checkpint firewall backup through ansible

[Niteshtb]

Hi Team,

 I want to create a playbook through which take backup of checkpoint. So please tell me which module I will use for take backup using ansible.

Connection details:-

[checkpoint]
192.168.1.xxx
[checkpoint:vars]
ansible_user=admin
ansible_password=admin123
ansible_network_os=check_point.mgmt.checkpoint
ansible_connection=httpapi

Ansible Version:

ansible 2.9.6
config file = /etc/ansible/ansible.cfg
configured module search path = ['/home/nitesh/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/lib/python3/dist-packages/ansible
executable location = /usr/bin/ansible
python version = 3.8.10 (default, Mar 15 2022, 12:22:08) [GCC 9.4.0]

[_Val_]

Current ansible tools for Check Point do not include a direct module for getting a backup.

However, you can script backup operations and call that script through cp_mgmt_run_script module when using ansible Check Point Ansible Mgmt Collection: https://galaxy.ansible.com/check_point/mgmt

[Hugo_vd_Kooij]

Unfortunatly the GAIA API allows you to put a file on the box but is has no provision to fetch one. 

Considering that copying a file with SCP to anothe hosts is a no-go for our company the only way is to use basic file copy actions in Ansible. But it has it's own challenges.

[Niteshtb]

Thanks for Reply 

There is difficult to make a script for getting checkpoint firewall backup to ansible server.

Is there another way to take backup through ansible.

[Niteshtb]

Thanks for Reply 

For this module (cp_mgmt_run_script) I have to make a shell script for take backup of checkpoint firewall into my server. 

Is there another way to take backup through ansible.

[_Val_]

Not that I know of.

[PhoneBoy]

Ansible is used to describe (and maintain) a specific configuration state versus executing a specific task like a backup.

[tawsif]

Is there a new module in Ansible collections now that can run backups on Firewall?

[Erik_Lagzdins]

There is not, the Gaia modules are meant to automate configuration not perform maintenance tasks. However you can program Ansible to run a script or shell command to generate a new backup.