> > > Has anyone had the "opportunity" to convert a Checkpoint firewall to > > > PIX? I was hoping to leverage other people's experience with this > > > conversion -- this particular Checkpoint firewall has about 45 > > > explicit rules, but quite a few objects involved. Is there a GUI tool > > > already available that I haven't found yet? > > > Has anyone written a script that might help? > > > >Just curious. Why are you wanting to change? when customer ask us this question about a conversion tool, we prefer to said it is also a good time to review your security policy and may be to implement a new one based from the result of the review. then you can go for PDM ( pix device manger ) the GUI of pix ( just released - free ) or CSPM ( cisco secure policy manager - a more global security management tool including IOS CBAC generation, IDS configaration and reporting). in case the customer want to go asap and just convert the existing configuration, we work with our AVVID partner : www.solsoft.fr. They have a product named NetPartionner, this product is also a very good security management tool. the release 4.2 is able to read a checkpoint config, and convert it to a pix one. hope it helps. Luc
begin:vcard n:Billot;Luc tel;cell:+33 689 108 033 tel;fax:+33 4 97 23 26 26 tel;work:33 497 232 604/ +33 158 046 348 x-mozilla-html:FALSE url:http://www.cisco.com/ org:CISCO SYSTEM EUROPE;EMEA New Technology Sales : Security version:2.1 email;internet:[EMAIL PROTECTED] title:Security Consultant adr;quoted-printable:;;CISCO SYSTEMS EUROPE=0D=0AVillage d'Entreprises GREEN SIDE=0D=0A400, Avenue Roumanille=0D=0AB=E2timent T3=0D=0A06410 BIOT - Sophia-Antipolis=0D=0AT=E9l. : 04 97 23 26 00=0D=0A=0D=0A=0D=0A =0D=0A=0D=0A;BIOT;;06410;France x-mozilla-cpt:;16672 fn:Luc Alain BILLOT end:vcard
