Checkpoint to PIX Migration

[RICHARD MESSINGER]

We are getting ready to migrate a customer from a Checkpoint Firewall to a PIX environment. Having never worked on a Checkpoint, I am wondering if there is a "simple" set of steps to get the configuration information out of the checkpoint and then be ready to create new configurations for the PIX.

Any ideas or tools or places to go for help is appreciated.

[Patrick Iseli]

There are some tool that exist, even one from CheckPoint, to export the rules into a Webpage to read the Firewall Rules, nat and objects offline.

Converting to a PIX config must be done by hand.

Export FW-1 NG Rules to html:

http://www.wormnet.nl/cprules/

http://www.wyae.de/software/fw1rules/

sincerely

Patrick

[pravkuma]

Did you happen to get some information on this. I am looking for similar info.

[sachinraja]

Ya.. as patrick suggested, get all the rules of the checkpoint on a seperate file. get information about everything, eg, inside network subnet, outside subnet, dmz's, servers on inside, access-restrictions from inside-outside/outside-inside etc.. once you have all these, we can configure the PIX accordingly..

get these info first and then kick off with your PIX configurations...

Raj