topic Enable the access rule to correct-policy package in Ansible

Enable the access rule to correct-policy package

Aathi — Thu, 11 Apr 2019 13:40:53 GMT

Hi Team,

i am adding the rulebase via ansible and having 2 policy package like "standard and Test_APP" policy package.whatever rule in publishing its going to standard only not going to APP policy package.is there any way to publish the rule to APP policy package.

Please find the below script:

- name: "create rule at the top of a section called 'script rules'"
check_point_mgmt:
command: add-access-rule
parameters:
layer: "network"
name: "created by me"
position:
top: "web"
source:
- "host2"
destination:
- "host3"
service:
- "tcp_77"
action: "accept"
session-data: "{{login_response}}"

- name: "publish"
check_point_mgmt:
command: publish
session-data: "{{login_response}}"

- name: "install policy"
check_point_mgmt:
command: install-policy
parameters:
policy-package: "Test_APP"
session-data: "{{login_response}}"

rule is publishing on standard policy package.but policy is installing on Test_APP targeted gateway. i need help on publishing the policy on correct policy package.

Regards

Aathi

Re: Enable the access rule to correct-policy package

masher — Thu, 11 Apr 2019 14:16:37 GMT

I don't know enough about ansible, but when using the mgmt_cli tool I have to reference the policy name as well as the layer in order for the rule to be accepted.

If you change your playbook from:

check_point_mgmt: command: add-access-rule parameters: layer: "network" name: "created by me" ....

To:

check_point_mgmt: command: add-access-rule parameters: layer: "Test_APP Network" name: "created by me" position:

Does it put the access rule in the proper policy package and layer?

Re: Enable the access rule to correct-policy package

PhoneBoy — Fri, 12 Apr 2019 01:39:40 GMT

When you add a rule, it must be added to the correct policy layer.
You can only install a policy package to a gateway, which contains one or more layers.
Can you verify your rule is being added to the correct layer?

Re: Enable the access rule to correct-policy package

Aathi — Fri, 12 Apr 2019 03:03:14 GMT

Thanks Team for your excellent support and guidance.

Now i m able to publish the policy in correct policy package.

Regards

Aathi