topic Is it possible to list IP's in an Updatable Object in Firewall and Security Management

Is it possible to list IP's in an Updatable Object

RichUK — Tue, 02 Aug 2022 13:31:56 GMT

Hi all,

We have just started using updatable objects on our R81.10 firewalls. I added the Exchange Online Worldwide Services thinking it would allow the IP addresses listed by Microsoft's for Exchange Online, however the IP's got dropped.

The original rule just had the Exchange Online Worldwide Services updatable object.

Microsoft's IP list with the 104.47.0.0/17 IP that is being dropped

I've had to add the Office365 Worldwide services in the rule to allow 104.47.20.53

Is there anyway to, at any moment in time, find out what IP's are in an updatable object?

Many thanks

Rich

Re: Is it possible to list IP's in an Updatable Object

PhoneBoy — Tue, 02 Aug 2022 13:45:27 GMT

domains_tool can help here.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161632&partition=Advanced&product=Quantum

Re: Is it possible to list IP's in an Updatable Object

the_rock — Tue, 02 Aug 2022 14:04:54 GMT

Thanks for that @PhoneBoy , I bookmarked that link, super useful!

Andy

Re: Is it possible to list IP's in an Updatable Object

Itall — Thu, 07 Sep 2023 12:28:17 GMT

It is not usable , domains_tool only show updatable objects that contain domains, not ip addresses. If the updatabele object wiith Ip address enforced, the tool can not show ip addreses/ranges/cidrs.