Making BKP of the policy

[txepetxa]

Hi All,

I am really new with the CheckPoint issues, and probably my question is already answered somewhere else, so first of all my apologise for it....

We have newly installed a CheckPoint firewall topology in which in the upper level (between Internet and the DMZ) there is a cluster with two nodes + 1 SmartCenter, and in the lower level (between DMZ and LAN) an standalone firewall (all in one). All is under Secure Platform.

The fact is that we would like to backup the policies of both installations, but we have no idea on how to do it...

Apart from that, in the lower level we still have an FP3 installation that we want to migrate to NGX R60. Is there any way to migrate the whole security policy from one to the other that is not manually introducing all the elements+rules???

Many thanks from this newbi CP user.

[andrew]

The NG web UI has a handy section to configure scheduled backups. A nice feature is backing up to TFTP, which you can restore directly from in case of failure.

Anderw

[txepetxa]

Hi Andrew,

What do you mean with "NG web UI"?? Somewhere in the checkpoint site refered to the NG version? As I told, We have just installed it and do not have so much knowledge and documentation....

Thanks

[kva.kva]

Is there any way to migrate the whole security policy from one to the other that is not manually introducing all the elements+rules???

I didn't work with FP3. But maybe helpful commands upgrade_import, upgrade_export if they exist on FP3.

[andrew]

Originally Posted by txepetxa

What do you mean with "NG web UI"?? Somewhere in the checkpoint site refered to the NG version? As I told, We have just installed it and do not have so much knowledge and documentation....

There is a web user interface that can be used to administer the SecurePlatform OS. It can be used to configure backups.

When you installed SPlat it should have invited you to desiginate some users and hosts allowed to access this UI. From one of the hosts login with one of users after going to https://your.ip.address.here