topic Re: backing up a policy in Firewall and Security Management

backing up a policy

jimm — Wed, 13 Oct 2021 03:04:29 GMT

In Pre-R80 Checkpoint, you could "save as" a security policy package as a means of backup. Alternatively, you could also take a snapshot of the current policy and objects which could be restored later if required. In R80 and above, what is the best practice method for backing up policies and objects within Smartconsole?

Re: backing up a policy

Tal_Paz-Fridman — Wed, 13 Oct 2021 06:34:20 GMT

One great option (depending on the version you are using) are the Management API commands for export and import. They backup the entire database, not just the policies and object:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/export-management~v1.8%20

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/import-management~v1.8%20

You could also use the Upgrade Tools to create a backup:

sk135172 Upgrade Tools package for upgrade from R80.20 and higher

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk135172

There are also options within SmartConsole to Export the Rulebase and Objects to a CSV file as "static" backup

Finally there are various tools and scripts:

https://github.com/mybasementcloud/R8x-export-import-api-scripts

https://community.checkpoint.com/t5/API-CLI-Discussion/CLI-API-Example-for-exporting-importing-and-deleting-different/m-p/40850

Re: backing up a policy

jimm — Wed, 13 Oct 2021 06:36:52 GMT

Those are fairly major 'backup the whole system' mechanisms. I was hoping for a simple click within Smartconsole to save state for a quick and easy restore of a policy and objects.

Re: backing up a policy

Tal_Paz-Fridman — Wed, 13 Oct 2021 06:56:57 GMT

Try the last options I listed:

Finally there are various tools and scripts:

https://github.com/mybasementcloud/R8x-export-import-api-scripts

https://community.checkpoint.com/t5/API-CLI-Discussion/CLI-API-Example-for-exporting-importing-and-d...

Re: backing up a policy

Chris_Atkinson — Wed, 13 Oct 2021 09:09:14 GMT

Depending on the specific use case, revision control may also be an option for you.