- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Going to expire rule list from checkpoint policy
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Going to expire rule list from checkpoint policy
Hi Team,
Is there any mgmt_cli command or api to get the "going to expired rule:s from checkpoint policy.
There is a mgmt_cli command to get the expired rules.need similar way to get the "going to expired rules".
Thanks in advance.
Regards
Aathi
4 Replies
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What command did you find to give you the expired rules?
Because the only way a rule is expired is if it has something in the Time field and that object has an End date after...now.
That implies some sort of script as there's no API call I'm aware of that will pull "expired" rules, much less rules about to expire.
Because the only way a rule is expired is if it has something in the Time field and that object has an End date after...now.
That implies some sort of script as there's no API call I'm aware of that will pull "expired" rules, much less rules about to expire.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Phoneboy,
It is disabled rules not expired one.i wrongly mentioned as Expired rules.
Is there any way to get the timebound rules list either via mgmt_cli or api.Please help to get the going to expired rules list.
Regards
Aathi
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Why should a rule expire and you need a list to see which is next ? I would rather look for time objects as mentioned by
CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Similar to getting a list of rules that are disabled, you'd have to use a script that basically calls the API and use jq to filter the results.
Specifically, you'd look for rules that have something other than "any" in the Time field.
You can use this as a starting point: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Disable-Delete-Rules-with-a-Zero-...
Specifically, you'd look for rules that have something other than "any" in the Time field.
You can use this as a starting point: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Disable-Delete-Rules-with-a-Zero-...
