Command line policy install

[trifid1967]

Is it possible to install a policy from the command line (Linux) instead of using the Windows GUI (fwpolicy.exe)?

[kva.kva]

From man

fwm load
Description This command compiles and installs a Security Policy or a specific version of the Security Policy on the target’s VPN-1 Pro Modules. This is done in one of two ways:
• fwm load compiles and installs an Inspection Script (*.pf) file on the designated VPN-1 Pro Modules.
• fwm load converts a Rule Base (*.W) file created by the GUI into an Inspection Script (*.pf) file then installs it to the designated VPN-1 Pro Modules.
Versions of the Security Policy and databases are maintained in a version repository on the SmartCenter Server. Using this command specific versions of the Security Policy can be installed on a Module (local or remote) without changing the definition of the current active database version on the SmartCenter Server. To protect a target, you must load a Policy that contains rules whose scope matches the target. If none of the rules are enforced on the target, then all traffic through the target is blocked.

Comments If you are installing a specific version of a Security Policy on a remote Module, the local user database is not installed.

Example The following command installs the Security Policy standard.W from the database version -v18 in the target module johnny.
fwm load -v18 standard.W johnny