Unable to export the policy package

[Madu1991]

Hello All,

As per the recommendation from Palo Alto, I have executed the below commands on the checkpoint MDS. 

But unable to export the policy packets. The Size of the policy package was 1Kb. 

Please advise on this. 

Logs:

https://community.checkpoint.com/t5/Management/R80-10-API-Retrieve-policy-package-from-Checkpoint-AP...

If you are facing finger print issue, pls use -b

[Expert@WT-CDC-ODC-CPMGMT-HA:0]# java -jar web_api_show_package-jar-with-dependencies.jar -v -b
packages:
Script finished running successfully!
Result file location: show_package-2024-03-17_16-43-34.tar.gz
[Expert@WT-CDC-ODC-CPMGMT-HA:0]#

[_Val_]

What are you trying to do exactly? Export your policy for migration to PAN?

[Madu1991]

The background of the activity to migrate the checkpoint firewall into the palo alto firewall which required be export of the policy package from the checkpoint.

[Madu1991]

Yes, It's for PAN migration. 
I need to export the policy

[_Val_]

Well... I think you are in the wrong forum. Did you try PAN community yet?

[Madu1991]

Am on the right track. 

I'm using the alternate command to export the policy but no luck. 

Please share me the procedure to export the policy package on checkpoint firewall. 

Logs:

[Expert@WT-CDC-ODC-CPMGMT-HA:0]# $MDS_FWDIR/scripts/web_api_show_package.sh -v

packages:

Script finished running successfully!
Result file location: show_package-2024-03-17_17-01-24.tar.gz

[PhoneBoy]

If you didn't execute mdsenv beforehand, you're doing this at the MDS level, not the relevant domain/CMA level (where this commands needs to be executed).
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Topics-CLIG/MDS... 

[Madu1991]

Hello @PhoneBoy 

I have tried your steps. The policy package was also exported. The capacity of the file shows 1Kb. 

I hope this should not be 1 KB. 

Logs: 

FW# mdsenv 10.143.4.X

FW# pwd
/opt/CPmds-R80.40/customers/GEO-ODC-MGMT-HA/CPsuite-R80.40/fw1

FW#java -jar web_api_show_package-jar-with-dependencies.jar -v -b

packages:

Script finished running successfully!
Result file location: show_package-2024-03-19_12-52-50.tar.gz

[PhoneBoy]

What is actually inside the resulting tgz file?
What does api status say?
Assuming api status says the API is enabled, please consult with TAC: https://help.checkpoint.com