Dynamic Layer in R82: Direct Gateway API Policy Management Made Easy - Tutorial

[Shay_Levin]

R82 introduces the Dynamic Layer, a game-changing feature for Access Control Policies. With Dynamic Layer, you can bypass the Management Server and send policies directly to the Security Gateway via API for instant enforcement.

This feature streamlines operations, saves time, and is perfect for automation.

Watch the full Tutorial below:

Links:

Dynamic Layer in Access Control Policy SK182252

Gaia API References "set-dynamic-content" - V1.18

[aloish]

are the created objects like name: "public_dns" with ip-address: "8.8.8.8" temporary - not usable for it admins manual policy config - and scoped to the dynamic layer policy ?
So do I get an error like object exists, if I have a object name "public_dns"  with same or another IP like "8.8.4.4" ?
Which means I do have to build logic around the post request to make it idempotent.

[Shay_Levin · Accepted solution]

• Objects created using the "set dynamic content" API will not appear in the SmartConsole, as this API directly creates the object on the gateway.
• If you refer to the API documentation, the referenced objects do not include host IP addresses or network IP addresses; they only include pre-built objects like services. As a result, you can't reference those objects types and you will need to create them with the API , the gateway does not consider host object names or IP addresses already defined on the management.

[the_rock]

Hey @Shay_Levin 

Just curious, sorry since its not clear to me from the sk, but does not appear this is layer by default? I checked demo version, but dont see if there...

Andy

[the_rock]

Nm, disregard...I should learn to watch the video more carefully lol

Andy