topic Re: ShowPolicyPackage how to get IP addresses , not UIDs in API / CLI Discussion

ShowPolicyPackage how to get IP addresses , not UIDs

javiermi — Wed, 13 Oct 2021 10:37:46 GMT

I have found this tool on github and is brilliant!

https://github.com/CheckPointSW/ShowPolicyPackage

However, for some reason, I only can see the objects with their UIDs, which is not particularly useful

I'm possibly missing something, but is there an easy way of getting the information with the Name and IP addresses ?

Also, I can see the object list seems to be in json format, would it be possible to get the objects in CSV format?

Re: ShowPolicyPackage how to get IP addresses , not UIDs

_Val_ — Wed, 13 Oct 2021 10:48:36 GMT

Have you seen sk168615?

Re: ShowPolicyPackage how to get IP addresses , not UIDs

javiermi — Wed, 13 Oct 2021 11:38:55 GMT

Thanks

I have exported the policy, but it only gives the names of the objects

For example it lells me there is a rule from group "group1" to "group2" for sevices "servivegroup1", but it does not gie any insight an what those group have inside. Running the showpolicypackage script I get all of that, but the group, all contain objects with their UIDs, no names, no IPs

Hope I'm making sense!

Re: ShowPolicyPackage how to get IP addresses , not UIDs

_Val_ — Wed, 13 Oct 2021 12:33:41 GMT

My understanding was, all objects are showing in json file with UIDs only. If you are referring specifically to the groups, use "--dereference-group-members true" flag.

Also the tool should actually create not just json file, but also HTML files, where all objects are listed with details.

You can also refer to this discussion: https://community.checkpoint.com/t5/API-CLI-Discussion/Show-Package-Tool-to-visualize-a-R80-policy-package-over-HTML/m-p/39821

Re: ShowPolicyPackage how to get IP addresses , not UIDs

javiermi — Wed, 13 Oct 2021 13:30:53 GMT

Thanks for your reply

I will try the deference option, but is a pity is not clearly explained what that means on the README

In my case the current installed version does not support that, so I will need to upgrade to the last version

I will let you know

Thanks

Re: ShowPolicyPackage how to get IP addresses , not UIDs

javiermi — Wed, 13 Oct 2021 15:20:03 GMT

I think that did the trick: now I can see the group members by name and IP address

Regarding the group lists you are right they are on the HTML files, but to create a list with group names and contents can be a bit tricky

Thanks!!

Re: ShowPolicyPackage how to get IP addresses , not UIDs

_Val_ — Wed, 13 Oct 2021 15:32:03 GMT

Just one note. using deference actually loads your management API quite hard. Keep an eye on that.

Re: ShowPolicyPackage how to get IP addresses , not UIDs

javiermi — Wed, 13 Oct 2021 17:18:18 GMT

Thanks for the tip

I didn't know that, but I noticed that Managent Server was a bit busier than normally

The good thing is this was a small policy so it didn't take too long