Extracting Rule Base

[dylanwhite]

Hi,

Does anyone know a way i can extract the rule base to a HTML format at all??
I am told there is a script that can do this.

Thanks in advance

Dylan

 

[rn4it]

What version are you using? I believe if I remember correctly you could export the rulebase in FW-1 4.0 then import it into excel then into html. NG-FP3 and AI I don't believe you can, but there could be a script that could do it. Personally I wouldn't want to do it, if someone gets ahold of it, then there is a lot they will learn about the network you're attempting to protect. Why do you want to do it? just curious.

 

[dylanwhite]

Unfortunatley it's NG-FP3. So i guess i'm stuck.

Reason - Customer wants a list...amongst other things.

Cheers anyway

 

[rn4it]

If it's on a nokia platform you could do a ipsoinfo and or cpinfo check into that. If it's NT or Unix you could run a cpinfo. Also if worse comes to worse print screens. If there are rules that they don't need to know about I would exclude them. The FW I manage is used by a few companies and I don't let them see anything that would jepardize the security of the environment.

 

[aceman]

try phoneboy....theres a perl script that converts the rules/object sinto an html table....

 

[bkduke]

Check out FW1Rules at

http://www.wyae.de/software/fw1rules

FW1Rules is a perl script that reads the Checkpoint Firewall-1 configuration files and produces a well formatted, cross-referenced HTML list and summary of the firewall configuration. Additionally dump of network and service objects, users, rules and settings into separate files (TXT and Tab-separated tables) or templates (TXT, CSV, SQL, etc.) is possible.

Support for Checkpoint Firewall-1 versions 3.x, 4.x and NG up to SP3 is tested and stable. The compatibility continuously is being improved, though.

It works very well and the price is right... GNU Public Licensed.

bk

 

[fatboy69]

I just installed Acrobat writer 6 and printed them to PDF from a GUI manager client. I could then copy them into documents and manipulate them.

FB