Updatable Object for Checkpoint services

[Kaspars_Zibarts]

Here's a million dollar question (or maybe $5) 

what's missing on the list of Updatable Objects below? Where's Checkpoint services? Ones that are listed here sk83520 

Of course you could create FQDN objects manually or a custom application category with URLs included but that maens manual maintenance. Would be so nice to have a pre-built object that's maintained by CP themselves! Have great friday!

[_Val_]

Also, from your example it seems to me, FQDN objects would do.

[Jiri_Pridal]

I knew I missed some point. Thanks Val, FQDN will spare lots of time!

[Wolfgang]

@Jiri_Pridal 

be patient. I think there is time needed to get more and more updatable objects. Check Point starts with only a few objects and now we have a lot more. As you can see in this thread, it's possible to request a new object. @Kaspars_Zibarts started this thread ‎2021-04-23 08:13 AM and yesterday we got the new object for Check Point service. 

In the meantime you can use the available Apple-objects from ApplicationControl/URL-Filter:

[Micky_Michaeli]

Hi,

We just released a new Updatable object for GitHub Services.

The new object for Zscaler Services is planned to be released by the first week of July.

We created sk173416 for Updatable Objects FAQ - You can find interesting information on Updatable objects and how new suggestions for Updatable objects can be submitted.

Thanks,
Micky

[the_rock · Accepted solution]

Very good news indeed!

[Andreas_Hofmann]

Hi, what are the plans for SAP cloud services which is a woldwide ERP software standard?

Thanks

Andreas

[Micky_Michaeli]

Hi @Andreas_Hofmann,

We didn't get a lot requests for it till now and we can surely evaluate it as next released objects.

Please use sk173416 in order to provide the relevant information regarding SAP cloud services updatable object.

We are using this SK for collecting common requests from customers.

Thanks,

Micky

[Dor_Marcovitch]

what would be great is the ability to create a customer updatable object based on a URL that returns a list of IPs that way you wont be only relay on checkpoint to create them.

[PhoneBoy]

We already have this in R81, it’s called a Generic Data Center object.
You just have to host a JSON file on a web server.
You can put whatever IPs in it you want (doesn’t support domains currently).

[Zolo]

Hi All,

What happend with "Check Point Services" object?

One of our customer shared this :

What can we use instead?

[Kaspars_Zibarts]

sk164772 

1. Restart the CloudGuard controller by running these commands on the Security Management Server:

   • cloudguard stop

   • cloudguard start

2. Open the updatable objects pane

[Zolo]

Hi,

Thank you!

I will talk with customer 😀

[genisis__]

I've had the same message.  I got around this by removing the updatable object and then re-importing it back in, then pushed policy.

[Zolo]

The customer restarted the Management server because of an another issue. The "Validations" pane is clear for now 😀

Thank you anyway.

[Tomer_Noy]

Just to clarify, there was indeed an issue where these validations can popup.

As Kaspars mentioned, there is an SK with instructions on how to get rid of them:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

In addition, the SK states which JHF should be installed to prevent it from happening again.

[Tobias_Moritz]

@Tomer_Noy : The customer visible part of this sk does not state which JHF should be installed to prevent it from happing again. Maybe this is on the internal notes, only employees can see?

If relevant, my support center access level is expert.

[Tomer_Noy]

Apologies...

Here are the PRJ IDs and Take numbers:

R80.20 : PRJ-22201 => Take 202
R80.30:  PRJ-22217 => Take 235
R80.40: PRJ-22221 => Take 114
R81:  PRJ-22223 => Take 25

** Note that the fixes prevent the issue from happening again. The WAs are needed to clear it, once it happens.

*** EDIT ***
After checking with the team, it seems that there is another edge case that might lead to these symptoms. Another fix is in the pipe and will be released in upcoming JHFs. It's still worthwhile to install the currently available fixes as they have a high chance of preventing the issue.