Checkpoint Rule Count of each policy in CMA from MDS

Naveen_ — Tue, 06 Sep 2022 16:13:38 GMT

We have 20 Domains in MDS and each CMA has 5-6 policies and Cluster Gateways.

How to get the rule count from each policies in CMA's from MDS using any Script or any command ?

Re: Checkpoint Rule Count of each policy in CMA from MDS

PhoneBoy — Thu, 08 Sep 2022 17:55:23 GMT

This is not really a task you'd perform with Ansible, FYI, since Ansible playbooks describe the desired state, not the precise commands you'd execute.

If you're just looking for a count of rules on each policy layer (note more than one layer may be used by a security gateway depending on the configuration), at a high level, something like (for each CMA):

Enumerate the policy layers: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-access-layers~v1.8%20
For each policy layer, review the count that is returned by the following API call: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/show-access-layer~v1.8%20

The above should be scriptable.

topic Checkpoint Rule Count of each policy in CMA from MDS in API / CLI Discussion

Checkpoint Rule Count of each policy in CMA from MDS

Re: Checkpoint Rule Count of each policy in CMA from MDS