Does anyone know a CLI shortcut or any other method for changing the "Install On" gateway for network objects? We are migrating to a new HA cluster and Id really rather not marshal through several hundred objects and change the "Install on" for each.
Thanks
The CLI command is something like:
set network name "HR Lan" nat-settings.install-on "BranchOffice" nat-settings.auto-rule true nat-settings.hide-behind gateway
A similar command exists for a host object.
Note that when you modify the nat-settings, you cannot simply specify the gateway, you have to specify other parameters as well, as noted in the API docs: Check Point - Management API reference: set network
R80.x includes find/replace function, which is handy in cases you want to replace all occurrences of a specific object in your policy with another one. Just tested it in R80.20 last week where it worked fine. Changed the install-on field on couple of hundred rules.
Lari,
Can you share examples?
Let's replace a BranchOffice with Corporate-GW in the Install On column of Corporate_Policy.
Right click the Branch-Office gateway in the policy, select Where Used, then select Replace and find the object you want replace the object with (in this example Corporate-GW), select the rules where you want to do the replacement and then simply hit the Replace button.
You can select to replace all occurrences of the object by by clicking the box next to "Policies", which is equivalent to "select all".
Are you referring to the NAT properties of the Network Objects? Objects themselves, I believe, are "Global" in nature.