topic policy installation mode - set permanently in General Topics

policy installation mode - set permanently

S_E_ — Mon, 26 May 2025 14:47:34 GMT

Hi,

It is possible to change the policy installation mode via SmartConsole directly before installation.

Means, you can select

Install on each selected gateway idependantly
- for clsuters, if it fails, do nort install on that cluster
Install on each selected gateway, if it fails do not install

If I'm not mistaken, Smartconsole remembers this selection after the following policy installation.

However, is there any way to set this permanently? (Especially if you push installations without SmartConsole)

Is this somewhere in properties?

Thanks

Regards

Re: policy installation mode - set permanently

Tal_Paz-Fridman — Mon, 26 May 2025 16:13:40 GMT

I see Management API only has the flag for Clusters:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/install-policy~v2%20

Re: policy installation mode - set permanently

the_rock — Mon, 26 May 2025 19:30:16 GMT

I see what @Tal_Paz-Fridman is saying.

Re: policy installation mode - set permanently

S_E_ — Tue, 27 May 2025 06:20:31 GMT

Hi,

The questions was if it is possible to set this as a 'default/temporary setting'.

Not to modify an API call and run external API calls always with this parameter. Thats is something different.

Thanks

Regards

Re: policy installation mode - set permanently

emmap — Tue, 27 May 2025 06:38:06 GMT

It is something that is saved in the DB, but the current mechanism publishes when you click 'install'. So in theory it's possible but I'm not aware of any available mechanism to do it.

I also don't know if the option saved for 'pushing the button inside SmartConsole' policy installs is applied to API policy installs, or if API policy installs always default to 'true' for install-on-all-cluster-members-or-fail. So even if you can change it in SC without the policy install action you may still need to set that flag on the API call every time anyway to have it for API policy installs.

Re: policy installation mode - set permanently

S_E_ — Tue, 27 May 2025 06:42:04 GMT

ok, Got it. Thanks