Firewall-1

Re: [FW-1] show config command on Checkpoint

Subject: Re: [FW-1] show config command on Checkpoint
From: Claudio Mena <CMena AT TRACFONE DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 30 Aug 2004 11:15:45 -0400
"Show summary" Let's me see the configuration but does not lend itself to
pasting the configuration on another box without having to do a lot of
manual configuration. In other words, you still have to input the set
commands or add commands. You are right though, this is the closest thing I
have seen so far to what I am looking for, but I was looking for something a
little bit more like a netscreen's show config command.



Thank you,

Claudio

-----Original Message-----
From: Nicola Nicoletti [mailto:nicola.nicoletti AT STARVOX DOT IT]
Sent: Monday, August 30, 2004 2:40 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] show config command on Checkpoint

Try "show summary"







             Claudio Mena
             <CMena AT TRACFONE DOT C
             OM>                                                        To
             Sent by: Mailing          FW-1-MAILINGLIST AT AMADEUS.US DOT 
CHECKPO
             list for                  INT.COM
             discussion of                                              cc
             Firewall-1
             <FW-1-MAILINGLIST                                     Subject
             @AMADEUS.US.CHECK         [FW-1] show config command on
             POINT.COM>                Checkpoint


             27/08/2004 22.08


             Please respond to
             Mailing list for
               discussion of
                Firewall-1
             <FW-1-MAILINGLIST
             @AMADEUS.US.CHECK
                POINT.COM>






Hi group,

First let me thank you for all your help in the past. I really appreciate
it.

Secondly, I would like to discuss what I am trying to before I ask the
question I have. I want to automate the installation and configuration of
several firewalls we have in our company.

My question is the following:

I have a question regarding scripts on Clish. On netscreen, and on CISCO
PIX
there is a way for copying your current config and modifying it and pasting
it back again after changes were made. For instance, if I wanted to copy
the
current config from one firewall and paste it on another on a netscreen
firewall I can easily do that. If I wanted to change some interfaces I can
get the copied config file, make some changes and paste it on the new
firewall. What I am trying to get at is that I would like to do the same on
my Checkpoint firewalls to automate the configuration, thereby saving time.
I was wondering if that was possible.
I know that in Clish you can write scripts to help you set the variables
you
want.. such as:
set net-access tftp no
set net-access telnet no
set net-access admin-net-login yes
set net-access com2-login no
set net-access com3-login no
set net-access com4-login no
set ssh server enable 1
set ssh server protocol 2

etc etc.
I would like to know if there is any command that will show me this format
of the configuration so that I can just modify the variables I would like
to
be different and paste it according to the new parameters I want on a new
firewall. On Netscreen if you do a "show config" it will show you the
configuration, similar to a Cisco router. Can you do this with Checkpoint
and if so, what is the command?

Thank you.

Claudio

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================



Ai sensi del Decreto Legislativo n. 196/2003, si precisa che le
informazioni contenute
in questo messaggio e negli eventuali allegati sono riservate e per uso
esclusivo del
destinatario. Persone diverse dallo stesso non possono copiare o
distribuire il messaggio
a terzi. Chiunque riceva questo messaggio per errore, è pregato di
distruggerlo e di informare immediatamente postmaster AT fondiaria-sai DOT it

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>