About IvanMoore

sent.  hopefully it gets to you.    I also went and did a fresh install based on an ova i found here which is running 1.1.23 and ran into the same issue...so not sure what changed on my Panorama side that is kicking this off. ... View more

This step is part of the problem.  It specifically calls out python 3.7 which is not a part of the ubuntu 16.04 release.  The latest version in that release is 3.5 ... View more

I have the latest version.  I was doing atomic and just sending the security policy as nothing else should have changed since all I was doing was modifying the log start/end, log profile, and security profile entries on the rules. ... View more

Policy.W - oldest versions Rulebases_5_0.fws - in between R65 -> R77.     R80 is database based so no file.   Not sure what the Rules.C file is.  I do not have one on a 77.30 system here. ... View more

the _5_0 versions are the newer versions (NG/NGX).  the others are legacy (4.x).   Check Point is not good at cleaning up after themselves.  So, stick with the _5_0 versions ... View more

I had to downgrade (well, re-install everything) so I could be functional. Dashboard would eventually settle down, but in Projects I would click on something to work on, like unused services, and the working spinner would spin for a bit then I'd get a white screen and eventually either the Dashboard for a quick refresh and then logged out.   I can upgrade/test as necessary however..except for next week as I'll be out at Ignite.  ... View more

I wrote a script for exporting policies on our Provider-1 system.  It takes 2 variables, one is the CMA IP and the other is the Policy name.   It will export the files in chunks of 50 rules and create a zip file containing them all with the order file as well.  It will do this for both the access policy and the nat policy.  We had performance issues on our MDS for exports so we have it set to 50.  The big issue we still run into due to performance is if it fails to properly get the data back.  You never get a warning, you just end up with a mostly empty file.  So look for any files in your zips that are oddly small.   #!/bin/bash # # This script exports the given access and nat policy for the CMA given and # puts it into the proper format for importing into Expedition # # VERSION=1.0.21 . /etc/profile.d/CP.sh cd /var/log/tmp ID="id-$$.txt" USAGE='Usage: export-policy.sh (CMA IP) (Policy)\t\n ' if [ $# == 0 ] ; then echo -e $USAGE exit 1; fi CMAIP="$1" if [ $2 ] ; then POLICY="$2" else echo -e $USAGE exit 1; fi if ! mdsenv $CMAIP >& /dev/null ; then if [ ! $CMAIP = "Global" ] ; then echo "That is not a proper CMA IP" exit 1 fi fi mgmt_cli login -r true -d $CMAIP > $ID TOP_LIMIT=`mgmt_cli show access-rulebase -d $CMAIP offset 50000 limit 50 name "$POLICY Security" details-level "standard" use-object-dictionary true --format json -s $ID | grep total | awk -F " " '{print $3}'` OFFSET="0" FILENAME="0_50" echo "Total Number of Rules: $TOP_LIMIT" echo -n "Exporting Rules." while [ "$OFFSET" -lt "$TOP_LIMIT" ] ; do mgmt_cli show access-rulebase -d $CMAIP offset $OFFSET limit 50 name "$POLICY Security" details-level "full" use-object-dictionary true --format json --conn-timeout 3600 -s $ID >> RuleSet_$FILENAME.json OFFSET=$((OFFSET+50)); FILENAME="$((OFFSET+1))_$((OFFSET+50))" echo -n ".$OFFSET" done echo " " echo "Packing up files" ls -rt RuleSet*.json >order /opt/CPsuite-R80/fw1/Python/bin/python -m zipfile -c $POLICY-Rules.zip order RuleSet*.json >/dev/null 2>&1 rm RuleSet*.json echo " " if [ ! $CMAIP = "Global" ] ; then TOP_LIMIT=`mgmt_cli show nat-rulebase -d $CMAIP offset 50000 limit 50 package $POLICY details-level "standard" use-object-dictionary true --format json -s $ID | grep total | awk -F " " '{print $3}'` OFFSET="0" FILENAME="0_500" echo "Total Number of NAT Rules: $TOP_LIMIT" echo -n "Exporting NAT Rules." while [ "$OFFSET" -lt "$TOP_LIMIT" ] ; do mgmt_cli show nat-rulebase -d $CMAIP offset $OFFSET limit 500 package "$POLICY" details-level "full" use-object-dictionary true --format json --conn-timeout 3600 -s $ID >> NATRuleSet_$FILENAME.json OFFSET=$((OFFSET+500)); FILENAME="$((OFFSET+1))_$((OFFSET+500))" echo -n ".$OFFSET" done echo " " echo "Packing up files" ls -rt NATRuleSet*.json >order /opt/CPsuite-R80/fw1/Python/bin/python -m zipfile -c $POLICY-NatRules.zip order NATRuleSet*.json >/dev/null 2>&1 rm NATRuleSet*.json echo " " echo "Output found in $POLICY-Rules.zip and $POLICY-NatRules.zip." else echo "Output found in $POLICY-Rules.zip" fi echo " " mgmt_cli logout -s $ID rm $ID >/dev/null 2>&1 echo "All Done. Don't forget to grab a copy of the routing table from the gateway"   (Updated to fix NAT export/import)  ... View more

upgraded to 1.1.21 and now I get a lot of odd issues and I get booted constantly.  When I first log in, the Dashboard reloads many many times before finally setteling down.  Then I go into one of my projects and click on say unused services.  It takes a bit while it does its query then i get a white page and eventually logged out. ... View more