cp_mgmt_access_layers
Manages ACCESS LAYERS resource module through native controller HTTPAPI with owned sessions
Collection: check_point.mgmt
Full Name: check_point.mgmt.cp_mgmt_access_layers
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manages ACCESS LAYERS resource module through native controller HTTPAPI with owned sessions
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| config | dict | A dictionary of ACCESS LAYERS options | ||
| state | str | The state the configuration should be left in The state I(gathered) will get the module API configuration from the device and transform it into structured data in the format as per the module argspec and the value is returned in the I(gathered) key within the result. |
Example
yaml
- name: Merge Access-layer config
check_point.mgmt.cp_mgmt_access_layers:
state: merged
config:
name: New Layer 1
add_default_rule: true
applications_and_url_filtering: true
content_awareness: true
detect_using_x_forward_for: false
firewall: true
implicit_cleanup_action: drop
mobile_access: true
shared: false
tags:
- test_layer
color: aquamarine
comments: test description
details_level: full
ignore_warnings: false
ignore_errors: false
round_trip: true
# RUN output:
# -----------
# mgmt_access_layers:
# after:
# applications_and_url_filtering: true
# color: aquamarine
# comments: test description
# content_awareness: true
# detect_using_x_forward_for: false
# domain: SMC User
# firewall: true
# icon: ApplicationFirewall/rulebase
# implicit_cleanup_action: drop
# mobile_access: true
# name: New Layer 1
# shared: false
# tags:
# - test_layer
# uid: eb74d7fe-81a6-4e6c-aedb-d2d6599f965e
# before: {}
# Using REPLACED state
# --------------------
- name: Replace Access-layer config
check_point.mgmt.cp_mgmt_access_layers:
state: replaced
config:
name: New Layer 1
add_default_rule: true
applications_and_url_filtering: true
content_awareness: false
detect_using_x_forward_for: false
firewall: true
implicit_cleanup_action: drop
mobile_access: true
shared: true
tags:
- test_layer_replaced
color: cyan
comments: test REPLACE description
details_level: full
ignore_warnings: false
ignore_errors: false
round_trip: true
# RUN output:
# -----------
# mgmt_access_layers:
# after:
# applications_and_url_filtering: true
# color: cyan
# comments: test REPLACE description
# content_awareness: false
# detect_using_x_forward_for: false
# domain: SMC User
# firewall: true
# icon: ApplicationFirewall/sharedrulebase
# implicit_cleanup_action: drop
# mobile_access: true
# name: New Layer 1
# shared: true
# tags:
# - test_layer_replaced
# uid: a4e2bbc1-ec94-4b85-9b00-07ad1279ac12
# before:
# applications_and_url_filtering: true
# color: aquamarine
# comments: test description
# content_awareness: true
# detect_using_x_forward_for: false
# firewall: true
# icon: ApplicationFirewall/rulebase
# implicit_cleanup_action: drop
# mobile_access: true
# name: New Layer 1
# shared: false
# tags:
# - test_layer
# Using GATHERED state
# --------------------
# 1. With Round Trip set to True
- name: Gather Access-layers config by Name
check_point.mgmt.cp_mgmt_access_layers:
state: gathered
config:
name: New Layer 1
round_trip: true
# RUN output:
# -----------
# gathered:
# applications_and_url_filtering: true
# color: aquamarine
# comments: test description
# content_awareness: true
# detect_using_x_forward_for: false
# domain: SMC User
# firewall: true
# icon: ApplicationFirewall/rulebase
# implicit_cleanup_action: drop
# mobile_access: true
# name: New Layer 1
# shared: false
# tags:
# - test_layer
# uid: eb74d7fe-81a6-4e6c-aedb-d2d6599f965e
# 2. With Round Trip set to False which is the default behaviour
- name: Gather Access-layers config by Name
check_point.mgmt.cp_mgmt_access_layers:
state: gathered
config:
name: New Layer 1
# RUN output:
# -----------
# gathered:
# applications_and_url_filtering: true
# color: turquoise
# comments: test description
# content_awareness: true
# detect_using_x_forward_for: false
# domain:
# domain-type: domain
# name: SMC User
# uid: 41e821a0-3720-11e3-aa6e-0800200c9fde
# firewall: true
# icon: ApplicationFirewall/rulebase
# implicit_cleanup_action: drop
# meta-info:
# creation-time:
# iso-8601: 2022-11-21T07:34+0000
# posix: 1669016073937
# creator: admin
# last-modifier: admin
# last-modify-time:
# iso-8601: 2022-11-21T07:34+0000
# posix: 1669016074765
# lock: unlocked
# validation-state: ok
# mobile_access: true
# name: New Layer 1
# read-only: false
# shared: false
# tags:
# - domain:
# domain-type: domain
# name: SMC User
# uid: 41e821a0-3720-11e3-aa6e-0800200c9fde
# name: test_layer
# type: tag
# uid: 22cc8b0d-984f-47de-b1f6-276b3377eb0c
# type: access-layer
# uid: a54e47d3-22fc-4aff-90d9-f644aa4a1522
# 3. Gather ALL threat-layer config with DESC order filter
- name: To Gather ALL access-layer and order by Name
check_point.mgmt.cp_mgmt_access_layers:
config:
order:
- DESC: name
state: gathered
# RUN output:
# -----------
# gathered:
# - domain:
# domain-type: domain
# name: SMC User
# uid: 41e821a0-3720-11e3-aa6e-0800200c9fde
# name: New Layer 1
# type: access-layer
# uid: a54e47d3-22fc-4aff-90d9-f644aa4a1522
# - domain:
# domain-type: domain
# name: SMC User
# uid: 41e821a0-3720-11e3-aa6e-0800200c9fde
# name: Network
# type: access-layer
# uid: 63b7fe60-76d2-4287-bca5-21af87337b0a
# Using DELETED state
# -------------------
- name: Delete Access-layer config by Name
check_point.mgmt.cp_mgmt_access_layers:
state: deleted
config:
name: New Layer 1
# RUN output:
# -----------
# mgmt_access_layers:
# after: {}
# before:
# applications_and_url_filtering: true
# color: cyan
# comments: test REPLACE description
# content_awareness: false
# detect_using_x_forward_for: false
# domain: SMC User
# firewall: true
# icon: ApplicationFirewall/sharedrulebase
# implicit_cleanup_action: drop
# mobile_access: true
# name: New Layer 1
# shared: true
# tags:
# - test_layer_replaced
# uid: a4e2bbc1-ec94-4b85-9b00-07ad1279ac12