cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Change "Install On" for all network objects

Does anyone know a CLI shortcut or any other method for changing the "Install On" gateway for network objects? We are migrating to a new HA cluster and Id really rather not marshal through several hundred objects and change the "Install on" for each. 

Thanks

5 Replies
Vladimir
Pearl

Re: Change "Install On" for all network objects

Are you referring to the NAT properties of the Network Objects? Objects themselves, I believe, are "Global" in nature.

0 Kudos
Admin
Admin

Re: Change "Install On" for all network objects

The CLI command is something like: 

set network name "HR Lan" nat-settings.install-on "BranchOffice" nat-settings.auto-rule true nat-settings.hide-behind gateway

A similar command exists for a host object.

Note that when you modify the nat-settings, you cannot simply specify the gateway, you have to specify other parameters as well, as noted in the API docs: Check Point - Management API reference: set network 

0 Kudos
Employee+
Employee+

Re: Change "Install On" for all network objects

R80.x includes find/replace function, which is handy in cases you want to replace all occurrences of a specific object in your policy with another one. Just tested it in R80.20 last week where it worked fine. Changed the install-on field on couple of hundred rules.

0 Kudos

Re: Change "Install On" for all network objects

Lari,

Can you share examples?

0 Kudos
Employee+
Employee+

Re: Change "Install On" for all network objects

Let's replace a BranchOffice with Corporate-GW in the Install On column of Corporate_Policy.

Right click the Branch-Office gateway in the policy, select Where Used, then select Replace and find the object you want replace the object with (in this example Corporate-GW), select the rules where you want to do the replacement and then simply hit the Replace button.

You can select to replace all occurrences of the object by by clicking the box next to "Policies", which is equivalent to "select all".

0 Kudos