Discussion:
newbie Q ... CIL avaliable??
(too old to reply)
yk
2004-06-01 15:13:07 UTC
Permalink
Hi, I have a simple question about firewall-1.

Does it have CLI ??
I have seen somebody using firewall-1 for couple of times
but they all were clicking aroung on GUI.

Thanks.
Chris
2004-06-01 18:55:30 UTC
Permalink
Post by yk
Hi, I have a simple question about firewall-1.
Does it have CLI ??
I have seen somebody using firewall-1 for couple of times
but they all were clicking aroung on GUI.
Thanks.
CheckPoint Firewall-1 configuration is done mainly through a GUI but there
are CLI options for managing the firewall.

Chris.
yk
2004-06-02 14:17:05 UTC
Permalink
Thank for your followup, Chris.

Is it possible to dump configuration with CLI?
I mean something like "show config" of cisco IOS.

There is a remote firewall which I would like to discuss about
it's configuration but the operator of the firewall says it's not
possible to give me full configuration information.

So, I want something like "show config", which I beleive there should be.
Post by Chris
Post by yk
Hi, I have a simple question about firewall-1.
Does it have CLI ??
I have seen somebody using firewall-1 for couple of times
but they all were clicking aroung on GUI.
Thanks.
CheckPoint Firewall-1 configuration is done mainly through a GUI but there
are CLI options for managing the firewall.
Chris.
Chris
2004-06-02 18:58:02 UTC
Permalink
Post by yk
Thank for your followup, Chris.
Is it possible to dump configuration with CLI?
I mean something like "show config" of cisco IOS.
There is a remote firewall which I would like to discuss about
it's configuration but the operator of the firewall says it's not
possible to give me full configuration information.
So, I want something like "show config", which I beleive there should be.
There's nothing that would be easy to understand. You can run a cpinfo
program that outputs a text file but it's very long and complicated and
normally only used for troubleshooting when you log a call with CheckPoint
or a reseller as there is a tool available for extracing info from the
output file.

Really, you need the GUI management software to look at the security policy.

Chris.
Dyfed
2004-06-03 14:06:37 UTC
Permalink
Post by yk
Thank for your followup, Chris.
Is it possible to dump configuration with CLI?
I mean something like "show config" of cisco IOS.
There is a remote firewall which I would like to discuss about
it's configuration but the operator of the firewall says it's not
possible to give me full configuration information.
So, I want something like "show config", which I beleive there should be.
If you get the rulebase (something.W) and the objects.C (or
objects_5_0.C) you can use FW1rules
(http://www.wyae.de/software/fw1rules/). There are some other tools
that can be found there as well.

-D
yk
2004-06-08 17:05:21 UTC
Permalink
Thanks Dyfed and sorry for late followup.

I just tried on fw1rules and it seems working just fine.
I have not yet asked remote operator to try cpinfo which Chris
told me...

Anyhow, Thanks again and I report everybody this fw1rules is fine!
Post by Dyfed
Post by yk
Thank for your followup, Chris.
Is it possible to dump configuration with CLI?
I mean something like "show config" of cisco IOS.
There is a remote firewall which I would like to discuss about
it's configuration but the operator of the firewall says it's not
possible to give me full configuration information.
So, I want something like "show config", which I beleive there should be.
If you get the rulebase (something.W) and the objects.C (or
objects_5_0.C) you can use FW1rules
(http://www.wyae.de/software/fw1rules/). There are some other tools
that can be found there as well.
-D
Loading...