topic Re: o365 dynamic objects script in API / CLI Discussion

o365 dynamic objects script

Charles_Currier — Fri, 24 Aug 2018 12:48:14 GMT

This script pulls the current list of office365 IP Addresses referenced from Office 365 IP Address and URL Web service | Microsoft Docs

to https://endpoints.office.com/endpoints/worldwide. It then creates dynamic objects for each set of Service Areas that have ipv4

network ranges defined in the json document. Once run once an administrator should pull the resulting objects to populate

the policy and then rerun once policy is pushed.

This does not have scheduling at this time.

This has been updated to version 3.

Re: o365 dynamic objects script

Nüüül — Tue, 28 Aug 2018 13:55:05 GMT

Hi,

i wrote something similar ( Basic script for importing IP Adress objects from feed (here office365) )

In the answers Brian told, that MS is changing from xml to API output (https://endpoints.office.com/endpoints/worldwide?clientrequestid=b10c5ed1-bad1-445f-b386-b919946339a7 )

for you maybe interesting too...

Daniel

Re: o365 dynamic objects script

Tomer_Sole — Tue, 28 Aug 2018 14:19:28 GMT

just FYI guys, this feature is coming to R80.20 (Management and Gateways), out soon. But you will need to upgrade your Security Management Server and Gateways for that

Re: o365 dynamic objects script

Nüüül — Tue, 28 Aug 2018 14:42:14 GMT

Hi,

Correct, already testing it on EA

Viele Gr??e

Daniel Meier

//Sent mobile with Check Point Capsule Workspace

Re: o365 dynamic objects script

Charles_Currier — Tue, 28 Aug 2018 14:44:53 GMT

I appreciate and look forward to the upcoming evolution! While quite a few folks have kindly mentioned that this is being rolled into R80.20 and that will be excellent, I suspect many will continue to use dynamic objects in 77.30 and 80.10 for a good while to come and sharing this functionality will "help raise all boats" with regards to leveraging Dynamic Objects. In addition tying in new innovations like APIs from Microsoft will justify new versions and addition innovations that will also help "raise all boats". Meanwhile I have a few more scripts to "share" in the near future.

Re: o365 dynamic objects script

Tomer_Sole — Tue, 28 Aug 2018 16:14:11 GMT

that's true.

Re: o365 dynamic objects script

Yuri_Slobodyany — Thu, 30 Aug 2018 05:06:58 GMT

Thanks for sharing.

While end of support for 77.30 is near (2019), by no means this version is going out of production any time soon, far beyond EOS date. Not to mention that 80% of firewalls in Ent today are R77.30, so your effort is not wasted at all.

Re: o365 dynamic objects script

SCYL — Wed, 20 Nov 2019 08:38:27 GMT

Thanks for sharing Charles, work like a charm! 👍

Re: o365 dynamic objects script

nsamsin — Wed, 20 Nov 2019 08:43:26 GMT

Thanks for sharing Charles, work like a charm!! 👍

Re: o365 dynamic objects script

nsamsin — Tue, 26 Nov 2019 16:37:17 GMT

Hi Charles,

Just a small remark;

I have tested your script on a test gateway with a direct internet connection which worked fine.

While implementing the solution on a production setup behind a proxy I noticed that the script did not worked.

After a quick review I noticed that your curl command is missing the output parameter:

oipaddresses=`curl_cli -k -s --cacert $CPDIR/conf/ca-bundle.crt --retry 10 --retry-delay 60 $url --proxy $HTTPS_PROXY `

This should be changed to:

oipaddresses=`curl_cli -k -s --cacert $CPDIR/conf/ca-bundle.crt --retry 10 --retry-delay 60 $url --proxy $HTTPS_PROXY -o /var/tmp/O365IPAddresses.json `

Once changed the script also works when the gateway is behind a proxy 🙂