Change "Install On" for all network objects

[Bryan_Bailey]

Does anyone know a CLI shortcut or any other method for changing the "Install On" gateway for network objects? We are migrating to a new HA cluster and Id really rather not marshal through several hundred objects and change the "Install on" for each. 

Thanks

[Vladimir]

Are you referring to the NAT properties of the Network Objects? Objects themselves, I believe, are "Global" in nature.

[PhoneBoy]

The CLI command is something like: 

set network name "HR Lan" nat-settings.install-on "BranchOffice" nat-settings.auto-rule true nat-settings.hide-behind gateway

A similar command exists for a host object.

Note that when you modify the nat-settings, you cannot simply specify the gateway, you have to specify other parameters as well, as noted in the API docs: Check Point - Management API reference: set network 

[Lari_Luoma]

R80.x includes find/replace function, which is handy in cases you want to replace all occurrences of a specific object in your policy with another one. Just tested it in R80.20 last week where it worked fine. Changed the install-on field on couple of hundred rules.

[Hugo_vd_Kooij]

Lari,

Can you share examples?

[Lari_Luoma]

Let's replace a BranchOffice with Corporate-GW in the Install On column of Corporate_Policy.

Right click the Branch-Office gateway in the policy, select Where Used, then select Replace and find the object you want replace the object with (in this example Corporate-GW), select the rules where you want to do the replacement and then simply hit the Replace button.

You can select to replace all occurrences of the object by by clicking the box next to "Policies", which is equivalent to "select all".

[Sebastien_Rho]

is it possible then to replace back the instance in the policy for "policy targets"?

.

[MahipalSingh]

Lari, 

Is it possible to remove the "install on" from multiple rules using any method (smartconsole GUI or API), as we can not see the required entry in the list shown in picture(may be because of max display limit in GUI? 

Thanks for your help in advance.

In the "where used" window we can't see more then 500 entries in policies tab hence I can not select the required entries (because those are not displayed in the list) from specific policy package where I would like to remove the particular gateway from "Install On" section.