Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
kmoc
Participant
Jump to solution

Gateway object import error when using python scripts from github

I was using python scripts to migrate single policy package from one MDS to another and all went well except importing gateway objects. They were not completely imported. I got objects with following names:

export_error_CpmiGatewayCluster_b3a2fbca-5c3d-454a-0468-0ab0e0c2d3a0_mccrk-pl-stf-hacl
partial_export_error_simple-gateway_07810dda-6085-49d9-2ba8-a5d68e917748_mccrk-pl-byd-fw1

The objects were not complete and this is an issue when we use VPN. We are loosing shared secret.

Is there any way to fix it other than creating the object manually?

There are also problems with existing services. The script creates new service instead using already defined. 
Do you have any advice with that situation?

Here is the link to scripts I was using:

https://github.com/CheckPoint-APIs-Team/ExportImportPolicyPackage

Regards

Krzysztof

0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

My guess is not in the near term.
As noted it requires underlying API support that does not currently exist.
With gateways in particular, you also have to worry about SIC which will always be different between management domains.
Which suggests some amount of extra steps will likely always be required here.

View solution in original post

(1)
3 Replies
PhoneBoy
Admin
Admin

The script is limited by what the API supports.
Gateway objects in particular have many elements that do not have API support.
Placeholder objects are created in these situations so you can create them manually.

Are the duplicate services default ones or ones you created?
In any case, you can use “where-used” to search/replace these duplicate services.

kmoc
Participant

Thanks a lot for the explanation.

Any chance it will be supported in the future?

Krzysztof

0 Kudos
PhoneBoy
Admin
Admin

My guess is not in the near term.
As noted it requires underlying API support that does not currently exist.
With gateways in particular, you also have to worry about SIC which will always be different between management domains.
Which suggests some amount of extra steps will likely always be required here.

(1)

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events