Export / Import Service Domains

The Export / Import feature lets Administrators move objects and settings from one Service Domain to another. This is commonly used for migrations between regions.

You can export: Plans, Gateways, VPN Communities, and Service Domain settings.

Export a Service Domain

  1. In Quantum Spark Management, go to the left navigation tree and click Settings.

  2. Click General.

  3. On the General page, click Export to generate an XML file with all Service Domain data. The Export Wizard opens.

  4. Optional: When the export completes, click the Click to download link in the Export Wizard window to download the XML file.

Import a Service Domain

  1. In Quantum Spark Management, go to the left navigation tree and click Settings.

  2. Click General.

  3. On the General page, click Import. The Import Wizard opens.

  4. Click Choose File and select the XML file you want to import.

  5. Click Next.

  6. In the pop up window, confirm that you want to import and override the existing data.

Notes:

  • This procedure only exports the configuration from Quantum Spark Management. To move devices to the new domain, connect to each device’s WebUI and reconnect to Cloud Services using the activation key from the new domain.

  • The export / import process is low risk. No changes are made to the existing tenant. Only the Quantum Spark Management configuration is imported.

  • Gateway connections are not affected by export / import. The manual step to reactivate Gateways with the new tenant completes the migration.

  • If the source tenant has VPN Communities, reactivating Gateways with the destination may cause brief downtime while VPN tunnels reestablish. Perform this during a maintenance window.

  • Externally managed center Gateway in a VPN Community -The SMP root CA certificate is different for separate regions. This is transparent for Gateways managed by Quantum Spark Management. However, for star communities with an externally managed Gateway as the center, the root CA must be imported to the center Gateway’s management. For more information, refer to: sk177545 (section "Configure trust between SMP and SMS", Steps 1-3).

  • Custom firmware is not exported ot imported. If you use a custom Hotfix, the import may fail.

    • If you have a specific customer Hotfix firmware or EA firmware, contact Check Point Support.

    • If firmware is not eligible in the imported tenant, all Plans and Gateways default to Do Not Upgrade.

    • To view all firmware in a domain, navigate to a Plan in Quantum Spark Management > Services > Firmware.

  • For Pay As You Go (PAYG) tenants, the imported tenant must have a valid contract.