topic Re: Please share syntax/command via CLI in creating access-list in General Topics https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19358#M3573 <HTML><HEAD></HEAD><BODY><P class="">I think that question here is how to create ACL on gateway like on Cisco ASA. This is not how CP works, gateways are enforcing security policies pushed from centralized management server.</P></BODY></HTML> Wed, 26 Dec 2018 18:28:52 GMT Martin_Valenta 2018-12-26T18:28:52Z Please share syntax/command via CLI in creating access-list https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19355#M3570 <HTML><HEAD></HEAD><BODY><P>I am new to checkpoint devices. Just wanted to know syntax in creating firewall rules via cli. Basically creating access-list are the repeated tasks done on a daily basis. Please share sample syntax here. Version handled are R77.xx<BR /><BR />Appreciate your help. Thanks!</P></BODY></HTML> Wed, 26 Dec 2018 09:12:04 GMT https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19355#M3570 Achilles_Tagg 2018-12-26T09:12:04Z Re: Please share syntax/command via CLI in creating access-list https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19356#M3571 <HTML><HEAD></HEAD><BODY><P>Hello &amp; Welcome!</P><P></P><P>The recommended approach here would be to upgrade to R80.10 (starting with Mgmt) and leverage the APIs amongst a host of new improved features and functions.</P><P></P><P>Another reason to focus your efforts here is that the End of Support date for R77.30 is approaching.</P><P></P><P>Regards,</P><P>Chris</P></BODY></HTML> Wed, 26 Dec 2018 13:13:58 GMT https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19356#M3571 Chris_Atkinson 2018-12-26T13:13:58Z Re: Please share syntax/command via CLI in creating access-list https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19357#M3572 <HTML><HEAD></HEAD><BODY><P>The official documentation for how to do this:&nbsp;<A class="link-titled" href="https://sc1.checkpoint.com/documents/R77/CP_R77_CLI_ReferenceGuide_WebAdmin/html_frameset.htm?topic=documents/R77/CP_R77_CLI_ReferenceGuide_WebAdmin/105997" title="https://sc1.checkpoint.com/documents/R77/CP_R77_CLI_ReferenceGuide_WebAdmin/html_frameset.htm?topic=documents/R77/CP_R77_CLI_ReferenceGuide_WebAdmin/105997">Command Line Interface R77 Reference Guide</A>&nbsp;</P><P>There may also be some examples here: <A href="https://community.checkpoint.com/space/2003">Developers (Code Hub)</A>‌.</P><P></P><P>As <A href="https://community.checkpoint.com/migrated-users/43606">Chris Atkinson</A>‌ said, you'll probably find your efforts are better spent upgrading your management to R80.x where &nbsp;this process is significantly simpler/easier than it is in R77.x.</P></BODY></HTML> Wed, 26 Dec 2018 16:47:26 GMT https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19357#M3572 PhoneBoy 2018-12-26T16:47:26Z Re: Please share syntax/command via CLI in creating access-list https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19358#M3573 <HTML><HEAD></HEAD><BODY><P class="">I think that question here is how to create ACL on gateway like on Cisco ASA. This is not how CP works, gateways are enforcing security policies pushed from centralized management server.</P></BODY></HTML> Wed, 26 Dec 2018 18:28:52 GMT https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19358#M3573 Martin_Valenta 2018-12-26T18:28:52Z Re: Please share syntax/command via CLI in creating access-list https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19359#M3574 <HTML><HEAD></HEAD><BODY><P>Correct Martin,</P><P></P><P>However R77.30 did offer dbedit (<SPAN style="color: #000000; background-color: #ffffff; font-size: 14px;">sk30383) as outlined in the documentation referenced by Daemon above. </SPAN></P><P></P><P><SPAN style="background-color: #ffffff; color: #000000; font-size: 14px;">Skipping to the end R80.XX and the API is the future!</SPAN></P><P></P><P><SPAN style="background-color: #ffffff; color: #000000; font-size: 14px;">Thanks,</SPAN></P><P><SPAN style="background-color: #ffffff; color: #000000; font-size: 14px;">Chris</SPAN></P></BODY></HTML> Thu, 27 Dec 2018 12:13:15 GMT https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19359#M3574 Chris_Atkinson 2018-12-27T12:13:15Z Re: Please share syntax/command via CLI in creating access-list https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19360#M3575 <HTML><HEAD></HEAD><BODY><P>Thanks all! Appreciate your inputs.</P></BODY></HTML> Wed, 20 Feb 2019 06:33:55 GMT https://community.checkpoint.com/t5/General-Topics/Please-share-syntax-command-via-CLI-in-creating-access-list/m-p/19360#M3575 Achilles_Tagg 2019-02-20T06:33:55Z