Network Management

Unable to download complete configs from CheckPoint firewalls (including configs from virtual systems) in NCM

You can download configs from CheckPoint Firewalls, but the downloaded config is incomplete and does not include the configs for the virtual systems.

First published date

5/12/2026 7:29 AM

Last published date

5/12/2026 3:27 PM

Overview

You are unable to download complete configs from CheckPoint firewalls (including configs from virtual systems)

You can download configs from CheckPoint Firewalls, but the downloaded config is incomplete and does not include the configs for the virtual systems.

Manually, the following needs to be run to get the configs from virtual systems as well:
- set virtual-system 0
- show configuration
- set virtual-system 1
- show configuration
- set virtual-system 2
- show configuration 

Product section

Network Configuration Manager

Cause

The device template does not have the commands to download configs from virtual systems.

Resolution

Use the device template below:

<Configuration-Management Device="CheckPoint_Firewall_Test" SystemOID="1.3.6.1.4.1.2620.1.6" AutoDetectType="BySystemOid" SystemDescriptionRegex="">
  <Commands>
    <Command Name="RESET" Value="set clienv rows 0" />
    <Command Name="Reboot" Value="reload${CRLF}y${CRLF}y" />
    <Command Name="EnterConfigMode" Value="config terminal" />
    <Command Name="ExitConfigMode" Value="end" />
    <Command Name="Startup" Value="startup" />
    <Command Name="Running" Value="running" />
    <Command Name="UseMultipleDownloadCommands" Value="True" />
    <Command Name="DownloadConfig" Value="set virtual-system 0${CRLF}show configuration${CRLF}set virtual-system 1${CRLF}show configuration${CRLF}set virtual-system 2${CRLF}show configuration" />
    <Command Name="UploadConfig" Value="${EnterConfigMode}${CRLF}${ConfigText}${CRLF}${ExitConfigMode}" />
    <Command Name="DownloadConfigIndirect" Value="copy ${ConfigType} ${TransferProtocol}://${StorageAddress}/${StorageFilename}${CRLF}${CRLF}${CRLF}" />
    <Command Name="UploadConfigIndirect" Value="copy ${TransferProtocol}://${StorageAddress}/${StorageFilename}  ${ConfigType}${CRLF}${CRLF}" />
    <Command Name="DownloadConfigIndirectSCP" Value="copy ${ConfigType} ${TransferProtocol}://${SCPServerUserName}@${SCPStorageAddress}/${StorageFilename}${CRLF}${CRLF}${CRLF}${CRLF}${SCPServerPassword}" />
    <Command Name="UploadConfigIndirectSCP" Value="copy ${TransferProtocol}://${SCPServerUserName}@${SCPStorageAddress}/${StorageFilename}  ${ConfigType}${CRLF}${CRLF}${SCPServerPassword}" />
    <Command Name="EraseConfig" Value="write erase${CRLF}Y" />
    <Command Name="SaveConfig" Value="write memory" />
    <Command Name="Version" Value="show version all" />
    <Command Name="Disconnect" Value="exit" />
  </Commands>
</Configuration-Management>