Steps for migrating from SG/SG-VA, CAS/CAS-VA, and MC/MC-VA to the SSP platform

Products

• SSP-S210 PLATFORM

Issue/Introduction

How to migrate from a HW device or Virtual Appliance Edge SWG (formerly ProxySG), Content Analysis (CAS), or Management Center (MC) device to the SSP Platform (aka ISG).

Environment

ISG Proxy, ISG CAS, ISG MC.

Resolution

The technical steps are as shown below.

• Deploy the ISG - This document also details the step for licensing the ISG.

• Plan for the ISG application implementation. Consider the model sizing requirements (e.g., for ISG-Proxy & ISG-CAS).

• Create the ISG applications also see Creating a Edge SWG (ProxySG) or CAS or Management Center application on an ISG

• Familiarize yourself with inter-application networking.

• For migrating configs from the existing Edge SWG (ProxySG) devices to the ISG-Proxy, ensure the ISG-Proxy application is running the same SGOS version as the existing proxy. Then follow the same standard backup/restore process to migrate the configurations and policy:
  • Back up and restore the configuration of Edge SWG (ProxySG) or Advanced Secure Gateway appliances
  • Copying Visual Policy Manager from one Edge SWG (ProxySG) to another

• As with the Proxy, also ensure the ISG-CAS application runs the same CAS version as the existing CAS appliance, then utilize the same standard process, to backup and restore the CAS config:
  • Performing a backup and restore on a Content Analysis System appliance

• For migrating from a MC device to ISG-MC:
  • Back Up the MC Configuration
  • Restore an MC Backup Configuration
  • Backup and restore of Management center's SSL configuration