topic Re: Checkpoint R80.20 API for IPS Profiles/Protections in Firewall and Security Management

Checkpoint R80.20 API for IPS Profiles/Protections

Ravindra_Katrag — Thu, 31 Oct 2019 14:55:59 GMT

Hello

We have recently upgraded our management from R77.30 to R80.20 and I am playing with API. In my environment there are time that I have to enable 800 IPS protections in a Certain Profile. I would like to know if there is a script that I can use to enable all these protection for a given profile through API

Anyhelp would be much appreciated.

--Ravi

Re: Checkpoint R80.20 API for IPS Profiles/Protections

PhoneBoy — Fri, 01 Nov 2019 20:31:47 GMT

It's done using the set threat-protection API using the override parameter.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html?#gui-cli/set-threat-protection~v1.3

Re: Checkpoint R80.20 API for IPS Profiles/Protections

Ravindra_Katrag — Fri, 01 Nov 2019 21:08:03 GMT

Thank you.

I tried and it worked. But Can I put like a 1000 protections in a Single Script?

Re: Checkpoint R80.20 API for IPS Profiles/Protections

PhoneBoy — Sun, 03 Nov 2019 07:59:43 GMT

You can script this, yes.
That said, with a large number of changes, you should probably publish the changes every few hundred or so.