topic Re: Retrieving Policy from Firewall in General Topics

Retrieving Policy from Firewall

KallieM — Mon, 16 Oct 2023 17:52:57 GMT

Good Day, is it possible to get assistance on how to retrieve a copy of the policy from a legacy R77.20 when te manager is not available anymore?

Re: Retrieving Policy from Firewall

PhoneBoy — Mon, 16 Oct 2023 22:33:47 GMT

Unfortunately, it's a fairly manual procedure.
See: https://community.checkpoint.com/t5/Management/Recover-policy-after-management-crash/m-p/135868#M28969

Re: Retrieving Policy from Firewall

the_rock — Mon, 16 Oct 2023 22:37:06 GMT

Yep, what @PhoneBoy gave you is the only way actually.

Andy

Re: Retrieving Policy from Firewall

KallieM — Tue, 17 Oct 2023 07:57:04 GMT

Good Day, thank you for the reply. Much appreciated. In my case i cannot even get to the file system of the management station. Thus I cannot retrieve the files mentioned in the article. It would be helpful if ican some how get the information (files) from the actual gateway even if it is just viewing the objects, rules and config in a readable format foe me to start building a config from scratch.

Re: Retrieving Policy from Firewall

G_W_Albrecht — Tue, 17 Oct 2023 08:25:35 GMT

The only place that information is available are a SMS CPinfo or backup / export.

Re: Retrieving Policy from Firewall

the_rock — Tue, 17 Oct 2023 10:13:14 GMT

Sadly, you can NOT get that info from the gateway.

Andy

Re: Retrieving Policy from Firewall

PhoneBoy — Tue, 17 Oct 2023 13:57:37 GMT

$FWDIR/state/local/FW1 on the gateway may have some information that can be useful in these situations.
Check Point Professional Services can also assist with this sort of recovery.

Re: Retrieving Policy from Firewall

the_rock — Tue, 17 Oct 2023 19:16:07 GMT

I see what Phoneboy mentioned about that dir on the gateway (/opt/CPsuite-R81.20/fw1/state/local/FW1...except in your case R77.20), but based on files listed there, you could be limited as far as info you might be able to get.

You could also navigate to /opt/CPsuite-R81.20/fw1/state/__tmp/FW1, but seems even files there are very similar.

Anyway, appears that would be your only option : - (

Andy

Re: Retrieving Policy from Firewall

ilRobby — Thu, 06 Mar 2025 18:09:44 GMT

Hello Andy/ @PhoneBoy, forgive me if I reopen the topic but, today maybe is there any alternatives?
I've lost management (81.30) and its backup in one shot... I've a older vm snapshot (1 year ago)...
There is no "new" way to retreive policy from gateways?
I can't open TAC to CP, I'm a customer but, this trouble has happened on my lab env. at home..! ☹️