Searching for URL's in Custom Applications/ Site

[Tom_Cripps]

Hi there,

Is it possible to search for URL's what have been added to a custom application/ site like the one's used in Application Control & URL Filtering or is this not a feature present?

Not sure how much of a detriment to the system it causes but surely if two URL's are listed in two different custom App/ sites it would cause confusion to the engine knowing what category to assign it to if it's listed in two?

Let me know if anyone has thought of this annoying little thing?

[Tomer_Sole]

Hi, while SmartConsole does not yet block you from doing that, you could achieve it using the show application-sites API.

[Tom_Cripps]

That doesn't give you the "search" functionality does it?

[Tomer_Sole]

you will have to check each custom site object unfortunately. But we will take this feedback and consider making it better for our next releases.

[Tom_Cripps]

Okay, It's a lot better than what I would do prior, but I'll see how this performs and if it's something included in a future release that'd be great

[Tom_Cripps]

Tomer, 

Not sure if this is possible or not but can the API give you a list of the custom applications/ sites we've made in SmartConsole?

Like that? 

In my head i'm thinking SmartConsole gets the information from somewhere yes? The show application-sites seems to present me with applications as said in the name but the limit to how many can be searched doesn't allow me to then either use grep or jq to then filter this out for possibly our custom ones?

[Tomer_Sole]

Hi, with JQ you can filter by the value at "domain" of each returned application. If "domain.name" is "APPI Data" that means it's coming from the Check Point User Center and isn't a custom app made by the user. I agree that we could make a more comfortable job at filtering. 

[Tom_Cripps]

So, if i could figure out a way to apply a Boolean NOT effect on the filter, i could in theory filter out the APPI Data domain type to show only custom apps? What about the limitation of the amount of returned results?

[Tom_Cripps]

Seem to be getting this error?

This is being ran from our active gateway? That document says about R80 Gateways

[Tomer_Sole]

hi, see https://community.checkpoint.com/message/15404-re-getting-a-forbidden-error-message-http-status-code... 

[Tom_Cripps]

Thanks!

Will take a look

[Joshua_Hatter]

From the show-application-sites you can filter out the default sites by post filtering the response to exclude objects from the domain 'data-domain':

Python Example: