Gaia R81.10: Moving policies/objects from a Quantum 6200 cluster to a 3600 gateway

[pizzaprophet]

I have a Quantum 6200 ClusterXL consisting of two 6200 gateways. I want to migrate the configuration (policies, objects) over to a 3600 appliance.

I was hoping it'd be as easy as taking a backup of the primary 6200 unit and restoring that backup on the 3600. I am able to restore the backup, but in SmartConsole, I am unable to delete the cluster and replace it with a 3600.

What's the recommended procedure here?

[G_W_Albrecht]

Where is the SMS ? You only talk about the cluster, not the management...

[pizzaprophet]

Sorry, the SMS is on the primary cluster unit.

[G_W_Albrecht]

Should rather be active on the standby unit ! Open SR# with TAC - this is the most feared configuration that i suggest to always avoid ...

[AkosBakos]

Hi @pizzaprophet 

We are talking about Full-HA setup?

If yes:

Here is an SK "How to migrate Full HA environment to Distributed environment"

https://support.checkpoint.com/results/sk/sk44201

I suggest you to create a distributed setup. This is a good point to do this 🙂

And @G_W_Albrecht  are right, avoid of this setup.

Akos

[pizzaprophet]

ok thanks. Yes, it's a Full HA setup. Unfortunately I don't currently have the option to run the SMS anywhere else than on the appliances

that guide says "Migration of Full HA environment to Distributed environment is not supported in R80.x"

@G_W_Albrecht  @AkosBakos 

[G_W_Albrecht]

The guide is correct, but also see https://community.checkpoint.com/t5/General-Topics/Migrate-R80-40-Full-HA-to-distributed-Management/... - that was one of our partners that succeeded inb doing that. Might also give you an insight on how complicated this is. Ask CP TAC - this is the best option...

[PhoneBoy]

This will provide an export/import option that, with a small amount of work, should help in the migration process: https://community.checkpoint.com/t5/API-CLI-Discussion/Python-tool-for-exporting-importing-a-policy-...