Retrieving Policy from Firewall

[KallieM]

Good Day, is it possible to get assistance on how to retrieve a copy of the policy from a legacy R77.20 when te manager is not available anymore? 

[PhoneBoy · Accepted solution]

Unfortunately, it's a fairly manual procedure.
See: https://community.checkpoint.com/t5/Management/Recover-policy-after-management-crash/m-p/135868#M289...

[the_rock]

Yep, what @PhoneBoy gave you is the only way actually.

Andy

[ilRobby]

Hello Andy/ @PhoneBoy, forgive me if I reopen the topic but, today maybe is there any alternatives?
I've lost management (81.30) and its backup in one shot... I've a older vm snapshot (1 year ago)...
There is no "new" way to retreive policy from gateways?
I can't open TAC to CP, I'm a customer but, this trouble has happened on my lab env. at home..! ☹️

[KallieM]

Good Day, thank you for the reply.  Much appreciated.  In my case i cannot even get to the file system of the management station. Thus I cannot retrieve the files mentioned in the article.  It would be helpful if ican some how get the information (files) from the actual gateway even if it is just viewing the objects, rules and config in a readable format foe me to start building a config from scratch.

[G_W_Albrecht]

The only place that information is available are a SMS CPinfo or backup / export.

[the_rock]

Sadly, you can NOT get that info from the gateway.

Andy

[PhoneBoy]

$FWDIR/state/local/FW1 on the gateway may have some information that can be useful in these situations.
Check Point Professional Services can also assist with this sort of recovery.

[the_rock]

I see what Phoneboy mentioned about that dir on the gateway (/opt/CPsuite-R81.20/fw1/state/local/FW1...except in your case R77.20), but based on files listed there, you could be limited as far as info you might be able to get.

You could also navigate to /opt/CPsuite-R81.20/fw1/state/__tmp/FW1, but seems even files there are very similar.

Anyway, appears that would be your only option : - (

Andy