topic Re: SmartMove in SmartMove

SmartMove

PhoneBoy — Sun, 19 May 2019 15:17:19 GMT

Overview

Check Point SmartMove tool enables you to convert 3rd party database with firewall security policy and NAT to Check Point database.

The tool parses Cisco ASA (version 8.3 and above), JunOS (version 12.1 and above), ScreenOS (version 6.3 and above), Fortinet (FortiOS version 5 and above), and Palo Alto Networks (Version 7 and above) configuration file and converts its objects, NAT and firewall policy to a Check Point R80.x compliant policy. For PAN, we also convert application definitions (including Application Groups and Application Filters).

The tool is planned to support additional vendors and security configurations in the future.

The tool generates bash scripts by utilizing Check Point Management API's command line interface, to migrate the converted policy into a R80.x Management (or Multi-Domain) server.

Description

The tool is developed using Microsoft C# language and .Net framework version 4.5 (WPF application). The project solution file is configured for Microsoft Visual Studio 2012 and above.

Instructions

Code is available on GitHub: SmartMove

Tool can be downloaded from: sk111546

Code Version

Code version 0.0.0

Tested on version

R80.10, API version 1.1

NOTICE: By using this sample code you agree to terms and conditions in this Terms and Conditions

...

Re: SmartMove

yael_haker — Thu, 22 Jun 2017 07:48:26 GMT

All the information about SmartMove is available on sk115416

Watch Video

Link to Partners Map

Re: SmartMove

yael_haker — Mon, 18 Sep 2017 07:39:46 GMT

There is a new version (1.4.6469.18822) available for SmartMove . It can be downloaded from sk115416

Re: SmartMove

Robert_Decker — Thu, 02 Nov 2017 09:35:40 GMT

Hi All,

Just released a new version of the tool - added a support for Juniper JunosOS and ScreenOS configurations.

Please refer to sk115416.

Enjoy!

Re: SmartMove

Tommy_Kim — Tue, 14 Nov 2017 01:54:14 GMT

Hello,

I wonder how it can convert from junos 12.1 to R77.30 version?

Anyone try it have ?

Re: SmartMove

PhoneBoy — Tue, 14 Nov 2017 06:13:43 GMT

SmartMove cannot be used to move configurations to R77.30 versions of Check Point.

R80.10 is the minimum supported version per the SK.

Re: SmartMove

Robert_Decker — Tue, 14 Nov 2017 08:02:06 GMT

Following up Dameon's answer, the source code of SmartMove is open to public on GitHub.

Anyone is free to download it and modify it to perform any task.

Re: SmartMove

Maarten_Sjouw — Thu, 29 Mar 2018 09:12:21 GMT

Any plans for a Palo Alto converter?

Re: SmartMove

Robert_Decker — Thu, 29 Mar 2018 09:15:49 GMT

This vendor migration support is planned for this year.

Please stay tuned.

Robert.

Re: SmartMove

Ammar_Al-obaidi — Wed, 11 Apr 2018 01:09:59 GMT

Hi Yael.

I cant access the SK. As I dont have advanced access. any idea how to get this access? I need to migrate 4 ASAs to CP firewalls

Re: SmartMove

Robert_Decker — Thu, 19 Apr 2018 19:38:57 GMT

Hi Ammar,

I'll ask our SK publishers on next Sunday to make the acces regular.

Robert.

Re: SmartMove

Ammar_Al-obaidi — Mon, 23 Apr 2018 05:09:20 GMT

Thanks @Robert Deck, Much appreciated!!

Re: SmartMove

Robert_Decker — Tue, 24 Apr 2018 08:24:18 GMT

Done. Please try again, it should be accessible now.

Robert.

Re: SmartMove

Ammar_Al-obaidi — Thu, 26 Apr 2018 01:51:47 GMT

I was able to download it. thanks a lot!

Re: SmartMove

Danny — Wed, 04 Jul 2018 08:40:44 GMT

I cannot access sk115416 anymore. It says: To view this solution, higher access level is required.

Re: SmartMove

Robert_Decker — Wed, 04 Jul 2018 08:55:05 GMT

Hi Danny,

I've just asked our technical publications team to fix this.

Robert.

Re: SmartMove

Petr_Hantak — Wed, 04 Jul 2018 19:08:06 GMT

What about Fortinet convertor, any plans there as well?

Re: SmartMove

Robert_Decker — Wed, 04 Jul 2018 19:23:36 GMT

On the way, will be available soon.

PAN will follow.

Robert.

Re: SmartMove

Ronen_Zel — Thu, 05 Jul 2018 06:28:07 GMT

The solution is now external again so you should be able to access it.

Re: SmartMove

Petr_Hantak — Thu, 05 Jul 2018 19:22:40 GMT

Yes it is available now. The SK is written very well.