User Tools

Site Tools


paloaltonetworks:migration:check_point

This is an old revision of the document!


Check Point

You need four files.

  • objects_5_0.C
  • policy.W (on 75.40 you may need to copy rulebases_5_0.fws to policy.W as policy.W may not be available.)
  • routes.txt show route netstat -nr show route all
  • rulebases_5_0.fws

When creating policy.W from rulebases_5_0.fws, you need to remove the following from the start of file.

(
	:rule-base 

You also need to remove :rule_adtr (and all text that comes after this.

On a Multi-domain server

  1. SSH to Management server
  2. mdsenv <DOMAINNAME>
  3. cd $FWDIR/conf
  4. cp <policy>.W /home/admin
  5. I then used WinSCP to transfer the file off from the management server

On a distributed server

  1. SSH to Management server
  2. cd $FWDIR/conf
  3. cp <policy>.W /home/user (where user is the user you are logged in as; admin for example)
  4. Use WinSCP/FileZilla/etc to transfer the file off from the management server

If the box is running on Windows, you might find data in C:\WINDOWS\FW1\R75.20\fw1\conf

paloaltonetworks/migration/check_point.1589878133.txt.gz · Last modified: (external edit)