Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Kristof_Vermael
Contributor

API support for SMB appliances

Hello,

Does anyone know if SMB appliances and API calls will be supported in the future

In this version (R80.10), I'm getting the following error :

{
"code": "err_validation_failed",
"message": "Operations with SMB gateways are unsupported"
}

11 Replies
Sunny_Gill
Employee
Employee

SMB appliances are currently on R77.20.XX, not R80 train code. That is scheduled for 2019 and I suspect REST API will be supported at that point.

0 Kudos
PhoneBoy
Admin
Admin

What's the exact call you are making?

It's true that you cannot create (or modify) SMB gateway objects with the API currently.

0 Kudos
Kristof_Vermael
Contributor

This was a 'show-simple-gateway' call.

I'm trying to automate the creation of 70 SMB gateways over time, so creating the gateway, adding them to the appropriate VPN communities, creating network objects and adding them to the correct groups.

Not everything is possible with the API calls, creating a gateway is possible, but not a SMB gateway. Also setting an encryption domain is not possible.

So far my automation Smiley Sad

0 Kudos
G_W_Albrecht
Legend
Legend

There are other possibilities to automate SMB first time config - from USB media with autoconf.clish files to the SMP Portal to Check Point SmartProvisioning Software Blade...

0 Kudos
Kristof_Vermael
Contributor

Hello Günter,

It is not the first time config I want to automate, those SMB appliances are centrally managed, I want to automate the creation in Dashboard and first time policy install. I have created a script that creates a gateway and creates all the needed network objects, but I need to reconvert the gateway to a SMB gateway.

0 Kudos
G_W_Albrecht
Legend
Legend

The i would suggest a look into SmartProvisioning Administration Guide R80.20.M1.

0 Kudos
Kristof_Vermael
Contributor

Hello Günter, thx for helping out, but SmartPovisioning is not an option either, it is too limited.

SmartLSM is not an option as the firewalls are to different.

With the API, i can get 90% of my work automated, so i'll stick to that. I'll just hope SMB appliances will be supported in the future to get this automation to 100% !

0 Kudos
PhoneBoy
Admin
Admin

SMB Gateway Objects cannot be created or modified through the API currently.

It's something we plan to address in later releases.

edprop
Explorer

Is it possible yet to create or modify SMBs on the new version? Im running 80.30 on the mgmt server

cpxmgt1> mgmt_cli show simple-gateway name
MGMT9000 Error: The parameters of show-simple-gateway command should be provided in pairs (key and value). You have provided an odd number of parameters which suggests that you are probably missing a parameter.
cpxmgt1> mgmt_cli show simple-gateway name "firewall33"
MGMT9000 code: "err_validation_failed"
message: "Operations with SMB gateways are unsupported"

0 Kudos
PhoneBoy
Admin
Admin

As of right now, there is still no API support for creating SMB gateways.
It may be possible to do it with generic-object but haven’t tried myself.
This is also not in the upcoming R81, as far as I know.

0 Kudos
G_W_Albrecht
Legend
Legend

Is ZeroTouch combined with a CLISH script a (more) viable solution ?

0 Kudos