topic Re: How to export basic config and import to new firewalls in Firewall and Security Management

How to export basic config and import to new firewalls

RioAung — Mon, 28 Feb 2022 09:56:47 GMT

Hi,

I have multiple site to deploy .So I would like to standard config for every site.

I want to export basic setting like stealth rule, hardening setting, manangement IP and password ,etc. and then i want to import other firewall. what kind of function can i use ? if i use backup function and import to other firewall,I got stability issue . i used dbset backup:override_hfs t to fix if i got the errror.

let me know any best way to import standard setting.

Re: How to export basic config and import to new firewalls

G_W_Albrecht — Mon, 28 Feb 2022 10:19:13 GMT

See here: sk108902 - Best Practices - Backup on Gaia OS.

But i would suggest that the best solution for you is sk120193: Blink - Gaia Fast Deployment !

Re: How to export basic config and import to new firewalls

_Val_ — Mon, 28 Feb 2022 11:05:05 GMT

Not sure about stealth rule, that is always on the MGMT side.

For the rest, could you elaborate on backup function and stability issues?

For the most basic things, I would use "show config" in clish and then copy/paste to the new FW.

Re: How to export basic config and import to new firewalls

PhoneBoy — Mon, 28 Feb 2022 14:47:09 GMT

What precisely are you migrating from in terms of hardware and software versions?
What precisely are you migrating to in terms of hardware and software versions?
How is the gateway managed? (Stand-alone or distributed)
The precise steps will depend on the answer to those questions, but will most likely involve the standard migration tools.

Re: How to export basic config and import to new firewalls

the_rock — Mon, 28 Feb 2022 18:24:45 GMT

I know sk @G_W_Albrecht provided you is definitely good start, but I would add that statement in it saying that backup can be imported into a different hardware model is not factually true. Say if you have 6000 appliance, but want to restore that backup on say 13000 series appliance, that would most likely not work. Personally, I would go with show configuration output from clish, as I find that easiest way to quickly get box up and running.

Re: How to export basic config and import to new firewalls

G_W_Albrecht — Tue, 01 Mar 2022 09:13:28 GMT

Personally, i would go with blink and create deployment templates !

Re: How to export basic config and import to new firewalls

RioAung — Mon, 14 Mar 2022 03:58:02 GMT

Hi @PhoneBoy ,

I have multiple site and all site are using same models and some basic rule are same . all are using same hardening config. I don't want to do hardening for every appliance . Blink deployment is only can include basic config like password , IP, SIC information ,right.

So i would like to export standard config including hardening config and import to other devices.

Re: How to export basic config and import to new firewalls

PhoneBoy — Mon, 14 Mar 2022 15:05:25 GMT

Access and Threat Prevention policies comes from the management, so it's just a matter of installing the same policy to the different devices.
If you configured anything in Gaia OS using clish, that can be replicated easily enough with blink and/or CDT as mentioned in this thread.
You may also want to leverage CDT's "RMA" mode: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111158