For McAfee/Forcepoint Sidewinder migration, run
cf interface q > config_sidewinder.txt cf service q >> config_sidewinder.txt cf servicegroup q >> config_sidewinder.txt cf route q >> config_sidewinder.txt cf ipaddr q >> config_sidewinder.txt cf iprange q >> config_sidewinder.txt cf host q >> config_sidewinder.txt cf subnet q >> config_sidewinder.txt cf netmap q >> config_sidewinder.txt cf domain q >> config_sidewinder.txt cf static q >> config_sidewinder.txt cf netgroup q >> config_sidewinder.txt cf application q >> config_sidewinder.txt cf appgroup q >> config_sidewinder.txt cf policy q >> config_sidewinder.txt
Then scp config_sidewinder.txt off the box.
It will not include NAT policy rules or aggregate link data.