<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: CLI policy fetch in Spark Firewall (SMB)</title>
    <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/CLI-policy-fetch/m-p/238795#M11975</link>
    <description>&lt;P&gt;I know that in Quantum Security Gateway (not Spark)&amp;nbsp;&lt;SPAN&gt;you cannot fetch the policy if there is no policy already installed on the device. Fetch co&lt;/SPAN&gt;&lt;SPAN&gt;mmand is designed to update an existing policy on the gateway. If there is no policy currently installed, the fetch operation will not have a baseline to compare against and update.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;It is probably the same in Quantum Spark.&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 16 Jan 2025 13:35:54 GMT</pubDate>
    <dc:creator>Tal_Paz-Fridman</dc:creator>
    <dc:date>2025-01-16T13:35:54Z</dc:date>
    <item>
      <title>CLI policy fetch</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/CLI-policy-fetch/m-p/238786#M11974</link>
      <description>&lt;P&gt;I'm currently creating some autoconfig.clish files to deploy a handful of Spark 1535/55 gateways.&lt;/P&gt;&lt;P&gt;The scripts run fine, setting the password, WAN/LAN ip's, ntp etc, then set's the SIC and connects to a central management server.&lt;/P&gt;&lt;P&gt;The final command is to fetch the policy but this fails.&lt;/P&gt;&lt;P&gt;I can go to the management server and install the policy no problem, and after doing so I can run the CLI command again and it works correctly.&lt;/P&gt;&lt;P&gt;Is this an expected behaviour, whereby you can't pull the policy if there is no policy already on the box?&lt;/P&gt;&lt;P&gt;I can't see anything that says you must install the first policy from the management server,&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 16 Jan 2025 13:10:12 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/CLI-policy-fetch/m-p/238786#M11974</guid>
      <dc:creator>Steve_Pearson</dc:creator>
      <dc:date>2025-01-16T13:10:12Z</dc:date>
    </item>
    <item>
      <title>Re: CLI policy fetch</title>
      <link>https://community.checkpoint.com/t5/Spark-Firewall-SMB/CLI-policy-fetch/m-p/238795#M11975</link>
      <description>&lt;P&gt;I know that in Quantum Security Gateway (not Spark)&amp;nbsp;&lt;SPAN&gt;you cannot fetch the policy if there is no policy already installed on the device. Fetch co&lt;/SPAN&gt;&lt;SPAN&gt;mmand is designed to update an existing policy on the gateway. If there is no policy currently installed, the fetch operation will not have a baseline to compare against and update.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;It is probably the same in Quantum Spark.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 16 Jan 2025 13:35:54 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Spark-Firewall-SMB/CLI-policy-fetch/m-p/238795#M11975</guid>
      <dc:creator>Tal_Paz-Fridman</dc:creator>
      <dc:date>2025-01-16T13:35:54Z</dc:date>
    </item>
  </channel>
</rss>

