topic Re: Dynamic Objects (URL) in General Topics

Dynamic Objects (URL)

Kunal_Parikh — Tue, 28 Nov 2017 00:18:20 GMT

What is best approach to allow connection to Microsoft Azure/AWS, when destination URL are hosted in cloud and does not have fixed IP. If I don't want traffic to go via proxy, does checkpoint support destination URL's ? I have read about dynamic objects and have also read it causes high CPU but not sure if it is best practice.

Re: Dynamic Objects (URL)

PhoneBoy — Tue, 28 Nov 2017 06:42:06 GMT

You've got a couple of options:

Create a custom application with the desired URLs (this will require HTTPS Inspection if the URLs are HTTPS)
Use Domain Objects with FQDN in R80.10 (which will do forward DNS lookups on the names)--works for non http/https as well.
Use Dynamic Objects (impacts SecureXL templates in R77.30 and earlier) and use a script to update based on DNS, such as: chkp / dynobj — Bitbucket (also works for things not http/https as well)

Re: Dynamic Objects (URL)

Gaurav_Pandya — Tue, 28 Nov 2017 14:45:32 GMT

Hi Kunal,

If you are using R80.10 then you can refer below Doc.

https://community.checkpoint.com/docs/DOC-2339-dynamic-objects-in-r8010

Re: Dynamic Objects (URL)

Chamila_Garusi2 — Wed, 16 Oct 2019 15:45:41 GMT

Hi,

Is this statement still valid now in R77.30 code.

to use Custom Application in AC/URLF policy.

Thanks,

Chamila

Re: Dynamic Objects (URL)

PhoneBoy — Wed, 16 Oct 2019 18:13:38 GMT

This is relevant for R77.30, yes.

Re: Dynamic Objects (URL)

Carsten_R — Thu, 23 Dec 2021 14:47:13 GMT

I was exited to see, that there is a script available which translates FQDNs to IP addresses and pushes Dynamic Objects to gateways.

However, the mentioned script seems to be not maintained anymore. It raises a lot of errors with Python 3.

Ok, this thread is now 4 years old, but I'd like to say here, that the "Generic Data Center feature" in R81 (sk167210) sounds also interesting. The only challenge for me is the process to script the FQDN translated results into this JSON format...