cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question
Highlighted

How to test the Management API with the Cloud Demo

The nice thing with the R80.10 Cloud Demo option is that you no longer need a real Check Point license to test security management features. And the API is one of them.

1. Get the server IP by clicking “copy server IP”

 

 

2. Get an administrator with a password that you know of, by creating one at “Permissions & Administrators” or by changing the password of one of the existing administrators. Publish your changes.

 

Now you can test your tools by connecting to this server IP with the administrator username and password.

Tags (2)
10 Replies
Vladimir
Jade

Re: How to test the Management API with the Cloud Demo

Tomer,

Can you point me to a detailed description of the capabilities of the cloud demo?

I routinely recommend it to my clients for familiarization with R80.XX, but it would be nice to accurately describe its limitations.

Thank you.

0 Kudos
Admin
Admin

Re: How to test the Management API with the Cloud Demo

There's an SK that describes the various limitations: Check Point R80 / R80.10 Cloud Demo Known Limitations 

0 Kudos

Re: How to test the Management API with the Cloud Demo

Here is the overview of why we chose this approach with R80 and the highlights of the benefits -  https://community.checkpoint.com/thread/5447-a-brief-history-of-demo-mode-for-policy-editor-and-smar... 

0 Kudos

Re: How to test the Management API with the Cloud Demo

How do I restart the Management API with "api restart" command in this demo mode? the "command line" shell is not the usual Gaia shell. 

0 Kudos
Admin
Admin

Re: How to test the Management API with the Cloud Demo

I don't you need to in the case of the Cloud Demo servers, but could be wrong there.

0 Kudos
Employee+
Employee+

Re: How to test the Management API with the Cloud Demo

The API in the cloud demo is setup to only accept local connections so it is required to test remote tools. Tomer Sole can we get the cloud server to default to gui clients or all IP? Otherwise we need some way to access and restart the API like Bryan mentioned.

Otherwise I have bypassed this with the run-script api to issue an api restart from SmartConsole.

0 Kudos

Re: How to test the Management API with the Cloud Demo

Get the real ip of the machine.

update MGMT object with real IP.

modify API settings 

add user + password + permissions 

publish

run-script on the MGMT object : 

source /etc/profile.d/CP.sh && api restart

ignore the error

Have fun Smiley Happy I do not know how to upload screenshots Smiley Sad

for me it worked Smiley Happy

C:\Program Files (x86)\CheckPoint\SmartConsole\R80.20\PROGRAM>mgmt_cli.exe login -m 52.59.244.70 -u ofirs -p ofirs

To verify server identity, compare the following fingerprint with the one displayed by the api management tool (api fingerprint).

SHA1 Fingerprint=42:02:B9:93:7C:4A:E4:47:3F:4C:B3:82:B8:45:0D:A9:13:80:E9:62
English Fingerprint=TOY GAL CENT WAVY LIEN LEE TAN CHEF SNOW DAYS BADE RUSK

Do you accept the fingerprint? (y/n) [y] ? y

C:\Program Files (x86)\CheckPoint\SmartConsole\R80.20\PROGRAM>mgmt_cli.exe login -m 52.59.244.70 -u ofirs -p ofirs
uid: "ddae3d5a-55aa-4cfd-8007-203a48e76ad7"
sid: "VuF91i1TvIShO6qc-L7xLDhxgNt04c4Nw9annrZFack"
url: "https://52.59.244.70:443/web_api"
session-timeout: 600
last-login-was-at:
posix: 1538151915730
iso-8601: "2018-09-28T16:25+0000"
api-server-version: "1.3"

0 Kudos
Employee+
Employee+

Re: How to test the Management API with the Cloud Demo

As I said I do this to bypass the issue.

But it would make more sense for standard user who is using the demo to not go through this step.

Re: How to test the Management API with the Cloud Demo

api restart is a CLISH command

0 Kudos
Employee+
Employee+

Re: How to test the Management API with the Cloud Demo

The api command is a shell script, that can be called from Expert or Clish.