topic Checkpoint R77.30 IPSec Tunnels not importing in Expedition Discussions

Checkpoint R77.30 IPSec Tunnels not importing

andrewl_coh — Mon, 03 Feb 2020 22:39:46 GMT

Hello,

I am beginning a conversion of firewalls from CheckPoint R77.30 to Palo and we are getting all of the objects I would expect except for the IPSec Tunnels. The firewall's I am converting all have tunnels that would be great to get converted. I am following the MT20- Checkpoint: Different SOURCE files FORMAT guide found on the forms for getting the correct files from the CheckPoint management server. Anyone have any suggestions why the IPSec Tunnels are not being imported?

Re: Checkpoint R77.30 IPSec Tunnels not importing

andrewl_coh — Wed, 12 Feb 2020 16:27:03 GMT

To add some additional information to hopefully get some assistance with this issue.

In case 3 of the "MT20 – Checkpoint: Different SOURCE files FORMAT". It spells out that there should be a rules.C file for configurations R75.40 or higher. We are running R77.30 on our firewalls and do not have the rules.C file. I am currently just using the rulebases_5_0.fws file but have to use option B or nothing will import. We are getting everything except for the IPsec tunnels which is a huge bummer as we have a large number of tunnels between our firewalls.

Re: Checkpoint R77.30 IPSec Tunnels not importing

dgildelaig — Thu, 13 Feb 2020 14:57:27 GMT

We are not currently supporting VPN migrations for Checkpoint configurations.

This is something we will support in the future and we are working on it.