Checkpoint Gateway Refresh from 4600 series to 6200 series

[deepak07]

Hi everyone

Need your help in checkpoint hardware refresh, 

My current management server (CMA) is on already on R81.20 and gateway cluster is on R80.20 (checkpoint 4600 appliance) .
I want to upgrade my hardware checkpoint gateways from exiting 4600 Checkpoint cluster with a new checkpoint 6200 (R81.20)

Current CMA is on R81.20, and Cluster Gateways (Checkpoint 4600 series appliance) is on R80.20
Required CMA is on R81.20, and change cluster Gateways (Checkpoint 6200 series appliance) on R81.20

Earlier i was thinking of using snapshot backup but this backup can only restore on same hardware.

I am not getting any SK for my requirement.

Appreciate your help

[G_W_Albrecht]

See here: sk108902: Best Practices - Backup on Gaia OS

@PhoneBoy  - can we move this to Quantum Security GWs ?

[Chris_Atkinson]

Done 👍 

[deepak07]

@G_W_Albrecht @Chris_Atkinson @PhoneBoy 

Yes... as per the above SK, we can not use snapshot backup (because snapshot can be restored on same type of machine). Also can use use migrate_server export (its only running on management server).

could you please guide, how to proceed with the configuration migration from Checkpoint 4600 series (R80.20) to 6200 series appliance (81.20)

[Chris_Atkinson]

The SK linked above is clear that the appliances should run the same version for a gaia backup to work.

Parallel build may make more sense than alternatives due to the generational gap / steps.

Do you believe the config of this appliance is particularly strange or complex?  CLI config replication could be the path.

[PhoneBoy]

Most of the configuration is actually on your management server.
Which means if you configure the gateways with the same OS configuration, reset SIC on the gateway objects, and push policy, you're done.
For the OS configuration, you can backup/restore that configuration by following: https://support.checkpoint.com/results/sk/sk102234 
Note this does not account for any changes made via expert mode, most of which would be different given the significant differences between R80.20 and R81.20.