topic global policy asignment through api in API / CLI Discussion

global policy asignment through api

Mark_Jansen — Mon, 11 Sep 2017 14:21:47 GMT

I use a mdm server with 3 domains. Therefore I also have 3 global access policies every one off them connected to 1 domain.

I found an api call to find the name of the global-access-policies : mgmt_cli show global-assignments limit 50 offset 0 details-level "full" --format json -s id.txt

But now I want to know to which (one or more) local domain policy the global-access-policy is assigned. Because in our case, not every domain policy will have the global policy assigned. Is there a way to get this information through an api call ?

Regards,

Mark

Re: global policy asignment through api

Marco_Valenti — Mon, 11 Sep 2017 15:41:53 GMT

following topic

Re: global policy asignment through api

PhoneBoy — Fri, 21 Jun 2019 08:57:27 GMT

Since you're asking an API question, let's move it into the https://community.checkpoint.com/community/developers?sr=search&searchId=3a252700-3642-44a2-9190-3b739c5a88e7&searchIndex=0‌ space.

Re: global policy asignment through api

Marco_Valenti — Mon, 18 Sep 2017 07:13:13 GMT

any hint for that task?

Re: global policy asignment through api

Robert_Decker — Tue, 30 Jan 2018 09:44:09 GMT

Hi,

Just now noticed this post, if still relevant...

There is no single API command to accomplish your task. You have to go over each domain and run the "show-package" API command.

The output of this command has a section named "access-layers". For each access layer you have to check the "domain" object field and check if the "name" field has a value "Global".

Robert.