Moving SmartCenter from a Cluster to Standalone Firewall

[pop_alex]

Hi there,

Is it possible to move a SmartCenter server from behind the Cluster into (behind) a standalone firewall server? I have a firewall cluster which contains two cluster member and the SmartCenter is located behind this cluster. Recently, I had so-called 'break' the cluster which I removed one of the cluster member to become a standalone firewall in a new network. I have only one SmartCenter and I do not have a spare machine as a SmartCenter. What I would like to know if it is possible to move the SmartCenter from behind the firewall cluster into (behind) a standalone firewall (formerly a member cluster) in a new network, while still able to manage cluster and the standalone firewall?

I knew not many people do this but I wish if someone out there can give me an enlightenment about this.

[chillyjim]

A single SmartCenter can manage serveral VPN-1 gateways.

That said a SmartCenter is licensed by the number of gateways it manages.

To change the license to a new IP see SK#sk18288

This is what I found on changing the IP address itself...
--------
After you change the IP on the OS, just connect through SmartDashboard to your SmartCenter, change the IP on the object of the SmartCenterServer to the correct one, go on the GUI to Policy-> Install Database (install on all SmartCenterServers). Go to SmartUpdate, add correct license to the SmartCenterServer, than push policy to all the Gateways.
--------


I seem to remember having to do a SIC reset on all the gateways as well.

[Peter]

I think it will be simplier to add firewall module software to your SmartCenter machine. You need just install software component, check 'VPN-1 module' in your SmartCenter Server's object and change destination module of your policy. If you don't want to use this server in the future you can export your configuration and reinstall completely you second server (FW module actually).