How to add members of a group and not the group itself to another group in R80.10?

[Christian_Riede]

In R77.30 management, when you added a group to a group, there was a question if to add the group as a whole or the members of the group. In R80.10, always the whole group is added.

How can I add the members of one group to another group in R80.10?

[Tomer_Sole]

Hi,

Can you please elaborate in which cases would you prefer to duplicate the group's members into the rule instead of reusing the group object? Is this an action that you often do?

[Christian_Riede]

In 90% of the cases, I wand to add a group to another group, but there are 10% of the cases where I want to add the members.

A use case is when you want to make sure that all members of one group are certainly contained in an other group - then you just add the members of the one group to the other.

In general, I add the members and not the group when I want to modify the list of the members in the new group independently of the members of the old group where they are copied from.

[Tomer_Sole]

will the Clone option be good for this 10% case?

[Christian_Riede]

No.

[Tomer_Sole]

can you please elaborate here?

what I'm offering is instead of creating a new group and adding the other group's members there, simply right-click the other group, choose "clone", give it a new name, and it will have the other group's members.

[Christian_Riede]

Yes, then I have a copy of an existing group. Simply. But what if I want to extend an existing group with the members of another group? This is a valid operation that I have come across often enough in the many many years that I manage firewalls. Still need more elaboration?

[Tomer_Sole]

https://community.checkpoint.com/people/chris35f4e3d9-02cf-405c-881f-777ab4845279 I would like to contact you privately about this.

[Dor_Marcovitch]

I think he want to merge 3 group into one group for example. Meybe you can use the cli / api for that 

[Carsten_Weber]

Good question, I have the same request/task. Meanwhile dealing with R80.30, though.

In my case there are  being maintained two groups (case 1) and another three groups (case 2) in parallel by accident or on purpose...I don't know. They grew appart to some degree over the months. Fullfilling different purposes. Both cases are independent from each other and to be seen as seperate cases.

I have the been given the task in each of the cases to merge the group of two (one has about 40 the other about 100 entries) into one and the group of three groups (similarly large) into another single group. In both cases one of the involved groups could be the destination group of the other(s).

It would be nice to not have to comapre and copy & paste one groups content manualy into the other. An automatic way of doing this while also taking care of IP-duplicates would be a life time saver!
Has there been a solution to this already?

Best regards

Carsten

[G_W_Albrecht]

I just played around with newest R80.40 Dashboard. A list of groups can be exported as text, but not the groups content 🙁...

[M_Ruszkowski]

There used to be a nice feature back in R77.30 days, where when you added a Group into another group....it would ask you if you would like just copy over the members.   I wish they left this when the started the R8x code trains.