topic Re: SmartMove Nov 2021 update in SmartMove

SmartMove Nov 2021 update

Ofir_Shikolski — Mon, 15 Nov 2021 12:20:53 GMT

What's new:

Cisco:

Added option to generate a policy without unused objects

Added optimized policy as part of SmartConnector

Added SmartAnalyze in disable mode

Click here to download the Check Point SmartMove Tool.

Re: SmartMove Nov 2021 update

ChiefSec_CP — Mon, 06 Dec 2021 21:01:52 GMT

Is there a timeline for when SmartAnalyze will be enabled?

Re: SmartMove Nov 2021 update

genisis__ — Mon, 06 Dec 2021 21:05:38 GMT

The SK refers to R80 and R80.10, I take it this needs to be updated?

Re: SmartMove Nov 2021 update

Ofir_Shikolski — Tue, 07 Dec 2021 07:10:54 GMT

Hi @genisis__ ,

R80.10 and above.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk115416

Re: SmartMove Nov 2021 update

Ofir_Shikolski — Tue, 07 Dec 2021 07:14:09 GMT

Hi @ChiefSec_CP ,

We plan to release first version very soon.

The first version will only support Fortinet.

We will gradually add more vendors (Second: Cisco)

Re: SmartMove Nov 2021 update

Ofir_Shikolski — Wed, 08 Dec 2021 11:24:37 GMT

@ChiefSec_CP

We just released it: https://community.checkpoint.com/t5/SmartMove/SmartMove-Dec-2021-update/m-p/135790#M417

Re: SmartMove Nov 2021 update

KostasGR — Wed, 16 Feb 2022 17:49:37 GMT

Hello Ofir

In case we observe some bugs on SmartMove_B_6_0_8068_6581 version can we report them here?

For example see the below conversion errors.

The common pattern i can see is that are named as *-to- * and *-nets*.

Error creating a rule, missing information for source Cisco object: Object details: XYZ-nets. Using dummy object: _Err_in_topology-line_YZW.;

Can you replicate and maybe solve it on the next versions of SmartMove?

BR,
Kostas

Re: SmartMove Nov 2021 update

Ofir_Shikolski — Sun, 20 Feb 2022 12:00:56 GMT

Hi Kostas,

This error indicates an issue with the config file parser, this means that it needed to be handled prior to running smartmove.

Can you send me this file offline? ofirs@checkpoint.com

Re: SmartMove Nov 2021 update

KostasGR — Mon, 21 Feb 2022 10:25:37 GMT

Hello Ofir

The smartmove version 5.1.7668.31064 parses fine the same config file but in that version we can't have the cp_objects_opt.json file.

Is it a way to find more info by enabling debugging on SmartMove.exe and send you that info?

BR,
Kostas

Re: SmartMove Nov 2021 update

Ofir_Shikolski — Mon, 21 Feb 2022 11:58:39 GMT

Hi @KostasGR ,

It a very old version (5.1.7668.31064) since 2020 without optimization support.

Please download the new version of SmartMove : https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.DCFileAction&eventSubmit_doGetdcdetails=&fileid=55183

Re: SmartMove Nov 2021 update

KostasGR — Mon, 21 Feb 2022 18:15:00 GMT

Hello Ofir

I think that i can explain why this is happening. Maybe the latest version of Smartmove checks also for reserved words.

As far as i can read from https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk40179 -nets- and -to- are reserved words that should not be used within objects definition (i.e., Network Objects, Users, Groups, etc.).

As concerns duplicate objects checks with smartconnector method we have obseved that if a Group_A already on management server has a member a network 192.168.1.0/30 and an imported Group_B has 4 hosts 192.168.1.0-3 the Group A is not used instead of Group B.As a result a duplicate Group is imported.

BR,
Kostas

Re: SmartMove Nov 2021 update

Ofir_Shikolski — Tue, 22 Feb 2022 07:33:44 GMT

Hi Kostas,

SmartMove checks reserved words. (since day 1)

Since I do not have the file , it is hard to see it like you.

'missing information for source Cisco object '- this means an issue with the source object in the ACL.

About smartconnector - in case network rage 192.168.1.0/30 already exists, it will reuse it .

You can see the thread with which objects Smartconnector handles : https://community.checkpoint.com/t5/SmartMove/How-smartmove-latest-version-handle-duplicate-objects/m-p/140206

About Groups - Smartconnector only checks for existing names and not the content of it.

Re: SmartMove Nov 2021 update

KostasGR — Wed, 02 Mar 2022 15:30:08 GMT

Hello Ofir

One more issue with latest Smartmove/smartconnector with opt file. Any idea how to troubleshoot this ?

processing access rule: #22,
WARN: Runtime error: an eclipse error has occurred enable logging on EclipseLinkExceptionHandler to see full error
REPORT: access rule is not added

BR,
Kostas

Re: SmartMove Nov 2021 update

Ofir_Shikolski — Thu, 03 Mar 2022 06:54:40 GMT

Hi @KostasGR ,

This indicates about Quantum Security Management issue, the best will be to involve our support with that.

Re: SmartMove Nov 2021 update

datacenter — Wed, 13 Dec 2023 13:53:52 GMT

How can I download the old version of checkpoint smartmove?

Re: SmartMove Nov 2021 update

Ofir_Shikolski — Wed, 13 Dec 2023 15:06:20 GMT

https://github.com/CheckPointSW/SmartMove

Re: SmartMove Nov 2021 update

vikrantchaudhar — Thu, 14 Dec 2023 04:41:56 GMT

Thanks for reply but that is the code how can i use this. I don't have any idea how to use that.

Re: SmartMove Nov 2021 update

_Val_ — Thu, 14 Dec 2023 11:57:55 GMT

Look into sk115416, it has all you need.