topic Re: GAIA - Backup all clish configs from all gateways with one CLI command. in Firewall and Security Management

GAIA - Backup all clish configs from all gateways with one CLI command.

HeikoAnkenbrand — Sat, 20 Apr 2019 12:34:26 GMT

In the last few days I have built a tool to execute clish commands and bash commands centrally from the management server on all gateways.

All you need to do is run a small script from this Checkmates article.

GAIA - Easy execute CLI commands on all gateways simultaneously

Then you can save your clish config centrally from all gateways to the management server with the following command:

Management# gw_mclish show configuration > backup_clish_all_gateways.txt

This can also be start as simply cronjob😀.

Demo video:

(view in My Videos)

Re: GAIA - Backup all clish configs from all gateways with one CLI command.

Georg_Polder — Sat, 20 Apr 2019 08:29:59 GMT

Great job @HeikoAnkenbrand

I just tested that. It works great.

Re: GAIA - Backup all clish configs from all gateways with one CLI command.

Georg_Polder — Sat, 20 Apr 2019 08:31:41 GMT

It's an interesting solution.

Georg

Re: GAIA - Backup all clish configs from all gateways with one CLI command.

Haoi_Yusuhriy — Sat, 20 Apr 2019 12:41:13 GMT

Hello @HeikoAnkenbrand

I think the script is good. Unfortunately, the TE appliance is not recognized when I run gw_detect. What can I do?

Best regards

Re: GAIA - Backup all clish configs from all gateways with one CLI command.

mcallagy — Fri, 19 Jul 2019 18:01:39 GMT

Will this script check for virtual systems and back them up or will it only back up VS 0?

Thanks,

Mike

Re: GAIA - Backup all clish configs from all gateways with one CLI command.

Yoel_Maaravi — Sun, 01 Sep 2019 05:38:04 GMT

We have over 40 gateways worldwide. I slightly modified the script to secure all gateways. This makes the work easier.

@Check Point:
Can you include the script in GAIA R80.40... in the future?

Re: GAIA - Backup all clish configs from all gateways with one CLI command.

KonstantinBoyko — Sun, 01 Sep 2019 12:59:47 GMT

We do have already. Central Deployment Tool (aka CDT) is a part of MGMT installation starting from R80.30 (you can install it manually on versions<80.30). Its RMA mode saves configuration and also other cool stuff like FTW settings, SIC, license. kernel parameters and more. It's also capable of running scripts on GWs you coode, pushing/pulling files and much more.
There is more information, the tool itself and administration guide in sk111158

Regards,
Kostya