topic Re: API - using script on domain/cma which is on an MDS in API / CLI Discussion

API - using script on domain/cma which is on an MDS

Andreas_Lorenze — Mon, 28 Jan 2019 12:08:27 GMT

What I want:

Execute API commnand install-policy by a script stored in script repository. The domain is on an MDS.

I have already realized the script button in menu point only to the gateways.

What I have tried:

1. Execute the command via the "comand line" tab/window. This works fine.

2. Execute the the command by right-click on the CMA -> Scripts -> One time Script.... in the way:

mgmt_cli install-policy (with params tested before in command line window)

It first seems to start well, but finally it runs into an error:

"Connection failed for "IP-Address". Make sure that the machine is up and running, and that SIC has been established"

As menitoned execution in comand line window works. As well a usual install policy by GUI.

What did I overlook?

Re: API - using script on domain/cma which is on an MDS

PhoneBoy — Tue, 29 Jan 2019 01:36:43 GMT

I'm pretty sure that run-script (the underlying API used in this case) does not work when an MDS/CMA is the target.

Have you tried other scripts by chance and do they work?

Amiad Stern‌

Re: API - using script on domain/cma which is on an MDS

Amiad_Stern — Tue, 29 Jan 2019 06:45:26 GMT

Run script is not supported on domains / MDS. you can see in UI it is only available for objects listed in 'Gateways & Servers' view

Re: API - using script on domain/cma which is on an MDS

Andreas_Lorenze — Tue, 29 Jan 2019 08:35:15 GMT

Not 100% correct. I you right-click on the object of the CMA you find the script option and it will be finally executed on CMA. BUT it does not get the right context.
So I would propose to add a script repository option to the API CLi window. The primary problem is, the "Open File" button opens a folder in user context. So it is very difficult to share scripts.

Re: API - using script on domain/cma which is on an MDS

Amiad_Stern — Fri, 01 Feb 2019 07:30:57 GMT

Hi Andreas Lorenzen, I'm not sure I got to the bottom of your proposal and the issue with the open file, i would be happy to keep this conversation off-line by mail.

Please send me exact issue and your proposal by mail to amiads@checkpoint.com (screenshots would be helpful)

Thanks,

Amiad.

Re: API - using script on domain/cma which is on an MDS

Andreas_Lorenze — Fri, 01 Feb 2019 12:52:13 GMT

will do