topic [IMPORT CHECKPOINT R80.10] Nothing get imported in Expedition in Expedition Discussions

[IMPORT CHECKPOINT R80.10] Nothing get imported in Expedition

Sydrou — Tue, 06 Aug 2019 09:52:20 GMT

Hello all,

I am currently on the 1.1.32 version of Expedition which give me access to the "Import Checkpoint R80.10 (Beta)" feature.

I successfully manage to export the needed package on Checkpoint with the "$MDS_FWDIR/scripts/web_api_show_package.sh -k ... -b" command.

I end up with a .tar.gz with several .json and .html files of the policy package i want to export.

When I untar the files (json + html) and zip them (json + html) into a new file to import it into Expedition, the zip is processed but nothing happens and all the objects fields are empty.

I also tried to get ride of the .html files to only keep the .json files but it's not working either.

Would someone have an idea on this ?

Thank you for your help.

Best Regards,

Sullivan Drouard

Re: [IMPORT CHECKPOINT R80.10] Nothing get imported in Expedition

sjanita — Wed, 07 Aug 2019 05:44:09 GMT

Try importing the .tar.gz file that had been generated. The import of the files does not have to be in zip format.

Re: [IMPORT CHECKPOINT R80.10] Nothing get imported in Expedition

Sydrou — Wed, 07 Aug 2019 07:32:20 GMT

I already tried to do that but the result is the same.

I should not have issue with the file size because the "upload_max_filesize" and "post_max_size" fields are already set to the right value.

Should the html be present in the package ? I guess we have nothing to touch when we export the package from Checkpoint but since it's not working, i'm wondering ...

Any other idea or maybe some log files that could be helpful for troubleshooting that issue ?

Re: [IMPORT CHECKPOINT R80.10] Nothing get imported in Expedition

sjanita — Wed, 07 Aug 2019 08:17:45 GMT

The html files by default are in the exported package and do not cause an issue with the migration of the files.

Can you post the output from the file:

$tail -f /tmp/error

Re: [IMPORT CHECKPOINT R80.10] Nothing get imported in Expedition

Sydrou — Wed, 07 Aug 2019 08:34:16 GMT

Ok, great to hear.

Below the result of the $tail -f /tmp/error command :

Warning: implode(): Invalid arguments passed in /var/www/html/libs/common/lib-rules.php on line 4275

Notice: Trying to get property of non-object in /var/www/html/libs/common/lib-rules.php on line 4276
Inserting DNAT affected Rules
Inserting Static-NAT affected Rules
Inserting No-NAT affected Rules

Notice: Trying to get property of non-object in /var/www/html/libs/shared.php on line 7192

Notice: Undefined variable: tagNames in /var/www/html/libs/shared.php on line 7201

Re: [IMPORT CHECKPOINT R80.10] Nothing get imported in Expedition

Sydrou — Thu, 08 Aug 2019 12:14:02 GMT

I guess some parameters of the Checkpoint configuration can't be processed in the rules.php and shared.php files.

Do you have an idea for importing elements step by step to determine which .json or object is blocking the import process ?

I also tried R80 but my address groups are imported as host with their UID names and 1.1.1.1 Ip address.

If anyone has an idea to solve the R80 part so I can drop the R80.10 part which give less result.