<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to determine gateway applicability for Inline Layers using Management APIs? in API / CLI Discussion</title>
    <link>https://community.checkpoint.com/t5/API-CLI-Discussion/How-to-determine-gateway-applicability-for-Inline-Layers-using/m-p/268025#M9357</link>
    <description>&lt;P&gt;Hello Team,&lt;/P&gt;&lt;P&gt;I’m working with Check Point Management APIs to fetch access policy and rule details, and I have a question regarding &lt;STRONG&gt;inline layers and their gateway applicability&lt;/STRONG&gt;.&lt;/P&gt;&lt;H3&gt;Current API flow:&lt;/H3&gt;&lt;OL&gt;&lt;LI&gt;&lt;P&gt;I use web_api/show-packages to identify:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;Access layers associated with a policy package&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Install targets (gateways / clusters) for those access layers&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Based on the access layer information, I call:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;web_api/show-access-layers&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;web_api/show-access-rulebase to fetch rule details&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/OL&gt;&lt;H3&gt;Issue / Observation:&lt;/H3&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;Inline layers are returned in the web_api/show-access-layers API response.&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;However, these inline layers &lt;STRONG&gt;do not appear in the web_api/show-packages response&lt;/STRONG&gt;.&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Because of this, there is &lt;STRONG&gt;no direct way to confirm whether a particular inline layer is applicable to a specific gateway&lt;/STRONG&gt;, as install target information is only available at the package / access-layer level.&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H3&gt;Questions:&lt;/H3&gt;&lt;OL&gt;&lt;LI&gt;&lt;P&gt;Is it &lt;STRONG&gt;expected behavior&lt;/STRONG&gt; that inline layers are not listed in show-packages?&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Is the &lt;STRONG&gt;correct approach&lt;/STRONG&gt; to assume that:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;An inline layer inherits the install targets of its &lt;STRONG&gt;parent access layer&lt;/STRONG&gt;?&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Is there any &lt;STRONG&gt;API-supported or recommended method&lt;/STRONG&gt; to explicitly determine gateway applicability for inline layers?&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Are there any &lt;STRONG&gt;best practices&lt;/STRONG&gt; for handling inline layers when building policy analysis or reporting tools using Management APIs?&lt;/P&gt;&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;Any clarification or official guidance on this would be very helpful.&lt;/P&gt;&lt;P&gt;Thanks in advance for your support.&lt;/P&gt;&lt;P&gt;Regards,&lt;BR /&gt;Veera&lt;/P&gt;</description>
    <pubDate>Wed, 21 Jan 2026 11:01:44 GMT</pubDate>
    <dc:creator>Veeraselvam_man</dc:creator>
    <dc:date>2026-01-21T11:01:44Z</dc:date>
    <item>
      <title>How to determine gateway applicability for Inline Layers using Management APIs?</title>
      <link>https://community.checkpoint.com/t5/API-CLI-Discussion/How-to-determine-gateway-applicability-for-Inline-Layers-using/m-p/268025#M9357</link>
      <description>&lt;P&gt;Hello Team,&lt;/P&gt;&lt;P&gt;I’m working with Check Point Management APIs to fetch access policy and rule details, and I have a question regarding &lt;STRONG&gt;inline layers and their gateway applicability&lt;/STRONG&gt;.&lt;/P&gt;&lt;H3&gt;Current API flow:&lt;/H3&gt;&lt;OL&gt;&lt;LI&gt;&lt;P&gt;I use web_api/show-packages to identify:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;Access layers associated with a policy package&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Install targets (gateways / clusters) for those access layers&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Based on the access layer information, I call:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;web_api/show-access-layers&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;web_api/show-access-rulebase to fetch rule details&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;/OL&gt;&lt;H3&gt;Issue / Observation:&lt;/H3&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;Inline layers are returned in the web_api/show-access-layers API response.&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;However, these inline layers &lt;STRONG&gt;do not appear in the web_api/show-packages response&lt;/STRONG&gt;.&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Because of this, there is &lt;STRONG&gt;no direct way to confirm whether a particular inline layer is applicable to a specific gateway&lt;/STRONG&gt;, as install target information is only available at the package / access-layer level.&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;H3&gt;Questions:&lt;/H3&gt;&lt;OL&gt;&lt;LI&gt;&lt;P&gt;Is it &lt;STRONG&gt;expected behavior&lt;/STRONG&gt; that inline layers are not listed in show-packages?&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Is the &lt;STRONG&gt;correct approach&lt;/STRONG&gt; to assume that:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;&lt;P&gt;An inline layer inherits the install targets of its &lt;STRONG&gt;parent access layer&lt;/STRONG&gt;?&lt;/P&gt;&lt;/LI&gt;&lt;/UL&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Is there any &lt;STRONG&gt;API-supported or recommended method&lt;/STRONG&gt; to explicitly determine gateway applicability for inline layers?&lt;/P&gt;&lt;/LI&gt;&lt;LI&gt;&lt;P&gt;Are there any &lt;STRONG&gt;best practices&lt;/STRONG&gt; for handling inline layers when building policy analysis or reporting tools using Management APIs?&lt;/P&gt;&lt;/LI&gt;&lt;/OL&gt;&lt;P&gt;Any clarification or official guidance on this would be very helpful.&lt;/P&gt;&lt;P&gt;Thanks in advance for your support.&lt;/P&gt;&lt;P&gt;Regards,&lt;BR /&gt;Veera&lt;/P&gt;</description>
      <pubDate>Wed, 21 Jan 2026 11:01:44 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/API-CLI-Discussion/How-to-determine-gateway-applicability-for-Inline-Layers-using/m-p/268025#M9357</guid>
      <dc:creator>Veeraselvam_man</dc:creator>
      <dc:date>2026-01-21T11:01:44Z</dc:date>
    </item>
    <item>
      <title>Re: How to determine gateway applicability for Inline Layers using Management APIs?</title>
      <link>https://community.checkpoint.com/t5/API-CLI-Discussion/How-to-determine-gateway-applicability-for-Inline-Layers-using/m-p/268028#M9358</link>
      <description>&lt;P&gt;Inline layers can be shared between policies, so they are dependent on the parent rule/policy target(s).&lt;/P&gt;
&lt;P&gt;Policy packages have one or more installation targets, layers don't, so you logic needs to take this into account.&lt;/P&gt;</description>
      <pubDate>Wed, 21 Jan 2026 11:29:37 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/API-CLI-Discussion/How-to-determine-gateway-applicability-for-Inline-Layers-using/m-p/268028#M9358</guid>
      <dc:creator>Alex-</dc:creator>
      <dc:date>2026-01-21T11:29:37Z</dc:date>
    </item>
  </channel>
</rss>

