CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


CPUG Challenge 2018?? We will be holding another CPUG Challenge for 2018.
The plan is to time it around CPX again (earlier this year), but not necessarily limit it to those in attendance.
I'll provide more details as we get a bit closer, but be ready! -E

 

Results 1 to 16 of 16

Thread: Export SmartDashboard objects to a text file

  1. #1
    Join Date
    2013-09-25
    Location
    Bucharest
    Posts
    642
    Rep Power
    5

    Default Export SmartDashboard objects to a text file

    Hi guys,

    Part of replacing one IPSO cluster is "recreating" on another vendor's CLI a big object group with about 200+ objects.
    Any hint of how can I do that please?

    I am thinking at guidbedit or dbedit, but I never worked with either tool until now.

    Thanks!

  2. #2
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,088
    Rep Power
    12

    Default Re: Export SmartDashboard objects to a text file

    Quote Originally Posted by laf_c View Post
    Hi guys,

    Part of replacing one IPSO cluster is "recreating" on another vendor's CLI a big object group with about 200+ objects.
    Any hint of how can I do that please?

    I am thinking at guidbedit or dbedit, but I never worked with either tool until now.

    Thanks!
    Depending on the versions involved can you use confwiz? Or cp_merge and only do object export/import?
    --
    My Book "Max Power: Check Point Firewall Performance Optimization"
    Second Edition Coming Soon

  3. #3
    Join Date
    2006-04-27
    Location
    Twillight zone
    Posts
    999
    Rep Power
    12

    Default Re: Export SmartDashboard objects to a text file

    for the objects, you should be able to right-click on the group in question inside the dashboard and export it (dont remember the file format).
    From that file you should be able to script/pull out info

  4. #4
    Join Date
    2017-04-26
    Posts
    16
    Rep Power
    0

    Default Re: Export SmartDashboard objects to a text file

    Quote Originally Posted by laf_c View Post
    Hi guys,

    Part of replacing one IPSO cluster is "recreating" on another vendor's CLI a big object group with about 200+ objects.
    Any hint of how can I do that please?

    I am thinking at guidbedit or dbedit, but I never worked with either tool until now.

    Thanks!
    Any chance this is R80? I've got just the thing for you if so...

  5. #5
    Join Date
    2013-09-25
    Location
    Bucharest
    Posts
    642
    Rep Power
    5

    Default Re: Export SmartDashboard objects to a text file

    Hey guys,

    Thanks for the replies: more than I expected.
    Now let's sum up a bit my options:
    - right click --> export; it will generate a big .ckp file with all CP object logic behind. Here's an object example:

    BRSL_financial_ER
    :AdminInfo (
    :chkpf_uid ("{A2DEBB03-77C9-4CF9-A726-A340F91F027A}")
    :ClassName (network)
    :table (network_objects)
    :Wiznum (-1)
    :name (BRSL_financial_ER)
    :icon ("NetworkObjects/Network/Network")
    )
    :addr_type_indication (IPv4)
    :edges ()
    :ipaddr6 ()
    :macAddress ()
    :netmask6 ()
    :use_as_wildcard_netmask (false)
    :NAT ()
    :add_adtr_rule (false)
    :broadcast (allow)
    :color (orange)
    :comments ()
    :ipaddr (193.10x.y34.0)
    :location (internal)
    :location_desc ()
    :netmask (255.255.255.0)
    :type (network)
    )


    - I never used confwiz or cp_merge; do you guys think it will output into a better export file?
    Also can you point me to some related documentation as I couldn't find anything so far

    Click image for larger version. 

Name:	Capture.jpg 
Views:	66 
Size:	85.9 KB 
ID:	1287

    - I am using R77.30 on mgmt. server.
    Last edited by laf_c; 2017-06-16 at 03:53.

  6. #6
    Join Date
    2006-04-27
    Location
    Twillight zone
    Posts
    999
    Rep Power
    12

    Default Re: Export SmartDashboard objects to a text file

    which vendor are you switching to? Maybe that vendor has some conversion scripts.
    I've used confiz a lot but the other way around, migrating from Juniper to Checkpoint and it worked....fairly well
    If you are migrating to Palo Alto, they have the migration tool available.

  7. #7
    Join Date
    2013-09-25
    Location
    Bucharest
    Posts
    642
    Rep Power
    5

    Default Re: Export SmartDashboard objects to a text file

    Quote Originally Posted by abusharif View Post
    which vendor are you switching to? Maybe that vendor has some conversion scripts.
    I've used confiz a lot but the other way around, migrating from Juniper to Checkpoint and it worked....fairly well
    If you are migrating to Palo Alto, they have the migration tool available.
    Fortigate with centralized mgmt. server: FortiManager

  8. #8
    Join Date
    2006-04-27
    Location
    Twillight zone
    Posts
    999
    Rep Power
    12

    Default Re: Export SmartDashboard objects to a text file

    I guess you already looked at this one: https://www.fortinet.com/products/ne...converter.html

  9. #9
    Join Date
    2013-09-25
    Location
    Bucharest
    Posts
    642
    Rep Power
    5

    Default Re: Export SmartDashboard objects to a text file

    Quote Originally Posted by abusharif View Post
    I guess you already looked at this one: https://www.fortinet.com/products/ne...converter.html
    I didn't; where are you located? I have to dispatch some beer already!

    Now for anyone else reading this, let's move on to the actual conversion:
    1. FortiConverted asks for for objects_5_0.c file

    Click image for larger version. 

Name:	Capture.jpg 
Views:	64 
Size:	50.0 KB 
ID:	1288

    2. I looked on the mgmt. server and here's what I could find:

    [Expert@sflda-gratiot:0]# find / -name objects_5_0.C
    /opt/CPR7540CMP-R77/conf/objects_5_0.C
    /opt/CPSG80CMP-R77/conf/objects_5_0.C
    /opt/CPSG80R75CMP-R77/conf/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/SFLD-001D/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/defaultDatabase/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{DC6066A4-20B6-5F4F-ABB0-7027B1B617E3}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{05B9CC60-6920-F64C-A550-B8C939017221}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{7DE25C4C-7AF1-D240-8B9D-74307868BEA4}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{63C155CE-8206-F84E-91EC-E274DA45DBE8}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{F7C53096-748B-F946-917E-534AEBDF9694}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{DB9B49E3-20D4-A148-A971-C8AE11E365FB}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/SFLD-001C/objects_5_0.C
    /var/log/opt/CPrt-R77/conf/cpml_db/objects_5_0.C


    Any idea which file should I SCP from the mgmt. server in regard to my need: a global defined group object used on multiple policy packages.

  10. #10
    Join Date
    2017-04-07
    Posts
    5
    Rep Power
    0

    Default Re: Export SmartDashboard objects to a text file

    Quote Originally Posted by laf_c View Post
    I didn't; where are you located? I have to dispatch some beer already!

    Now for anyone else reading this, let's move on to the actual conversion:
    1. FortiConverted asks for for objects_5_0.c file

    Click image for larger version. 

Name:	Capture.jpg 
Views:	64 
Size:	50.0 KB 
ID:	1288

    2. I looked on the mgmt. server and here's what I could find:

    [Expert@sflda-gratiot:0]# find / -name objects_5_0.C
    /opt/CPR7540CMP-R77/conf/objects_5_0.C
    /opt/CPSG80CMP-R77/conf/objects_5_0.C
    /opt/CPSG80R75CMP-R77/conf/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/SFLD-001D/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/defaultDatabase/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{DC6066A4-20B6-5F4F-ABB0-7027B1B617E3}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{05B9CC60-6920-F64C-A550-B8C939017221}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{7DE25C4C-7AF1-D240-8B9D-74307868BEA4}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{63C155CE-8206-F84E-91EC-E274DA45DBE8}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{F7C53096-748B-F946-917E-534AEBDF9694}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/db_snapshot/{DB9B49E3-20D4-A148-A971-C8AE11E365FB}/objects_5_0.C
    /var/opt/CPsuite-R77/fw1/conf/SFLD-001C/objects_5_0.C
    /var/log/opt/CPrt-R77/conf/cpml_db/objects_5_0.C


    Any idea which file should I SCP from the mgmt. server in regard to my need: a global defined group object used on multiple policy packages.
    For management running on R77.xx you can SCP the objects file from here /var/opt/CPsuite-R77/fw1/conf/objects_5_0.C

    Sent from my Nexus 6P using Tapatalk

  11. #11
    Join Date
    2006-04-27
    Location
    Twillight zone
    Posts
    999
    Rep Power
    12

    Default Re: Export SmartDashboard objects to a text file

    As above, the one in $FWDIR/conf

    Glad converter seem to work for you :)

  12. #12
    Join Date
    2013-09-25
    Location
    Bucharest
    Posts
    642
    Rep Power
    5

    Default Re: Export SmartDashboard objects to a text file

    Quote Originally Posted by abusharif View Post
    As above, the one in $FWDIR/conf

    Glad converter seem to work for you :)
    Spent like 1/2h than it generated two reports:
    - Converted which was BLANK
    - Unconverted which was full of errors;

    I ll test my grep and sed skills on the exported SmartDashboard file.

  13. #13
    Join Date
    2008-12-31
    Posts
    4
    Rep Power
    0

    Default Re: Export SmartDashboard objects to a text file

    Check out the oldie but goodie odumper. Still works like a charm in R77.30.

    https://curenuisance.com/check-point...umper-utility/

  14. #14
    Join Date
    2012-07-05
    Posts
    5
    Rep Power
    0

    Default Re: Export SmartDashboard objects to a text file

    Quote Originally Posted by justin.jocewicz View Post
    Check out the oldie but goodie odumper. Still works like a charm in R77.30.

    https://curenuisance.com/check-point...umper-utility/
    I really like this one!
    Is it also possible to just grab the objects.C file from the firewall, copy it to a separate linux workstation and run the odumper from that separate linux workstation on that file?

  15. #15
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,480
    Rep Power
    8

    Default Re: Export SmartDashboard objects to a text file

    Quote Originally Posted by heskez View Post
    I really like this one!
    Is it also possible to just grab the objects.C file from the firewall, copy it to a separate linux workstation and run the odumper from that separate linux workstation on that file?
    yupers, it will convert .C to .CSV

  16. #16
    Join Date
    2012-07-05
    Posts
    5
    Rep Power
    0

    Default Re: Export SmartDashboard objects to a text file

    Thanks a lot! I'll try that.

Similar Threads

  1. Exporting log files to text and 2GB file limit
    By nolan.rumble in forum Scripts and Tools
    Replies: 0
    Last Post: 2012-05-10, 09:42
  2. Automatic object creation from text file
    By m.nurmuhametov in forum Miscellaneous
    Replies: 6
    Last Post: 2008-09-10, 08:05
  3. configuration in a text file
    By fun2002u in forum Check Point Backup Procedures
    Replies: 7
    Last Post: 2007-08-14, 09:27
  4. Export Ruleset/Policy to text file
    By Scrif in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 1
    Last Post: 2007-08-02, 04:27
  5. Dump the CP NG FP2 ruleset in text file
    By antonyso88 in forum Sun Solaris
    Replies: 0
    Last Post: 2006-11-26, 21:32

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •