Hi,
If you want to upgrade only the objects, you could use the following
command
fwm confmerge Old_objects_file empty_objects_file > objects_5_0.C
The empty_objects_file could be downloaded from CheckPoint Web site, or you
can use an objects_5_0.C file from a clean installation (I think It must
work)..
Bye,
====================================
Mauricio F. Muñoz Quevedo
Security Consultant
Etek International - Colombia
ISO 9001 certified
Tel: +57-( 1)-257-1520
Fax: +57-(1)-257-6960
www.etek.com.co
Este correo y cualquier archivo anexo son confidenciales y para uso
exclusivo de la persona o entidad de destino. Esta comunicación puede
contener información protegida por el privilegio de cliente-abogado. Si
usted ha recibido este correo por error, equivocacion u omisión queda
estrictamente prohibido la utilización, copia, reimpresión, reenvio o
cualquier acción tomada sobre este email y puede ser penalizada legalmente.
En tal caso, favor notificar en forma inmediata al remitente.
This e-mail and any files transmitted with it are for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. If you are not the intended recipient, please contact the
sender by reply e-mail and destroy all copies of the original message. Any
unauthorized review, use, disclosure, dissemination, forwarding, printing
or copying of this email or any action taken in reliance on this e-mail is
strictly prohibited and may be unlawful.
==============================================
|---------+-------------------------------------------->
| | Can2002 |
| | <notleyc+maillists.checkpoint@FAS|
| | TMAIL.FM> |
| | Sent by: Mailing list for |
| | discussion of Firewall-1 |
| | <FW-1-MAILINGLIST AT AMADEUS.US DOT CHEC|
| | KPOINT.COM> |
| | |
| | |
| | 24/06/2003 11:14 a.m. |
| | Please respond to Mailing list |
| | for discussion of Firewall-1 |
| | |
|---------+-------------------------------------------->
>----------------------------------------------------------------------------------------------|
|
|
| To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
|
| cc:
|
| Subject: [FW-1] Importing objects manually into OBJECTS_5_0.C -
Possible??? |
>----------------------------------------------------------------------------------------------|
A colleague at work has written a utility that stripts the content out of
OBJECTS.C on a 4.1 box and produces an output file containing each object
formated for an OBJECTS_5_0.C file.
The idea behind it was to save time re-creating objects in situations
where the standard upgrade solutions don't suit. An example of the
format produced is shown below:
: (Net-xxx.yyy.zzz
:add_adtr_rule (false)
:color (blue)
:comments (Blah Blah Blah)
:ipaddr (xxx.yyy.zzz.0)
:netmask (255.255.255.0)
:type (network)
:location (internal)
:broadcast (allow)
)
I've tried doing a cpstop and then editing OBJECTS_5_0.C and trying to
paste the above in after the existing object defined for the management
server. I then run cpstart and go into SmartDashboard; however the
network object does is not shown. If I exit Dashboard and then open
OBJECTS_5_0.C and look for the section I previously added, I see the
following:
: (Net-xxx.yyy.zzz
:add_adtr_rule (false)
:color (blue)
:comments (Blah Blah Blah)
:ipaddr (xxx.yyy.zzz.0)
:netmask (255.255.255.0)
:type (network)
:location (internal)
:broadcast (allow)
:AdminInfo (
:LastModified (
:Time ("Tue Jun 24 15:38:59 2003")
:By ("Reference upgrade process")
:From (bhluk-fw1)
)
:chkpf_uid
("{840E9D50-1459-4C32-87D2-913F66F31E27}")
:ClassType (network)
:name (Net-xxx.yyy.zzz)
:table (network_objects)
)
)
The AdminInfo section was obviously added by some Checkpoint process;
however the GUI interface will still not display the object.
Does anyone know if what I'm trying to do is even possible. Basically I
have ~ 300 objects to create so I'd rather automate this if possible!
Cheers,
Chris
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
