topic Question regarding export of firewall configuration. in General Topics

Question regarding export of firewall configuration.

kb1 — Mon, 17 Feb 2020 17:39:28 GMT

Is there a way to export the full Check Point firewall configuration in a machine readable format (text, CSV, JSON, HTML etc.)? For example we can see the firewall interface table within the SmartConsole application but can not copy or export the data. The same for the routing table. We can export some of the network objects but not the Network groups.

Using R80.20 on the mgmt servers.

Regards.

Re: Question regarding export of firewall configuration.

PhoneBoy — Mon, 17 Feb 2020 20:50:50 GMT

There's two elements of the device configuration: Operating System level and Security Policy.
Operating system level can be achieved with a "show configuration" on the CLI.
For the Security Policy, see: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Show-Package-Tool-to-visualize-a-R80-policy-package-over-HTML/td-p/39821

Re: Question regarding export of firewall configuration.

_Val_ — Tue, 18 Feb 2020 07:44:37 GMT

I see multiple ways here:

Policy, policy objects (including FW objects) can be pulled from MGMT via management API
OS configuration: interfaces, static routes, etc, can be taken as text via CLISH or via Gaia API

All mentioned tools are heavily documented and discussed here in the community