- Products
- Learn
- Local User Groups
- Partners
-
More
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
IDC Spotlight -
Uplevel The SOC
Important! R80 and R80.10
End Of Support around the corner (May 2021)
I'm attempting to comply to an audit request and have been asked to run fwm dbexport for a couple of things. I get the fwmbin_cmain issue as described in sk115994. I'm logging in as admin/expert to do this and still running into the issue. The sk seems pretty self explanatory on what the fix is but obviously that's not working for me. I did notice in Smart Console my third party vendor that co-manages our devices has the management object 'locked for editing and deletion'. Is that the cause of my problems?
which version are you using ?
I'm not sure that will work with R80/R80.10
https://community.checkpoint.com/people/tomera5b2e7f3-09aa-32f8-96c2-f0f5bfa2988b
which version are you using ?
I'm not sure that will work with R80/R80.10
https://community.checkpoint.com/people/tomera5b2e7f3-09aa-32f8-96c2-f0f5bfa2988b
Well that was my concern too. I'm running R80.10 and thought maybe those commands are different now. That wasn't the case as I ended up figuring out the solution to my problem.
Every time I ran "fwm dbexport -f users.C" or "fwm dbexport -g -f groups.C" I would corrupt my database causing the "Failed to convert database" error. I then had to follow the steps laid out in sk112824 to rebuild the database. It appears the reason I was corrupting my database was because I had to use ./ in front of users.C and groups.C otherwise it was putting the files in the $FWDIR/conf/ directory. As soon as I specified an output directory the commands ran successfully and did not cause a database corruption.
EDIT: I also opened a ticket with Check Point and they referred me to sk110519 stating that fwm export isn't supported. I guess even though I can run the commands they just put out headers and no data.
I believe another way to get the same information is to use dbedit, which does work for some things under R80.10
[Expert@mgmt:0]# dbedit -local
Please enter a command, -h for help or -q to quit:
dbedit> printxml users
This will dump the user database in XML format.
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY