How to enbale and configure Application filtering blade with Ansible

[Amit_Chaubey]

Hi,

 I am using Terraform for infrastructure provisioning and Ansible for configuration in AWS to deploy checkpoint FIrewall R80, I am stuck on few points below, 

I am looking for a solution how to enable Application filtering blade(any other blade like IPS etc.) and how to add URL/s for Egress filtering.  I am using Ansible for automation so that Internal subnet can access the Some URL on the Internet and rest should be blocked.

Any Ansible module related to this would help a lot.

Thank you, 

Amit Chaubey 

[PhoneBoy]

The command in the API is set simple-gateway, as documented here: Check Point - Management API reference: set simple-gateway

To add URLs for egress filtering, you'd have to:

• Create an application site: Check Point - Management API reference: add application-site  (or modify an existing one)
• Create a rule allowing access to only that application-site: Check Point - Management API reference: add access-rule

In the sample configurations here, similar tasks are done: https://community.checkpoint.com/docs/DOC-2173 

I recommend looking at the enclosed playbooks.