OK that worked, some broad brush strokes on how we did it
Took a snapshot in Gaia
Shut down the VM gracefully halt -p
Renamed the VM to MGT_Server_bak
Disconnected the virtual interface (just in case someone powers it back up)
Veeam instant restore (took us about 1 hour 30mins)
Migrated to production
Checked VM network adapter
In the correct network/Vlan
Check “Connect at power on” selected
Powered up
Checked clock NTP updated (sk92602)
Nervously watched Top on the CLI till the Java processes settled
Am I seeing logs? (I have to say I have a separate events/log server)
Pushed policy to a less important Gateway (if I can find one).
Add the rules back in that where added in the 2 hours that it took me to get permission to call a change freeze.