Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
dj0Nz
Advisor
Jump to solution

Gaia API flaws

Hi,

I was tasked to develop a script lately to check routing and antispoofing on a Check Point cluster. I started with python and the Gaia API but gave up very soon and wrote a shell script because of two flaws:

  1. The show-static-route call returns an error if the requested route is not explicitly set. There is always a route if there is a default gateway.
  2. Other than stated in the documentation, the show-static-route call does not return the outgoing interface, which significantly limits the usefulness of this api call.

Are there plans to correct these issues? 

Cheers
Michael

 

1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

I did get some feedback from R&D on these questions.
Unfortunately, it is operating as expected.

Generally, these API calls will only show the contents of explicitly configured routes.
The interface is only shown if you configure a route with an explicit interface as the destination.

Interestingly enough, when you use show-routes-static, the interface for the default route is included in the output.
You can see an example in the API docs: https://sc1.checkpoint.com/documents/latest/GaiaAPIs/index.html#web/show-routes-static~v1.7%20 
It seems like the other API calls for different sources of routes (e.g. show-routes-bgp) includes interfaces in their output.
Which suggests they might be more suitable for your intended purpose.

 

View solution in original post

0 Kudos
(1)
5 Replies
PhoneBoy
Admin
Admin

What version of the API is it?

0 Kudos
dj0Nz
Advisor

It's 1.7, latest version.

PhoneBoy
Admin
Admin

I've flagged this to the relevant R&D team, will see if I can get some feedback.

0 Kudos
PhoneBoy
Admin
Admin

I did get some feedback from R&D on these questions.
Unfortunately, it is operating as expected.

Generally, these API calls will only show the contents of explicitly configured routes.
The interface is only shown if you configure a route with an explicit interface as the destination.

Interestingly enough, when you use show-routes-static, the interface for the default route is included in the output.
You can see an example in the API docs: https://sc1.checkpoint.com/documents/latest/GaiaAPIs/index.html#web/show-routes-static~v1.7%20 
It seems like the other API calls for different sources of routes (e.g. show-routes-bgp) includes interfaces in their output.
Which suggests they might be more suitable for your intended purpose.

 

0 Kudos
(1)
dj0Nz
Advisor

Okay, "operating as expected" is the answer I was expecting to be honest. I must have missed the show-routes-static call, which is (together with some json queries) all I needed. Code is at Github (https://github.com/dj0nz/cptools/blob/main/gaia_api_poc.py)

Thank you very much! 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 08:00 AM (CDT)

    South US: HTTPS Inspection Best Practices

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Tue 23 Apr 2024 @ 08:00 AM (CDT)

    South US: HTTPS Inspection Best Practices

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events