topic Re: going to expire rules alerts in API / CLI Discussion

going to expire rules alerts

Ram1 — Tue, 16 Feb 2021 10:21:44 GMT

HI Team,

do we have a script or playbook which alerts us 15 days before that the rule is going to expire, please help us on the same.

1) it might be shell script

2)it might be ansible module

also, which ansible modules are used for below automations.

1) extracting expired rulebases

2) extracting going to expire rule bases

3) un used objects

4)duplicate objects

overall policy and change management

Regards,

Ram

PhoneBoy — Wed, 17 Feb 2021 04:55:41 GMT

Ansible is not a suitable tool for any of these tasks.

You’d have to use a script that basically calls the API and jq to filter the results.
Specifically, you'd look for rules that have something other than "any" in the Time field.
You can use this as a starting point: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Disable-Delete-Rules-with-a-Zero-...