backing up a policy

[jimm]

In Pre-R80 Checkpoint, you could "save as" a security policy package as a means of backup.  Alternatively, you could also take a snapshot of the current policy and objects which could be restored later if required. In R80 and above, what is the best practice method for backing up policies and objects within Smartconsole?

[Tal_Paz-Fridman]

One great option (depending on the version you are using) are the Management API commands for export and import.  They backup the entire database, not just the policies and object:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/export-management~v1.8%20

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/import-management~v1.8%20

You could also use the Upgrade Tools to create a backup:

sk135172 Upgrade Tools package for upgrade from R80.20 and higher

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

There are also options within SmartConsole to Export the Rulebase and Objects to a CSV file as "static" backup

Finally there are various tools and scripts:

https://github.com/mybasementcloud/R8x-export-import-api-scripts

https://community.checkpoint.com/t5/API-CLI-Discussion/CLI-API-Example-for-exporting-importing-and-d...

[jimm]

Those are fairly major 'backup the whole system' mechanisms. I was hoping for a simple click within Smartconsole to save state for a quick and easy restore of a policy and objects.

[Tal_Paz-Fridman]

Try the last options I listed:

Finally there are various tools and scripts:

https://github.com/mybasementcloud/R8x-export-import-api-scripts

https://community.checkpoint.com/t5/API-CLI-Discussion/CLI-API-Example-for-exporting-importing-and-d...

[Chris_Atkinson]

Depending on the specific use case, revision control may also be an option for you.