Skip to content

Latest commit

 

History

History
271 lines (234 loc) · 23.1 KB

CHANGELOG.rst

File metadata and controls

271 lines (234 loc) · 23.1 KB
Raw

Check_Point.Mgmt Release Notes

Topics

v4.0.0

Release Summary

This is release 4.0.0 of check_point.mgmt, released on 2022-09-14.

Major Changes

  • plugins/httpapi/checkpoint - Support for Smart-1 Cloud with new variable 'ansible_cloud_mgmt_id'

Breaking Changes / Porting Guide

  • cp_mgmt_access_role - the 'machines' parameter now accepts a single str and a new parameter 'machines_list' of type dict has been added. the 'users' parameter now accepts a single str and a new parameter 'users_list' of type dict has been added.
  • cp_mgmt_access_rule - the 'vpn' parameter now accepts a single str and a new parameter 'vpn_list' of type dict has been added. the 'position_by_rule' parameter has been changed to 'relative_position' with support of positioning above/below a section (and not just a rule). the 'relative_position' parameter has also 'top' and 'bottom' suboptions which allows positioning a rule at the top and bottom of a section respectively. a new parameter 'search_entire_rulebase' has been added to allow the relative positioning to be unlimited (was previously limited to 50 rules)
  • cp_mgmt_administrator - the 'permissions_profile' parameter now accepts a single str and a new parameter 'permissions_profile_list' of type dict has been added.
  • cp_mgmt_publish - the 'uid' parameter has been removed.

Bugfixes

  • cp_mgmt_access_rule - support for relative positioning for rulebase with more than 50 rules (CheckPointSW#69)
  • cp_mgmt_administrator - specifying the administartor's permissions profile now works for both SMC and MDS (CheckPointSW#83)
  • meta/runtime.yml - update value of minimum ansible version and remove redirect (CheckPointSW#84)

v3.2.0

Release Summary

This is release 3.2.0 of check_point.mgmt, released on 2022-08-09.

v3.1.0

Release Summary

This is release 3.1.0 of check_point.mgmt, released on 2022-07-04.

v3.0.0

Release Summary

This is release 3.0.0 of check_point.mgmt, released on 2022-06-07.

New Modules

  • check_point.mgmt.cp_mgmt_add_rules_batch - Creates new rules in batch. Use this API to achieve optimum performance when adding more than one rule.
  • check_point.mgmt.cp_mgmt_approve_session - Workflow feature - Approve and Publish the session.
  • check_point.mgmt.cp_mgmt_check_network_feed - Check if a target can reach or parse a network feed; can work with an existing feed object or with a new one (by providing all relevant feed parameters).
  • check_point.mgmt.cp_mgmt_check_threat_ioc_feed - Check if a target can reach or parse a threat IOC feed; can work with an existing feed object or with a new one (by providing all relevant feed parameters).
  • check_point.mgmt.cp_mgmt_cluster_members_facts - Retrieve all existing cluster members in domain.
  • check_point.mgmt.cp_mgmt_connect_cloud_services - Securely connect the Management Server to Check Point's Infinity Portal. <br>This is a preliminary operation so that the management server can use various Check Point cloud-based security services hosted in the Infinity Portal.
  • check_point.mgmt.cp_mgmt_delete_rules_batch - Delete rules in batch from the same layer. Use this API to achieve optimum performance when removing more than one rule.
  • check_point.mgmt.cp_mgmt_disconnect_cloud_services - Disconnect the Management Server from Check Point's Infinity Portal.
  • check_point.mgmt.cp_mgmt_domain_permissions_profile - Manages domain-permissions-profile objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_domain_permissions_profile_facts - Get domain-permissions-profile objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_get_platform - Get actual platform (Hardware, Version, OS) from gateway, cluster or Check Point host.
  • check_point.mgmt.cp_mgmt_idp_administrator_group - Manages idp-administrator-group objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_idp_administrator_group_facts - Get idp-administrator-group objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_idp_to_domain_assignment_facts - Get idp-to-domain-assignment objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_install_lsm_policy - Executes the lsm-install-policy on a given list of targets. Install the LSM policy that defined on the attached LSM profile on the targets devices.
  • check_point.mgmt.cp_mgmt_install_lsm_settings - Executes the lsm-install-settings on a given list of targets. Install the provisioning settings that defined on the object on the targets devices.
  • check_point.mgmt.cp_mgmt_interoperable_device - Manages interoperable-device objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_interoperable_device_facts - Get interoperable-device objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_lsm_cluster_profile_facts - Get lsm-cluster-profile objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_lsm_gateway_profile_facts - Get lsm-gateway-profile objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_lsm_run_script - Executes the lsm-run-script on a given list of targets. Run the given script on the targets devices.
  • check_point.mgmt.cp_mgmt_md_permissions_profile - Manages md-permissions-profile objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_md_permissions_profile_facts - Get md-permissions-profile objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_network_feed - Manages network-feed objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_network_feed_facts - Get network-feed objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_objects_facts - Get objects objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_provisioning_profile_facts - Get provisioning-profile objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_reject_session - Workflow feature - Return the session to the submitter administrator.
  • check_point.mgmt.cp_mgmt_repository_script - Manages repository-script objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_repository_script_facts - Get repository-script objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_reset_sic - Reset Secure Internal Communication (SIC). To complete the reset operation need also to reset the device in the Check Point Configuration Tool (by running cpconfig in Clish or Expert mode). Communication will not be possible until you reset and re-initialize the device properly.
  • check_point.mgmt.cp_mgmt_set_global_properties - Edit Global Properties.
  • check_point.mgmt.cp_mgmt_set_idp_default_assignment - Set default Identity Provider assignment to be use for Management server administrator access.
  • check_point.mgmt.cp_mgmt_set_idp_to_domain_assignment - Set Identity Provider assignment to domain, to allow administrator login to that domain using that identity provider, if there is no Identity Provider assigned to the domain the 'idp-default-assignment' will be used. This command only available for Multi-Domain server.
  • check_point.mgmt.cp_mgmt_set_threat_advanced_settings - Edit Threat Prevention's Blades' Settings.
  • check_point.mgmt.cp_mgmt_show_cloud_services - Show the connection status of the Management Server to Check Point's Infinity Portal.
  • check_point.mgmt.cp_mgmt_show_global_properties - Retrieve Global Properties.
  • check_point.mgmt.cp_mgmt_show_idp_default_assignment - Retrieve default Identity Provider assignment that used for Management server administrator access.
  • check_point.mgmt.cp_mgmt_show_servers_and_processes - Shows the status of all processes in the current machine (Multi-Domain Server and all Domain Management / Log Servers). <br>This command is available only on Multi-Domain Server.
  • check_point.mgmt.cp_mgmt_show_threat_advanced_settings - Show Threat Prevention's Blades' Settings.
  • check_point.mgmt.cp_mgmt_simple_cluster - Manages simple-cluster objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_simple_cluster_facts - Get simple-cluster objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_smtp_server - Manages smtp-server objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_smtp_server_facts - Get smtp-server objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_submit_session - Workflow feature - Submit the session for approval.
  • check_point.mgmt.cp_mgmt_test_sic_status - Test SIC Status reflects the state of the gateway after it has received the certificate issued by the ICA. If the SIC status is Unknown then there is no connection between the gateway and the Security Management Server. If the SIC status is No Communication, an error message will appear. It may contain specific instructions on how to fix the situation.
  • check_point.mgmt.cp_mgmt_update_provisioned_satellites - Executes the update-provisioned-satellites on center gateways of VPN communities.

v2.3.0

New Modules

  • check_point.mgmt.cp_mgmt_lsm_cluster - Manages lsm-cluster objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_lsm_cluster_facts - Get lsm-cluster objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_lsm_gateway - Manages lsm-gateway objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_lsm_gateway_facts - Get lsm-gateway objects facts on Checkpoint over Web Services API

v2.2.0

New Modules

  • check_point.mgmt.cp_mgmt_access_rules - Manages access-rules objects on Check Point over Web Services API

v2.1.0

New Modules

  • check_point.mgmt.cp_mgmt_add_domain - Create new object
  • check_point.mgmt.cp_mgmt_delete_domain - Delete existing object using object name or uid.
  • check_point.mgmt.cp_mgmt_domain_facts - Get domain objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_identity_tag - Manages identity-tag objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_identity_tag_facts - Get identity-tag objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_install_database - Copies the user database and network objects information to specified targets.
  • check_point.mgmt.cp_mgmt_mds - Manages mds objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_set_domain - Edit existing object using object name or uid.
  • check_point.mgmt.cp_mgmt_trusted_client - Manages trusted-client objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_trusted_client_facts - Get trusted-client objects facts on Checkpoint over Web Services API

v2.0.0

New Modules

  • check_point.mgmt.cp_mgmt_access_section - Manages access-section objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_add_api_key - Add API key for administrator, to enable login with it. For the key to be valid publish is needed.
  • check_point.mgmt.cp_mgmt_add_data_center_object - Imports a Data Center Object from a Data Center Server.<br> Data Center Object represents an object in the cloud environment.
  • check_point.mgmt.cp_mgmt_add_nat_rule - Create new object.
  • check_point.mgmt.cp_mgmt_data_center_object_facts - Get data-center-object objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_delete_api_key - Delete the API key. For the key to be invalid publish is needed.
  • check_point.mgmt.cp_mgmt_delete_data_center_object - Delete existing object using object name or uid.
  • check_point.mgmt.cp_mgmt_delete_nat_rule - Delete existing object using object name or uid.
  • check_point.mgmt.cp_mgmt_https_section - Manages https-section objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_install_software_package - Installs the software package on target machines.
  • check_point.mgmt.cp_mgmt_nat_rule_facts - Get nat-rule objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_nat_section - Manages nat-section objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_set_nat_rule - Edit existing object using object name or uid.
  • check_point.mgmt.cp_mgmt_set_session - Edit user's current session.
  • check_point.mgmt.cp_mgmt_show_access_section - Retrieve existing object using object name or uid.
  • check_point.mgmt.cp_mgmt_show_https_section - Retrieve existing HTTPS Inspection section using section name or uid and layer name.
  • check_point.mgmt.cp_mgmt_show_logs - Showing logs according to the given filter.
  • check_point.mgmt.cp_mgmt_show_nat_section - Retrieve existing object using object name or uid.
  • check_point.mgmt.cp_mgmt_show_software_package_details - Gets the software package information from the cloud.
  • check_point.mgmt.cp_mgmt_show_task - Show task progress and details.
  • check_point.mgmt.cp_mgmt_show_tasks - Retrieve all tasks and show their progress and details.
  • check_point.mgmt.cp_mgmt_uninstall_software_package - Uninstalls the software package from target machines.
  • check_point.mgmt.cp_mgmt_verify_software_package - Verifies the software package on target machines.

v1.0.0

New Modules

  • check_point.mgmt.cp_mgmt_access_layer - Manages access-layer objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_access_layer_facts - Get access-layer objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_access_role - Manages access-role objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_access_role_facts - Get access-role objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_access_rule - Manages access-rule objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_access_rule_facts - Get access-rule objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_address_range - Manages address-range objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_address_range_facts - Get address-range objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_administrator - Manages administrator objects on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_administrator_facts - Get administrator objects facts on Checkpoint over Web Services API
  • check_point.mgmt.cp_mgmt_application_site - Manages application-site objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_application_site_category - Manages application-site-category objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_application_site_category_facts - Get application-site-category objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_application_site_facts - Get application-site objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_application_site_group - Manages application-site-group objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_application_site_group_facts - Get application-site-group objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_assign_global_assignment - assign global assignment on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_discard - All changes done by user are discarded and removed from database.
  • check_point.mgmt.cp_mgmt_dns_domain - Manages dns-domain objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_dns_domain_facts - Get dns-domain objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_dynamic_object - Manages dynamic-object objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_dynamic_object_facts - Get dynamic-object objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_exception_group - Manages exception-group objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_exception_group_facts - Get exception-group objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_global_assignment - Manages global-assignment objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_global_assignment_facts - Get global-assignment objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_group - Manages group objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_group_facts - Get group objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_group_with_exclusion - Manages group-with-exclusion objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_group_with_exclusion_facts - Get group-with-exclusion objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_host - Manages host objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_host_facts - Get host objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_install_policy - install policy on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_mds_facts - Get Multi-Domain Server (mds) objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_multicast_address_range - Manages multicast-address-range objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_multicast_address_range_facts - Get multicast-address-range objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_network - Manages network objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_network_facts - Get network objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_package - Manages package objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_package_facts - Get package objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_publish - All the changes done by this user will be seen by all users only after publish is called.
  • check_point.mgmt.cp_mgmt_put_file - put file on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_run_ips_update - Runs IPS database update. If "package-path" is not provided server will try to get the latest package from the User Center.
  • check_point.mgmt.cp_mgmt_run_script - Executes the script on a given list of targets.
  • check_point.mgmt.cp_mgmt_security_zone - Manages security-zone objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_security_zone_facts - Get security-zone objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_dce_rpc - Manages service-dce-rpc objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_dce_rpc_facts - Get service-dce-rpc objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_group - Manages service-group objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_group_facts - Get service-group objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_icmp - Manages service-icmp objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_icmp6 - Manages service-icmp6 objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_icmp6_facts - Get service-icmp6 objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_icmp_facts - Get service-icmp objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_other - Manages service-other objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_other_facts - Get service-other objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_rpc - Manages service-rpc objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_rpc_facts - Get service-rpc objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_sctp - Manages service-sctp objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_sctp_facts - Get service-sctp objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_tcp - Manages service-tcp objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_tcp_facts - Get service-tcp objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_udp - Manages service-udp objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_service_udp_facts - Get service-udp objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_session_facts - Get session objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_simple_gateway - Manages simple-gateway objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_simple_gateway_facts - Get simple-gateway objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_tag - Manages tag objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_tag_facts - Get tag objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_exception - Manages threat-exception objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_exception_facts - Get threat-exception objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_indicator - Manages threat-indicator objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_indicator_facts - Get threat-indicator objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_layer - Manages threat-layer objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_layer_facts - Get threat-layer objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_profile - Manages threat-profile objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_profile_facts - Get threat-profile objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_protection_override - Edit existing object using object name or uid.
  • check_point.mgmt.cp_mgmt_threat_rule - Manages threat-rule objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_threat_rule_facts - Get threat-rule objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_time - Manages time objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_time_facts - Get time objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_verify_policy - Verifies the policy of the selected package.
  • check_point.mgmt.cp_mgmt_vpn_community_meshed - Manages vpn-community-meshed objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_vpn_community_meshed_facts - Get vpn-community-meshed objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_vpn_community_star - Manages vpn-community-star objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_vpn_community_star_facts - Get vpn-community-star objects facts on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_wildcard - Manages wildcard objects on Check Point over Web Services API
  • check_point.mgmt.cp_mgmt_wildcard_facts - Get wildcard objects facts on Check Point over Web Services API