Network Scripting Toolkit

Checkpoint · Object Tools

Checkpoint

Create Host Objects

Generate add host commands with site code, zone, and IP.

Checkpoint

Bulk Create Hosts

Import from CSV or manually add multiple host entries at once.

Checkpoint

Network Objects

Generate add network commands for subnets with VLAN naming.

Checkpoint

Network Groups

Build add group commands with multiple member objects.

Checkpoint · Gaia Configuration

Gaia

Gaia Interface

Generate VLAN sub-interface configuration commands.

Gaia

Embedded Interface

Embedded Gaia interfaces using description key.

Gaia

Single Gateway

Full add simple-gateway with blades and interfaces.

Gaia

Cluster Gateway

Two-member ClusterXL HA with per-member interface IPs.

Gaia

Autoconfig File

Full autoconfig .cfg with bonding, routes, DHCP, hardening.

Gaia

FTW Config

First Time Wizard configuration file for initial setup.

Cisco

Switch Config Generator

Full IOS switch config with VLANs, SSH, spanning-tree, trunk and port-channel.

Cisco

ACL Builder

Build standard and extended ACLs with permit/deny rules, wildcard masks and remarks.

Cisco

HSRP / VRRP Config

Generate first-hop redundancy configs for active/standby gateway pairs.

Network Tools

Tools

Subnet Calculator

CIDR to subnet mask, usable hosts, network & broadcast address with live output.

Tools

IP / VLAN Planner

Enter VLAN count & hosts per VLAN — auto-generates supernet and per-VLAN subnets with live editing.

Tools

Password Generator

Generate complex passwords with custom length, character sets, and strength indicator.

Tools

OpenSSL Hash

Generate crypt-format hashes matching openssl passwd -1/-5/-6 with MD5, SHA-256, SHA-512.

Tools

Wildcard Converter

Instantly convert subnet masks ↔ wildcard masks. Essential for ACL and firewall rule building.

Tools

IP Range Expander

Enter a range like 10.0.0.1–10.0.0.50 and get every IP listed, ready for bulk object creation.

Checkpoint

NAT Rule Builder

Generate add nat-rule commands for hide NAT and static NAT policies.

Checkpoint

SIC Reset

Generate SIC reset and re-initialise commands for gateways and management servers.

Tools

Change Request Template

Fill in a structured network change request and export it as plain text or copy to clipboard.

UI

🌙 Switch to Light Mode

Toggle between dark and light themes for comfortable viewing.

Host Entries 0

Generated Commands

Import CSV

Expected columns: SiteCode, Zone, Hostname, IPAddress, Color — first row is treated as a header and skipped.

CSV or TXT File

Host Entries 0

Generated Commands

Network Entries 0

Generated Commands

Group Entries 0

Generated Commands

Interface Entries 0

Generated Commands

Interface Entries 0

Generated Commands

Gateway Details

Gateway Name

Color

Gateway IP

Hardware

Version

Comments

Blades & Security

Firewall

VPN

IPS

Application Control

URL Filtering

Content Awareness

Anti-Bot

Anti-Virus

Threat Emulation

Identity Awareness

HTTPS Inspection

NAT Hide Internal

Forward Logs to Log Server

Log Servers & Policy

Portal URL (auto)

Send Logs To Server

Backup Server 1

Backup Server 2

Fetch Policy

Connection Persistence

Interfaces 0

Generated Command

Cluster Details

Cluster Name

Color

Cluster VIP

Hardware

Version

Comments

Cluster Members

Member 1 Name

Member 1 IP

Member 2 Name

Member 2 IP

Cluster Mode & Blades

Cluster Mode

Connection Persistence

Firewall

VPN

IPS

Application Control

URL Filtering

Content Awareness

Anti-Bot

Anti-Virus

Threat Emulation

Identity Awareness

HTTPS Inspection

NAT Hide Internal

Log Servers

Portal URL (auto)

Send Logs To Server

Backup Server 1

Backup Server 2

Fetch Policy

Cluster Interfaces 0

Member 1 Interfaces 0

Member 2 Interfaces 0

Generated Command

Gateway Identity

Hostname

MAC Address

Expert Password Hash

Timezone

Routing

Default Gateway (Internet)

VCE / Internal Gateway

Domain Name

VLAN Interfaces 0

DHCP Subnets 0

Autoconfig Output

FTW Parameters

Hostname

MAC Address

Admin Password Hash

Timezone

Cluster Member

Domain Name

FTW Config Output

Switch Identity

Hostname

Password

Location

Domain Name

Management Interface

L3 VLAN ID

L3 VLAN Description

IP Address

Subnet Mask

Default Gateway

VLANs 0

Trunk & Port-Channel

Trunk Interface Range (e.g. 1/0/1-10)

Port Channels

PC1 PC2 PC3

Switch Configuration

Input

IP Address / CIDR (e.g. 10.0.0.0/24)

Or enter Subnet Mask separately

Supernet Settings

Starting Network (e.g. 10.0.0.0)

Number of VLANs

Default Hosts per VLAN

VLAN Definitions 0

Parameters

Length

Count (generate multiple)

Exclude Ambiguous (0,O,l,1,I)

Uppercase (A-Z) Lowercase (a-z) Numbers (0-9) Symbols (!@#$%^&*)

Generated Passwords

Hash Password

Password

Algorithm

Salt (max 8 chars for MD5 · max 16 for SHA · auto-generated if blank)

ℹ Output matches exactly what openssl passwd produces. Use directly in Checkpoint Gaia expert password hash fields, Linux /etc/shadow, or any system accepting crypt(3) format.

Convert

Subnet Mask → Wildcard

Result — Wildcard Mask

Wildcard Mask → Subnet

Result — Subnet Mask

CIDR Prefix → Both Masks

Result — Subnet / Wildcard

Common Reference Table

CIDR	Subnet Mask	Wildcard Mask	Hosts

Input

Start IP

End IP

Exclude network address Exclude broadcast address

NAT Rule Settings

Package Name

NAT Type

Position

Comments

Original (Before NAT)

Source Object

Destination Object

Service

Translated (After NAT)

Translated Source

Translated Destination

Translated Service

NAT Method

Generated NAT Rule

ACL Settings

ACL Name

ACL Type

Direction Note

ACL Rules 0

Generated ACL

Protocol & Interface

Protocol

Interface

Group Number

Virtual IP (VIP)

Version

Authentication Key (optional)

Active Router

Interface IP

Subnet Mask

Priority

Preempt

Preempt Delay (sec)

Hostname

Standby Router

Interface IP

Subnet Mask

Priority

Preempt

Preempt Delay (sec)

Hostname

Generated HSRP / VRRP Config

Gateway / Module Details

Gateway Name / Object

Gateway IP

New SIC Key

Module Type

Operations

Reset SIC on Gateway (Expert CLI) Re-init from SmartConsole (mgmt_cli) Verify SIC status after

SIC Reset Commands

Change Details

CR Number / Ticket

Change Title

Requestor

Implementor

Planned Start

Planned End

Change Type

Risk

Scope & Impact

Affected Devices / Systems

Business Impact

Change Description

Implementation Steps

Rollback Plan

Testing & Validation

Change Request