topic Re: Check Point Terraform Provider v1.9.1 in API / CLI Discussion

Check Point Terraform Provider v1.9.1

tali1974 — Wed, 22 Jun 2022 22:28:54 GMT

terraform plan give me this error.

│ Error: failed to execute API call
│ Status: 400 Bad Request
│ Code: generic_err_invalid_parameter
│ Message: Could not parse [<MyPublicIP>, <Zscaler IP>]
│
│ with provider["registry.terraform.io/checkpointsw/checkpoint"],
│ on main.tf line 10, in provider "checkpoint":
│ 10: provider "checkpoint" {

on the management server

[Expert@cpcgmgmt01:0]# api status

API Settings:
---------------------
Accessibility: Require local
Require ip <Zscaler IP>/255.255.255.0 <MyPublicIP>
Automatic Start: Enabled

If I allow ALL IP addresses ("Require all granted" as shown below.) in the API settings it works just fine. Any idea what the issue can be ?

API Settings:
---------------------
Accessibility: Require all granted
Automatic Start: Enabled

Re: Check Point Terraform Provider v1.9.1

PhoneBoy — Wed, 22 Jun 2022 23:20:47 GMT

That, to me, suggests access isn't happening from the IP you think it is.
Check with tcpdump when you trying to execute terraform to verify what the precise IP that is trying to access.
If you have the correct IP and it still fails, open a TAC case.

Re: Check Point Terraform Provider v1.9.1

tali1974 — Thu, 23 Jun 2022 10:37:00 GMT

Thanks for your reply. the access is happing from that IP, When i open for ALL ips, i can see in the SmartConsole >> ViewSessions

Connected from is <Zscaler IP>,<MyPublicIP>

Re: Check Point Terraform Provider v1.9.1

PhoneBoy — Thu, 23 Jun 2022 16:48:31 GMT

This sounds like a bug and you'll need a TAC case to get the issue resolved.