show generic-object uid xxx is enormously useful and self documenting.
For settings aspects of the same, parameters of owned objects are simple enough, e.g.
set generic-object uid FWUID firewallSetting.connectionsLimit 50000
For arrays of objects, such as interfaces of a firewall, there is scattered documentation for things like...
set generic-object uid FWUID interfaces.add.create "com.checkpoint.objects.classes.dummy.CpmiClusterInterface" \
interfaces.add.owned-object.netmask "255.255.255.0" \
I've also found that I can remove an owned object by uid such as the above interface with...
set generic-object uid bbdf2604-ae6b-2942-ab8e-f4b0f7d31fa8 interfaces.remove 35b0b1ab-a323-49ec-b72b-d98eea2ddd89
What's missing from this picture is how to edit contents of owned objects in an array. PLEASE HELP! 🙂
I've tried things like....
set generic-object uid FWUID interfaces.0.netmask "255.255.255.0"
message: "An object was requested to be added to the collection: 'interfaces', however create is missing"
...but no dice. There must surely be away to set parameters inside arrays of owned objects but I can't work it out. My requirement by the way is to round trip a gateway from one VSX to another. It's working, we've been using it in anger, but at the moment we have to check anti-spoofing parameters by hand and I'm highly motivated to be able to put them back after the vsx_provisioning_tool add vd.
Thanks for any help!