topic Re: MT 3.1 and CheckPoint VSX in General Topics

MT 3.1 and CheckPoint VSX

Brandon_Wertz — Thu, 14 Jan 2016 20:13:43 GMT

We're running a really old version of CP 71.40 running VSX with multiple virtual firewalls.

This document describes where to get a config file from, but this does't account for a virtualized enviornment and the file nor directory exists for these virtual CheckPoint Firewall.

https://live.paloaltonetworks.com/t5/Migration-Tool-Articles/Checkpoint-Different-Source-Files-Format/ta-p/61989?attachment-id=3409

Has anyone had any experience in migrating a CheckPoint config in a VSX enviornment?

Thanks in advance for any suggestions. (We already contacted our support vendor who said basically your version is too old to even provide assitance with)

Re: MT 3.1 and CheckPoint VSX

glastra1 — Fri, 15 Jan 2016 05:10:47 GMT

look for the rulebase in some folder like

/opt/CPmds-R77/customers/<CMA_name>/CPsuite-R77/fw1/conf/rulebases_5_0.fws

Regards,

Gerardo.

Re: MT 3.1 and CheckPoint VSX

Brandon_Wertz — Fri, 15 Jan 2016 14:12:12 GMT

Thanks I'll take a look!

Re: MT 3.1 and CheckPoint VSX

pulukas — Sun, 17 Jan 2016 17:57:05 GMT

If you are still having problems, try searching the Migration Tool Discussion forum. Or post there as the migration tool engineers monitor that forum.

https://live.paloaltonetworks.com/t5/Migration-Tool-Discussions/bd-p/mt_discuss

Re: MT 3.1 and CheckPoint VSX

Brandon_Wertz — Mon, 18 Jan 2016 15:04:17 GMT

I looked for a MT forum...I didn't find it. Thanks! @pulukas I found out my issue. I looked in "Disucssions" not "Topics")

Re: MT 3.1 and CheckPoint VSX

Brandon_Wertz — Mon, 18 Jan 2016 15:01:15 GMT

@glastra1 I was able to find the directory for my virtualized FWs. In there I found "objects_5_0.C" and "rulebases_5_0.fws"

But the MT UI kep saying I needed to import "Policy" too, so I looked in the same folder and only cound "connectra_policy.C"

When I loaded all 3 up I see the objects, I see "NAT" rules, but in "Security" there are no Security Rules. Any ideas?

Thanks,

Brandon

Re: MT 3.1 and CheckPoint VSX

pulukas — Mon, 18 Jan 2016 22:45:56 GMT

I've only used the Migration Tool a few times and not with Checkpoint, so I'm not sure where you would look.

But you really should post this question over in these other discussion forums. The migration tool developers monitor that forum and respond to questions. They are not over here on the general topics forum very often.

https://live.paloaltonetworks.com/t5/Migration-Tool-Discussions/bd-p/mt_discuss