Move Firewalls (nokia 390) to new Master Console

[etnet]

Current MC has 4 firewall modules defined. I want to move 2 FW's to new MC and cluster them. My fear is when I delete the 2 FW's on existing MC there will be license issues as I re-create the FW's on the new MC. Using NGX R62

Any help would be appreciated.
e

[melipla]

If you reinstalled the software (time to upgrade to R65?) you can run with the 15day evaluation license.

[Testing-123]

Hi etnet,

Things to consider:

- Make sure you're firewall manager is of equal or higher version then your enforcement modules.
- Ensure you have the correct licenses on each firewall manager (i.e right types, IP addresses etc)
- When moving management from one smart centre to another it typically involves hostname/IP address change and if this is a case re-sic to module is required (as hostname is part of sic)... if the firewalls are production firewalls you should be aware of this.

As melipla states, all Check Point products come with 15 days trial licence.

Hope this helps.

Regards
Testing-123

[Yasushi Kono]

Originally Posted by etnet

Current MC has 4 firewall modules defined. I want to move 2 FW's to new MC and cluster them. My fear is when I delete the 2 FW's on existing MC there will be license issues as I re-create the FW's on the new MC. Using NGX R62

Any help would be appreciated.
e

Indeed, if you move a gateway off the SmartCenter, you have to re-create the license as the IP address of the SmartCenter is a part of the license string of a central license. If you have the appropriate UserCenter account, you should be able to regenerate a new license. But the definite licensing specialist here is Jim Holmes (chillyjim). Perhaps, he could give you a decisive hint.

Kind regards,
Yasushi

[chillyjim]

I'm not sure I like being called definitive anything but...


Relicense the gateways/firewalls/modules as a Central License with the IP address of the SmartCenter.

If they already are, and the license is pushed, delete the license before deleting the gateway's object and it will go back into the repository to be re-assigned.

[BarryStiefel]

Originally Posted by chillyjim

I'm not sure I like being called definitive anything but...


Relicense the gateways/firewalls/modules as a Central License with the IP address of the SmartCenter.

If they already are, and the license is pushed, delete the license before deleting the gateway's object and it will go back into the repository to be re-assigned.

Modified from above:

"But the indefinite licensing specialist here is Jim Holmes (chillyjim). Perhaps, he could give you a decisive hint."

As we all know, an "indefinite license" is the opposite of a 15-day evaluation license.