topic How to enbale and configure Application filtering blade with Ansible in API / CLI Discussion

How to enbale and configure Application filtering blade with Ansible

Amit_Chaubey — Sat, 15 Sep 2018 19:53:15 GMT

Hi,

I am using Terraform for infrastructure provisioning and Ansible for configuration in AWS to deploy checkpoint FIrewall R80, I am stuck on few points below,

I am looking for a solution how to enable Application filtering blade(any other blade like IPS etc.) and how to add URL/s for Egress filtering. I am using Ansible for automation so that Internal subnet can access the Some URL on the Internet and rest should be blocked.

Any Ansible module related to this would help a lot.

Thank you,

Amit Chaubey

Re: How to enbale and configure Application filtering blade with Ansible

PhoneBoy — Fri, 21 Jun 2019 09:14:37 GMT

The command in the API is set simple-gateway, as documented here: Check Point - Management API reference: set simple-gateway

To add URLs for egress filtering, you'd have to:

Create an application site: Check Point - Management API reference: add application-site (or modify an existing one)
Create a rule allowing access to only that application-site: Check Point - Management API reference: add access-rule

In the sample configurations here, similar tasks are done: https://community.checkpoint.com/docs/DOC-2173

I recommend looking at the enclosed playbooks.