topic Get Anti-Spoofing configuration for Virtual System in API / CLI Discussion

Get Anti-Spoofing configuration for Virtual System

Daniel_ — Mon, 30 Sep 2024 08:19:25 GMT

Hello,

for a "normal" cluster I can get the topolgy information via "show simple-cluster". How can I get the information via API on a "Virtual System"? I need the Anti-Spoofing part.

Thanks!

Re: Get Anti-Spoofing configuration for Virtual System

Daniel_ — Mon, 30 Sep 2024 13:34:54 GMT

Looks like it's not available 😞

Number 24 in this post
https://community.checkpoint.com/t5/API-CLI-Discussion/Functionality-Mgmt-API-vs-SmartConsole-Revisited-for-R81-20-v1-9/m-p/182601

Re: Get Anti-Spoofing configuration for Virtual System

Timothy_Hall — Mon, 30 Sep 2024 14:27:09 GMT

You might be able to get this info via a run-script call invoking the following "one-liner"; I've never tried this in a VSX environment but it should be supported:

https://community.checkpoint.com/t5/Security-Gateways/One-liner-for-Address-Spoofing-Troubleshooting/m-p/33204

Re: Get Anti-Spoofing configuration for Virtual System

PhoneBoy — Mon, 30 Sep 2024 14:35:40 GMT

VS objects for VSX do not have API support.

In R82, we are introducing VSnext, which is the replacement for VSX.
In VSnext, VSes are regular gateway objects, which have API support.

Re: Get Anti-Spoofing configuration for Virtual System

Daniel_ — Tue, 01 Oct 2024 10:40:55 GMT

Thanks Timoty!

The "one-liner" is working on VSX just in VS0 (in my case). I saw in the script it uses $FWDIR/state/local/FW1/local.set. With

$ grep -E '\(eth|\(bond|:has_addr' $FWDIR/state/local/FW1/local.set |grep -E '^|false'

I could extract the information I need. Not very pretty but good enough for me. Thanks again!