- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: Best way for copy object, group and rulebase
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Best way for copy object, group and rulebase
I got question (tried search but not able to find what i look for).
If i got mds setup with multiple environments. If we in a situation, where we need evergreen set of firewalls. What is best way for copy approx 550 rulebase.
do i need create each object, group and rule separately or is there way to copy paste rule.
mds is r80.10.
Current gw is r80.10 .
New firewall will be on r80.30.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
1. Migrate export/import the relevant environment (so you have a complete copy)--believe this may have to be done for the entire MDS if starting from R80.10.
2. Use a tool like the following to export/import the relevant information, with some manual work required. https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Python-tool-for-exporting-importi...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Python tool need be my next test project to check its working.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Nas,
The Python script works well, I've used it multiple times. Getting it going can be slightly tricky (folder structure etc. is important), I'd be happy to answer any questions you might have.
Regarding the gateway in the "install on" column - you do not have to change the name of the gw manually, you can search and replace the object across all policies.
Thanks,
Ruan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thank you. There is some pre-req for python which i need at work and then i can work on it and will ask question.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
"1. Migrate export/import the relevant environment (so you have a complete copy)--believe this may have to be done for the entire MDS if starting from R80.10."
Checked and only export option for service, object available to me.
Anyone can specify where i can export all policy?
This environment is r77 30 actually
mds = r80.10
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
migrate export gets everything in such a way as you can build a new MDS on different hardware.
This is how an upgrade is done, for instance.
This is referred to in the Installation and Upgrade guides.
The python tool only does the specified policy (not all).
You will have to execute it multiple times to get multiple policies.
Also, the gateway version is not relevant in this instance, it's the management version that's relevant.
