Checkpoint exporting rules

Hi all,

Does anyone knows how to export rules to excel sheet or on
other readable form ?

I'm running SPLAT on NGX R62.

Regards.

rar



 Créez votre adresse électronique prénom.nomlaposte.net 
 1 Go d'espace de stockage, anti-spam et anti-virus
intégrés.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

hi,

try this one:


http://ofiller.chat
scope.com/index.php?option=com_content&task=view&id=
2&Itemid=2

br
reinhard

At 14:35 03.03.2008, rar.mail wrote:
>Hi all,
>
>Does anyone knows how to export rules to excel 
>sheet or on other readable form ?
>
>I'm running SPLAT on NGX R62.
>
>Regards.
>
>rar
>
>
>
>  Créez votre adresse électronique prénom.nomlaposte.net
>  1 Go d'espace de stockage, anti-spam et anti-virus
intégrés.
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-ownerts.checkpoint.com
>=================================================

-- 
Reinhard Stich          r.stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

rar.mail a écrit :
> Hi all,
>
> Does anyone knows how to export rules to excel sheet or
on other readable form ?
>   
check for cprules for export to html.
there is also a tool from checkpoint for this, but I can't
remember the 
name.

bonne journée 
> I'm running SPLAT on NGX R62.
>
> Regards.
>
> rar
>   

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Web visualization tool is the best for this. 

David Cardwell. 
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On
Behalf Of rar.mail
Sent: Monday, March 03, 2008 7:36 AM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] Checkpoint exporting rules

Hi all,

Does anyone knows how to export rules to excel sheet or on
other readable form ?

I'm running SPLAT on NGX R62.

Regards.

rar



 Créez votre adresse électronique prénom.nomlaposte.net 
 1 Go d'espace de stockage, anti-spam et anti-virus
intégrés.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

On Mon, Mar 3, 2008 at 2:35 PM, rar.mail <rar.maillaposte.net> wrote:

> Hi all,
>
> Does anyone knows how to export rules to excel sheet or
on other readable
> form ?


http://www.wyae.de
/software/fwdoc/

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Im running CPrules against different policies and its really
complete 
for me:

Rulebase (security, nat)
objects
services
resources
VPN community
Global properties
Installation targets
....

If u are running NGX u can install smartportal, there are
extra options 
like fw state, logs, ....

Regards,

Sebastian.

Raul Lopez Nevot wrote:
> On Mon, Mar 3, 2008 at 2:35 PM, rar.mail
<rar.maillaposte.net> wrote:
>
>   
>> Hi all,
>>
>> Does anyone knows how to export rules to excel
sheet or on other readable
>> form ?
>>     
>
>
> http://www.wyae.de
/software/fwdoc/
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>
>   


-- 
Sebastian Arriada, Network Security
lastminute.com,
Phone:   +54 911 5455 8793
sarriadalastminute.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Sebastian Arriada a écrit :
> Im running CPrules against different policies and its
really complete 
> for me:
>
> Rulebase (security, nat)
> objects
> services
> resources
> VPN community
> Global properties
> Installation targets
> ....
>
cprules is good, I never tried the web visualization tool.
> If u are running NGX u can install smartportal, there
are extra 
> options like fw state, logs, ....
>
smartportal requires a licence.
> Regards,
>
> Sebastian.



Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

yep, smartportal requires an extra license, but if u are
running 
Checkpoint-pro probably u have it already.

Anyway if this is just to check the policies, I would
suggest run a cron 
with an upgrade_export and then send it to other secure
server where u 
can run the "CPrules" script without any risk.

pkc_mls wrote:
> Sebastian Arriada a écrit :
>> Im running CPrules against different policies and
its really complete 
>> for me:
>>
>> Rulebase (security, nat)
>> objects
>> services
>> resources
>> VPN community
>> Global properties
>> Installation targets
>> ....
>>
> cprules is good, I never tried the web visualization
tool.
>> If u are running NGX u can install smartportal,
there are extra 
>> options like fw state, logs, ....
>>
> smartportal requires a licence.
>> Regards,
>>
>> Sebastian.
>
>
>
> Scanned by Check Point Total Security Gateway.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>


-- 
Sebastian Arriada, Network Security
lastminute.com,
Phone:   +54 911 5455 8793
sarriadalastminute.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hello all,

I recently changed our Exchange server to new hardware which
involves a
new cluster address. I will call the old cluster address
10.0.0.9 and
the new one 10.0.0.8. I switched the nat in the router to
the new
address and added the new server(address) to the firewall
rule. I am
getting drops on our new server in the firewall with no rule
number
stating that the "TCP Packet is out of state. First
packet isn't SYN
tcp_flags:RST". I tried unchecking Drop out of state
packets in the
Global properties. I also tried increasing TCP End Timeout.
Did not
work. I am running NG R55 Build 127.

Thanks
Mike Darr

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

hi,

are you running check point in a cluster? our of state means
that 
your firewall gets a tcp-ack without a syn (or something
like that).

check your ARP-settings for your nat-ip.

br
reinhard

At 16:49 24.03.2008, you wrote:
>Hello all,
>
>I recently changed our Exchange server to new hardware
which involves a
>new cluster address. I will call the old cluster address
10.0.0.9 and
>the new one 10.0.0.8. I switched the nat in the router
to the new
>address and added the new server(address) to the
firewall rule. I am
>getting drops on our new server in the firewall with no
rule number
>stating that the "TCP Packet is out of state. First
packet isn't SYN
>tcp_flags:RST". I tried unchecking Drop out of
state packets in the
>Global properties. I also tried increasing TCP End
Timeout. Did not
>work. I am running NG R55 Build 127.
>
>Thanks
>Mike Darr
>
>Scanned by Check Point Total Security Gateway.
>
>=================================================
>To set vacation, Out-Of-Office, or away messages,
>send an email to LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
>subscription options, email
>fw-1-ownerts.checkpoint.com
>=================================================

-- 
Reinhard Stich          r.stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 


Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================