topic Re: Dynamic Objects 應用 in Chinese 中文 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10840#M216 <HTML><HEAD></HEAD><BODY><P>這個厲害~~ 可以當 RD 了~~ 拍手~~~~</P></BODY></HTML> Wed, 18 Apr 2018 05:29:38 GMT Jacky_Chen 2018-04-18T05:29:38Z Dynamic Objects 應用 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10835#M211 <HTML><HEAD></HEAD><BODY><P>Hi 各位看官,</P><P></P><P>在R77版本中的fw policy中的物件若要使用domain object會有DNS反查的問題, 這使得在R77中的fw policy非常不彈性</P><P>之前遇到user想開放某幾個網址給內部的防毒主機去做更新, 在R77卻是不好處理.</P><P></P><P>我這邊參考sk106251以及skI1915做法, 利用nslookup去查詢目的網址IP, 取得結果放到Dynamic Objects, 這樣一來就可以解決上述問題...</P><P></P><P>作法如下:</P><P>1. 建立Dynamic Objects, 如要網址是4.sophosxl.net, 則建立DO_4.sophosxl.net, 若是www.google.com, 則建立DO_www.google.com</P><P></P><P><IMG __jive_id="64221" class="image-1 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/64221_pastedImage_1.png" style="width: 620px; height: 39px;" /></P><P></P><P>2. Run Script , (script動作大致如下)</P><P>~nslookup查詢網址IP, 並暫存到Dynamic Objects</P><P>~將上述動作寫到/var/log/messages</P><P>~建立Job Scheduler</P><P></P><P>ps.Script內如無須修改參數, 直接執行即可...</P><P></P><P>執行語法:</P><P>./dyno_nslookup.sh 4.sophosxl.net 1 15</P><P></P><P>4.sophosxl.net&gt;代表要nslookup的網址</P><P>1&gt;代表建立Job Scheduler</P><P>15&gt;代表每15分鐘nslookup一次</P><P></P><P>Script內說明:</P><P><IMG __jive_id="64228" class="image-6 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/64228_pastedImage_9.png" style="width: 620px; height: 100px;" /></P><P></P><P>執行畫面如下, 若在Job Scheduler有設定mail通知, 會將此次與上次的nslookup 結果mail給相關人員</P><P><IMG __jive_id="64224" class="image-3 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/64224_pastedImage_4.png" style="width: auto; height: auto;" /></P><P><IMG __jive_id="64225" class="jive-image image-4" src="https://community.checkpoint.com/legacyfs/online/checkpoint/64225_pastedImage_5.png" style="width: 620px; height: 57px;" /></P><P><IMG __jive_id="64226" class="image-5 jive-image" src="https://community.checkpoint.com/legacyfs/online/checkpoint/64226_pastedImage_6.png" style="width: 620px; height: 99px;" /></P><P>若有個網址請在多建立Dynamic Objects, 並再跑一次script</P><P></P><P>若要刪除的話, 請刪除物件及Job Scheduler即可...</P><P></P><P>以上供大家參考...</P><P></P><P>根據SK,,,,R80應該也適用, 但R80以解決此一問題 <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://community.checkpoint.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /></P></BODY></HTML> Thu, 29 Mar 2018 16:28:42 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10835#M211 Jarvis_Lin1 2018-03-29T16:28:42Z Re: Dynamic Objects 應用 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10836#M212 <HTML><HEAD></HEAD><BODY><P>Amazing! 謝謝家維Jarvis的分享!</P></BODY></HTML> Sat, 31 Mar 2018 03:58:00 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10836#M212 Danny_Yang 2018-03-31T03:58:00Z Re: Dynamic Objects 應用 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10837#M213 <HTML><HEAD></HEAD><BODY><P>厲害!</P></BODY></HTML> Tue, 03 Apr 2018 01:43:07 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10837#M213 Neville_Kuo 2018-04-03T01:43:07Z Re: Dynamic Objects 應用 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10838#M214 <HTML><HEAD></HEAD><BODY><P>感謝提供，非常實用</P></BODY></HTML> Mon, 09 Apr 2018 02:51:24 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10838#M214 Sung-Lun_Yang1 2018-04-09T02:51:24Z Re: Dynamic Objects 應用 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10839#M215 <HTML><HEAD></HEAD><BODY><P>我今天晚上會去客戶那實做過一遍 XD</P></BODY></HTML> Wed, 11 Apr 2018 00:41:25 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10839#M215 Mike_Wu1 2018-04-11T00:41:25Z Re: Dynamic Objects 應用 https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10840#M216 <HTML><HEAD></HEAD><BODY><P>這個厲害~~ 可以當 RD 了~~ 拍手~~~~</P></BODY></HTML> Wed, 18 Apr 2018 05:29:38 GMT https://community.checkpoint.com/t5/Chinese-%E4%B8%AD%E6%96%87/Dynamic-Objects-%E6%87%89%E7%94%A8/m-p/10840#M216 Jacky_Chen 2018-04-18T05:29:38Z