topic Re: Export Specific Rules to CSV for a given object in Firewall and Security Management

Export Specific Rules to CSV for a given object

Voxx3l — Mon, 19 Apr 2021 17:25:39 GMT

Hello,

I am trying to see if there is a good way to export specific policy rules to csv; only rules with a certain IP/Object. I know I can use the API, and other tools to export entire policies to .csv, but I only want rules that contain a specific object. The object/object rules I am looking for are used in many rules across different policies that all reside within the same SMC. So basically if I could export only the things that the "where used" option shows, that would be about perfect.

Thank you!

Re: Export Specific Rules to CSV for a given object

PhoneBoy — Mon, 19 Apr 2021 17:57:58 GMT

The results of the where-used API call should be able to provide you a list of rule UIDs, which you could then iterate over and show in the desired format.

Re: Export Specific Rules to CSV for a given object

Voxx3l — Mon, 19 Apr 2021 18:22:19 GMT

Hey thanks for the reply. Is there documentation for dumping that? I found something for the web-tool, but I didn't see anything for the API. I'm probably just looking in the wrong spot.

Re: Export Specific Rules to CSV for a given object

Bob_Zimmerman — Mon, 19 Apr 2021 18:49:46 GMT

To help simplify application audits, I built a tool to do exactly that:

https://community.checkpoint.com/t5/API-CLI-Discussion/Export-all-rules-referencing-a-list-of-IPs/m-p/60778

You can find the latest version on Github here:

https://github.com/Bob-Zimmerman/ipsToRulesCP

Re: Export Specific Rules to CSV for a given object

Voxx3l — Mon, 19 Apr 2021 19:31:08 GMT

Thank you!

This is the closest thing I have seen to what I want. So I'll work with this for now.

Re: Export Specific Rules to CSV for a given object

dehaasm — Wed, 08 Apr 2026 11:36:51 GMT

Hi Bob is this tool suitable for R82?

Re: Export Specific Rules to CSV for a given object

Bob_Zimmerman — Wed, 08 Apr 2026 15:04:39 GMT

I haven't been directly involved in the work which uses this script at my company in a while, but I haven't had complaints from coworkers on our R82 managements. Just tested on an R82.10 management and it worked there.

Re: Export Specific Rules to CSV for a given object

PhoneBoy — Wed, 08 Apr 2026 15:14:15 GMT

The script should also work on R82 as the underlying APIs queried by the script haven't changed.