Hi All, I'm in the process of migrating from a Juniper Netscreen to Checkpoint, and I'd like to make the translation as easy as possible.
I've already used the ofiller tool to create the objects which were on the Netscreen, and I'm now trying to build the rules and NATs with a small PHP script I knocked together (that being my preferred language), however, while the code for rules works, I can't figure out why the NAT stuff doesn't. Here's a sample of the output for a NAT rule. addelement fw_policies ##New rule_adtr address_translation_rule modify fw_policies ##New rule_adtr:0:comments "Test_NAT" addelement fw_policies ##New rule_adtr:0:install: globals:Any addelement fw_policies ##New rule_adtr:0:services_adtr globals:Any addelement fw_policies ##New rule_adtr:0:src_adtr globals:Any addelement fw_policies ##New rule_adtr:0:dst_adtr network_objects:obj_pre_nat All of this lot above works... however, when I then try and add the translated sections, I get the following lines: dbedit> addelement fw_policies ##New rule_adtr:0:services_adtr_translated globals:Any rule_adtr is not a multiple field. dbedit> addelement fw_policies ##New rule_adtr:0:services_adtr_translated:'' globals:Any rule_adtr is not a multiple field. dbedit> modify fw_policies ##New rule_adtr:0:src_adtr_translated globals:Any globals Invalid Schema Class dbedit> addelement fw_policies ##New rule_adtr:0:services_adtr_translated adtr_method:adtr_method_static rule_adtr is not a multiple field. And so on and so forth across all of the _translated fields. I know this is just a conceptual issue... If I can figure out which variable I need to change, then I'll sort it... but until then, I'm a bit stuffed! If anyone can help, I'd be pretty grateful :) Thanks Jon ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
