Fortinet white logo
Fortinet white logo

Online Help

Saving the Check Point source configuration file from Provider 1

Saving the Check Point source configuration file from Provider 1

1. Provider – 1 to Fortigate conversion

2. Provider - 1 to FortiManager conversion

1. Provider – 1 to Fortigate conversion

Usually used while converting a single checkpoint firewall to a Fortigate. In this case chose "Smartcenter" option while doing the conversion

1.1 Both MDS/CMA & Gateways are on version before R80.10

MDS is running with multiple CMA domains and we need to convert a single CMA to FortiGate, please refer Section-1 to fetch the files.

1.2 Both MDS/CMA & Gateways are on version R80.10 Or later

MDS is running with multiple CMA domains and we need to convert a single CMA to FortiGate, please refer Section-2 to fetch the files.

1.3 MDS/CMA is on R80.10 but Gateways running below R80 such as R77

  • We can fetch policy and Nat csv files as mentioned above as the management server running with R80.
  • Object definitions and user files are available in the below table.

File Path:

File File name

Location

Path or command
Object definitions objects_5_0.C (Checkpoint NG/NGX)

MDS/CMA

/opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/
Policy rulebases rulebase_5_0.fws

MDS/CMA

/opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/
<package name>.W

User and user group file fwauth.NDB

MDS/CMA

/opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/

Identity role file

identity_roles.C

MDS/CMA

/opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/

Route NA

Gateway

netstat -nr

ifconfig file

NA

Gateway

ifconfig -a

DHCP relay file

NA

Gateway

show configuration bootp

Note: Alternately, you can choose to download Policy and rule definitions file "rulebases_5_0.fws" from following path if you are interested to cross verify it with CSV file: /opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/

2. Provider - 1 to FortiManager conversion

Usually used while converting a multiple checkpoint firewall configuration to Fortimanager output. In this case use "Provider-1" option while doing the conversion

  • MDS definitions – "mdss.C" This file contains the MDS hierarchy.
  • MDS object definitions – "objects_5_0.C" This file contains the definition of domains in each MDS.
  • Global object definitions – "objects_5_0.C" This file contains the definition of objects used in global policies.
  • Global policy rule bases – "rulebases_5_0.fws" This file contains the definition of global policies.
  • Global policy assignments – "customers.C"
  • CMA domain files – Every CMA needs a set of "objects_5_0.C", "rulebases_5_0.fws" and "fwauth.NDB"(optional) files as the input.

File Path:

File

File name

Path

MDS definitions

mdss.C

$MDSDIR/conf/mdsdb

MDS object definitions

objects_5_0.C

$MDSDIR/conf/mdsdb

Global object definitions

objects_5_0.C

$MDSDIR/conf/

Global policy rule bases

rulebases_5_0.fws

$MDSDIR/conf/

Global policy assignments

customers.C

$MDSDIR/conf/mdsdb

CMA object definitions

objects_5_0.C

Path format: "/opt/<mds name>/customers/<Domain mgmt. server name>/<CMA>/<fw name>/conf"

e.g. "opt\CPmds-R76\customers\domain-1_Management_Server\CPsuite-R76\fw1\conf"

CMA policy rulebases rulebases_5_0.fws CMA policy rulebases rulebases_5_0.fws

Uploader Icons used in tool:

Saving the Check Point source configuration file from Provider 1

Saving the Check Point source configuration file from Provider 1

1. Provider – 1 to Fortigate conversion

2. Provider - 1 to FortiManager conversion

1. Provider – 1 to Fortigate conversion

Usually used while converting a single checkpoint firewall to a Fortigate. In this case chose "Smartcenter" option while doing the conversion

1.1 Both MDS/CMA & Gateways are on version before R80.10

MDS is running with multiple CMA domains and we need to convert a single CMA to FortiGate, please refer Section-1 to fetch the files.

1.2 Both MDS/CMA & Gateways are on version R80.10 Or later

MDS is running with multiple CMA domains and we need to convert a single CMA to FortiGate, please refer Section-2 to fetch the files.

1.3 MDS/CMA is on R80.10 but Gateways running below R80 such as R77

  • We can fetch policy and Nat csv files as mentioned above as the management server running with R80.
  • Object definitions and user files are available in the below table.

File Path:

File File name

Location

Path or command
Object definitions objects_5_0.C (Checkpoint NG/NGX)

MDS/CMA

/opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/
Policy rulebases rulebase_5_0.fws

MDS/CMA

/opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/
<package name>.W

User and user group file fwauth.NDB

MDS/CMA

/opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/

Identity role file

identity_roles.C

MDS/CMA

/opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/

Route NA

Gateway

netstat -nr

ifconfig file

NA

Gateway

ifconfig -a

DHCP relay file

NA

Gateway

show configuration bootp

Note: Alternately, you can choose to download Policy and rule definitions file "rulebases_5_0.fws" from following path if you are interested to cross verify it with CSV file: /opt/CPmds-R80/customers/<CMA_Server>/CPR77CMP-R80/conf/

2. Provider - 1 to FortiManager conversion

Usually used while converting a multiple checkpoint firewall configuration to Fortimanager output. In this case use "Provider-1" option while doing the conversion

  • MDS definitions – "mdss.C" This file contains the MDS hierarchy.
  • MDS object definitions – "objects_5_0.C" This file contains the definition of domains in each MDS.
  • Global object definitions – "objects_5_0.C" This file contains the definition of objects used in global policies.
  • Global policy rule bases – "rulebases_5_0.fws" This file contains the definition of global policies.
  • Global policy assignments – "customers.C"
  • CMA domain files – Every CMA needs a set of "objects_5_0.C", "rulebases_5_0.fws" and "fwauth.NDB"(optional) files as the input.

File Path:

File

File name

Path

MDS definitions

mdss.C

$MDSDIR/conf/mdsdb

MDS object definitions

objects_5_0.C

$MDSDIR/conf/mdsdb

Global object definitions

objects_5_0.C

$MDSDIR/conf/

Global policy rule bases

rulebases_5_0.fws

$MDSDIR/conf/

Global policy assignments

customers.C

$MDSDIR/conf/mdsdb

CMA object definitions

objects_5_0.C

Path format: "/opt/<mds name>/customers/<Domain mgmt. server name>/<CMA>/<fw name>/conf"

e.g. "opt\CPmds-R76\customers\domain-1_Management_Server\CPsuite-R76\fw1\conf"

CMA policy rulebases rulebases_5_0.fws CMA policy rulebases rulebases_5_0.fws

Uploader Icons used in tool: