topic Re: Covert Check Point Security Policy to an Access Control List in General Topics

Covert Check Point Security Policy to an Access Control List

Networks_Team_B — Wed, 24 Apr 2024 13:06:09 GMT

Does anyone know if there are any tools that can be used to convert a security policy to an Access Control List?

Doing this manually would be very time consuming and could result in human error.

Many thanks

Re: Covert Check Point Security Policy to an Access Control List

PhoneBoy — Wed, 24 Apr 2024 13:28:08 GMT

The policy can be extracted from the management via REST API, which can be used to create ACLs from programmatically.
The target vendor may provide a conversion utility to assist with this.

Re: Covert Check Point Security Policy to an Access Control List

Tal_Paz-Fridman — Wed, 24 Apr 2024 14:02:42 GMT

You might also consider defining the target object in SmartConsole and installing policy directly on it.

We have not updated this object type for a while but it is worth experimenting in the lab first.

The object type is OSE Device.

Also refer to https://support.checkpoint.com/results/sk/sk98004

You can also see the file in the Management Server:

The <conf_file> is the $FWDIR/conf/<Name_or_IP_Address_of_Router_Object>.cl file. This file does not exist when configuring the router network object in SmartDashboard / SmartConsole. This file is created by installing the ACL from SmartDashboard / SmartConsole, when the router is not connected to the Security Management Server / Domain Management Server.