Retrieving Policy from Firewall

[KallieM]

Good Day, is it possible to get assistance on how to retrieve a copy of the policy from a legacy R77.20 when te manager is not available anymore? 

[PhoneBoy · Accepted solution]

Unfortunately, it's a fairly manual procedure.
See: https://community.checkpoint.com/t5/Management/Recover-policy-after-management-crash/m-p/135868#M289...

[the_rock]

Yep, what @PhoneBoy gave you is the only way actually.

Andy

[KallieM]

Good Day, thank you for the reply.  Much appreciated.  In my case i cannot even get to the file system of the management station. Thus I cannot retrieve the files mentioned in the article.  It would be helpful if ican some how get the information (files) from the actual gateway even if it is just viewing the objects, rules and config in a readable format foe me to start building a config from scratch.

[G_W_Albrecht]

The only place that information is available are a SMS CPinfo or backup / export.

[the_rock]

Sadly, you can NOT get that info from the gateway.

Andy

[PhoneBoy]

$FWDIR/state/local/FW1 on the gateway may have some information that can be useful in these situations.
Check Point Professional Services can also assist with this sort of recovery.

[the_rock]

I see what Phoneboy mentioned about that dir on the gateway (/opt/CPsuite-R81.20/fw1/state/local/FW1...except in your case R77.20), but based on files listed there, you could be limited as far as info you might be able to get.

You could also navigate to /opt/CPsuite-R81.20/fw1/state/__tmp/FW1, but seems even files there are very similar.

Anyway, appears that would be your only option : - (

Andy