Migrating a License to a New IP Address

Check Point licenses are issued for the main IP address of Check Point servers.

If you changed the IP address of your existing Check Point server, or if you migrated the management database between the servers with different IP addresses, you must update the applicable configuration.

Step

Instructions

1

Connect to your Check Point User Center account.

2

Issue a new license for the new IP address.

3

Install the new license (issued for the new IP address) on your Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server..

4

Remove the old license (issued for the old IP address) from your Security Management ServerClosed Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..

5

Restart Check Point Services with these commands:

cpstop

cpstart

6

In SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.:

  1. Connect with SmartConsole to the (Primary) Security Management Server.

  2. Open the Security Management Server object.

  3. In the left tree, click Network Management.

  4. Make sure to update the IP Address and topology.

  5. Click OK.

  6. Publish the SmartConsole session.

  7. Install the database:

    1. In the top left corner, click Menu > Install database.

    2. Select all objects.

    3. Click Install.

    4. Click OK.

7

On your DNS Server, map the host name of your Security Management Server to the new IP address.

Step

Instructions

1

Connect to your Check Point User Center account.

2

Issue a new license for the new IP address.

3

Install the new license (issued for the new IP address) on your Multi-Domain ServerClosed Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. or Multi-Domain Log ServerClosed Dedicated Check Point server that runs Check Point software to store and process logs in a Multi-Domain Security Management environment. The Multi-Domain Log Server consists of Domain Log Servers that store and process logs from Security Gateways that are managed by the corresponding Domain Management Servers. Acronym: MDLS..

4

Remove the old license (issued for the old IP address) from your Multi-Domain Server or Multi-Domain Log ServerClosed Dedicated Check Point server that runs Check Point software to store and process logs..

5

Change the Leading Interface.

See Changing the IP Address of a Multi-Domain Server or Multi-Domain Log Server.

6

On your DNS Server, map the host name of your Multi-Domain Server or Multi-Domain Log Server to the new IP address.

Step

Instructions

1

Connect to your Check Point User Center account.

2

Issue a new license for the new IP address.

3

Install the new license (issued for the new IP address) on your Log Server or SmartEvent Server.

4

Remove the old license (issued for the old IP address) from your Log Server or SmartEvent Server.

5

Restart Check Point Services:

cpstop

cpstart

6

In SmartConsole:

  1. Connect with SmartConsole to the applicable Management Server that manages your dedicated Log Server or SmartEvent Server.

  2. Open the object of your dedicated Log Server or SmartEvent Server.

  3. In the left tree, click Network Management.

  4. Make sure to update the IP Address and topology.

  5. Click OK.

  6. Publish the SmartConsole session.

  7. Install the database:

    1. In the top left corner, click Menu > Install database.

    2. Select all objects.

    3. Click Install.

    4. Click OK.

  8. Install the Access Control Policy on all managed Security Gateways that send their logs to your dedicated Log Server or SmartEvent Server.

7

On your DNS Server, map the host name of your dedicated Log Server or SmartEvent Server to the new IP address.