topic Re: Rule export in Firewall and Security Management

Rule export

Andrey_Gromov — Thu, 23 Nov 2017 07:08:02 GMT

Hello. Is there a way to export rulebase easily anywhere on management server so that other people could read it?

For r80 right now I'm using command line (F9) from SmartConsole. For example:

show access-rulebase name "Lan-policy Security" details-level "standard" use-object-dictionary true filter "(dec1-17)" --format text

It's nice. But it would be very nice if there were options to:

1. change uid automatically (for example for network objects)

2. print out only necessary fields like source, destination, service, time, comments

Is it possible without knowing programming languages?

Re: Rule export

Tomer_Sole — Fri, 21 Jun 2019 09:04:18 GMT

Hi, see Can I export and import a policy? and https://community.checkpoint.com/docs/DOC-1974

Re: Rule export

Andrey_Gromov — Thu, 23 Nov 2017 09:03:20 GMT

Thank you. I have tried this script. Nevertheless I can't filter out anything using SmartConsole syntax, so even if I copy the output to Excel, I can't use entities like ip/mask.

Re: Rule export

Tomer_Sole — Thu, 23 Nov 2017 19:42:33 GMT

which one of the tools are you referring to?

Re: Rule export

Andrey_Gromov — Fri, 24 Nov 2017 06:00:39 GMT

I used this script:

$MDS_FWDIR/scripts/web_api_show_package.sh -k <PACKAGE NAME> -d <DOMAIN NAME>

Re: Rule export

Robert_Decker — Fri, 21 Jun 2019 09:04:21 GMT

You can output the results into a JSON file format and then use a popular and easy JQ to filter any data.

There are plenty of JQ examples in this community. For example -

https://community.checkpoint.com/message/1151

Robert.

Re: Rule export

Andrey_Gromov — Mon, 27 Nov 2017 09:55:25 GMT

Thanks for your response. But....popular? maybe. Easy? unlikely. I spent 3 hours reading documentation.

Filter .rulebase[].rulebase[0:][].comments got me necessary information partly. But I also needed the source, the destination and the service for those rules. That's crazy.

Re: Rule export

Robert_Decker — Mon, 27 Nov 2017 10:15:45 GMT

I'm sorry to hear this.

You need some scripting abilities to parse API commands output.

Did you finally manage to get all info you needed?

Here is an additional link that may be useful for you:

https://community.checkpoint.com/thread/6229-how-to-parse-json-output-from-r80-management-api-with-jq