ShowPolicyPackage how to get IP addresses , not UIDs

[javiermi]

I have found this tool on github and is brilliant!

https://github.com/CheckPointSW/ShowPolicyPackage

However, for some reason, I only can see the objects with their UIDs, which is not particularly useful

I'm possibly missing something, but is there an easy way of getting the information with the Name and IP addresses ?

Also, I can see the object list seems to be in json format, would it be possible to get the objects in CSV format?

[_Val_]

Have you seen sk168615?

[javiermi]

Thanks

I have exported the policy, but it only gives the names of the objects

For example it lells me there is a rule from group "group1" to "group2" for sevices "servivegroup1", but it does not gie any insight an what those group have inside.  Running the showpolicypackage script I get all of that, but the group, all contain objects with their UIDs, no names, no IPs

Hope I'm making sense!

[_Val_]

My understanding was, all objects are showing in json file with UIDs only. If you are referring specifically to the groups, use "--dereference-group-members true" flag.

Also the tool should actually create not just json file, but also HTML files, where all objects are listed with details. 

You can also refer to this discussion: https://community.checkpoint.com/t5/API-CLI-Discussion/Show-Package-Tool-to-visualize-a-R80-policy-p...

[javiermi]

Thanks for your reply

I will try the deference option, but is a pity is not clearly explained what that means on the README

In my case the current installed version does not support that, so I will need to upgrade to the last version

I will let you know

Thanks

[javiermi]

I think that did the trick: now I can see the group members by name and IP address

Regarding the group lists you are right they are on the HTML files, but to create a list with group names and contents can be a bit tricky

Thanks!!

[_Val_]

Just one note. using deference actually loads your management API quite hard. Keep an eye on that.

[javiermi]

Thanks for the tip

I didn't know that, but I noticed  that Managent Server was a bit busier than normally

The good thing is this was a small policy so it didn't take too long