topic Re: Feature request / Question - SmartConsole Extensions in General Topics

Feature request / Question - SmartConsole Extensions

HeikoAnkenbrand — Wed, 08 Feb 2023 12:29:27 GMT

I have a small problem when I want to develop more extensive extensions that interact with a gateway. For example, I want to read information on the gateway and use it in my code.

Every time I call and execute the following function

smxProxy.sendRequest("request-commit", {"commands" : ["run-script script-name 'HA Test' script '…

so I always get the following windows to approve the action.

When the script is executed on the gateway, I still get the success window.

This makes interactive communication with the gateway impossible because I have to keep closing the windows.
I understand that this makes sense from a safety point of view. However, it does prevent you from writing interactive javascript code.

Now my question:
- Is there already a switch in the function "smxProxy.sendRequest " to prevent the windows from being displayed?
- Is there another way around this?

If there is no solution:
- Will you integrate this in the future?
- Or can I make a feature request here?

Re: Feature request / Question - SmartConsole Extensions

Danny — Wed, 08 Feb 2023 22:18:40 GMT

Welcome to the world of SmartConsole Extension limitations. 😁

Sometimes you'd like to refesh the same query without continuous end user confirmation dialog boxes (example) and sometimes SmartConsole performs an auto-refresh that causes a pile of other issues (example). Check Point's SmartConsole developers promised me to fix both topics in 2023. Fingers crossed they'll do it this year. I'm reminding them every six months.

Re: Feature request / Question - SmartConsole Extensions

HeikoAnkenbrand — Wed, 08 Feb 2023 14:14:42 GMT

This does not protect against malicious code being downloaded.

You can also commit the code base64 encoded and and and
Then the user can no longer see it in plain text and the user does not know what he approving.

With the autorefresh and the "smxProxy.sendRequest" + approve window restrictions, you can't really use the SmartConsole Extension for more complex tasks.

From my point of view, this could be approved when installing the app. Here I would set a selection field and point out the dangers to the user. For example like this:

@Ron_Izraeli , @Tomer_Noy , @Alon_Alapi
Maybe you can discuss this with Dorit and then make the api more open.

Re: Feature request / Question - SmartConsole Extensions

Danny — Wed, 08 Feb 2023 14:28:56 GMT

This option and many others have been already discussed with the SmartConsole developers.
I would've created many more extensions already if there wouldn't be so many limitations.

Re: Feature request / Question - SmartConsole Extensions

HeikoAnkenbrand — Wed, 08 Feb 2023 15:26:33 GMT

Me too.

I also have good ideas for new extensions that cannot be implemented in this way.

That's a pity, because we could help many users with new extensions.

Re: Feature request / Question - SmartConsole Extensions

Henrik_Noerr1 — Wed, 08 Feb 2023 19:44:44 GMT

Please remind them of VSX support 😄 - Cheers