topic SmartMove new version June 2021 in SmartMove

SmartMove new version June 2021

Ofir_Shikolski — Wed, 23 Jun 2021 04:55:56 GMT

Now, we can also run SmartMove from the CLI.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk115416

Downloads

Click here to get the open Source repository.
Click here to download the Check Point SmartMove Tool.

Usage:

SmartMove.exe [-s config_file_name] [-v vendor] [-t target_folder] [-d domain] [-n] [-l LDAP_Account_unit] [-k]

Mandatory flags:

`-s \| --source`	Full path to the vendor configuration file
`-v \| --vendor`	Vendor for conversion (available options: CiscoASA, JuniperSRX, JuniperSSG, FortiNet, PaloAlto, Panorama)

Optional flags:

`-t \| --target`	Migration output folder
`-d \| --domain`	Domain name (for CiscoASA, JuniperSRX, JuniperSSG only)
`-n \| --nat ("-n false" \|" -n true" [default])`	Convert NAT configuration [enabled by default]
`-l \| --ldap`	LDAP Account unit for convert user configuration option (for FortiNet, PaloAlto, and Panorama only)
`-k \| --skip ("-k false" \|" -k true" [default])`	Do not import unused objects (for FortiNet, PaloAlto and Panorama only) [enabled by default]
`-f \| --format`	Format of the output file (JSON[default], TEXT)

Example:

SmartMove.exe -s "D:\SmartMove\Content\config.txt" -v CiscoASA - t "D:\SmartMove\Content" -n true -k false -f json

Re: SmartMove new version June 2021

JaeYoung_An — Tue, 22 Jun 2021 08:28:16 GMT

How can i download latest Version?

i think that Latest version is not available in official site

download link information

https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=55183

Re: SmartMove new version June 2021

the_rock — Tue, 22 Jun 2021 14:20:47 GMT

I think tool is actually really good. I used it twice for Cisco conversion and worked fine both times. One odd thing I found, but not real sure if this is just cosmetic or way tool works...for example, if you run show runn on Cisco from enable mode and then output it into text file, conversion may not work right, so what you need to do is go to conf t mode on Cisco, run pager 0 and that will eliminate "page breaks" when running any commands, so you dont need to keep pressing space bar on your keyboard.

Anyway, thought would share this, if anyone else encountered this problem.

Re: SmartMove new version June 2021

Ofir_Shikolski — Tue, 22 Jun 2021 18:08:14 GMT

From here: https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=55183

I uploaded the version to the same link id 🙂

if there are issues, please let me know .

Re: SmartMove new version June 2021

Ofir_Shikolski — Tue, 22 Jun 2021 18:09:59 GMT

Thanks for the feedback 🙂

I added it a few weeks ago to the SmartMove SK.

Cisco configuration migration:

Before you run SmartMove, replace DHCP / DAIP interfaces with static IP addresses on your cisco Gateway.

Get the Cisco configuration file from the gateway. See vendor documentation for "show configuration" commands.

SSH:https://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/S/cmdref3/s12.html " -> "terminal pager 0" ->show running-config"

ASDM: https://www.cisco.com/c/en/us/td/docs/security/asa/asa97/asdm77/general/asdm-77-general-config/admin-swconfig.html#ID-2152-000009af
On the ASDM we need to drive to Tools>Backup Configurations, select 'running-configuration', browse the folder we would like to save the ASA configuration, click backup and wait until you get the confirmation message.
Once this is done we get a .zip file with the ASA configuration

Re: SmartMove new version June 2021

JaeYoung_An — Wed, 23 Jun 2021 01:04:51 GMT

I downloaded from the link

but CLI command was not working in CMD

i confirmed files, last modified date is 23 May.

i think that new version of smartmove is 6.2,but the version is 6.0 in official site

Re: SmartMove new version June 2021

Ofir_Shikolski — Wed, 23 Jun 2021 05:42:13 GMT

My mistake, I re-uploaded it

Re: SmartMove new version June 2021

Ian — Thu, 24 Jun 2021 14:18:52 GMT

Is the "asa-spread-acl-remarks" flag still supported with the latest SmartMove.exe? This was an undocumented option that was needed to fully migrate comments from ASA rules to Check Point comments.

Re: SmartMove new version June 2021

the_rock — Thu, 24 Jun 2021 14:21:27 GMT

I never seen that issue even in older version, always worked fine...after migrating, I was able to see all the comments that where there for Cisco rules.

Re: SmartMove new version June 2021

Ian — Thu, 24 Jun 2021 14:30:54 GMT

Interesting, we've always needed that option. Because of the way ASA comments it's rules in chunks (one comment covers multiple rules) if there are multiple rules under the same 'comment', SmartMove will only migrate that comment into the first rule only. By launching SmartMove.exe with the 'asa-spread-acl-remarks' flag, the ASA comments will 'spread' and be copied to each individual rule. I don't believe it was every documented though.

Re: SmartMove new version June 2021

Ofir_Shikolski — Fri, 25 Jun 2021 06:24:32 GMT

"asa-spread-acl-remarks" is support and documented 🙂