Innostage engineers have detailed a process for migrating security policies from Check Point R81.20 to the Continent 4 NGFW (version 4.2.1.653). The migration utilizes the convert_cp_json_to_c4 utility, which transforms JSON exports of Check Point objects and policies into a format compatible with the Continent Configuration Manager.
The migration process requires a workstation with Python 3.9 or higher (3.11 recommended) and OpenSSL 3.0 or later. Tools for interacting with the Continent 4 API are provided as Python scripts, tar.gz, and whl files. They require a Linux environment with access to the Central Management Station (CMS) and administrative credentials.
To prepare for migration, users must export Check Point configurations using the Show Package Tool, which generates JSON files. The conversion utility processes these files, splitting them into segments based on a limit of 20,000 objects per import. The output includes separate files for firewall rules (-fw) and NAT rules (-nat).
The Security Code company provides a suite of specialized tools for automating the migration of security policies and managing the Continent 4 API. These include utilities for importing IoC objects, converting configurations from third-party vendors like Cisco, FortiGate, and UserGate, and managing VLAN interfaces.
