topic Checkpoint API and Skybox in API / CLI Discussion

Checkpoint API and Skybox

Phill_Taylor — Fri, 01 Dec 2017 13:44:50 GMT

Hi, i manage a Skybox deployment which looks after a multi vendor FW estate which includes a variety of Checkpoint devices in a variety of flavours. My Skybox deployment has issues getting device information for a range devices that are all seem to be on R77.2, the error message i get from Skybox is "[insrt FW hostname] were not received from the Check Point API: for help, contact Checkpoint support". Does anyone have any experience of this please?

Just for context, Skybox is trying to speak to the CMA which should in turn pull the information from the enforcement modules and this doesn't seem to be happening in this one particular instance.

We have working instances that work fine, the problem just seems to be affecting one specific CMA.

Thanks in advance,

Phill

Re: Checkpoint API and Skybox

Veronica_Targia — Thu, 07 Dec 2017 18:54:04 GMT

I work with Skybox too, but I didnt have this issue. Did you find the error message in debug.log? Is there another messages related to that issue? Take a look at the hostname of firewall in the CMA and when launch the task for get firewall information see the file generated in collector folder.

Re: Checkpoint API and Skybox

PhoneBoy — Fri, 21 Jun 2019 09:05:57 GMT

API questions should be in the https://community.checkpoint.com/community/developers?sr=search&searchId=b2712fbb-7918-4ff6-9eb6-f10baa7a2685&searchIndex=0‌ space

Re: Checkpoint API and Skybox

Tomer_Sole — Sat, 09 Dec 2017 13:38:03 GMT

Please note that while the message says “contact Check Point Support”, it did not come from a Check Point application but from a SkyBox application so specifically Check Point Support may not be able to help you.

I have reached out to SkyBox to assist on this thread. And hopefully other CheckMates could share their experience on this type of problems.

Re: Checkpoint API and Skybox

Dror_Bareket — Sun, 10 Dec 2017 16:21:39 GMT

Hi Phill,

My name is Dror and I'm from Skybox Security R&D.

Based on you your reported error message, I can cast more light on the problem you are experiencing:

Step – Routing Rules retrieval
Error – No content of routing information

Since the problem occurred for specific CMA,

Possible reasons:

Invalid permissions
Missing licenses
In any other case, contact Skybox Support.

BTW, even if the problem eventually leads to a Check Point configuration issue, you can still start by getting help from our support. I will make sure that the error message is rephrased.

Hope that helps.

For any further instructions, please contact Skybox support

Dror Bareket

Director of Modeling Group, R&D

Dror.Bareket@Skyboxsecurity.com