Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
RCordova
Participant

How to replace Checkpoint firewall (Hardware RMA) R80

We have an appliance running R80 that needs to be replaced. Is there a step by step document on how to this which will preserver all of it's settings and hotfixes?

 

Thanks

0 Kudos
5 Replies
PhoneBoy
Admin
Admin

What appliance and what precise version of code?
There are several R80 versions. 
Also, you may want to leverage CDT for this, since it will automate it to an extent: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

0 Kudos
the_rock
Champion
Champion

Your best bet is to do backup/snapshot, as that would work, as long as exact same model of appliance, which in your case would be.

0 Kudos
RCordova
Participant

Unfortunately the device is at a remote location and we do not have access to a thumb drive for the snapshot so we're going to build the new box with the same OS/patches. Then do the following:

- copy/paste the 'show configuration' from old box to the new box

- shut down old box and move cables to new

- establish SIC

- push policy

 

Does that sound correct? How will the licenses get moved over?

 

Thanks

the_rock
Champion
Champion

That sounds logical, yes. As far as licenses, make sure they are tied to same IP address and if not, then you may need to update them in your user center. If you get stuck, Im sure Account services could assist you with that part.

Bob_Zimmerman
Leader
Leader

If you're using an appliance, the license shouldn't get moved over. At a technical level, it will work, but at a license agreement level, the license is only valid for the exact hardware. The replacement box comes with a replacement license which you should use. I think the faulty box may need to be returned before the replacement device is added to your User Center account.

Using the replacement box's license will involve either activating it from inside the device's web UI (I don't know of a command-line way to do this) or generating it as either a local or central license in your User Center account, then applying it with the directions provided when you generate the license.

0 Kudos