Block IP With SAM rules

[yasemen_karakoc]

Hi,

I have to  add suspicious activity (SAM Rule) to checkpoint via API. I cant find any endpoint for this.

Check Point - Management API reference 

Any help about this issue would be appreciated.

Best

Jasmine

[Robert_Decker]

jasmine,

here is a link how to add an access rule, via mgmt_cli tool - 

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-access-rule~v1.1%20

or via web service - 

https://sc1.checkpoint.com/documents/latest/APIs/index.html#web/add-access-rule~v1.1%20

also, refer to the examples section at the bottom.

robert.

[PhoneBoy · Accepted solution]

Access Rules require a policy push to be effective, sam rules are active immediately.

There is no management API at the moment that directly affects SAM rules.

But: You can use run-script to execute "fw sam" on the relevant gateways.

how to use the web api to run the run-script‌