topic Re: Multiple IP Address Object Automation in API / CLI Discussion

Multiple IP Address Object Automation

padawan_jedi — Sun, 12 Apr 2020 15:57:20 GMT

Our client requested to include in our whitelisted rule specifically for a multiple unique ip address and subnet in our firewall rule. It took me 6 hours to complete it and place it on a single firewall rule. Do you have an easiest way to put multiple ip address by not placing it one by one at a time. Such as ip address in a note pad can be imported in the checkpoint firewall so probably a minute or two an object will be created for it.

Re: Multiple IP Address Object Automation

PhoneBoy — Tue, 24 Aug 2021 13:57:27 GMT

In general, if you want something in a rule (network or a host), an object has to be created for it.
You could then add them to a group object that is already included in the relevant rule.
Or you can add them directly to the rule if you prefer.
This can all be scripted via the API.

What would probably be easier is to add the objects to a group as they are created.
I believe we even have a guided lab example for this in our automation lab: https://community.checkpoint.com/t5/R81-Automation-and-Orchestration/ct-p/r81-automation-orchestration

Re: Multiple IP Address Object Automation

babasahebb — Tue, 24 Aug 2021 09:55:22 GMT

Unable to lunch lab from following URL : https://community.checkpoint.com/t5/custom/page/page-id/R80.40_Automation

Re: Multiple IP Address Object Automation

_Val_ — Tue, 24 Aug 2021 13:56:22 GMT

We have updated the lab to R81. Please use this link: https://community.checkpoint.com/t5/R81-Automation-and-Orchestration/ct-p/r81-automation-orchestration or go to the main Lab page (https://community.checkpoint.com/t5/CheckMates-Labs/ct-p/checkmates-labs) and go from there.