Execute Commands Simultaneously ➜ SmartConsole Extension

[HeikoAnkenbrand]

Command - SmartConsole Extension

Features

SmartConsole extension to execute commands on all gateways, VSX gateways,
Maestro gateways, MDS, SMS, SmartEvent- and log-server.

• Execute commands  in  "Expert Mode" and "CLISH".
  
• Get and push GAIA CLISH configs from/to gateway.
  
• Execute "Expert Mode" and "CLISH" commands on all gateways simultaneously.
  
• Execute "Expert Mode" and "CLISH" commands on selected gateways simultaneously.
• Execute CLI commands on all Maestro SGMs simultaneously -> g_all and gclish support.
  
• Command history -> Execute the last 20 commands again.
  
• Status about the success of the action.
• One Click
  • Open a cli command in SmartConsole with one mouse click and execute the command on a gateway.
  • Create your own permanent list with 40 commands.
  • Uses a predefined list of 40 CLI commands.
    

Extension URL

Version 7.x:    https://www.checkpoint.tips/ex/command.json  

Supported devices

• Multi Domain Management Server (MDS + CMAs)
• Security Management Server (SMS)
• SmartEvent server
• Log server
• Gateways:
  • Simple gateways
  • Cluster member
  • VSX gateways
  • Maestro SGMs (gateways)
  • CloudGuard gateways
  • CloudGuard cluster member
  • CloudGuard VMSS gateways

Attention

In some Smart Consoles there is a bug with this function:

smxProxy.sendRequest("run-readonly-command", { "command": "show gateways-and-servers", "parameters": { "details-level": "full" } }, "commit");

This can cause a Smart Console to crash. In this case, you can go to the "Settings / Help" menu and turn off "Enable easy mode". This will use a different function and the crash will no longer occur.

-> Would be happy if Check Point would fix this bug in the API.

Install SmartConsole Extension

Click to Expand

To import an extension:

1. On SmartConsole, go to Manage & Settings > Preferences > SmartConsole Extensions > +.

   The Import SmartConsole Extension window opens.

2. Enter the web-service manifest URL:
   
   https://www.ankenbrand24.de/ex/command.json
   
   

   Note - When the hosting server uses an invalid SSL certificate (self-signed), it prompts an Invalid Certificate confirmation window. Confirm the server's fingerprint against the SSL certificate which runs the Extension by selecting View Certificate. On the Certificate window, you can enable trust for this certificate with a click on Install Certificate to use the Certificate Import Wizard.

More Easy SmartConsole Extension

- Add and Delete Gateway Routes central from SmartConsole
- Ticket System - SmartConsole Extension 
- R8x - Ports Used for Communication by Various Check Point Modules - SmartConsole Extension
- Create Games in SmartConsole

History

v7.0a    URL changed www.checkpoint.tips  + fixes                         07/16/2024
v7.0      now with R82 support                                                              02/11/2024

v6.1c    problem fixed with R81.20 JHF 26                                         10/22/2023
v6.1b    3 problems fixed in version 6.1b                                            06/30/2023
v6.1a    Small functional changes                                                       04/02/2023
v6.0      Full CloudGuard gateway and VMSS support                     03/29/2023

v5.9      New status for selected rows                                                 03/28/2023
v5.8      Fix and button for CP read-only-command issue               03/27/2023
v5.7      Fix for Super User role permissions                                     03/27/2023
v5.6      Fix for long oneliner                                                                03/27/2023
v5.5      Maestro gclish support -> new button "all SGMs"            03/26/2023
v5.4      Better "One Click" handling                                                   03/25/2023
v5.3      Better error and status handling                                           03/24/2023
v5.2      Maestro g_all support -> new button "all SGMs"               03/23/2023                                                     
v5.1      Advanced status messages                                                     03/22/2023
v5.0      Full MDS and SMS support                                                     03/21/2023

v4.3      Support for VSX cluster                                                           03/20/2023
v4.2      Support for gateways, VSX gateways                                    03/19/2023
v4.1      Stability fix                                                                                 03/16/2023
v4.0      Execute CLI commands on selected                                    03/12/2023
             gateways simultaneously

v3.8       Load "Top 40 CheckMates Commands"                              03/08/2023         
v3.7       Stability fix                                                                                03/06/2023
v3.6       Reached 1000 lines of programme code                              03/05/2023
v3.5       Load 40 predefined commands for one click                       03/04/2023
v3.4       Stability fix and converted to base64 commit+response    03/03/2023
v3.3       add button (small and large)                                                  03/02/2023
v3.2       Push bugefix                                                                             03/02/2023
v3.1       Designe bugfix                                                                          03/01/2023                                                                 
v3.0       Get and Push GAIA CLISH configs from/to gateway           03/01/2023

v2.1       Add one click cli commands                                                   02/28/2023
v2.0       Execute "Expert Mode" and "CLISH"                                   02/27/2023
              commands on all gateways simultaneously.
v1.9       add beta function switch                                                          02/25/2023
v1.8       now with copy to clipboard button                                          02/23/2023
v1.7       Command history.                                                                     02/21/2023
              --> Execute the last 20 commands again.
v1.6       120 sec. page refresh issue solved                                         02/20/2023
v1.5       Support for long "Oneliner"                                                     02/18/2023
v1.4       Error handling                                                                           02/14/2023
v1.3       VSX gateway support                                                                02/13/2023
v1.2       better error handling                                                                02/07/2023
v1.1       now with "Expert Mode" and "CLISH"                                    02/06/2023
v1.0       kickoff version                                                                            02/04/2023

[zr4]

Very good solution!

[the_rock]

excellent!

[MAlter]

Hello @HeikoAnkenbrand,

we had talked about this SmartConsole feature at a German Check Point event. Thank you for creating this so quickly. Tried it this morning on our firewall and it works great.

Thanks
Merthan

[Vladimir]

Yeah, this looks better than using one-time scripts for the same purpose and then reviewing their execution reports.

[Jan_Irani]

wow... this is the swiss army knives of  SCE :-). 

[HeikoAnkenbrand]

Hi Ali,

extra for you now in version 1.8 with "copy to clipboard" button😀.

This was an interesting hack, because the JavaScript function navigator.clipboard.writeText() does not work in SmartConsole extensions.

[HeikoAnkenbrand]

Now with "Expert Mode" and "CLISH"

[Vladimir]

Awesome!

[Martin_Valenta]

what's the difference versus "one time script" feature?

[HeikoAnkenbrand]

Hi @Martin_Valenta,

With the "One Time Script" you still have to open the window in which the output is displayed.

Start task:
Secetct (gateway) --> Right click --> Scripts --> One Time Script --> Add Command --> Run

Read task answers:
Task in Prozess --> (Search for the correct task) --> Details --> Task Results --> more

- From my point of view, this is an never-ending mouse click game!
- Can't switch quickly between "Expert Mode" and "Clish" either.

[Denis_Wahome_9A]

This is great.

I have tried this on R81.20 Lab environment. Works great so far. Which other versions are supported?

[Dolo]

Very great plugin. 
Is a swiss army knife.

[HeikoAnkenbrand]

Now in version 1.4 with Maestro and VSX support.

[HeikoAnkenbrand]

Now with support for long "Onliner" in version 1.5.
In the meantime, there have been some problems with the processing.
This is now solved by using Base64.

[HeikoAnkenbrand]

In version 1.7 I have integrated a command history.
This allows you to quickly execute the last 20 commands again.

[renzi]

Nice plugin!

[ODO]

We using the plugin for one week. Is really a good solution.

With the extension to execute commands on all gateways, we have been able to simplify some of our firewall processes. 

👍

[HeikoAnkenbrand]

After about 800 lines of code, I would like to present you my new "SmartConsole Extention ➜ Execute CLI commands on all gateways simultaneously" in version 2.0.

This allows you to execute Expert Mode commands and CLISH commands from the SmartConsole on all gateways simultaneously.

[Martin_Valenta]

how i it with support for this for SMB devices? in r81.20 mgmt smb "one time scripts" were supposed to be working with r81 smb gateways..

[HeikoAnkenbrand]

New features in version 2.1:
- Open a cli command in SmartConsole with a mouse click and execute the command on a gateway.
- Create your own permanent list with 40 commands.
- Uses a predefined list of with 40 CLI commands.
- Edit the list at any time with your own commands.
- The command list will be permanently maintained, even if you close the SmartConsole and open it again.

[ChrisAM]

Great tool!

Here the settings are not to be seen correctly!

[HeikoAnkenbrand]

Hi @ChrisAM.

The bug is fixed in version 3.5.

[Baasanjargal_Ts]

Hello, 

Does it work on Quantum spark 1500 series gateways? 

[PhoneBoy]

In theory it should, however cprid appears to have an issue on SMB appliances I'm not sure is resolved yet: https://community.checkpoint.com/t5/SMB-Gateways-Spark/Output-of-cprid-truncated-after-receiving-600... 

[HeikoAnkenbrand]

Now the SmartConsole extension Execute Commands with  a selection field to load different command lists quickly.

If you want to add new commands to the list, please post them under the following article.

TOP 40 - Check Point Commands 

Then I will add them in the next few days.

[HeikoAnkenbrand]

If you want to add new commands to the list, please post them under the following article.

TOP 40 - Check Point Commands 

Then I will add them in the next few days.

[HeikoAnkenbrand]

If you want to add new commands to the list, please post them under the following article.

TOP 40 - Check Point Commands 

Then I will add them in the next few days.

[HRappel]

Very brilliant tool.

[oli007]

Am I understanding this correctly?
I can use the tool to execute commands in expert mode on all gateways simultaneously?

[HeikoAnkenbrand]

Yes, it is correct!

[oli007]

Thanks

WOW - Really nice tool.