Quote:
Originally Posted by avilT  I have checkpoint NGX on Nokia IP330 with smart center server on Windows, centralized license.
Due to EOL of IP330 I need to replace IP330 with IP390 with minimum downtime. I can use different management address on the new IP390 firewall as its not critical but other interface IP's should remain same as the old IP330 device. So can I setup this new IP390 device while IP330 online (but other interfaces will be disconnected from the network), install the policy, later quickly change to this new Ip390 device by moving the network cables from old device to new IP390. Only the management IP will be different on this new Nokia IP390 device.
Thanks |
I've been going though this at several branch offices. I've been building the new IP390 like the IP330 (ip addresses, etc). CPconfig on the 390 and create sic. I let the 390 boot. After it is booted, in smart console I reset sic. I move the network cables to the new device. In smart console create sic, get interfaces, push policy. Our down time has been less that 3 minutes, but that would vary on on the size of your policy.