Importing Rules from Checkpoint R80.40

Jimmy_Delgado — Fri, 06 Aug 2021 23:15:09 GMT

We are trying to get started on expedition trying to import policies and objects from checkpoint r80.40. We have a central management server from which we tried the command required as per gui expedition instructions to import security rules:

mgmt_cli show access-rulebase name policy-20160115 details-level "full" use-object-dictionary true --format json > see result below. We are confident our policy is name "policy-20160115"

Also we try getting the files from /opt/CPsuite-R77/fw1/conf as mentioned on : https://live.paloaltonetworks.com/t5/expedition-discussions/checkpoint-to-palo-alto-using-expedition/m-p/363866?lightbox-message-images-363880=28683iBFA1D5F357E2DE2B#M3085.

This work somehow I get to see policies but the objects are all with same 1.1.1.1 IP.

[Expert@wynoochee:0]#
[Expert@wynoochee:0]# mgmt_cli show access-rulebase name policy-20160115 details-level "full" use-object-dictionary true --format json
Username: admin
Password:
{
"code" : "generic_err_object_not_found",
"message" : "Requested object [policy-20160115] not found"
}
[Expert@wynoochee:0]#

Re: Importing Rules from Checkpoint R80.40

azuniga — Mon, 09 Aug 2021 15:29:28 GMT

Hello @Jimmy_Delgado

The screenshot is showing the checkpoint r77.30 import which wouldn't be used in this case. However if you are having issues exporting your checkpoint configuration you can talk to checkpoint support or we also made a document that you can reference for help with that. ( https://panos.pan.dev/docs/expedition/expedition_export )

topic Importing Rules from Checkpoint R80.40 in Expedition Discussions

Importing Rules from Checkpoint R80.40

Re: Importing Rules from Checkpoint R80.40