- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Check Point SmartMove tool enables you to convert 3rd party database with firewall security policy and NAT to Check Point database.
The tool parses Cisco ASA (version 8.3 and above), JunOS (version 12.1 and above), ScreenOS (version 6.3 and above), Fortinet (FortiOS version 5 and above), and Palo Alto Networks (Version 7 and above) configuration file and converts its objects, NAT and firewall policy to a Check Point R80.x compliant policy. For PAN, we also convert application definitions (including Application Groups and Application Filters).
The tool is planned to support additional vendors and security configurations in the future.
The tool generates bash scripts by utilizing Check Point Management API's command line interface, to migrate the converted policy into a R80.x Management (or Multi-Domain) server.
The tool is developed using Microsoft C# language and .Net framework version 4.5 (WPF application). The project solution file is configured for Microsoft Visual Studio 2012 and above.
Code is available on GitHub: SmartMove
Tool can be downloaded from: sk111546
Code version 0.0.0
R80.10, API version 1.1
NOTICE: By using this sample code you agree to terms and conditions in this Terms and Conditions
...
There is a new version (1.4.6469.18822) available for SmartMove . It can be downloaded from sk115416
Hi All,
Just released a new version of the tool - added a support for Juniper JunosOS and ScreenOS configurations.
Please refer to sk115416.
Enjoy!
Hello,
I wonder how it can convert from junos 12.1 to R77.30 version?
Anyone try it have ?
SmartMove cannot be used to move configurations to R77.30 versions of Check Point.
R80.10 is the minimum supported version per the SK.
Following up Dameon's answer, the source code of SmartMove is open to public on GitHub.
Anyone is free to download it and modify it to perform any task.
Any plans for a Palo Alto converter?
This vendor migration support is planned for this year.
Please stay tuned.
Robert.
Hi Yael.
I cant access the SK. As I dont have advanced access. any idea how to get this access? I need to migrate 4 ASAs to CP firewalls
Hi Ammar,
I'll ask our SK publishers on next Sunday to make the acces regular.
Robert.
Thanks @Robert Deck, Much appreciated!!
Done. Please try again, it should be accessible now.
Robert.
I was able to download it. thanks a lot!
I cannot access sk115416 anymore. It says: To view this solution, higher access level is required.
Hi Danny,
I've just asked our technical publications team to fix this.
Robert.
What about Fortinet convertor, any plans there as well?
On the way, will be available soon.
PAN will follow.
Robert.
The solution is now external again so you should be able to access it.
Yes it is available now. The SK is written very well.
There are any EA version of Fortigate converter?
There will be EA version very shortly.
Are you interested to participate?
Robert.
The SmartMove tool now supports the Fortinet FortiOS migration.
Robert.
Updated the original post with that.
(I think we have a couple posts on this tool)
Hi, is there a release date set for the palo alto support in this tool?
Took a little longer than expected but a release that supports PAN is now available.
Hi - Is it possible to migrate from Cisco FTD ? Appreciate this is an old thread but am fast approaching a Checkpoint quantam install and need help with migration.
kigennetworks
Believe only ASA is supported per the SK.
We are currently working on smartMove for PAN
We plan to make it available during Q4 2018
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY