topic Re: Configuration script via SmartProvisioning in Firewall and Security Management

Configuration script via SmartProvisioning

Basyuk — Wed, 31 Mar 2021 08:19:41 GMT

Hello!

How can I write Configuration Script via SmartProvisioning for 'add' command?

For example, if I want to add administrator, but he is already exist, then Provisioning State will show me an error and following commands will not be executed.

Re: Configuration script via SmartProvisioning

PhoneBoy — Sun, 04 Apr 2021 01:06:29 GMT

The scripting language for SmartProvisioning is the expert shell (bash).
You may want to check for the presence of the admin prior to adding them to ensure the script doesn't fail or do some other error catching in your script.

Re: Configuration script via SmartProvisioning

Basyuk — Sun, 04 Apr 2021 04:01:33 GMT

The configuration script in the provisioning profile settings works only in clish. Am I wrong?

Re: Configuration script via SmartProvisioning

PhoneBoy — Sun, 04 Apr 2021 04:34:44 GMT

Pretty sure it's bash based on: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111452&partition=Advanced&product=SmartProvisioning

Re: Configuration script via SmartProvisioning

Basyuk — Sun, 04 Apr 2021 08:22:13 GMT

You write about the run script function, and I write about the configuration script function in the provisioning profile settings.

Screenshot in attachment.

Re: Configuration script via SmartProvisioning

PhoneBoy — Sun, 04 Apr 2021 16:21:09 GMT

Yeah, it would make sense that was based on clish.
Maybe add set clienv on-failure continue to the script.
This should allow the script to continue if one of the commands fails.
Not sure if this is in Embedded Gaia, but it works in regular Gaia.

Re: Configuration script via SmartProvisioning

Igor_Demchenko — Thu, 29 May 2025 09:22:57 GMT

Hi, @PhoneBoy!
No, this is not in Embedded Gaia . But is there any solution for it?

I have 1120/1430 devices.

Re: Configuration script via SmartProvisioning

PhoneBoy — Thu, 29 May 2025 23:14:13 GMT

The commands executed in the "Configuration Script" would be interpreted as per the expert shell.
To execute clish commands to configure the device, you need to call clish -c with each command needed to do it.
That's what is implied by: https://support.checkpoint.com/results/sk/sk111452

Whether this works with Embedded Gaia devices (1120/1430 are older EOL devices) is a separate question.