topic Smarttask + policy presets in Firewall and Security Management

Smarttask + policy presets

TexasT — Wed, 17 Mar 2021 21:49:52 GMT

Goal: use policy preset to automate policy installs – then email administrators status of installs.

In SmartTask, configure triggers for "after policy installation."

In the scripts repository, there is already a script to "show policy status."

1) when that script is ran, where is the output?

2) how to modify that script to add an email function?

We can clone the script while looking at the SmartTask function, but cannot clone it if we are inside the scripts repository. Even after cloning it, cannot modify it or view the actual script. can only delete it 😞

Re: Smarttask + policy presets

PhoneBoy — Wed, 17 Mar 2021 22:40:01 GMT

My guess is that it probably just runs a single command (either fw stat or cpstat -f policy fw).
In which case, you can write a script that just calls that and parses it accordingly.

Re: Smarttask + policy presets

Jose_Tapia — Tue, 20 Apr 2021 20:44:24 GMT

I PhoneBoy, hope you be fine.

Can we through SmartTask, requiere a comment on a fw rule before install policy? and if is yes, do you know howto do it?

Re: Smarttask + policy presets

PhoneBoy — Tue, 20 Apr 2021 23:29:05 GMT

At install policy time? No.
I believe you can do it before publishing the session where the rule is created, which is the correct time to do it.
It would involve parsing the contents of the show changes API (which is what is passed to the script).
You'd have to look for rule changes and see if they contain a comment or not.
The documentation explains the flow (with an example): https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_SecurityManagement_AdminGuide/Topics-SECMG/SmartTasks.htm?Highlight=smarttasks