topic Command to export everything from the mgmt_CLI? in API / CLI Discussion

Command to export everything from the mgmt_CLI?

Charly — Fri, 03 Jul 2020 13:00:02 GMT

Hi People,

Is there a command to show the complete config at once from the mgmt_CLI?

We use Kiwi Cattools and would like to have the policy rules and other configurations backed up every day and make the differences visible. We are using this tool for several devices but it would be nice to add the CheckPoint policy rules to.

Kind regards,

Charly

Re: Command to export everything from the mgmt_CLI?

PhoneBoy — Sun, 05 Jul 2020 23:09:50 GMT

This cannot be done for a couple reasons:

1. Not everything can be configured from mgmt_cli.
2. There is no one single mgmt_cli command that will dump the entire security policy configuration.
3. Such commands would also miss configuration changes made via e.g. clish or Gaia WebUI.

Your best bet would be to do one or more of the following:

1. Review audit logs for changes (those should be documented)
2. If you must have it in a file, use one of the various methods for exporting the configuration and do diffs on that day-to-day. Couple possibilities:
https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/CLI-API-Example-for-exporting-importing-and-deleting-different/m-p/40850
https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Python-tool-for-exporting-importing-a-policy-package-or-parts-of/m-p/41100
https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Show-Package-Tool-to-visualize-a-R80-policy-package-over-HTML/m-p/39821

Re: Command to export everything from the mgmt_CLI?

_Val_ — Mon, 06 Jul 2020 08:44:03 GMT

@Charly Or, just use "migrate export" or "backup" command from the CLI, with or without Gaia API