Converting Cisco ASA to Checkpoint in Smart-1 cloud

[Greg_P]

I am new to Checkpoint and we have been working to convert our Cisco ASA's to Checkpoint 1570 and 3600 series Gateways.

The challenge we face is being able to convert the ASA configuration into Smart1 cloud. 

We are converting ASA5505 to Quantum 1570 and ASA5512/45 to Quantum 3600

Any suggestions?

[the_rock]

I have a good suggestion for you. Here is what I did couple times and worked fine...take show runs from Cisco, save as text file, then build mgmt server in the lab with same version that cloud one will have. Use smart move tool to convert the Cisco config (there is video and sk about it on support site -> https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...)

Once that's done, you go to cloud instance and download migrate tool from settings tab and that's what you run on your lab mgmt server to then get the file you can import into cloud. I did it twice and worked without issues. Be free to message me privately if you need guidance, I will be happy to help you.

[Greg_P]

I will check this out thanks for the suggestion.

[the_rock]

Sure...keep us posted.

[Ofir_Shikolski]

Please view https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

You will need to use SmartConnector :

# python3 smartconnector.py  -m <> -c <> -k <>

From Smart-1 you can find the -m , -c and -k

https://portal.checkpoint.com/dashboard/smart-1cloud#/config/general

Management API key = -k

ofirs-xxx.maas.checkpoint.com = -m

4111926a-297c-41c5-8ed2-cf3ff9bxxxxx/web_api = -c

https://ofirs-xxx.maas.checkpoint.com/4111926a-297c-41c5-8ed2-cf3ff9bxxxxx/web_api/<api_command>

[Greg_P]

Thanks for the response, I will look at these options.