topic find duplicate host and network and service objects in Checkpoint SMC and delete if not used in API / CLI Discussion

find duplicate host and network and service objects in Checkpoint SMC and delete if not used

knassif — Fri, 03 Nov 2023 16:46:42 GMT

Hello,

I would like help to find duplicate host and network and service objects in Checkpoint SMC and delete if not used. how can we achieve that using API?

thanks

Re: find duplicate host and network and service objects in Checkpoint SMC and delete if not used

PhoneBoy — Fri, 03 Nov 2023 19:23:51 GMT

You'd have to pull the entire object database (by type) and find the duplicates manually.
You can use the 'where-used' API to ensure nothing is using that object before deletion: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/where-used~v1.9%20

Re: find duplicate host and network and service objects in Checkpoint SMC and delete if not used

knassif — Fri, 03 Nov 2023 19:32:22 GMT

is there a script available that does already that? how do I pull the database with api? we would need to do a duplicate check first how to achive that in api? then we do the where used I think?thx

Re: find duplicate host and network and service objects in Checkpoint SMC and delete if not used

PhoneBoy — Mon, 06 Nov 2023 23:24:51 GMT

I haven't seen a script that does that.
You'd have to pull the different object types, such as:

Note that these endpoints will return a limited number of results.
You may need to iterate with the offset parameter to capture all the results.

Your script would have to figure out which of the objects are duplicates according to your logic.
You'd also have to call where-used for each object to see what results are returned.

Bottom line: this will require some development work.

Re: find duplicate host and network and service objects in Checkpoint SMC and delete if not used

Tomer_Noy — Tue, 07 Nov 2023 10:57:51 GMT

Assuming that the use-case is to "tidy" your environment from unused objects, you can use the Object Explorer in the SmartConsole application. Pop out the full dialog via the toolbar button, then select "Unused Objects" in the top left filter.

This will show all unused objects (it's similar to going through every object and doing "Where Used"). You can verify each one and delete them. It will show both duplicates or unique objects that aren't in use, but you probably want to clean up both types.