CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Results 1 to 6 of 6

Thread: Useful tool indeed. Is it Possible?

  1. #1
    Join Date
    2006-12-20
    Posts
    91
    Rep Power
    14

    Default Useful tool indeed. Is it Possible?

    hello guru,
    this tool seems very powerful in creating and modifying object, however, just want to explorer if we could adopt this tool to add new policy or modify firewall policy?
    does anyone try this before?
    how does it flow work like?
    Any comments would be appreciated.
    thanks
    nick

  2. #2
    Join Date
    2009-04-14
    Location
    Ottawa, Ontario, Canada
    Posts
    319
    Rep Power
    11

    Default Re: Useful tool indeed. Is it Possible?

    Your sense make question no.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Pierre Lamy - Escalation Engineer Ottawa TAC
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  3. #3
    Join Date
    2005-08-14
    Location
    Gig Harbor, WA, USA
    Posts
    2,494
    Rep Power
    17

    Default

    There are other ways to create/modify objects via the CLI using dbedit. That might be better than using confwiz to do the job.
    http://phoneboy.org
    Unless otherwise noted, views expressed are my own

  4. #4
    Join Date
    2009-05-10
    Posts
    8
    Rep Power
    0

    Default Re: Useful tool indeed. Is it Possible?

    Hi Nick,

    Yes, you can use Confwiz in order to create or modify a firewall policy, which is in fact, just another object. The only thing you should be aware of is that when you are attempting to replace an object in a container, such as changing a rule's source from host1 to host2, then you cannot just change the reference of host1 to host2, but rather you need to delete the original reference, using the Delete_Keyword, and add a new reference. You can read more about this in the relevant forum at http://supportcenter.checkpoint.com.

    Another side note, each firewall policy points to a policies_collection object which resides in the policies_collections table, thus if you are creating a new firewall policy, you will need to create the policies_collection as well. For an example of how to do so, please have a look at the output of cp_migrator that comes in the Confwiz package when running it on the sample configuration.


    HTH,
    Ofer

  5. #5
    Join Date
    2011-08-12
    Posts
    2
    Rep Power
    0

    Default Re: Useful tool indeed. Is it Possible?

    I haven't used confwiz much, but i'm aware that it can insert objects, rules and mostly provided as a migration tool.
    Whereas i'm having a tool that insert rules, delete rules, create objects (networks and services) and most (80 %)of the things possible thru the smartdashboard. It is like shell utility, with query facilities.
    How useful can this tool be for a regular checkpoint user ?

  6. #6
    Join Date
    2012-07-03
    Posts
    4
    Rep Power
    0

    Default Re: Useful tool indeed. Is it Possible?

    As far as i know about this tool is that it allows you to preserve your intellectual property and drastically improve the manageability of your security systems by migrating to the industry leading Security Management platform and also serves as a platform for performing mass manipulation operations on a Check Point security configuration, improving the manageability of the system even further.

Similar Threads

  1. Some questions about mii-tool
    By shmilyh in forum Check Point SecurePlatform (SPLAT)
    Replies: 6
    Last Post: 2009-07-10, 00:04
  2. Visualization Tool NGX Help
    By pat13b in forum Web Visualization Tool
    Replies: 12
    Last Post: 2008-08-19, 15:53
  3. upgrade_export tool
    By longhill in forum Check Point SecurePlatform (SPLAT)
    Replies: 0
    Last Post: 2008-04-18, 15:41
  4. Web Visualisation tool r65
    By jimfitz in forum Web Visualization Tool
    Replies: 2
    Last Post: 2007-12-17, 15:35
  5. Packaging Tool
    By stephan411 in forum SecureClient/SecuRemote
    Replies: 2
    Last Post: 2006-06-14, 04:14

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •