| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| I tried to configure a second Management Server in the Dashboard, Checkpoint -> New Checkpoint -> host -> the "Secondary Management Station" Button is greyed out. fw hastat on the management Server: HOST NUMBER HIGH AVAILABILITY STATE localhost HA not installed I followed the upgrade-guide Before migrating your original SmartCenter Server 1 On the original SmartCenter Server add rules that will allow the new SmartCenter to access the modules it is managing. To do this create a SmartCenter object that represents the new SmartCenter Server’s IP address: Manage > Network Objects > New… > Check Point > Host/Gateway and in the General Properties tab select Secondary SmartCenter Server in the Check Point Products section. thx for your help |
| |||
| If "SIC was established with the Secondary Management Server before selecting the "Secondary Management Station" parameter, under the Check Point Properties section, in the Secondary Management Server's host properties.", you'll need re-establish SIC. http://secureknowledge.checkpoint.co....do?id=sk22212 |
| |||
| thanks for your answer, but SIC is not established. background info.... ...i dont want to set up a second Management, i want to migrate the Management to an new Server with a different IP. |
| |||
| Hi, Check Point Management High/Availability is a feature of Enterprise Eition(and VPN-1 POwer). It is not available with the Express version and UTM version. Sometimes, due to license restriction also will give the same issue. Check with evalauation or demo lic. Best Regards, Sunil |
| |||
| First you require a 'HA' license for your Secondary Management but in your case if you just want to build another Managemnt Server identical to your existing, the best way is to use 'upgrade_export'/'ugrade_import' related solutions. The backup Management Name and IP should be kept the same but of course the Secondary Management has to be off-network. Or if the IP and specifially name has to change, you may run into 'SIC' issues which are resolvable but have to be considered. hth. __________________ researcher |
![]() |
| Thread Tools | |
| Display Modes | |
| |