SMP (smbmgmtservice) moving to AWS

[nmelay]

This shows up on the SMP status page, right after logging in :

Notice

Upcoming migration planned for 11/09/22 The new SMP url for login and new devices activation will change to http://eu-1.spark-management.checkpoint.com. Old SMP will be available for 1 additional month from the day of the migration. As part of the migration the gateway logs will reset. Gateways will automatically migrate to the new system, any gateway that will still show as connected to the old system will need to be reactivated with the new SMP URL.

The move was also announced on status.checkpoint.com on Sept 5th.
That's a pretty short notice period.

The old URL was not very easy to memorize.
Well, the new one is much worse.

eu-1.spark-management.checkpoint.com points to AWS hosts.

At the moment :

• the new platform uses an invalid certificate, which prevents chrome-based browsers from connecting (works fine in Firefox once you acknowledge it's broken)
• there's no http to https redirection, so the announced new URL will fail -> just replace http with https
• our own domain does not exist yet, or does not accept logins (fails with no error message)

Let's hope this goes smoothly.

[yahavb · Accepted solution]

Hi,

First of all I am happy to inform that the migration have been completed successfully!

No action was required from the users, except changing the login URL after the migration is done. All settings and devices have been seamlessly migrated to the new SMP system. If you are using "Zero Touch", do not forget to update the SMP URL. If you have still connected a new device to the old system, no worries, simply login to the Quantum Spark web UI directly or using "Reach My Device" and reactivate cloud services using the activation key from the new system.

The previous SMP will remain available for one additional month, and it has a link to the new URL. Unfortunately, we could not have kept the original URL for this migration.

Thanks for noticing the http/https mix-up in the alert on SMP Dashboard, it was fixed, even though it does redirect now.

Regarding the other items, you have tried to log in at a middle stage where the system was not ready yet. Please try again now, all issues have been resolved and the migration has been completed.

In the near future SMP will be hosted in Infinity Portal, soon you will only need to remember portal.checkpoint.com. You are more than welcome to participate in the EA of SMP in Infinity Portal planned to kick-off soon.

Feel free to contact me directly for any questions: yahavb@checkpoint.com

Thanks,

Yahav

[nmelay]

Hello Yahav,

Thanks for your answer.
I'm glad to know the operation went fine, and can confirm it was totally seamless to us!

Nice to know more integration is coming along, we'll probably participate in the EA.

I still have a few questions.
We have a few of our customer's gateways that were offline during the migration, including one which is going to come back with a new IP address.
Should the seamless migration still work for them once they're back online?
Also, one of them is our last 600 appliance, which went offline last week for some reason, and has not came back yet.
Can you confirm it should still work fine on the new platform? (even though it's obviously out of support)

Thanks,

Nicolas

[yahavb]

Any GW that existed prior to the migration should automatically connect to the new system once powered up, regardless of the new IP address. In any case the device does not connect to the new system automatically, simply reconnect using the activation key of the gateway from the new system.

There was no change on the server that will prevent it from connecting to the new system. However, it is highly recommended to update 600 appliances ASAP as it is running with an old and as you mentioned an unsupported firmware version. 

[agilberti]

Hi, I have a big problem after migration, from last friday vpn managed by quantum spark security management portal not work. there are some problem with certificate during IKE phase

[Chris_Atkinson]

Please contact TAC and they should be able to assist you in resolving this issue.

[Chris_Atkinson]

Source: https://status.checkpoint.com/