Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
yasemen_karakoc
Explorer
Jump to solution

Block IP With SAM rules

Hi,

I have to  add suspicious activity (SAM Rule) to checkpoint via API. I cant find any endpoint for this.

Check Point - Management API reference 

Any help about this issue would be appreciated.

Best

Jasmine

1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

Access Rules require a policy push to be effective, sam rules are active immediately.

There is no management API at the moment that directly affects SAM rules.

But: You can use run-script to execute "fw sam" on the relevant gateways.

how to use the web api to run the run-script

View solution in original post

2 Replies
Robert_Decker
Advisor

jasmine,

here is a link how to add an access rule, via mgmt_cli tool - 

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-access-rule~v1.1%20

or via web service - 

https://sc1.checkpoint.com/documents/latest/APIs/index.html#web/add-access-rule~v1.1%20

also, refer to the examples section at the bottom.

robert.

PhoneBoy
Admin
Admin

Access Rules require a policy push to be effective, sam rules are active immediately.

There is no management API at the moment that directly affects SAM rules.

But: You can use run-script to execute "fw sam" on the relevant gateways.

how to use the web api to run the run-script

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events