topic Will the "mgmt_cli" command to list rules work on the firewall/gateway directly in Firewall and Security Management

Will the "mgmt_cli" command to list rules work on the firewall/gateway directly

Dany6195 — Thu, 01 Dec 2022 17:08:14 GMT

Dear Team,

We are trying to automate rule validation by pulling the rulesets, related address and service objects (&groups) out of the security gateways through mgmt_cli. Therefore, we ran the "mgmt_cli show Rulebase" to gateway it failed with below error; however, the same command ran successfully on the management device.

"message: "The Management API service is not available. Please check that the Management API server is up and running."
code: "generic_error"

So does that indicate, this mgmt_cli will only work in the management and not on the gateway firewall ?

Re: Will the "mgmt_cli" command to list rules work on the firewall/gateway directly

PhoneBoy — Thu, 01 Dec 2022 20:25:25 GMT

mgmt_cli can be run on the gateways, but queries to the management API don’t work against a gateway since it does not run the Management API server.
You need to either run the command on the management server or specify the destination (using -m flag).

You can query what’s installed on the gateway using a procedure similar to: https://community.checkpoint.com/t5/General-Topics/Show-Ruleset-and-Objects-on-the-Gateway-Emergency-Recovery/m-p/155533