Use Policy for a 12400 with a new SMB Cluster

[kamaladmire1]

HI quick question, 

I have 12400 appliances installed as single gateway with 1 VPN and about 300 access rules managed by Mgmt server, looking to migrate that to 1800 SMB Cluster,  I am new to SMB appliances and not sure if this can be achieved and manage with Management server which managining other gateways, 

any respinse much appreciated. 

[Chris_Atkinson]

Is this an API or general migration query?

Those are two very different class of devices, how much traffic does the 12400 handle?

The same management can likely be used depending on the version?

[G_W_Albrecht]

12400 (from Aug 2011) went out of support this June and has last version R80.40. Successor product is the 16200.

[PhoneBoy]

Can you take the policy crafted for your 12400 and use it on an SMB appliance managed with the same management?
There are a couple of exceptions (mostly around legacy features), but generally yes.

[kamaladmire1]

thanks all, another question on this as I am going from single gateway to cluster, I also want to configure Dual ISP link, ISP 1 (VMB) I have spare Public IP's that I can use with VIP (3 IP's) with second ISP s Link (talk talk) I have just 1 Public IP with Default Gateway. can this be achived dual ISP redunduncy, I dont know how 1 Public IP from ISP-2 link can be used on cluster?

another question about S2S VPN, should that be just a matter of setting up link selection??

Thanks 

[Chris_Atkinson]

I would suggest creating a separate thread as this discussion has now deviated considerably from the original thread topic.

Whilst ClusterXL on the 12400 supports the VIP and interface IPs being on different subnets this was a limitation of Spark appliances that was only recently resolved with R81.10.XX per:

Source: sk178604: Check Point R81.10.X for 1500, 1600, and 1800 appliance Known Limitations and Resolved Iss...

[PhoneBoy]

Or I can just fork these comments from the original thread and create a new one 🙂

[S49inchgoldmine]

Hello Kaladmire1,

I saw this post very late so I dont know if you achieved your goal finally.

Anyway according to sk168880 if your management server has r81 or higher (r80.30 and r80.40 too with some conditions) then its possible manage 1600/1800 gateways.

[PhoneBoy]

That's running R80.20.x releases.
For R81.10.x releases, your management needs to be running R81.10 with at least JHF Take 66 installed.