topic Re: How to get Checkpoint default object name details through API query in API / CLI Discussion

How to get Checkpoint default object name details through API query

Satish — Fri, 08 Nov 2024 10:24:23 GMT

Hi Team,

I am using Checkpoint API v 1.7. I have extracted all object , Rules data by using Postman.

But not getting data for below Checkpoint default objects/object type.

Object Type --> CpmiAnyObject, Global, Track

Object--> Original, Any, All, Accept, Drop, Log

Regards,

Satish..

Re: How to get Checkpoint default object name details through API query

PhoneBoy — Fri, 08 Nov 2024 16:20:31 GMT

These are not traditional user-defined objects, which means they are not retrievable via standard API calls.
The references to them in other API calls will include their UID, which can be queried with the show-generic-object API (which is not officially supported).

For example, the object "Any" looks something like this:

[Expert@R8120-SA:0]# mgmt_cli -r true show-generic-object uid "97aeb369-9aea-11d5-bd16-0090272ccb30" --format json { "domainsPreset" : null, "objectValidationState" : null, "dynamicContent" : { "objId" : "00000000-0000-0000-0000-000000000000", "checkPointObjId" : null, "domainsPreset" : null, "domainId" : null, "status" : "CALCULATING", "content" : { }, "modified" : false, "folderPath" : null, "text" : null, "folder" : null, "is_owned" : false }, "color" : "BLACK", "description" : "", "cpmiDisplayName" : "Any", "id" : -5, "uid" : "97aeb369-9aea-11d5-bd16-0090272ccb30", "folder" : { "uid" : "a3a104fc-3987-4d22-9bf1-3fdbec0af39b", "name" : "Global Objects" }, "domain" : { "uid" : "a0bbbc99-adef-4ef8-bb6d-defdefdefdef", "name" : "Check Point Data" }, "meta-info" : { "metaOwned" : false, "lockStateResponse" : null, "validationState" : "OK", "deletable" : false, "renameable" : false, "newObject" : false, "lastModifytime" : 1668585913342, "lastModifier" : "System", "creationTime" : 1668585913342, "creator" : "System" }, "tags" : [ ], "name" : "Any", "icon" : "General/globalsAny", "comments" : "", "display-name" : "", "customFields" : [ ], "_original_type" : "CpmiAnyObject" } [Expert@R8120-SA:0]#

Re: How to get Checkpoint default object name details through API query

Satish — Mon, 11 Nov 2024 07:23:31 GMT

Hi,

So, I have to run "show-object" query for those non-user-defined objects's UIDs to get the actual object Name ?

Is there any way where I can get all non-user-defined objects names against their UIDs through a single API call?

Regards,

Satish

Re: How to get Checkpoint default object name details through API query

PhoneBoy — Mon, 11 Nov 2024 21:10:58 GMT

There is no method to list all the non-user-defined objects and/or objects that do not otherwise have a defined API endpoint (those exist as well).
You need to query them individually by UID as described.
However, I'm fairly certain the UIDs for these "non-user-defined" objects are the same in every installation.

Re: How to get Checkpoint default object name details through API query

Bob_Zimmerman — Mon, 11 Nov 2024 22:18:43 GMT

I generally do my main fetch, build my data structures, then check for any UUIDs which don't have further associated data like an object name. I then call /get-object for those UUIDs. I did find a few UUIDs which don't always show up in rules and such, and I fetch them manually:

213f0a22-49da-4719-94b3-f2d74623f3fb = Policy HTTPS Targets 6c488338-8eec-4103-ad21-cd461ac2c476 = Policy Targets 85c0f50f-6d8a-4528-88ab-5fb11d8fe16c = Original 97aeb368-9aea-11d5-bd16-0090272ccb30 = All 97aeb369-9aea-11d5-bd16-0090272ccb30 = Any 97aeb36a-9aea-11d5-bd16-0090272ccb30 = None 97aeb36a-9aeb-11d5-bd16-0090272ccb30 = All Users 97aeb36a-9aed-11d5-bd16-0090272ccb30 = All_GwToGw Then some special management domains: 41e821a0-3720-11e3-aa6e-0800200c9fde = SMC User 8bf4ac51-2df7-40e1-9bce-bedbedbedbed = APPI Data a0bbbc99-adef-4ef8-bb6d-cebcebcebceb = IPS Data a0bbbc99-adef-4ef8-bb6d-defdefdefdef = Check Point Data a0eebc99-afed-4ef8-bb6d-fedfedfedfed = System Data