Exporting group of large IPs from Azure mgmt server to import it into Smart-1 cloud

[the_rock]

Hey guys,

Just wondering if someone might be able to give some ideas/insight into this. I opened TAC case about it, but so far, nothing useful. Here is the scenario:

-customer has S1C they had been running for few years for their on prem 6400 cluster, but they also have separate Azure mgmt server for VMSS firewalls that they want to "revamp" (for the lack of the better term) and move that over to S1C as well

We exported their policy in the lab, and already moved all the rules, but we noticed there is large group of about 5000 IPs in Azure management thats NOT present in S1C. 

Here is my question...since we imported their config in R81.20 lab, is there an easy way to export that whole group using mgmt_cli or api and import it into S1C? Since there is no classic ssh access in S1C, we dont want to override anything, simply make sure that group is added, so it can be used in new policy package.

Thoughts?

Tx as always for the help 🙂

Andy

[PhoneBoy]

With that many objects in the group, it will require multiple API calls just to get the contents of the group, much less what the underlying host/network objects are.
Setting the group object with all its contents will definitely take multiple API calls.
However, it's all possible to do. 

[the_rock]

Do you have command for it? 🙂

[Amir_Senn]

Maybe something similar to what I answered here?

https://community.checkpoint.com/t5/API-CLI-Discussion/mgmt-cli-Export-all-Hosts-Networks-and-Groups...