topic Re: Differences in the Checkpoint Source files - definitions needed in Expedition Discussions

Differences in the Checkpoint Source files - definitions needed

jcbolinsce — Wed, 12 Jun 2019 18:43:52 GMT

Source files available vary between versions. Can someone elaborate on what the differences are between the files when both are present?

What are the differences between these two files?

Objects_5_0.C

Objects.C

And What are the differences between these files?

Rulebases_5_0.fws

Rules.C

Policy.W

This question specifically comes from an environment that is using Checkpoint version R65

They have supplied files with:

Rulebases_5_0.fws

Policy.W

Objects_5_0.C

Objects.C

When we import using Policy.W for Policy, and Rulebases_5_0.fws for Rulebases we get 876 rules.

When we import using Rulebases_5_0.fws for both Policy and Rulebases, and check the box for "Policy comes from Rulesbases_5_0.fws" we get 3415 rules. There are also a different amount of NATs as well.

So what is the difference between Policy.W, Rulebases_5_0.fws, and Rules.C?

Re: Differences in the Checkpoint Source files - definitions needed

IvanMoore — Thu, 13 Jun 2019 12:08:51 GMT

the _5_0 versions are the newer versions (NG/NGX). the others are legacy (4.x). Check Point is not good at cleaning up after themselves. So, stick with the _5_0 versions

Re: Differences in the Checkpoint Source files - definitions needed

jcbolinsce — Thu, 13 Jun 2019 16:16:38 GMT

Hmmm. The Expedition interface lists "Rules.C" as the new format.

So are the file versions like this?

Policy.W - oldest versions

Rulebases_5_0.fws - in between R65 and R75?

Rules.C - up to R80

Re: Differences in the Checkpoint Source files - definitions needed

IvanMoore — Fri, 14 Jun 2019 01:20:22 GMT

Policy.W - oldest versions

Rulebases_5_0.fws - in between R65 -> R77.

R80 is database based so no file.

Not sure what the Rules.C file is. I do not have one on a 77.30 system here.