SmartMove

[PhoneBoy]

Overview

Check Point SmartMove tool enables you to convert 3rd party database with firewall security policy and NAT to Check Point database.

The tool parses Cisco ASA (version 8.3 and above), JunOS (version 12.1 and above), ScreenOS (version 6.3 and above), Fortinet (FortiOS version 5 and above), and Palo Alto Networks (Version 7 and above) configuration file and converts its objects, NAT and firewall policy to a Check Point R80.x compliant policy. For PAN, we also convert application definitions (including Application Groups and Application Filters).

The tool is planned to support additional vendors and security configurations in the future.

The tool generates bash scripts by utilizing Check Point Management API's command line interface, to migrate the converted policy into a R80.x Management (or Multi-Domain) server.

Description

The tool is developed using Microsoft C# language and .Net framework version 4.5 (WPF application). The project solution file is configured for Microsoft Visual Studio 2012 and above.

Instructions

Code is available on GitHub: SmartMove

Tool can be downloaded from: sk111546 

Code Version

Code version 0.0.0

Tested on version

R80.10, API version 1.1

NOTICE: By using this sample code you agree to terms and conditions in this Terms and Conditions

...

[Maarten_Sjouw]

Just did a manual migration of a 350 rules installation, only took me 2 weeks to finish that. 

[mohdUsman_Arif]

Hi,

Does this Smart Move tool supports Sophos migration as Well

Regards

[Ofir_Shikolski]

no, it does not

[Nir_Shamir]

Hi,

Anyone is developing this tool ? to support newer versions ? other vendors ?

I know for a fact Cisco FirePower (not ASA image ) doesn't work.