CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Installing And Upgrading
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-12-26
Junior Member
 
Join Date: 2006-01-05
Posts: 1
Rep Power: 0
OzJavelin has an average reputation (10+)
Default Merging SmartCentre servers?

Hi,

Just wondering what's the best way to merge objects/rulebases from one SmartCentre server to another, which already has it's own objects/rulebases? Basically I want to have an extended set of objects, and multiple active rulebases managed by a single SmartCentre server (which will eventually be HA'd). The current mgmt/enforcement modules are all NG R55 ..

Previously I benchtested using cp_merge merge_objects/import_policy which worked, however when testing now I keep getting "Not in scope" errors on the import_policy. Using upgrade_import just overwrites the whole setup of the existing server.

Suggestions?
Reply With Quote
  #2 (permalink)  
Old 2008-01-18
Junior Member
 
Join Date: 2005-10-03
Posts: 1
Rep Power: 0
dohrou has an average reputation (10+)
Default Re: Merging SmartCentre servers?

Hi,

can you give me some guidilines to merge objects/rulebases from one SmartCentre server in NG R55 to another in NGX R61

Suggestions?
Reply With Quote
  #3 (permalink)  
Old 2008-01-23
Senior Member
 
Join Date: 2007-06-04
Posts: 1,062
Rep Power: 3
mcnallym has an average reputation (10+)
Default Re: Merging SmartCentre servers?

You can only use cp_merge with SMARTCenters of the same version, ie R55 and R55. To merge an R55 and R61, you would need to upgrade the R55 to R61 first and then use cp_merge.

The not in scope is usually in the NAT rules. I usually get when changing a rule from hide NAT to Static NAT.

I find that if I create a new empty NAT and then create that rather then changing the existing NAT rule works for me.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:47.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0