Working with Application control via API

[Serg78]

Hello! I novice in Checkpoint API and need help with manage Sanblast EDR blade "Firewall and Application control" via API: add/remove software from Allow/Disallow, blocked and terminated Application, add software to Application control from created by Appscan.exe xml file. Please, help me with this task.

[PhoneBoy]

Endpoint policy in general cannot currently be edited via the API.

[Serg78]

So, i cant integrate EDR with SIEM (blocking workstation for example), add workstation to some virtual groups and other via API?

[PhoneBoy]

Endpoint-specific management functions don't currently have API support.
I suspect this is something we'll add in the future but I would work with your local Check Point office around your precise requirements.