cli command to install policy

[Ihenock1011]

Hi Mates,

We have a Check Point R81.10 Security Gateway and Smart Management Server (SMS) functionality. I can successfully import multiple objects using the CLI command sk113078.  However, I'm looking for the syntax to install a security policy on individual VSX (Virtual Security Appliance) members within the VSX cluster.

Thanks

[the_rock]

Not sure if its doable, as I only see option for regular gateways.

Andy

https://sc1.checkpoint.com/documents/latest/APIs/#cli/install-policy~v1.9.1%20

[PhoneBoy]

This endpoint should also apply for VSes as well.
What isn't in the API for VSes are the VSes themselves.
Of course, VS objects are dead once you move to VSnext 😉

[Vincent_Bacher]

---

@PhoneBoy wrote:

This endpoint should also apply for VSes as well.

---

Yes. As the policy package name is the only required argument for this API command, it's installed on the policy target defined in the policy package and each policy (rule) if defined, no matter if it's a legacy device or vs. 
At least that's how I understand the API

@PhoneBoy wrote:

Of course, VS objects are dead once you move to VSnext 😉

---

Huh? What do you mean? 

[_Val_]

@Vincent_Bacher , in his second note, Dameon is referring to the new virtualization solution for security gateways, VSNext, which is coming to replace VSX (or, more correctly, coexist with the classic VSX for a while) in R82.

VSNext uses a completely different provisioning and management framework, bringing the use of APIs for a virtual GW to the same level as for a physical one, and even adding more capabilities.

For more details, you can refer to one of the CPX sessions for the matter: https://community.checkpoint.com/t5/Member-Exclusive-Content/R82-ElasticXL-and-VSNext-Generation-Und...

[Vincent_Bacher]

@Val yes i know, thanks. I maybe just misunderstood "VS objects are dead"

[_Val_]

while @PhoneBoy is still sleeping, I can assume, he meant VSX has no future.

[PhoneBoy]

A VS is represented as a regular gateway object in VSnext.
Thus my "VS objects are dead" comment 🙂