topic Re: How to test the Management API with the Cloud Demo in API / CLI Discussion

How to test the Management API with the Cloud Demo

Tomer_Sole — Thu, 18 Jan 2018 21:54:05 GMT

The nice thing with the R80.10 Cloud Demo option is that you no longer need a real Check Point license to test security management features. And the API is one of them.

1. Get the server IP by clicking “copy server IP”

2. Get an administrator with a password that you know of, by creating one at “Permissions & Administrators” or by changing the password of one of the existing administrators. Publish your changes.

Now you can test your tools by connecting to this server IP with the administrator username and password.

Re: How to test the Management API with the Cloud Demo

Vladimir — Sat, 27 Jan 2018 00:32:56 GMT

Tomer,

Can you point me to a detailed description of the capabilities of the cloud demo?

I routinely recommend it to my clients for familiarization with R80.XX, but it would be nice to accurately describe its limitations.

Thank you.

Re: How to test the Management API with the Cloud Demo

PhoneBoy — Sat, 27 Jan 2018 05:50:21 GMT

There's an SK that describes the various limitations: Check Point R80 / R80.10 Cloud Demo Known Limitations

Re: How to test the Management API with the Cloud Demo

Tomer_Sole — Sun, 28 Jan 2018 07:23:06 GMT

Here is the overview of why we chose this approach with R80 and the highlights of the benefits - https://community.checkpoint.com/thread/5447-a-brief-history-of-demo-mode-for-policy-editor-and-smartdashboard#comment-7…

Re: How to test the Management API with the Cloud Demo

Bryan_Lee — Wed, 26 Sep 2018 08:34:06 GMT

How do I restart the Management API with "api restart" command in this demo mode? the "command line" shell is not the usual Gaia shell.

Re: How to test the Management API with the Cloud Demo

PhoneBoy — Wed, 26 Sep 2018 14:18:24 GMT

I don't you need to in the case of the Cloud Demo servers, but could be wrong there.

Re: How to test the Management API with the Cloud Demo

Joshua_Hatter — Fri, 28 Sep 2018 12:43:18 GMT

The API in the cloud demo is setup to only accept local connections so it is required to test remote tools. Tomer Sole can we get the cloud server to default to gui clients or all IP? Otherwise we need some way to access and restart the API like Bryan mentioned.

Otherwise I have bypassed this with the run-script api to issue an api restart from SmartConsole.

Re: How to test the Management API with the Cloud Demo

Ofir_Shikolski — Fri, 28 Sep 2018 16:02:34 GMT

Get the real ip of the machine.

update MGMT object with real IP.

modify API settings

add user + password + permissions

publish

run-script on the MGMT object :

source /etc/profile.d/CP.sh && api restart

ignore the error

Have fun I do not know how to upload screenshots

for me it worked

C:\Program Files (x86)\CheckPoint\SmartConsole\R80.20\PROGRAM>mgmt_cli.exe login -m 52.59.244.70 -u ofirs -p ofirs

To verify server identity, compare the following fingerprint with the one displayed by the api management tool (api fingerprint).

SHA1 Fingerprint=42:02:B9:93:7C:4A:E4:47:3F:4C:B3:82:B8:45:0D:A9:13:80:E9:62
English Fingerprint=TOY GAL CENT WAVY LIEN LEE TAN CHEF SNOW DAYS BADE RUSK

Do you accept the fingerprint? (y/n) [y] ? y

C:\Program Files (x86)\CheckPoint\SmartConsole\R80.20\PROGRAM>mgmt_cli.exe login -m 52.59.244.70 -u ofirs -p ofirs
uid: "ddae3d5a-55aa-4cfd-8007-203a48e76ad7"
sid: "VuF91i1TvIShO6qc-L7xLDhxgNt04c4Nw9annrZFack"
url: "https://52.59.244.70:443/web_api"
session-timeout: 600
last-login-was-at:
posix: 1538151915730
iso-8601: "2018-09-28T16:25+0000"
api-server-version: "1.3"

Re: How to test the Management API with the Cloud Demo

Joshua_Hatter — Fri, 28 Sep 2018 16:50:53 GMT

As I said I do this to bypass the issue.

But it would make more sense for standard user who is using the demo to not go through this step.

Re: How to test the Management API with the Cloud Demo

Jason_Rakers — Fri, 07 Dec 2018 15:51:20 GMT

api restart is a CLISH command

Re: How to test the Management API with the Cloud Demo

Joshua_Hatter — Fri, 07 Dec 2018 16:28:05 GMT

The api command is a shell script, that can be called from Expert or Clish.

Re: How to test the Management API with the Cloud Demo

Tunnelscraper — Thu, 01 Jul 2021 14:32:01 GMT

Hi,

is this method possible to do for a normal user?

Because I don't have no idea how

* How to access the CLISH in the Demo env.?

* where I get the script?

* what have to be modified by the API setting?

Tanks for your answers.

Cheers

Re: How to test the Management API with the Cloud Demo

PhoneBoy — Thu, 01 Jul 2021 20:26:13 GMT

clish access is not necessary for this.
Also in current versions the Demo Mode server should be available from all IPs by default (as I recall), or if you need to enable it, there is no need to execute an api restart.
If you want to use mgmt_cli, it’s available in Windows when you install SmartConsole.

Re: How to test the Management API with the Cloud Demo

PhoneBoy — Sat, 03 Jul 2021 03:27:39 GMT

Created a new post on this topic: https://community.checkpoint.com/t5/API-CLI-Discussion/Using-SmartConsole-Demo-Mode-Server-for-API-testing/td-p/122863
Further questions on this topic should be addressed on this thread.