migration of objects and rules

[Peter Smith]

I currently have a Smartcenter server managing 15 firewalls. I need to set up a new Smartcenter server and get it to manage 5 of these firewalls
(i.e. 10 of the firewalls will continue to be managed by the old Smartcenter sever and 5 of the firewalls will be managed by the new Smartcenter server)

Does anyone know how to do this? i.e. how to copy the objects and rules from one Smartcenter to another. Is it best to use "CP_Merge", and if so do you know a good source of information on it? I have found a pdf file but it's very sketchy.

(Someone suggested to me that I export the entire config from one SCS to another and then delete the 10 policies I don't want. However if I do this in a lab then I run into issues with VPN authentication)

[stacy99]

I've used oDumper and oFiller with some success in the past to move objects from one smartcenter server to another. I don't know how about moving the rules across though.

oDumper and Ofiller were available under the Checkpoint Resources link on the cpug.org homepage last time I looked

cheers
Stacy

[chillyjim]

Originally Posted by stacy99

I don't know how about moving the rules across though.

oDumpper/Filler can be used for rules as well.

[Testing-123]

Hi Peter,

(Someone suggested to me that I export the entire config from one SCS to another and then delete the 10 policies I don't want. However if I do this in a lab then I run into issues with VPN authentication)

Read up on upgrade_export and upgrade_import ... they will achieve what i believe you are trying to accomplish. What VPN issues are you running into?

Regards
Testing-123

[chillyjim]

Originally Posted by Testing-123

Read up on upgrade_export and upgrade_import ... they will achieve what i believe you are trying to accomplish.

They will export/import the entire SmartCenter, you do not get to pick and chose policies/object/rules/etc.