topic Re: Way to systematically identify which network policies are assinged to which gateways in General Topics

Way to systematically identify which network policies are assinged to which gateways

Dany6195 — Thu, 12 Jan 2023 06:10:23 GMT

Dear Team,

I am trying to find a procedure in the mgmt_cli from management server to identify the below systematically

1. Identify all the security policies defined in the management server

2. Map which policies are assigned to which gateways

I found command to only list down all the gateways configured under a mgmt server but not the linked policy

gns3-mgtsrv> mgmt_cli show simple-gateways
objects:
- uid: "2c443bfc-2931-4d04-9e89-d8226e4f6c21"
name: "gns3-cpfw1"
type: "simple-gateway"
domain:
uid: "41e821a0-3720-11e3-aa6e-0800200c9fde"
name: "SMC User"
domain-type: "domain"
from: 1
to: 1
total: 1

Re: Way to systematically identify which network policies are assinged to which gateways

Alex- — Thu, 12 Jan 2023 09:52:24 GMT

Use the show-packages call with details-level full, it will show all policy packages on your management server and contain the target-name and target-uid for each of them.

Re: Way to systematically identify which network policies are assinged to which gateways

Tal_Paz-Fridman — Thu, 12 Jan 2023 10:01:57 GMT

To see the actual command installed on the Security Gateway use the cpstat command.

On the Security Management Server run:

cpstat fw -h <IP of Security Gateway>

Re: Way to systematically identify which network policies are assinged to which gateways

Dany6195 — Thu, 12 Jan 2023 10:28:24 GMT

Thank you so much Tal, this worked like a charm 🙂