topic Re: CPme - a simple tool to analyze your check point environment - for R80.20 and above in Scripts

CPme - a simple tool to analyze your check point environment - for R80.20 and above

0x7c2 — Mon, 30 Nov 2020 08:39:38 GMT

Hi all,

in the last few months, I created a tool which helps you to analyze your running Check Point environment. The tool provides several checks for your Security Gateway and also for the Security Management.

I know, that there are already some really good tools and scripts - but with another point of view.

So I proudly announce CPme to you, released as an open source tool:

https://github.com/0x7c2/cpme

Some screenshots:

Maybe it is useful for you and your environment, maybe not - your choice 😉

Regards,
Simon

Re: CPme - a simple tool to analyze your check point environment - for R80.20 and above

Danny — Thu, 26 Nov 2020 19:36:01 GMT

Wow Simon, what an outstanding first post on this community! 👍

Looks like you've spent a huge amount of effort and passion developing CPme. I'm overwhelmed by the outstanding level of Check Point expertise involved in this Python script that it really surprises me how many issues I had navigating through the menu by entering numbers, not being able to go back when I don't want to execute something (such as fw monitor) and that I can't leave the script by pressing ESC whenever I want to. I guess I'm just too used to navigate with arrow keys within cpview and ccc.

Re: CPme - a simple tool to analyze your check point environment - for R80.20 and above

0x7c2 — Thu, 26 Nov 2020 19:38:09 GMT

Hi Danny,

thank you for the feedback.
Seems that next step for CPme is: Optimizing the „GUI“ 😉 That shouldn't be an impossible task, but as far, it was not in focus of me.

Re: CPme - a simple tool to analyze your check point environment - for R80.20 and above

G_W_Albrecht — Fri, 27 Nov 2020 13:30:45 GMT

Nice work - but i have found that input values are not checked, so invalid input will crash the script e.g.here:

Enter source ip : ^[
Enter destination ip: ^^q

Traceback (most recent call last):
File "/home/admin/cpme-py/cpme.py", line 122, in <module>
menu_display(menu_cur)
File "/home/admin/cpme-py/cpme.py", line 108, in menu_display
eval(exec_menu)
File "<string>", line 1, in <module>
File "/home/admin/cpme-py/troubleshooting.py", line 434, in clear_table_input
iphex_src=ip2hex(ip_src)
File "/home/admin/cpme-py/troubleshooting.py", line 229, in ip2hex
b = hex(int(a[0]))[2:].zfill(2) + hex(int(a[1]))[2:].zfill(2) + hex(int(a[2]))[2:].zfill(2) + hex(int(a[3]))[2:].zfill(2)
ValueError: invalid literal for int() with base 10: '\x1b'

Only cosmetic: Formatting of the last line in Health Analysis > Run All Checks is incorrect.

And a UI hint: Always having zero to Exit the script is nice, but Back to Main Menue number should not change from submenue to submenu, too 8).

Re: CPme - a simple tool to analyze your check point environment - for R80.20 and above

PhoneBoy — Mon, 30 Nov 2020 04:14:23 GMT

@_Val_ looks like a candidate for Toolbox.

Re: CPme - a simple tool to analyze your check point environment - for R80.20 and above

0x7c2 — Fri, 11 Dec 2020 13:31:50 GMT

Just uploaded a preview of CPme, version 2.
Main improvements:
---> user interface

@Danny : Maybe it's more intuitive for you 😉

Preview is available in seperate repository:
https://github.com/0x7c2/cpme2

The preview is actual missing some checks for management server, and all troubleshooting shortcuts.
They will be added soon.

Re: CPme - a simple tool to analyze your check point environment - for R80.20 and above

Danny — Fri, 11 Dec 2020 15:56:30 GMT

Looks really good.. navigation is so much easier now. I failed to use the integrated search function and couldn't quit the script via ctrl-c. As you mimic the look&feel of cpview I initially expected it to behave similar. It took me some time to realize that some views don't have contents when shown and load contents afterwards. Overall you created an amazing tool that fully surpizes me by level of knowledge, execution and vision/passion. I'm glad to see people like you around here in this community.