topic Export with API for re-import in API / CLI Discussion

Export with API for re-import

Don_Paterson — Thu, 05 Aug 2021 23:15:57 GMT

Is there a compilation of options for export with the API commands and Python options in a single thread?

For example, is there a step-by-step guide to do export on an SMS in expert mode or via a remote machine with Python installed (admin Windows 10 PC)?

There are a lot of good threads but no clean walk through guides that I have found

https://community.checkpoint.com/t5/API-CLI-Discussion/Python-tool-for-exporting-importing-a-policy-package-or-parts-of/td-p/41100

Thanks,

Don

Re: Export with API for re-import

Danny — Thu, 05 Aug 2021 23:25:54 GMT

I always use Check Points Management API Reference as a starting point and the officially supported ExportImportPolicyPackage or ShowPolicyPackage, depending on what I'm trying to achieve. The ShowPolicyPackage easily provides me with a JSON export I can work with, but I haven't tried yet to re-import into a fresh SMS.

Re: Export with API for re-import

Don_Paterson — Thu, 05 Aug 2021 23:25:46 GMT

Yes, that is good, especially the Tips & Best Practices, with the examples with jq.

And then there are these options:

mgmt_cli –r true show hosts limit 250 --format json | jq -r '.objects[] | (“add host name “ + .name + “ ipv4-address ” + .”ipv4-address”)'

I am looking for a bit of a dummy guide to that ExportImportPolicyPackage 🙂

https://github.com/CheckPointSW/ExportImportPolicyPackage

Re: Export with API for re-import

Danny — Thu, 05 Aug 2021 23:30:11 GMT

That's why my go-to solution is often ShowPolicyPackage as explained above. Plus it's already pre-installed on newer SMSs. Just run $MDS_FWDIR/scripts/web_api_show_package.sh

Re: Export with API for re-import

Don_Paterson — Thu, 05 Aug 2021 23:43:41 GMT

That's great, thanks Danny.

There was mention a few years ago about about an API command to get the config out in the format that it would need to be in to go (straight) back in (into the API). The jq options helps to filter the api output, ready to go back in but I wonder if it could be easier.

Obviously migrate export/migrate_server etc. are the DR backup, and essential but I am wondering if there is an API option (maybe via Python) to get the web_api_show_package back in via the API or the top option (API command to get the config out in the format that it would need to be in to go back in (into the API).

Rgds,

Don

Re: Export with API for re-import

Danny — Fri, 06 Aug 2021 00:06:03 GMT

Maybe the PostgreSQL database backup is also worth to be checked as an alternative to migrate export/migrate_server.

Export: pg_dump dbname > outfile
Import: psql dbname < infile

Re: Export with API for re-import

cosmos — Tue, 30 Aug 2022 06:42:41 GMT

I would love to be able to export/import parts of the config, policy & objects in some kind of standard format without having to use external tools that may not be reachable (think proper appliance with no shell)