How to export Gaia config from a firewall

[Tim_Bernat]

Hi All,

how do I get an editable configuration (equivalent to config/active) from 80.10 Firewall. I would prefer a CLI/WinSCP method. Thank you for any tips. 

This is in regards to the post:  

https://community.checkpoint.com/thread/10198-cant-delete-interfaces-this-interface-is-used-by-the-d... 

Cheers, Tim

[PhoneBoy · Accepted solution]

/config/active is a textual representation of the configuration, but the actual configuration is a sqlite database.

It's internal structure is not documented and, generally speaking, we do not support directly editing it except thru clish/WebUI commands.

Occasionally, such as in the thread you linked, you can use dbget/dbset to try and resolve database inconsistencies.

Generally, the use of dbget and dbset is unsupported.

See: How to use dbget and dbset on Gaia OS 

[Tim_Bernat]

Thanks, I'll have to experiment with that. 

[Hugo_vd_Kooij]

I would use:

clish -c "show configuration" > my_config.txt

[AlekseiShelepov · Accepted solution]

Why not just save configuration <file>?

Or it can be also clish -s "save configuration <file>".

[Hugo_vd_Kooij]

old habbits 😉