Moving Checkpoint config from existing IP710 to IP1287 cluster

Posted on 2013-06-08
Medium Priority
Last Modified: 2013-07-19
I  have an IP710 HA pair and need to migrate the config to a new IP1287 HA pair.  Is this process handled completely from the Management server?  Has anybody done this before? I don't want to screw this up.
Question by:dhuff2012
  • 2
  • 2
LVL 18

Accepted Solution

deimark earned 2000 total points
ID: 39234487
Yes, this can be done.

As long as you are moving to IPSO 6.2, there is a config migration tool that we can use to migrate teh config from one device to a new one.

The basic steps are:

1.  Option the config file from the old device, found in /config/db/initial
2.  Build new IP appliance and configure 1 interface to allow use of voyager
3.  Go to "tools > config migration" and upload the new config file.
4.  Answer all interview type questions, ie which device did this config come from and map interfaces etc
5.  Uppon completion we need to reboot the device to active the old config.

This works for items like interfaces, users, routes, OSPF etc

For more information, see the admin guides for your version of IPSO


Author Comment

ID: 39236551
Is there a cost for voyager?  Also, what do I need to consider about a migration of this type?
LVL 18

Expert Comment

ID: 39236752
voyager is the web interface for all IPSO appliances and its free bud.  ITs built in to the OS.

Main points to consider is that you have the same number of interfaces when moving from one to the other as we map original interfaces to the new system

Author Closing Comment

ID: 39340858
Sorry I accepted this so late.  Thanks for the help

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Watch the video to learn how one can deal with PST file corruption issue with an outstanding Kernel for Outlook PST Repair Tool easily. Using this tool, non-technical users can swiftly perform the repair process to restore their essential data witho…

607 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question