Connect your own Check Point Security Management Server (or Multi-Domain Server) to manage hosts, networks, groups, TCP/UDP services, access control rules across layers, policy packages, and gatewa...
What this app can do
30 tools registered
Connect CheckpointFree
Connect a Check Point Security Management Server (or Multi-Domain Server) by saving its host and admin credentials, after exchanging them once for a session id.
List ConnectionsFree
List the connected Check Point Management Server(s).
Disconnect CheckpointFree
Disconnect a Check Point Management Server: deletes the saved session credentials. Nothing on the server itself is changed.
List Hosts8 tok
List host objects defined on the connected Check Point Management Server.
Create Host16 tok
Create a new host object on the connected Check Point Management Server. Changes are pending until publish_changes is called.
Update Host16 tok
Update an existing host object's IP address. Changes are pending until publish_changes is called.
Delete Host24 tok
Permanently delete a host object by name. Changes are pending until publish_changes is called.
List Networks8 tok
List network objects defined on the connected Check Point Management Server.
Create Network16 tok
Create a new network object on the connected Check Point Management Server. Changes are pending until publish_changes is called.
Update Network16 tok
Update an existing network object's subnet/mask. Changes are pending until publish_changes is called.
Delete Network24 tok
Permanently delete a network object by name. Changes are pending until publish_changes is called.
List Groups8 tok
List group objects (named collections of hosts/networks) defined on the connected Check Point Management Server.
Create Group16 tok
Create a new group object on the connected Check Point Management Server, optionally with initial members (by name). Changes are pending until publish_changes is called.
List Services8 tok
List TCP/UDP service (port) objects defined on the connected Check Point Management Server.
Create Service16 tok
Create a new TCP or UDP service (port) object on the connected Check Point Management Server. Changes are pending until publish_changes is called.
Delete Service24 tok
Permanently delete a TCP or UDP service object by name. Changes are pending until publish_changes is called.
List Access Layers8 tok
List access control policy layers configured on the connected Check Point Management Server.
List Access Rules8 tok
List access control rules in one policy layer on the connected Check Point Management Server.
Get Access Rule8 tok
Read one access control rule in full by name.
Create Access Rule16 tok
Create a new access control rule in a policy layer. Changes are pending until publish_changes is called.
Update Access Rule16 tok
Update an existing access control rule's action and/or enabled status. Changes are pending until publish_changes is called.
Delete Access Rule24 tok
Permanently delete an access control rule by name. Changes are pending until publish_changes is called.
Publish Changes16 tok
Publish all pending changes in the current session so they become visible to other administrators/API sessions -- Check Point's mandatory staging step, same convention as a Fortinet/PAN-OS commit but scoped to the whole session, not one config unit.
Discard Changes16 tok
Discard all pending (unpublished) changes in the current session, reverting to the last published state.
List Policy Packages8 tok
List policy packages defined on the connected Check Point Management Server.
Install Policy24 tok
Install a published policy package onto its target gateways/clusters -- an asynchronous operation; use get_task_status with the returned task_id to check progress.
Get Task Status8 tok
Read the status of an asynchronous task (e.g. install_policy) by task id.
List Gateways8 tok
List gateway and cluster objects managed by the connected Check Point Management Server.
Bulk Access Rule Action24 tok
Enable or disable several Check Point access rules in one call, by explicit rule names. Continues past per-item failures and reports each outcome, same convention as every other bulk_* tool in the portfolio.
Audit Checkpoint Estate40 tok
Run a read-only health audit across all connected Check Point Management Servers: overly broad access rules (any/any with allow), rules with no logging, and unpublished pending changes.