Greetings!

Network Security wrote:
> Is there a way to export the current FW1 rule base for auditing
> purposes?  Or is there a flat file I can look at on either the
> management station (w2k) or the FW1 (nokia 440)
>
> I have to audit every F/W rule, and justify it's need..lots of fun!

As for FW version 4.x try FW1Rules which helps you build a flat file or
export objects, rules, etc. into a variety of formats
(http://www.wyae.de/software/fwtools.html)

All you need are the rule file (*.W) and the file objects.C - both to be
taken from the management server (in your case the Nokia)

FW1 NG is not completely supported yet - but being worked on.

Bye
        Volker

--

-------------------------------------------------------------------
[EMAIL PROTECTED]                                 discon GmbH
IT-Security Consulting                           Wrangelstrasse 100
http://www.discon.de/                         10997 Berlin, Germany
-------------------------------------------------------------------
PGP-Fingerprint: 5323 a4f7 a7c2 b8ef 4653 05ce d2ea 2b74  b94c c68e

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to