Using SmartMove in Provider-1

[jokkeri67]

Hi,

I am using SmartMove to import rulebase from Fortinet to Check Point. My management is Provider-1. I have run SmartMove from Fortinet with no errors. I have policy.sh and objects.sh files done. What might be right folder in Provider-1 so that rules/objects go to DMS that I want? For example if DMS is Customer_DMS.

Should I just move DMS using mdsenv Customer_DMS and then go to which folder?

Rgds, Jouko

[Vincent_Bacher]

I suppose you’re talking about multi-domain management.

As for the scripts, it’s been far too long since I last did that. What I do remember is that the shell scripts contain API commands. That’s why they aren’t copied into the customer directory but into a temporary working directory, where they’re run in the correct order.

I can’t quite recall exactly what the scripts look like, but if they contain mgmt_cli commands, for example, then the commands may need to be adapted to create the objects/policies in the correct domain/CMA.

The lads who use this more often will certainly be able to explain it better and in more detail.

[Hugo_vd_Kooij]

I don't recall Provider-1 having API access. But those were different days 😉

I suppose you can pretty much use the same tooling against a domain on a Multi-Domain Server when compared to running the tooling against a SmartCenter.

But you may have to adjust the resulting scripts/ccode a bit.

[Martijn]

Hi,

A few month ago I migrated a Fortigate to Check Point and I needed to import the policy in a excisting SmartCenter.
I did the following:

- Migrate the Fortigate policy to Check Point with SmartMove.
- Create a SmartCenter in the lab and import the policy using the SmartMove procedure.
- Check if everything is OK.

Use the following tools: GitHub - CheckPointSW/ExportImportPolicyPackage

- Export the policy from the lab SmartCenter with the above tools.
- Import the policy in the DMS on the MDM server. The tool has the option to specify a domain.
- If it is an excisting environment, don't forget the option to skip duplicate objects.

If you have an option to test the whole procedure in a lab environment, I would advice you to do so.

Good luck.

Martijn

[jokkeri67]

Hi,

I was able to import to Provider-1 objects and rules when I added this to script:

-> mgmt_cli login -r true -d Customer -v 1.1 > id.txt

[Vincent_Bacher]

Exactly what i meant when creating my reply. So please accept my reply as solution 🤣

Just kidding. Happy that it's solved! 👍