How to get Checkpoint default object name details through API query

[Satish]

Hi Team,

I am using Checkpoint API v 1.7. I have extracted all object , Rules data by using Postman.

But not getting data for below Checkpoint default objects/object type.

Object Type -->  CpmiAnyObject, Global, Track

Object--> Original, Any, All, Accept, Drop, Log

Regards,

Satish..

[PhoneBoy]

These are not traditional user-defined objects, which means they are not retrievable via standard API calls.
The references to them in other API calls will include their UID, which can be queried with the show-generic-object API (which is not officially supported).

For example, the object "Any" looks something like this:

[Expert@R8120-SA:0]# mgmt_cli -r true show-generic-object uid "97aeb369-9aea-11d5-bd16-0090272ccb30" --format json
{
  "domainsPreset" : null,
  "objectValidationState" : null,
  "dynamicContent" : {
    "objId" : "00000000-0000-0000-0000-000000000000",
    "checkPointObjId" : null,
    "domainsPreset" : null,
    "domainId" : null,
    "status" : "CALCULATING",
    "content" : { },
    "modified" : false,
    "folderPath" : null,
    "text" : null,
    "folder" : null,
    "is_owned" : false
  },
  "color" : "BLACK",
  "description" : "",
  "cpmiDisplayName" : "Any",
  "id" : -5,
  "uid" : "97aeb369-9aea-11d5-bd16-0090272ccb30",
  "folder" : {
    "uid" : "a3a104fc-3987-4d22-9bf1-3fdbec0af39b",
    "name" : "Global Objects"
  },
  "domain" : {
    "uid" : "a0bbbc99-adef-4ef8-bb6d-defdefdefdef",
    "name" : "Check Point Data"
  },
  "meta-info" : {
    "metaOwned" : false,
    "lockStateResponse" : null,
    "validationState" : "OK",
    "deletable" : false,
    "renameable" : false,
    "newObject" : false,
    "lastModifytime" : 1668585913342,
    "lastModifier" : "System",
    "creationTime" : 1668585913342,
    "creator" : "System"
  },
  "tags" : [ ],
  "name" : "Any",
  "icon" : "General/globalsAny",
  "comments" : "",
  "display-name" : "",
  "customFields" : [ ],
  "_original_type" : "CpmiAnyObject"
}
[Expert@R8120-SA:0]# 

[Satish]

Hi,

So, I have to run "show-object" query for those non-user-defined objects's  UIDs to get the actual object Name ?

OR

Is there any way where I can get all non-user-defined objects names against their UIDs through a single API call?

Regards,

Satish

[PhoneBoy]

There is no method to list all the non-user-defined objects and/or objects that do not otherwise have a defined API endpoint (those exist as well).
You need to query them individually by UID as described.
However, I'm fairly certain the UIDs for these "non-user-defined" objects are the same in every installation.

[Bob_Zimmerman]

I generally do my main fetch, build my data structures, then check for any UUIDs which don't have further associated data like an object name. I then call /get-object for those UUIDs. I did find a few UUIDs which don't always show up in rules and such, and I fetch them manually:

213f0a22-49da-4719-94b3-f2d74623f3fb = Policy HTTPS Targets
6c488338-8eec-4103-ad21-cd461ac2c476 = Policy Targets
85c0f50f-6d8a-4528-88ab-5fb11d8fe16c = Original
97aeb368-9aea-11d5-bd16-0090272ccb30 = All
97aeb369-9aea-11d5-bd16-0090272ccb30 = Any
97aeb36a-9aea-11d5-bd16-0090272ccb30 = None
97aeb36a-9aeb-11d5-bd16-0090272ccb30 = All Users
97aeb36a-9aed-11d5-bd16-0090272ccb30 = All_GwToGw

Then some special management domains:
41e821a0-3720-11e3-aa6e-0800200c9fde = SMC User
8bf4ac51-2df7-40e1-9bce-bedbedbedbed = APPI Data
a0bbbc99-adef-4ef8-bb6d-cebcebcebceb = IPS Data
a0bbbc99-adef-4ef8-bb6d-defdefdefdef = Check Point Data
a0eebc99-afed-4ef8-bb6d-fedfedfedfed = System Data