SmartMove new version June 2021- update 2

[Ofir_Shikolski]

Added new interactive flag in order to disable the progress bar (we are using it part of our automations )

Fixed a bug with Panorama parsing from the console with relative path.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Downloads

• Click here to get the open Source repository.
• Click here to download the Check Point SmartMove Tool.

Usage:

SmartMove.exe [-s config_file_name] [-v vendor] [-t target_folder] [-d domain] [-n] [-l LDAP_Account_unit] [-k]

Mandatory flags:

-s | --source	Full path to the vendor configuration file
-v | --vendor	Vendor for conversion (available options: CiscoASA, JuniperSRX, JuniperSSG, FortiNet, PaloAlto, Panorama)

Optional flags:

-t | --target	Migration output folder
-d | --domain	Domain name (for CiscoASA, JuniperSRX, JuniperSSG only)
-n | --nat ("-n false" |" -n true" [default])	Convert NAT configuration [enabled by default]
-l | --ldap	LDAP Account unit for convert user configuration option (for FortiNet, PaloAlto, and Panorama only)
-k | --skip ("-k false" |" -k true" [default])	Do not import unused objects (for FortiNet, PaloAlto and Panorama only) [enabled by default]
-f | --format	Format of the output file (JSON[default], TEXT)
-i | --interactive	-i false | -i true [default] Interactive mode provides a better user experience. Disable when automation is required[enabled by default]

Example:

SmartMove.exe -s "D:\SmartMove\Content\config.txt" -v CiscoASA - t "D:\SmartMove\Content" -n true -k false -f json

What next:

We are working on alignment of new Smart-1 authentication method (api-key)

[Ofir_Shikolski]

Added new interactive flag in order to disable the progress bar (we are using it part of our automations )

Fixed a bug with Panorama parsing from the console with relative path.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Downloads

• Click here to get the open Source repository.
• Click here to download the Check Point SmartMove Tool.

Usage:

SmartMove.exe [-s config_file_name] [-v vendor] [-t target_folder] [-d domain] [-n] [-l LDAP_Account_unit] [-k]

Mandatory flags:

-s | --source	Full path to the vendor configuration file
-v | --vendor	Vendor for conversion (available options: CiscoASA, JuniperSRX, JuniperSSG, FortiNet, PaloAlto, Panorama)

Optional flags:

-t | --target	Migration output folder
-d | --domain	Domain name (for CiscoASA, JuniperSRX, JuniperSSG only)
-n | --nat ("-n false" |" -n true" [default])	Convert NAT configuration [enabled by default]
-l | --ldap	LDAP Account unit for convert user configuration option (for FortiNet, PaloAlto, and Panorama only)
-k | --skip ("-k false" |" -k true" [default])	Do not import unused objects (for FortiNet, PaloAlto and Panorama only) [enabled by default]
-f | --format	Format of the output file (JSON[default], TEXT)
-i | --interactive	-i false | -i true [default] Interactive mode provides a better user experience. Disable when automation is required[enabled by default]

Example:

SmartMove.exe -s "D:\SmartMove\Content\config.txt" -v CiscoASA - t "D:\SmartMove\Content" -n true -k false -f json

What next:

We are working on alignment of new Smart-1 authentication method (api-key)

[Andy47]

Does the Smart Move tool work when migrating a client from Cisco to one of your SMB Appliances running just on Embedded Gaia? Thanks.

[Ofir_Shikolski]

You can migrate to Smart-1 / Smart-1 cloud 

[Andy47]

Thank you but that doesn't really answer my question. Does SMB portal by itself with the SMB appliances support the Smart move tool or is having Smart-1 cloud in place a prerequisite to using the Smart Move tool? Our understanding is that Smart-1 Cloud is completely separate to the SMB portal. Many thanks for any additional insight.  

[G_W_Albrecht]

The SMB portal is the old SMP portal, used to organize the SMB policies and configuration i9n a manner similar to local managed SMBs. Smart-1 portal is a newer and much different product, a complete SMS in the cloud that can manage any CP GW as well as SMBs !

[Beagle15]

Thank you. 

[PhoneBoy]

If the SMB appliance is managed by a Smart-1 Appliance or Smart-1 Cloud, you can use SmartMove to migrate the policy there.
If a locally managed SMB appliance, this is not supported.

[Andy47]

Many thanks . If the SMB appliance is managed by the SMB cloud portal and not Smart-1 cloud can Smart Move be used? 

[Ofir_Shikolski · Accepted solution]

only to Smart-1 / Smart-1 cloud 

[Beagle15]

Thank you.