 Re: Breaking the firewall cluster
Always ask Checkpoint partner for 2-3 evaluation licenses before migration. Each parten can generate 30-days trial licecses in a single click.
Use trial licenses while you ae doing migrations. Stabilize you IP addreses and configuration an move/regenerate you real usercenter licenses.
It is looks like you want to move from RainWall dual-IPS sollution to SPLAT. If you have nyw hardware for enforcement point install SPLAT, configure IP addreses on the interfaces, initialize SIC, add new FW object to the SmartSenter (is IP addreses of the interfaces do not conflict with exising IPs). Istall existing rylebase on the new enforcement point. Reconfigure routes on surrounded routers (to point to a new FW, but not to old Cluster virtual IP)
Disconect old cluster. Wayt for a week, make sure ewerything is OK. Delete old Cluster and all assotiated objects. |