When teaching the Check Point Certified Automation Specialist (CCAS) class, a common question I get is what types of Management operations cannot be performed through the API and must be performed through the SmartConsole GUI instead. I have a bit of an unofficial list but would like to compile an authoritative list with the CheckMates community; various API limitations have been discussed in prior threads like this. Some ground rules:
1) Only releases that are GA like R80.30 and earlier may be discussed, so if an API limitation is resolved in an upcoming release like R80.40 that doesn't count
2) dbedit is not the API and doesn't really count, but feel free to discuss workarounds for the various limitations
3) This list of limitations is for the Management API, not the Threat Prevention API, Identity Awareness API, etc.
4) Features available through the API that are not available in the SmartConsole GUI (like specific Hit Count history) should not be included (that could be a separate post)
So without further ado, here is the list of Management operations that cannot be performed via the Management API and must be performed through a GUI instead, please feel free to add items to this list or provide corrections:
1) Manipulation of gateway cluster objects
2) Geo Policy
3) HTTPS Inspection
4) Mobile Access Blade
5) Anti-spam & Mail Blade
6) DLP Blade (not Content Awareness)
7) SmartEvent Event Policy Tuning (performed in a separate GUI from SmartConsole)
😎 SmartUpdate License Manipulation (performed in a separate GUI from SmartConsole)
9) QoS Blade/Policies (not APCL/URLF Limits)
10) GUIDBedit operations (performed in a separate GUI from SmartConsole)
Thanks everyone!
"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com
