mgmt cli - How to negate an address object in adding an access-rule

[todd]

Hi Expert,

How to negate an address object in adding an access-rule from mgmt cli ?

I tried to add "!" but this is not working.

mgmt_cli -add access-rule layer "Network" position "top" source "!Intra-web-B" destination "Any" service "Any" action "Accept" --- not work!!

Thanks!

Todd

[PhoneBoy · Accepted solution]

Add a source-negate true to the command line instead of using an exclamation point.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-access-rule~v1.8%20

[the_rock · Accepted solution]

@PhoneBoy is 100% right @todd . I did this few times the way he advised you and works 100%. Let us know if any issues.

[todd]

Hi PhoneBoy, the_rock

It works!. Thank you!

mgmt_cli -add access-rule layer "Network" position "top" source-negate true source "Intra-web-B" destination "Any" service "Any" action "Accept"

Todd

[the_rock]

Good job!!