Moving Management Modules

As a company grows from needing one firewall to several, it may be desirable to move the management functions from the firewall platform to a separate box that functions only as a management module. Check Point has, unfortunately, made the process of doing so far more complicated in NG than it was in earlier versions.

The assumption is that the two management modules will be of the same type (i.e., they will both be UNIX-type platforms or they will both be Windows-type platforms). This is critical because there is currently no way to convert a UNIX-type registry to a Windows-type registry or vice versa. Also, both management modules should be at the same software revision level, that is, if one management module has ...

Get Essential Check Point™ FireWall-1® NG: An Installation, Configuration, and Troubleshooting Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.