FWdoc 0.2

FWdoc project is a vendor-independent standard of storing firewall ruleset configurations. We provide tools to extract the ruleset from proprietary formats into FWdoc format (in JSON), filter rules and objects, and export them into a number of other formats.

From the FWdoc file you can produce a well readable, cross-referenced HTML summary of the firewall configuration. A dump of network and service objects, users, rules and settings into separate files (TXT and Tab-separated tables) or templates (TXT, CSV, SQL, etc.) is possible.

Working (with) Parts

The FWdoc system is designed in modules connected with shell pipes. Thus to create a HTML documentation of a CheckPoint configuration you could run e.g. the following command line:
fw1r55_to_fwdoc.pl | fwdoc_used_objects.py | fwdoc_to_html.py > DOC.html

Input converters (*_to_FWdoc)

CheckPoint up to NG R55

Output converters (FWdoc_to_*)

HTML output
TXT output
table output (CSV, SQL, etc.)

Filters (FWdoc_*)

filtering (un)used objects
ungrouping of objects and services
unrolling of rulesets