topic Re: Extracting detailed rulebase in API / CLI Discussion

Extracting detailed rulebase

ar_engineer — Fri, 10 Jul 2020 14:48:27 GMT

Hi Experts,

I need to export access control policy rule based I understand I can do via GUI export but I need to perform this task from clish reason is protocol service group net-logon won’t show full ports allowed under that service group on CSV export.

Is there a way to do this on gateway?Any expert guidance will be appreciated

regards,

Re: Extracting detailed rulebase

Danny — Fri, 10 Jul 2020 18:17:27 GMT

You can easily export it in CLI expert mode by using $MDS_FWDIR/scripts/web_api_show_package.sh but I'm not aware of a method via Clish (user mode).

Re: Extracting detailed rulebase

Tal_Paz-Fridman — Sun, 12 Jul 2020 07:02:23 GMT

Hi,

Just to clarify, the problem you encountered with export using SmartConsole is that it does not show the individual services that are part of the Group?

Thanks

Re: Extracting detailed rulebase

ar_engineer — Sun, 12 Jul 2020 08:32:20 GMT

Hi yes experience same issue as you mentioned

thanks

Re: Extracting detailed rulebase

ar_engineer — Sun, 12 Jul 2020 08:32:57 GMT

Ok sure I will try this solution

Many thanks

Re: Extracting detailed rulebase

Tal_Paz-Fridman — Sun, 12 Jul 2020 08:36:09 GMT

Thanks for confirmation and feedback

I will check internally if we can improve this behavior in future versions.

Thanks

Tal

Re: Extracting detailed rulebase

Gera_Dorfman — Sun, 12 Jul 2020 11:57:27 GMT

You can add clish command using user defined (extended) commands mechanism

https://sc1.checkpoint.com/documents/R80.20_M1/WebAdminGuides/EN/CP_R80.20_M1_Gaia_AdminGuide/html_frameset.htm?topic=documents/R80.20_M1/WebAdminGuides/EN/CP_R80.20_M1_Gaia_AdminGuide/162441