Hello all
I just discovered expedition, what a great tool !
Just got a problem using it with Checkpoint R80 and trying to retrieve a whole configuration.
It seems like I get policies and nat rules as expected, but not all the objects.
How did you do the job on your side ?
Details on my experience below :
As an example, I imported a rule containing an object group named MY_GROUP, containing MEMBER1 to MEMBER8.
All objects are present in the export as uid.
I can see that in Expedition, I only got one member.
Digging in the json file, I can see that the member I got is the one provided in the object dictionnary.
I tested for this group to get the whole group config using "mgmt_cli show group name MY_GROUP details-level full --format json" and to import it in the initial file. It worked.
So Checkpoint did not provide the whole dictionnary using my commands.
mgmt_cli show access-rulebase offset 0 limit 800 name "CheckPoint_GS Security" details-level "full" use-object-dictionary true --format json
mgmt_cli show nat-rulebase offset 0 limit 800 package "CheckPoint_GS" details-level "full" use-object-dictionary true --format json
Any idea could help, thanks in advance 🙂
... View more