Skip to content

Convert ScreenOS rules to JunOS rules / Netscreen to SRX Conversion

License

Notifications You must be signed in to change notification settings

mbaniadam/screenos_to_junos_converter

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

54 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Intro

This collection of programs is to allow easy bulk conversion form ScreenOS (Netscreeens) to Junos (SRX's).

git clone [email protected]:greyinghair/screenos_to_junos_converter.git

Requirements: Python >= 3.6 < 3.8)

Put entire firewall config into file, not for partially converting config.

What this programme doesn't convert

  • NAT (neither MIP's/DIP's/Interface NAT). (Any policies which include NAT config: source NAT, destination NAT & DIP rules will be created minus the NAT config. Firewall rules with MIP as destination will NOT be created at all.)
  • Global rules
  • Disabled rules
  • Interfaces
  • VPNs
  • Routes

The Netscreen config needs to be gone through manually for any rules with "dip", "nat" or "MIP" in them to create relevant NAT policies in Junos.

Scope

Config which is converted from ScreenOS format to JunOS:

  • Services/Applications
  • Addresses
  • Address Groups
  • Rules

Guide

Put config to convert into "netscreen_config.txt" then run the python script: python3 ./convert.py

There will be 1 file output to same directory as the convert.py script resides in:

converted_<date>_<time>.txt

You can then copy and paste the entire output fro the converted file into your SRX.

Things to be Aware of

Converted rules are named the same as the current Netscreen policy ID's so manually inspect a few rule conversions to verify they were converted correctly.

Lookups are not performed nor are sanity checks against zone naming. It is presumed zone naming remains the same across both ScreenOS and JunOS systems, except for the zone named "Management", which is reserved in Junos so if that name exists as a zone in ScreenOS config it will be changed to "System-Management" for JunOS.

About

Convert ScreenOS rules to JunOS rules / Netscreen to SRX Conversion

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%