topic Re: Can we create custom updatable objects in R80.20 in API / CLI Discussion

Can we create custom updatable objects in R80.20

Blason_R — Tue, 19 Mar 2019 04:04:44 GMT

Hi folks,

I guess the fantastic thing about CheckPoint what I like is auto-updatable objects. Further to that, I guess we can create our own customized auto-updatable objects [not sure though]

Can someone please confirm? I did not find much information either, nor any SK written about those hence wondering if a community can help here?

Thanks and Regards,

Blason R

Re: Can we create custom updatable objects in R80.20

Jerry — Tue, 19 Mar 2019 08:08:13 GMT

https://community.checkpoint.com/t5/How-To-Videos/R80-20-Identity-Tags-and-Updatable-Objects/m-p/46344#M86

Re: Can we create custom updatable objects in R80.20

Blason_R — Tue, 19 Mar 2019 14:50:34 GMT

Yep, I agree, but wanted to know if I can create my own Updatable objects? Like I am maintaining IP addresses in the URL https://test.example.com/ip.list. So can I create my own updatable object to pull IP address list from this URL and use in rule base?

Thanks and Regards,

Blason R

Re: Can we create custom updatable objects in R80.20

PhoneBoy — Wed, 20 Mar 2019 04:11:37 GMT

Custom updatable objects that operate like the ones we added in r80.20 are planned for future releases.

Re: Can we create custom updatable objects in R80.20

Blason_R — Wed, 20 Mar 2019 08:51:40 GMT

Thanks for the reply...

Re: Can we create custom updatable objects in R80.20

StuartGreen — Wed, 20 Mar 2019 09:20:16 GMT

I've got some Python code that might be useful - it's for a demo on how to use the R80.x API to retrieve external content, do a little processing and then feed that into the policy via API calls. Once I find somewhere to host it I'll post the link.

Re: Can we create custom updatable objects in R80.20

StuartGreen — Wed, 20 Mar 2019 10:02:58 GMT

Here you are - it's written to pull in the O365 IP addresses from Microsoft and update a group in the policy.

https://github.com/sg84/cp_dynamic_objects/blob/master/o365updater.py

Re: Can we create custom updatable objects in R80.20

Black_Cyborg — Wed, 20 Mar 2019 11:59:59 GMT

Use this script and adapt it:

- GEO Location Objects in Firewall Policy (with Dynamic Objects)

Re: Can we create custom updatable objects in R80.20

Blason_R — Wed, 20 Mar 2019 13:48:06 GMT

That's awesome buddy!! Thanks a ton. Let me have a look at it.

Re: Can we create custom updatable objects in R80.20

David_Klein — Wed, 27 May 2020 16:08:24 GMT

Have any updates to the Custom Updatable Objects functionality been updated in R80.40? Any documentation maybe?

Re: Can we create custom updatable objects in R80.20

PhoneBoy — Wed, 27 May 2020 16:15:27 GMT

Planned for R81.

Re: Can we create custom updatable objects in R80.20

genisis__ — Fri, 04 Dec 2020 17:28:25 GMT

Do we know if Checkpoint are going to create an updatable object for there own services for updates. In this way we could have a firewall rule allowing the GW itself to go out to the Checkpoint Cloud for http/https connection. This would then cover all services such as all the TP blade updates.

Re: Can we create custom updatable objects in R80.20

PhoneBoy — Fri, 04 Dec 2020 22:19:08 GMT

We have what is required explicitly listed in sk83520, though I imagine some of it could be made into Updatable Objects.

Re: Can we create custom updatable objects in R80.20

Thomas_Eichelbu — Thu, 04 Mar 2021 13:06:35 GMT

Hello Guys,

i bet the solution you are looking for is here:
"Generic Data Center feature" sk167210

The Generic Data Center feature provides the ability to enforce access to/from IP addresses defined in JSON files located in external web servers or locally on the Security Management machine. The Generic Data Center objects are updated automatically on the Security Gateway each time the JSON file change. There is no need to install policy for the updates to take effect. Objects created based on these files can be used as a source, or a destination in the following policies: Access Control policy, NAT policy, Threat Prevention policy, HTTPS Inspection policy.

best regards
Thomas