topic How to replace cp_merge tool in R80.10 ? in API / CLI Discussion

How to replace cp_merge tool in R80.10 ?

CER_integration — Tue, 06 Feb 2018 17:16:05 GMT

Hello everyone,

I have migrate cma-R77.30 on a MDS-R80.10. In my previous version (R77.30), I currently used cp_merge to count policy rules and then I currently used dbedit to create new objects and insert new rules at the end of policy table (scripting to add rule from csv).

- cp_merge workaround ?

In R77.30 I currently use cp_merge utility to export policy in my exploitation tool. My issue is that cp_merge utility can't be use in R80.10 (this tool is obsolete). How can I list all policy of my new cma-R80.10 and how can I export a policy ? (Do I need to use python scripts ?) can you describe the best way to do it with an example please ?

- dbedit

I haven't test yet but is it possible to used dbedit tool to create object and policy in my cma-R80.10 ?

To resume, what is the best way in R80.10 to add several objects and rules in an existing cma that contains some existing objects and rules ? Please, an example would be very apprieciate.

Thanks for your help. Regards,

Eric

Re: How to replace cp_merge tool in R80.10 ?

Tomer_Sole — Fri, 21 Jun 2019 09:15:16 GMT

Hi, R80.10 provides new REST API's for security management data.

Please see the following resources:

Check Point - Management API reference

Show Package - Tool to present a policy package over HTML pages

Python tool for exporting/importing a policy package or parts of it

https://community.checkpoint.com/docs/DOC-2172

Re: How to replace cp_merge tool in R80.10 ?

G_W_Albrecht — Wed, 07 Feb 2018 13:05:55 GMT

Just as an addition: That question is already answered in sk33751 Using cp_merge utilility - Important: in R80 and later, the cp_merge tool is obsolete and does not work. Refer to Check Point CheckMates Community for an alternative tools such as the one described in this article for exporting/importing a policy package (that is the Python tool for exporting/importing a policy package or parts of it from Tomers answer...).