topic Re: How to Query Global Properties via CLI in API / CLI Discussion

How to Query Global Properties via CLI

PhoneBoy — Wed, 20 Mar 2019 03:23:16 GMT

There are two ways to achieve this:

R80.10 and earlier using dbedit: (see Editing the objects_5_0.C file via Check Point database editing utilities and the R77 CLI Reference Guide)
- print properties firewall_properties
R80.x using the API/mgmt_cli (thanks @Uri_Bialik ‌for sharing):

Get the UID of the Firewall Properties table
- mgmt_cli show-generic-objects name "firewall_properties" -r true
  
  objects:
  
  - uid: "42b7d2e2-4131-4c7c-8a99-ea3af38509e9"
  
  name: "firewall_properties"
  
  type: "CpmiFirewallProperties"
  
  domain:
  
      uid: "41e821a0-3720-11e3-aa6e-0800200c9fde"
  
      name: "SMC User"
  
      domain-type: "domain"
  
  from: 1
  
  to: 1
  
  total: 1
- Print the details of the object by UID:
  - mgmt_cli show generic-object uid "42b7d2e2-4131-4c7c-8a99-ea3af38509e9" -r true -f json

In the future, we plan to have formal API support for querying and setting the various Global Property settings.

Re: How to Query Global Properties via CLI

Stephanie_MDO — Tue, 14 Jan 2020 20:32:58 GMT

We are using this command to query specific settings in the Global properties >

mgmt_cli show generic-object uid $(mgmt_cli show-generic-objects name "firewall_properties" -r true -f json | jq '.objects[0].uid') -r true -f json | grep -iE "domainTcp|icmpenable|domainUdp"
"acceptDomainUdp" : false,
"domainTcpP" : "FIRST",
"icmpenableRouter" : true,
"domainTcpRouterP" : "FIRST",
"icmpenableP" : "BEFORE_LAST",
"domainUdp" : false,
"acceptDomainTcp" : false,
"domainTcpRouter" : true,
"icmpenableRouterP" : "BEFORE_LAST",
"domainUdpRouter" : true,
"domainTcp" : false,
"domainUdpP" : "FIRST",
"domainUdpRouterP" : "FIRST",
"icmpenable" : false,

How can I use this same concept to query each of my domains individually at the same time, if possible. I would like to know the above settings for all my CMAs on all of my mgmt servers.

Thanks in advance!