ngx migration from windows to splat

[nirtzen]

good evening (here :-) )

i am currently in a process of migrating our company's f.w (NGX) from windows 2003 server platform to secure platform .

how can i back the policy , running now on the windows , and import it to the new f.w after installing it on splat ?

thanks .

/nir eliav

[Lackie]

You should be able to use the upgrade_export tool that Check Point has. You just have to make sure that the new management station is the same IP address and hostname as the orginal management station.

[intehnet]

do this in a test environment first, i have recently hit an issue where the splat would not import a windows exported file and vice versa for R55 to NG X..
ie; was going from windows R55 to splat NG X

[thefunkygibbon]

my advice, dont.

just recreate all the rules / objects etc from old firewall to new. its not worth the hassle of troubleshooting everything when usually it doesnt work.

[chillyjim]

Originally Posted by thefunkygibbon

my advice, dont.

just recreate all the rules / objects etc from old firewall to new. its not worth the hassle of troubleshooting everything when usually it doesnt work.

Rebuilding is always the way Ilike to do it (good time to clean up), but on large rulebases/object lists upgrade_export/import is the way to go.

I've done at least 20 of these with no problem using the upgrade tools.

-jlh

[intehnet]

I just (last night!) had to manually rebuild a complete rule set (90 rules + 30 NAT + 10 desktop rules) on an upgrade from R55 Windows to NG X Splat with seperate primary smart center and enforcement..

i will write a thread about this..