topic Re: Is there any way to extract ALL service port (eg http tcp 80, https tcp 443) from Smart console in API / CLI Discussion

Is there any way to extract ALL service port (eg http tcp 80, https tcp 443) from Smart console

martylee — Wed, 28 Dec 2022 09:29:50 GMT

Is there any way to extract ALL service port (eg http tcp 80, https tcp 443) from Smart console or command line ?

Please note that I mean **ALL** and after the extraction, I need to write a python script to convert, say, from http to 80.

Re: Is there any way to extract ALL service port (eg http tcp 80, https tcp 443) from Smart console

G_W_Albrecht — Wed, 28 Dec 2022 09:40:45 GMT

Please explain what you want to achieve - and what you mean with "extract", show used service ports ? "Smart console or command line" looks like you want logs ?

Re: Is there any way to extract ALL service port (eg http tcp 80, https tcp 443) from Smart console

PhoneBoy — Wed, 28 Dec 2022 13:46:07 GMT

From SmartConsole itself? Probably not.
It’s definitely possible through the API (meaning also possible from CLI), but it will require multiple calls to obtain all the data.
Two programs that will do this (among other data):

Re: Is there any way to extract ALL service port (eg http tcp 80, https tcp 443) from Smart console

martylee — Thu, 29 Dec 2022 16:33:25 GMT

I am now migrating some check point access rules to Azure NSG.

I export the rules from Smart console GUI (see picture) and the Service port is in the form of Name (http snmp etc), instead of tcp or udp numbers. I need to create a text file from which I can use python to convert, say http, to tcp 80.

Re: Is there any way to extract ALL service port (eg http tcp 80, https tcp 443) from Smart console

PhoneBoy — Thu, 29 Dec 2022 16:50:44 GMT

Instead of taking that approach, use the API to export the relevant Access Policy using the show-access-rulebase endpoint.
There is an option (show-as-ranges true) that will convert the hosts and services to their numerical values.
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-access-rulebase~v1.9%20