About allabres

There where 2 issues on this case: ----------------------------------------- 1) The issue initially was pulling the information from the correct Checkpoint Security Gateway/Firewall BUT by mistake they where pulling the NAT coonfiguration from the wrong Source (Diffrerent Firewall) using the guide command below: The correct Security rules firewall set is : "Internet Security" mgmt_cli show access-rulebase offset 0 limit 400 name "Internet Security" details-level "full" use-object-dictionary true --format json > RuleSet_0_400.json mgmt_cli show access-rulebase offset 401 limit 400 name "Internet Security" details-level "full" use-object-dictionary true --format json > RuleSet_401_800.json mgmt_cli show access-rulebase offset 801 limit 400 name "Internet Security" details-level "full" use-object-dictionary true --format json > RuleSet_801_1200.json   giving the files : RuleSet_0_400.json RuleSet_401_800.json RuleSet_801_1200.json we ZIP them into -> RuleSet_Security.zip   The NATs where pulled from the wrong Firewall mgmt_cli show nat-rulebase offset 0 limit 500 package "Bill_Fw" details-level "full" use-object-dictionary true --format json > NATRuleSet_0_500.json mgmt_cli show nat-rulebase offset 501 limit 500 package "Bill_Fw" details-level "full" use-object-dictionary true --format json > NATRuleSet_501_1000.json mgmt_cli show nat-rulebase offset 1001 limit 500 package "Bill_Fw" details-level "full" use-object-dictionary true --format json > NATRuleSet_1001_1500.json   giving files: NATRuleSet_0_500.json NATRuleSet_501_1000.json NATRuleSet_1001_1500.json We zip the files into -> NATRuleSet.zip   The correct NAT rules set firewall set is : "Internet NAT" they used "Bill_FW" the load nto the migration tool Expedition of course was wrong and with inconcistancies. 2) the sexonf issue was that Expedition was not taking the ZIP files correctly. It was loading all the .json files from the Security ZIP File but only loading the NAT first file and ignoring the other 3 files on the .zip.   The solution: ---------------- to load all the R80 configuration in this particular case: - Asked the customer to run the command for the entire configuration as per example below:   mgmt_cli show access-rulebase offset 0 limit 1000 name "Internet Security" details-level "full" use-object-dictionary true --format json > RuleSet_0_100.json   giving 1 security jason File: RuleSet_0_1000.json   And   mgmt_cli show nat-rulebase offset 0 limit 1500 package "Internet NAT" details-level "full" use-object-dictionary true --format json > NATRuleSet_0_1500.json   giving 1 NAT Jason file: NATRuleSet_0_1500.json   Then, the Expedition load was clean and ready to work on the migration tool. Regards, Alex - ... View more