topic Re: "show-unused-objects" API is not returning list of host which is not used in firewall in API / CLI Discussion

"show-unused-objects" API is not returning list of host which is not used in firewall rule but have the NAT option enabled

Ekta_Siwani1 — Fri, 23 Jun 2017 08:23:51 GMT

Hi,

I am using "show-unused-objects" R80.10 API to get list of all unused objects.

I have some host which have NAT option enabled (static or hide) but not getting used anywhere in firewall rule, show-unused-objects API is not returning those hosts.

In smart dashboard "where used" section , it shows host is not getting used anywhere.

Why smart dashboard and API result is different?

Screen shot from smart dashboard:

Screen shot API which i am using :

Re: "show-unused-objects" API is not returning list of host which is not used in firewall rule but have the NAT option enabled

Tomer_Sole — Sun, 25 Jun 2017 10:18:11 GMT

Hi,

This is a bug in the "show unused objects" query. You can also see this behavior of not presenting network objects with NAT that aren't used when going with the GUI to the Object Explorer and changing it to Unused Objects.

A workaround will be using the where-used API command for every object. Although not ideal, it works. This is basically what you simulated in your GUI screenshot.

Re: "show-unused-objects" API is not returning list of host which is not used in firewall rule but have the NAT option enabled

Ekta_Siwani1 — Sun, 25 Jun 2017 13:56:55 GMT

Hi https://community.checkpoint.com/people/tomera5b2e7f3-09aa-32f8-96c2-f0f5bfa2988b‌ ,

Thanks for the reply.

Hope this bug will be solved in next version

Re: "show-unused-objects" API is not returning list of host which is not used in firewall

gogreen81 — Wed, 28 Oct 2020 16:52:27 GMT

Is this bug resolved by now ?