Renewal of VSX boxes

[Matlu]

Hello,

I have a 2 Cluster VSX environment, model Check Point 23800, which will be renewed with new 28000 boxes.
I would like to know the correct process for changing the boxes.

Both clusters have several VSs that work in VSLS mode, and the two clusters are managed by an MDS.

Is there a guide, or could you give me some technical advice on how to carry out the box renewal work?

Thank you for your comments.

[Chris_Atkinson]

Is the concern a parallel build or other elements, what are your requirements?

Some existing threads may be helpful:

https://community.checkpoint.com/t5/Security-Gateways/VSX-Cluster-update-and-hardware-migration/td-p...

https://community.checkpoint.com/t5/Security-Gateways/VSX-hardware-replacment/td-p/92845

https://community.checkpoint.com/t5/Security-Gateways/VSX-cluster-Hardware-Upgrade/m-p/124579

https://community.checkpoint.com/t5/Security-Gateways/VSX-hardware-upgrade-from-5600-to-7000/m-p/212...

https://community.checkpoint.com/t5/Security-Gateways/White-Paper-VSX-Migration-Moving-one-VS-at-a-T...

https://community.checkpoint.com/t5/General-Topics/Checkpoint-VSX-Cluster-Migration/td-p/184045

https://community.checkpoint.com/t5/Management/VSX-Migration-Policy-Package-Migration/td-p/146125

[Matlu]

How can I get the configuration of the current VSX Cluster members approved for the new devices that will be put into production?

Is this worked from the MDS?

Is it from the MDS that I can ‘send’ the same configuration to the new members that will be part of the VSX Cluster?

[Chris_Atkinson]

It's a combination of sources since there are CLI configurations. VS policy obviously resides in the management.

vsxexport.sh is a helpful tool created by a valued community member (but is no longer actively developed):

https://community.checkpoint.com/t5/Scripts/vsxexport-sh-Export-VSX-settings-and-configuration-files...

[_Val_]

vsx_util is the answer, I believe. As @Chris_Atkinson mentioned, you want to rebuild the new cluster in the lab and then recable. vsx_util allows you to pull the existing cluster config and then push it to the new cluster. Mind any CLI modifications, if any, that you made on the GW side. Those won't be covered with vsx_util. 

However, all the topologies and policies will can be moved over.