topic Re: need help removing a bad NAT in the Command line in Spark Firewall (SMB) https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16973#M544 <HTML><HEAD></HEAD><BODY><P>Can you not use "fw unloadlocal" ? to temporarily unload the policy from the appliance and then make necessary NAT changes and deploy the policy again.</P></BODY></HTML> Tue, 18 Dec 2018 10:41:51 GMT Ahmed_Ali 2018-12-18T10:41:51Z need help removing a bad NAT in the Command line https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16972#M543 <HTML><HEAD></HEAD><BODY><P>I locked myself out of the firewall by not paying attention to the NAT rule. its no good and I cant figure out what command I need to remove it from the command line. (since I cant get back into the web interface) please help I don't want to have to start from square 1. I have <SPAN lang="EN"></SPAN></P><P>R77.20.81</P><P>thanks</P></BODY></HTML> Mon, 17 Dec 2018 21:07:16 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16972#M543 Lee_Doran 2018-12-17T21:07:16Z Re: need help removing a bad NAT in the Command line https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16973#M544 <HTML><HEAD></HEAD><BODY><P>Can you not use "fw unloadlocal" ? to temporarily unload the policy from the appliance and then make necessary NAT changes and deploy the policy again.</P></BODY></HTML> Tue, 18 Dec 2018 10:41:51 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16973#M544 Ahmed_Ali 2018-12-18T10:41:51Z Re: need help removing a bad NAT in the Command line https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16974#M545 <HTML><HEAD></HEAD><BODY><P>that worked but how to I enable the local again after running "fw unloadlocal"? sorry i'm still new to these firewalls</P></BODY></HTML> Tue, 18 Dec 2018 12:17:19 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16974#M545 Lee_Doran 2018-12-18T12:17:19Z Re: need help removing a bad NAT in the Command line https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16975#M546 <HTML><HEAD></HEAD><BODY><P>Hi Lee,</P><P></P><P>1) You can push the policy from the smart dashboard to the&nbsp;gateway.</P><P>2) or you can run this command in the gateway cli "<STRONG style="color: #333333; background-color: #ffffff; border: 0px; font-weight: bold;">fw fetch InsertYourManagementServerName"</STRONG></P><P></P><P><STRONG style="color: #333333; background-color: #ffffff; border: 0px; font-weight: bold;">&nbsp;</STRONG></P></BODY></HTML> Tue, 18 Dec 2018 14:27:15 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16975#M546 Ahmed_Ali 2018-12-18T14:27:15Z Re: need help removing a bad NAT in the Command line https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16976#M547 <HTML><HEAD></HEAD><BODY><P>Hello Ahmed,</P><P>smart dashboard --not sure what that is.&nbsp;It is a locally managed firewall</P><P>haven't done a management server yet.</P></BODY></HTML> Tue, 18 Dec 2018 16:51:51 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16976#M547 Lee_Doran 2018-12-18T16:51:51Z Re: need help removing a bad NAT in the Command line https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16977#M548 <HTML><HEAD></HEAD><BODY><P>Given that it's R77.20.81 - I'm assuming that this is a 700-series or 1400-series appliance?</P><P></P><P>So it's plausible that there might not be a management server, and SmartDashboard might not be an option.</P></BODY></HTML> Tue, 18 Dec 2018 17:29:19 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16977#M548 Ben_Dunkley 2018-12-18T17:29:19Z Re: need help removing a bad NAT in the Command line https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16978#M549 <HTML><HEAD></HEAD><BODY><P>1200R firewall</P></BODY></HTML> Tue, 18 Dec 2018 18:19:04 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16978#M549 Lee_Doran 2018-12-18T18:19:04Z Re: need help removing a bad NAT in the Command line https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16979#M550 <HTML><HEAD></HEAD><BODY><P>In the future, please post queries about the 1200R in the&nbsp;<A href="https://community.checkpoint.com/space/2036">SMB and SMP</A>‌ space so you are provided the most relevant help.</P><P></P><P>The CLI command to show NAT rules is <STRONG>show nat-rules</STRONG></P><P>Once you figure out what position the erroneous NAT rule is in, you can use <STRONG>delete nat-rule position X</STRONG> to remove the erroneous rule.</P><P>See also:&nbsp;<A class="link-titled" href="https://sc1.checkpoint.com/documents/R77.20.80/CLI_Guide/html_frameset.htm" title="https://sc1.checkpoint.com/documents/R77.20.80/CLI_Guide/html_frameset.htm">Check Point 600/700/1100/1200R/1400 Appliance R77.20.80 Technical Reference Guide</A>&nbsp;</P></BODY></HTML> Tue, 18 Dec 2018 18:32:14 GMT https://community.checkpoint.com/t5/Spark-Firewall-SMB/need-help-removing-a-bad-NAT-in-the-Command-line/m-p/16979#M550 PhoneBoy 2018-12-18T18:32:14Z