- Products
- Learn
- Local User Groups
- Partners
-
More
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
IDC Spotlight -
Uplevel The SOC
Important! R80 and R80.10
End Of Support around the corner (May 2021)
we are moving the r77 config to a file from the ckpoint
however when we try to export en 2 or 3 files the security rules (more than 500 rules) we are not able to do it.
we know that r80 in the command line you can do it
but we weren't able to use the same commands in the R77 to accomplish this task.
if we open the exported file in a XML editor we can read and find the 500 + rules, but we need to squeeze in 2 or 3 files this rules from the CKpoint device in R77.
any Ideas mates?
cordially
jose espinoza
Jose,
What do you want to export? Rulebase and objects or configuration from a gateway?
Also remember that you can always do an in place upgrade, personally I prefer to do a fresh install.
____
hi there
let me re-phrase, we have a checkpoint fw using R77 os version, and we and to migrate the whole config file to a migration tool, there is a group of securtiy rules or firewall rules in the checkpoint which are 505 rules, the migration tool (another brand) onoy can "read" and merge chunks of 400, in this case, we know that in the CLI in R80 and up you can export configuration of security_firewall rules by segments : from 1-to-300, from 301-to-505 by example.
we need to accomplish the same this under R77, we know you can only export security_firewall rules under export utility but can split the file like using CLI under R80 os version.
I hope this clarify what we need to reach.
cordially
jose
I get it.
The main reason for this to be possible in R80.XX is because of the API (mgmt_cli). For R77 I suggest that you look at this post Export rules to CSV
Looks like that you will have to split de rulebase by yourself in the CSV. Maybe create another policy package with X number of rules and exporting it?
hi there
yes, that what we did it, we exported just the security rules to an CSV file, splitted in two files.
we were able to read and export to the Expedition tool
thanks
jose
hi there
no, we are trying to export from a CKpoint R77 to the Expedition tool but, we find out right now what to do to solve.
thank you
jose
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY