Q: How do I use the cprules utility to document my Checkpoint ruleset?

A:

The free cprules utility can read your data files from your management server and produce HTML output. Here's how:

1. Log onto your management server and find the conf directory that contains objects_5_0.C and rulebases_5_0.fws.
2. FTP or SCP these files down to the PC which has cprules installed.
3. On the management box, run these two commands:

   fwm dbexport -f users.exp
   fwm dbexport -g -f groups.exp
   

4. Copy the users.exp and groups.exp files to your PC as well.
5. On the PC, run perl CPusers.pl. This will create users.C
6. For each ruleset in your database for which you want a report, run perl CPrules.pl --rulebase {rulesetname}. This will create a subdirectory called rulesetname containing the output.