topic Re: Moving hosts between groups in Firewall and Security Management

Moving hosts between groups

jfmoral — Wed, 13 Nov 2024 18:41:13 GMT

Hi.

Do you know if there is any way to quickly move 1600 hosts from Group A to Group B?

Regards.

Re: Moving hosts between groups

the_rock — Wed, 13 Nov 2024 18:54:07 GMT

Let me do quick test in the lab for this with few hosts and see what happens.

Andy

Re: Moving hosts between groups

the_rock — Wed, 13 Nov 2024 19:03:57 GMT

Ok, forgive me if this shall sound really stupid or silly, but one easy way would be to right click existing group, clone it, which will create exact same group with name _clone on top of it, then you can delete "old" group.

If that poses an issue, Im sure it can be done via API, so let me know and I can try it in the lab.

Andy

Re: Moving hosts between groups

jfmoral — Wed, 13 Nov 2024 19:14:17 GMT

Hi,

Maybe I explained it in the wrong form. Group A and Group B have many Objects and I want to merge them into a single group. But I don't want to select one by one.

I'm going to look at the API.

Thanks.

Re: Moving hosts between groups

the_rock — Wed, 13 Nov 2024 19:16:17 GMT

Kk, now I got it, no worries. Let me do some testing and see how far I get. Will update you.

Andy

Re: Moving hosts between groups

the_rock — Wed, 13 Nov 2024 19:27:50 GMT

I recall cp_merge back in the day, but that tool was deprecated while back. I will still keep trying to make this work in the lab. In the meantime, lets see if anyone else may know.

Re: Moving hosts between groups

jfmoral — Wed, 13 Nov 2024 19:38:02 GMT

Thank you. I am conducting tests as well.

Re: Moving hosts between groups

Bob_Zimmerman — Wed, 13 Nov 2024 19:42:31 GMT

So you want all members of group B to be added to group A, and you want all places where group B is used to use group A instead?

Dump group B with '/show-object'. The output will have all members of the group.

Get the first ~100 members and call '/set-group' for group A with members.add[] in the body and the selected members. Adding a member which is already in the group does nothing, so this will add all the members of B which aren't already in A to A.

Repeat for the next ~100 members until you're done.

In SmartConsole, run a Where Used on group B, hit the Replace button in the window, pick group A, and select the places where you want to replace it. If there's anywhere which can't be automatically replaced, you'll have to handle it manually.

Re: Moving hosts between groups

the_rock — Wed, 13 Nov 2024 20:04:43 GMT

Sounds reasonable, will try this as well.

Re: Moving hosts between groups

Amir_Senn — Thu, 14 Nov 2024 09:17:21 GMT

You can use MGMT API for this:

Show group: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-group~v2%20

Grep names / uids.

Set group: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-group~v2%20

Re: Moving hosts between groups

the_rock — Thu, 14 Nov 2024 11:36:31 GMT

Looks promising, may test this in the lab later. Does it work say if you want to move lets say only 20 out of 100 hosts to another group?

Andy

Re: Moving hosts between groups

Amir_Senn — Thu, 14 Nov 2024 12:57:34 GMT

I would grep uid results from group into a file and if you want to want to limit number of items per publish you can do it by running a loop that runs on X objects until EOF.

mgmt_cli show group name "test" | grep "\- uid:" > uid_list.txt

Re: Moving hosts between groups

the_rock — Thu, 14 Nov 2024 14:51:22 GMT

Man, I wish this was possible via smart console, would have been easier, but guess not?

Andy

Re: Moving hosts between groups

Amir_Senn — Thu, 14 Nov 2024 16:04:36 GMT

You can clone or add group into another group, it would also help.

It just doesn't give you this as a list that you can use for other purposes.

Re: Moving hosts between groups

the_rock — Thu, 14 Nov 2024 16:07:12 GMT

I know you can clone the group, but dont believe you can add one into another, but will test again.

Andy

Re: Moving hosts between groups

the_rock — Thu, 14 Nov 2024 16:16:59 GMT

Apologies, I was wrong, my bad. Just created brand new group and it let me add 2 new groups into it. I think I was not filtering for the right objects.

Thanks @Amir_Senn

Andy