Way to systematically identify which network policies are assinged to which gateways

[Dany6195]

Dear Team,

I am trying to find a procedure in the mgmt_cli from management server to identify the below systematically

1. Identify all the security policies defined in the management server

2. Map which policies are assigned to which gateways

I found command to only list down all the gateways configured under a mgmt server but not the linked policy

gns3-mgtsrv> mgmt_cli show simple-gateways
objects:
- uid: "2c443bfc-2931-4d04-9e89-d8226e4f6c21"
name: "gns3-cpfw1"
type: "simple-gateway"
domain:
uid: "41e821a0-3720-11e3-aa6e-0800200c9fde"
name: "SMC User"
domain-type: "domain"
from: 1
to: 1
total: 1

[Alex- · Accepted solution]

Use the show-packages call with details-level full, it will show all policy packages on your management server and contain the target-name and target-uid for each of them.

[Tal_Paz-Fridman]

To see the actual command installed on the Security Gateway use the cpstat command.

On the Security Management Server run:

cpstat fw -h <IP of Security Gateway>

[Dany6195]

Thank you so much Tal, this worked like a charm 🙂