Driver Support Document

Check Point Provider 1, Linux, version NG, External Parsing

Show Tested Devices Grid

SYSOID Mapping
SYSOID MODEL OS VERSION
 SNMP is not supported Provider 1 NG Linux 2.4.9-34

Driver Features Support Grid

Driver FeaturesAccess Methods
(X signifies feature support)CLISNMPTFTPCLI+TFTPSNMP+TFTPFTPCLI+FTPSNMP+FTPCLI+SFTPSCPCLI+SCPSNMP+SCPHTTP/HTTPS
X Driver Discovery   X                        
X General Access  
(CLI protocols: telnet, ssh1, ssh2, console)
X     X                  
Configuration
X Retrieve Running Configuration release notes X     X                  
  Retrieve Startup Configuration                            
  Retrieve Binary Configuration                            
X Device information parsing  
X Enhanced Layer2 Basic IP information parsing  
  Configuration Deployment to Running                            
  Configuration Deployment to Startup                            
  Binary Configuration Deployment                            
Diagnostics
X Routing Table   X                        
  OSPF Neighbors                            
  Interfaces                            
  Modules and Inventory                            
  Flash Storage Space                            
  File System                            
X Uptime     X                      
X ICMP Test   X                        
X Topology Parsing   X                        
  Duplex Parsing                            
  Enhanced VLAN Parsing  
Features
  Software Center                            
  Software Image Synchronization                            
X Password Management  
(Can modify: limited password, full password) 		X                        
  Syslog Configuration and Change Detection                              
X Custom Scripts and Diagnostics  
X                        
  ACL Parsing  
  ACL Provisioning                            
  VLAN Provisioning                            
  Configlet Parsing  
  QoS Parsing  
  VRF Parsing  
  Context Management                            

<option name="CheckPointRuleParser">"name of external tool to handle parsing"</option> By default, this should be: drivers/CheckPoint/fw1r55_to_fwdoc.pl

The following ancillary setting is enable by the system and should be correctly set:

Script/Root: The default is defined as /install/dir/server/lib/scripts/

It is recommended that the fw1r55_to_fwdoc.pl program is installed within the Script/Root directory in the nested path drivers/CheckPoint. This consolidates the location of the program. However, this requirement is not mandatory and the utility may be installed in any other directory within this path.

After these settings are configured, the driver may be automatically discovered for the Provider-1 devices in the network. Alternatively, the driver can be manually assigned.

Installation of the third party tool can be completed by downloading the package from http://www.wyae.de/software/fwdoc/ and following the installation instructions for FW1r55_to_FWdoc

This driver was written against version 0.8.5 of FW1r55_to_FWdoc

Retrieve Running Configuration

Release Notes

Setting the path to firewall configuration files

The Checkpoint firewall stores part of its configuration in two files: an objects file and a rules file. These files are located under [FWDIR]/conf and [FWDIR]/database respectively. However, the location of [FWDIR] can vary across supported devices. As a result, the FWDIR access variable must be set to identify the location of these files so that they can be accessed when running the Snapshot task.

Skipped Object and Rules Configuration Files

If the CheckPoint device is not configured as the NA Management Engine, by default NA does not capture the (redundant) objects.C and rules.C configuration files. As a result, the driver displays a string stating that the configuration files were not captured. Workaround: Set the 'checkpointManagementEngine' variable to "true" on the Device Access page (Admin->Administrative Settings->Device Access).

return to top