{"id":1371,"date":"2012-06-08T15:39:08","date_gmt":"2012-06-08T08:39:08","guid":{"rendered":"http:\/\/www.jaringankita.com\/blog\/?p=1371"},"modified":"2013-07-18T15:06:49","modified_gmt":"2013-07-18T08:06:49","slug":"how-to-migrate-a-single-gateway-check-point-to-distributed-deployment","status":"publish","type":"post","link":"https:\/\/www.jaringankita.com\/blog\/how-to-migrate-a-single-gateway-check-point-to-distributed-deployment","title":{"rendered":"How to Migrate A Single Gateway Check Point to Distributed Deployment"},"content":{"rendered":"

This guide is made for those who wants to migrate a single gateway check point to distributed deployment. In this is\u00a0 environment setup I will use:<\/p>\n

<\/p>\n

    \n
  1. One Existing Check Point Security Gateway\u00a0 UTM-1 with IP address 192.168.1.1\/24 (standalone deployment)<\/strong><\/li>\n
  2. One New Smartcenter appliance (I use Smart-1 appliance) with IP address 192.168.1.3\/24<\/strong><\/li>\n<\/ol>\n

     <\/p>\n

    With those devices above, I want to move the configuration from standalone at UTM-1 with the IP address 192.168.1.1 to distributed deployment. Here are the simplest steps I have configured:<\/p>\n

      \n
    1. Detach all licenses for the existing standalone UTM-1\u00a0 machine<\/li>\n
    2. \u00a0Run the upgrade_export utility on the existing standalone UTM-1\u00a0 machine<\/li>\n
    3. \u00a0Install or run the SmartCenter product.\u00a0 I have the Smart-1 appliance, so in this scenario I don’ t have to install the software anymore. Just activate the SmartCenter product.<\/li>\n
    4. \u00a0Apply the same software version and HFA on both SmartCenter server and the security gateway.<\/li>\n
    5. \u00a0Run the upgrade_import utility on the new SmartCenter server or appliance.<\/li>\n
    6. \u00a0Modify the host name and the IP address of single gateway network object in the SmartDashboard<\/li>\n
    7. \u00a0Uncheck unnecessary Check Point products for the single gateway network object in the SmartDashboard<\/li>\n
    8. If the configuration on the existing Security Gateway (UTM-1) still exists then uninstall it (scratch it).<\/li>\n
    9. Attach the fresh installation existing Security Gateway to the new SmartCenter server.<\/li>\n
    10. Establish the SIC between the new SmartCenter server and the existing Security Gateway.<\/li>\n
    11. Make any necessary adjustments for the network objects, rule base, network address translation rules, desktop security rules etc.<\/li>\n
    12. Install new licenses for the new SmartCenter Server<\/li>\n
    13. \u00a0Install the policy<\/li>\n<\/ol>\n

       <\/p>\n

      Those are the simplest steps from me via my experience. Don’t hesitate to drop some comments if you have any questions regarding these guide.<\/p>\n

       <\/p>\n","protected":false},"excerpt":{"rendered":"

      This guide is made for those who wants to migrate a single gateway check point to distributed deployment. In this is\u00a0 environment setup I will use:<\/p>\n","protected":false},"author":6,"featured_media":535,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[600,765],"tags":[833,835,836,834],"class_list":["post-1371","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-checkpoint-2","category-knowledge-base","tag-check-point","tag-distributed","tag-featured","tag-standalone"],"_links":{"self":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/1371","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/comments?post=1371"}],"version-history":[{"count":19,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/1371\/revisions"}],"predecessor-version":[{"id":1373,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/1371\/revisions\/1373"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/media\/535"}],"wp:attachment":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/media?parent=1371"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/categories?post=1371"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/tags?post=1371"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}