Pointers concerning firewall move to Nokia

[Youngy]

Hi all,

I have an upcoming project where we are going to replace an windows based CP enforcement point with a Nokia IPSO 380.

Does anyone have any pointers they can tell me about or any traps to avoid.

I'll be honest and say I have not done an upgrade like this before and was planning (early stages) on migrating the license and setting the Nokia up with the same IP details etc as the current windows box.

Thanks for your time all

[chillyjim]

Are you changing versions at the same time?

Changing platforms for a single-point firewall usualy isn't bad, it's when clustering/HA is involved that it can get hairy.

I would sugest you take this opertunity to split management/firewall functions if you're currently running both on the one box. It will make life easer.

Even if you are not upgrading CHKP versions, treat the move like you are. The upgrade_export/import tools make the move a lot easer.

Good luck.

[Youngy]

Hi,

Management and firewall functionality are already split and do not run on the same box.

export\import function is indeed a good option but is there any issue with that function that you may be aware of when going from a windows box to an IPSO device?

The version of CP will not be upgraded at the time of the move. Does anyone have any thoughts on possible licensing issues?

Thanks

[chillyjim]

upgrade_export/import works fine going between platforms.

If you are not changing the management platform, then the license don't need to change (assuming you're using central licenses).

-jlh

[Youngy]

Hi all,

Just thought I would let you all know that this went well and now we have a enforcement point on Nokia rather than a windows server all through the export\import function really.

One pdf I did use was called the 'complete upgrade guide' from here I think http://support.checkpoint.com/

[Lackie]

Congrats Youngy and welcome over to the Nokia side.