play arround with it's values... but double check it's result.