R82 Jumbo Hotfix Accumulator take #103 has been released today

[eranzo]

 Hi All,

R82 Jumbo Hotfix Accumulator take #103 has been released today and is available for download.

Please note the following:

•        Availability:

o   Available to download the via Jumbo documentation (R82) 

o   Available for download via CPUSE by using package identifier.

o   Can be provided by customer support

Content included in this take:

• List of resolved issues in this take can be found in the Jumbo documentation (R82) 

Note:

• Central Deployment allows you to perform a batch deployment of Hotfixes on your Security Gateways and clusters from SmartConsole!! For more information, see sk168597.

Thanks,

Release Operations Group

[Daniel_]

If I click on the documentation on the left site to "Take 103 - Latest" I get take 91 information. Can someone fix it?

(Yes, if I modify the URL it's working but it should be fixed in the documentation ;-))

[Bob_Zimmerman]

The release notes for jumbo 103 say "PRJ-64780, PMTR-124468 - ElasticXL - NEW: Introduced the new Migration Tool for converting ClusterXL to ElasticXL. Refer to sk183894."

But that SK seems to be internal. I can't see it with any of my accounts.

[PhoneBoy]

As an employee, I can see that sk183894 is showing as requiring Advanced level access and was updated today.
Possible this wasn't the case when you tried to access it earlier.
 

[MatanYanay]

@Daniel_ 

We are working to fix it 

Thanks

Matan.

[MatanYanay]

@Daniel_ 

issue should be solved now 

Thanks 

[Tomer_Noy]

Worth mentioning that with this JHF on your Management Server, you can now use Policy Auditor in GA!

https://community.checkpoint.com/t5/Firewall-and-Security-Management/Excited-to-announce-Policy-Audi... 

[Don_Paterson]

@Bob_Zimmerman 

I just spotted that too and the SK worked for me first time. They must've fixed it.

https://support.checkpoint.com/results/sk/sk183894

"This Migration Tool is the interactive command "sp_migration" (in the Expert mode) on the Security Management Server / Multi-Domain Security Management Server. See the section "Working with the Scalable Platform Migration Tool"."

[Daniel_]

Where can I find documentation for API command "export-access-rulebase"?

In
https://sc1.checkpoint.com/documents/latest/APIs/index.html?#api_versions~v2.1%20
there is nothing mentioned for take 103.

[Don_Paterson]

@Daniel_ 

Looks like you are looking for the python script from the GitHub repo:

https://github.com/CheckPointSW/ExportImportPolicyPackage/tree/master/exporting

export_access_rulebase.py

What are you looking to do?

These might help(?):

https://support.checkpoint.com/results/sk/sk120342

A built-in shell script that creates a html with the Security Policy

[Daniel_]

@Don_Paterson 

I'm looking for PRJ-67021,PMTR-124959

"Added a new Management API command to retrieve an entire Access Control Layer (including inline layers) - "export-access-rulebase"."

which is mentioned in take103.

[PhoneBoy]

It looks like the documentation for this hasn't been posted yet.
@Omer_Kleinstern can you check on this?

[Don_Paterson]

@Daniel_ 

I see. It's only been a week since the Take was released and the doc page can lag a bit.

It is also missing from the show-commands list:

mgmt_cli -r true show-commands | grep export-access

I used the COMMAND LINE SmartConsole to check options, and test, in the meantime.

> export-access-rulebase

hits-settings. - Hitcount settings, define the range if hits to show.
name - Object name. Must be unique in the domain.
package - Name of the package.
show-expiration-settings - Indicates whether to calculate and show "expiration date settings" field in reply.
show-hits - Show hitcount data.
use-object-dictionary - N/A

This worked well:

export-access-rulebase name "layer name" show-hits true --format json

mgmt_cli -r true export-access-rulebase name "PolicPackageName Network"  show-hits true --format json > FullRulebaseExport.json

[Daniel_]

@Don_Paterson Good idea to use SmartConsole "help". Hopefully there are more options. I miss "show-as-ranges"