topic Re: Creating group of Address groups in Firewall and Security Management

Creating group of Address groups

Vineethkumar — Sun, 28 May 2023 03:50:11 GMT

Hi all

As a part of my work, I have written a rule to create few host objects and added those objects to a group. And at the source side I have multiple such address groups to be used. For example I have to use 7 such address groups at the source.

My question is.. Can I create one more group comprising of those 7 address groups; to use at multiple rules ?

Re: Creating group of Address groups

G_W_Albrecht — Sun, 28 May 2023 10:19:51 GMT

Why do you need to do that ? You can just create a new group and add all hosts from these 7 address groups. Afaik groups of groups do work, but why make things more complicated if you do not need to ?

Re: Creating group of Address groups

Tal_Paz-Fridman — Sun, 28 May 2023 11:44:19 GMT

Adding Network Groups to another Group is the same as adding any other Network Object:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-group~v1.9%20

As you can see in the first example:

mgmt_cli add group name "New Group 5" members.1 "New Host 1" members.2 "My Test Host 3" groups.1 "New Group 1" groups.2 "New Group 2"  --format json

Re: Creating group of Address groups

G_W_Albrecht — Sun, 28 May 2023 20:42:33 GMT

Sorry, did not see that this is a API question - as you posted in gateways i thought it is a dashboard topic...

Re: Creating group of Address groups

the_rock — Sun, 28 May 2023 20:47:19 GMT

You can create brand new group and add as many existing group into it as you like. I have beed doing that in my lab for many years.

Andy