CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Results 1 to 3 of 3

Thread: Tips for successful Confwiz import

  1. #1
    Join Date
    2009-05-14
    Location
    Indianapolis, IN
    Posts
    25
    Rep Power
    0

    Default Tips for successful Confwiz import

    1. Create the file in Notepad or similar regular text editor.

    2. Double, triple check the syntax.

    3. Make sure you have NO leading or trailing spaces. NO leading or trailing empty lines.

    4. ONE command per line only! To change multiple attributes you need multiple lines, followed by an update command.

    5. FTP the text file to the firewall.

    6. If you are using SPLAT, you MUST use a utility called dos2unix, that will convert the file properly. This is the only way I found it to work, even if I tried using TextPad or similar to save in "Unix" format. Syntax is "dos2unix filename.txt"

    7. Check your file with VI, there should be NO special characters now that it's properly formatted.

    7. Use dbedit to import the file and cross your fingers.

    If you see lines of output that look like syntax, you have a problem. Look for leading/trailing spaces or lines. Make sure you have the file formatted properly with VI. Make sure you have the syntax right.

    It's a little picky, but INVALUABLE. Personally I used it to convert ASA to checkpoint. I was interested in network objects and NAT's only, and was able to save myself a boatload of time.

  2. #2
    Join Date
    2009-05-10
    Posts
    8
    Rep Power
    0

    Default Re: Tips for successful Confwiz import

    Hi Ender,

    I'm a bit confused. You mention that you're using dbedit to import the file, but the thread is under Confwiz. From the limitations written there, I assume that this is indeed dbedit you are using and not Confwiz.

    Have you used Confwiz to perform the initial ASA to XML conversion and then manipulated it to dbedit format?


    Cheers,
    Ofer

  3. #3
    Join Date
    2012-08-27
    Posts
    2
    Rep Power
    0

    Default Re: Tips for successful Confwiz import

    Quote Originally Posted by Ender519 View Post
    1. Create the file in Notepad or similar regular text editor.

    2. Double, triple check the syntax.

    3. Make sure you have NO leading or trailing spaces. NO leading or trailing empty lines.

    4. ONE command per line only! To change multiple attributes you need multiple lines, followed by an update command.

    5. FTP the text file to the firewall.

    6. If you are using SPLAT, you MUST use a utility called dos2unix, that will convert the file properly. This is the only way I found it to work, even if I tried using TextPad or similar to save in "Unix" format. Syntax is "dos2unix filename.txt"

    7. Check your file with VI, there should be NO special characters now that it's properly formatted.

    7. Use dbedit to import the file and cross your fingers.

    If you see lines of output that look like syntax, you have a problem. Look for leading/trailing spaces or lines. Make sure you have the file formatted properly with VI. Make sure you have the syntax right.

    It's a little picky, but INVALUABLE. Personally I used it to convert ASA to checkpoint. I was interested in network objects and NAT's only, and was able to save myself a boatload of time.
    Hi,
    Have you created a interoperable device object using dbedit?

    Fred

Similar Threads

  1. Tips for study (I fail last week)
    By druex in forum CCSA NGX R65 Exam 156-215.65
    Replies: 1
    Last Post: 2009-10-15, 00:52
  2. Successful VPN but cannot ping inside server
    By paulbenignos in forum Check Point UTM-1 Edge Appliances
    Replies: 0
    Last Post: 2009-08-25, 04:16
  3. Converting Traditional to simplified - any tips?
    By tdvit in forum SmartDashboard
    Replies: 2
    Last Post: 2009-06-27, 05:02
  4. Announcing Confwiz
    By chillyjim in forum Confwiz
    Replies: 13
    Last Post: 2009-06-26, 04:33
  5. Successful Upgrade from NGR55 to NGX R62
    By mc_rockz in forum Installing And Upgrading
    Replies: 1
    Last Post: 2007-11-26, 00:13

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •