topic Re: Dynamic Layer in R82: Direct Gateway API Policy Management Made Easy - Tutorial in Firewall and Security Management

Dynamic Layer in R82: Direct Gateway API Policy Management Made Easy - Tutorial

Shay_Levin — Sun, 22 Dec 2024 10:33:16 GMT

R82 introduces the Dynamic Layer, a game-changing feature for Access Control Policies. With Dynamic Layer, you can bypass the Management Server and send policies directly to the Security Gateway via API for instant enforcement.

This feature streamlines operations, saves time, and is perfect for automation.

Watch the full Tutorial below:

Links:

Dynamic Layer in Access Control Policy SK182252

Gaia API References "set-dynamic-content" - V1.18

Re: Dynamic Layer in R82: Direct Gateway API Policy Management Made Easy - Tutorial

aloish — Sat, 28 Dec 2024 19:34:15 GMT

are the created objects like name: "public_dns" with ip-address: "8.8.8.8" temporary - not usable for it admins manual policy config - and scoped to the dynamic layer policy ?
So do I get an error like object exists, if I have a object name "public_dns" with same or another IP like "8.8.4.4" ?
Which means I do have to build logic around the post request to make it idempotent.

Re: Dynamic Layer in R82: Direct Gateway API Policy Management Made Easy - Tutorial

Shay_Levin — Sun, 29 Dec 2024 14:25:29 GMT

Objects created using the "set dynamic content" API will not appear in the SmartConsole, as this API directly creates the object on the gateway.
If you refer to the API documentation, the referenced objects do not include host IP addresses or network IP addresses; they only include pre-built objects like services. As a result, you can't reference those objects types and you will need to create them with the API , the gateway does not consider host object names or IP addresses already defined on the management.

Re: Dynamic Layer in R82: Direct Gateway API Policy Management Made Easy - Tutorial

the_rock — Mon, 30 Dec 2024 20:45:37 GMT

Hey @Shay_Levin

Just curious, sorry since its not clear to me from the sk, but does not appear this is layer by default? I checked demo version, but dont see if there...

Andy

Re: Dynamic Layer in R82: Direct Gateway API Policy Management Made Easy - Tutorial

the_rock — Mon, 30 Dec 2024 20:47:27 GMT

Nm, disregard...I should learn to watch the video more carefully lol

Andy