Smart Console filtered rule export, including resolved object details

[Markus_Malits]

Hi,

one of my customers is having a challenge with exporting filtered rules to CSV. 

This is AFAIK not possible at the moment in Check Point R8x SmartConsole - and I think it should be low hanging fruit to develop, and a feature that adds to reputation as the premium  gold standard GUI in firewall management.

What are your opinions to that one? 

Quick set of screenshots to make the problem clear:

In demomode filter for a subnet

use export to csv

realize the export is containing all rules, and that there is no "export filtered rulebase" option

When this would be considered to be developed by R&D, it would be nice to have a possibility to export the relevant  list of objects / groups as well.

The usecase for this customer is to report all relvant  rules (and have the details about srcs/dsts) for a tenant, while rules are spread across the rulebase of this perimeter firewall.

Looking forward to your comments

Best regards
Markus

[PhoneBoy]

Seems like a reasonable RFE. @Dima_M 

[Markus_Malits]

@PhoneBoy hats was exactly what I thought as well. So I had a session with Jim Oequist as well, and he has taken it in for a rfe. I wanted to put this one for discussion through the community as well - since, as usual, the business case question was raised, and @Dorit_Dor told us check mates is also considered as r&d input channel 🙂

BR

Markus

[Dima_M]

@Markus_Malits  @PhoneBoy 

Hi guys, thanks for your inputs.  Check Mates is definitely a valuable input channel for us.  

We're reviewing the request, stay tuned for updates.

Thanks,

Dima

[a_lumi]

Hello, any update of this feature?

[James_Heueck]

👍

[Markus_Malits]

Our local SE communicated to us that R&D will NOT put this one on the Roadmap.

We need to solve it by using Smart Console Extensions, which we plan to do for the Customer.

BR
Markus

[LaRockas]

Hello ,

After migrate from Cisco ASA , where you could easily have a show access-list | inc 192.168.10.xxx for finding the rules , now with CP its almost impossible to have this simple output .
I found Markus post and he describes exactly what i also would like to achieve .
Is there any update regarding this ?

BR
Prodromos

[PhoneBoy]

I haven't seen this among the features for R81, at least.

[oconnork]

Hello,

Do we have update on this ? 

BR,

Kalei

[PhoneBoy · Accepted solution]

You should see the following when you filter your rulebase and do an export from R81.10:

[Sajgon107]

Hey there,

Im trying to export rulebase in CSV format from smartconsole, export is successful but it does not reflect actual state of my rulebase. I've added couple of comments in few rules but they are not all reflected in export. I did try to do HTML export (using sk120342) but the output in HTML is the same as from smartconsole. In smartconsole particular rule is with correct command as it's suppose to be.

Im running R81.20  T84, I have installed policy in which I made changes and as well database.

Any advice please?

Thanks

[AkosBakos]

Do you have unpublished sessions?

Do you see the chnages under Revisions?

[PhoneBoy]

Possible this is a bug and suggest a TAC case.