Hi,
I have to add suspicious activity (SAM Rule) to checkpoint via API. I cant find any endpoint for this.
Check Point - Management API reference
Any help about this issue would be appreciated.
Best
Jasmine
Hi,
I have to add suspicious activity (SAM Rule) to checkpoint via API. I cant find any endpoint for this.
Check Point - Management API reference
Any help about this issue would be appreciated.
Best
Jasmine
jasmine,
here is a link how to add an access rule, via mgmt_cli tool -
https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/add-access-rule~v1.1%20
or via web service -
https://sc1.checkpoint.com/documents/latest/APIs/index.html#web/add-access-rule~v1.1%20
also, refer to the examples section at the bottom.
robert.
Access Rules require a policy push to be effective, sam rules are active immediately.
There is no management API at the moment that directly affects SAM rules.
But: You can use run-script to execute "fw sam" on the relevant gateways.
how to use the web api to run the run-script