Export Specific Rules to CSV for a given object

[Voxx3l]

Hello,

I am trying to see if there is a good way to export specific policy rules to csv; only rules with a certain IP/Object. I know I can use the API, and other tools to export entire policies to .csv, but I only want rules that contain a specific object. The object/object rules I am looking for are used in many rules across different policies that all reside within the same SMC. So basically if I could export only the things that the "where used" option shows, that would be about perfect.

Thank you!

[PhoneBoy]

The results of the where-used API call should be able to provide you a list of rule UIDs, which you could then iterate over and show in the desired format.

[Voxx3l]

Hey thanks for the reply. Is there documentation for dumping that? I found something for the web-tool, but I didn't see anything for the API. I'm probably just looking in the wrong spot.

[Bob_Zimmerman · Accepted solution]

To help simplify application audits, I built a tool to do exactly that:

https://community.checkpoint.com/t5/API-CLI-Discussion/Export-all-rules-referencing-a-list-of-IPs/m-...

You can find the latest version on Github here:

https://github.com/Bob-Zimmerman/ipsToRulesCP

[Voxx3l]

Thank you! 

This is the closest thing I have seen to what I want. So I'll work with this for now.

[dehaasm]

Hi Bob is this tool suitable for R82?

[Bob_Zimmerman]

I haven't been directly involved in the work which uses this script at my company in a while, but I haven't had complaints from coworkers on our R82 managements. Just tested on an R82.10 management and it worked there.

[PhoneBoy]

The script should also work on R82 as the underlying APIs queried by the script haven't changed.