Merging the data frm Two Mgmnt server into a Single Mgmtn Server

[gladiatorsword]

Hi,

I have two different Mgmnt servers managing two different enforcement modules / Clusters.
Can i somehow Merge the data from 1 Mgmnt server with the Other One, so that i can manage everything from a Single Mgmnt Server..?
Without having to MANUALLY create all objects and policies on One Mgmnt server in the Other One..!

Cheers,
Gladiator

[RayPesek]

What version of FW-1 are you running? The cpmerge tool might be what you're looking for. Check Point Software: SmartCenter Tools

Ray

[gladiatorsword]

HI,
i am running CP NGAI R55.

Will cpmerge enable me to Export everything without any problem..?
I mean, Policies, Objects, users..

Cheers
Gladiator

[Thorpuse]

I've had very mixed success with cpmerge - I'd recommend using fwm dbexport/fwm dbimport for the user database, and Martin Hoz's Object Filler/Dumper for the objects. The advantage of this is that it's also a lot easier to sanitise or mark the imported objects in the dumped .csv file than it is to mess with cpmerge.

Ofiller does the objects, but doesn't really manage rules that well. I'd suggest doing the rules manually, unless there's a lot of them. You may find that there's some consolidation you can make in the rulebase anyway depending on the size and complexity of the DBs that you're merging.

R.

[mcnallym]

cp_merge doesn't really export anything other then the policy, which gives you a .pol file

you manually copy the objects_5_0.C file acorss and then merge that in.

You still need to fwm dxexport and then fwm dbimport the users, after manually createing the user groups.

To make it a success, then I usually go through the rulebase on both SMARTCenters making sure policy names aren't standard so I don't get standard.pol. I also make sure that user groups are unique on both boxes etc

Providing I follow the instructions, ie only merge between the same versions then I have never had a problem with cp_merge. I have even used it to successfully merge 3 management servers for a large insurance company so it does work