cp_mgmt_set_app_control_advanced_settings

Edit Application Control & URL Filtering Blades' Settings through native controller HTTPAPI with owned sessions

Collection: check_point.mgmt

Full Name: check_point.mgmt.cp_mgmt_set_app_control_advanced_settings

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Edit Application Control & URL Filtering Blades’ Settings through native controller HTTPAPI with owned sessions

Parameters

Name	Type	Default	Description
auto_publish_session	bool	`false`	Publish this owned session explicitly after the operation; default false.
block_request_when_web_service_is_unavailable	bool		Block requests when the web service is unavailable. When selected, requests are blocked when there is no connectivity to the Check Point Online Web Service. When cleared, requests are allowed when there is no connectivity. This property is not available in the Global domain of an MDS machine.
categorize_social_network_widgets	bool		When selected, the Security Gateway connects to the Check Point Online Web Service to identify social networking widgets that it does not recognize. When cleared or there is no connectivity between the Security Gateway and the Check Point Online Web, the unknown widget is treated as Web Browsing traffic. This property is not available in the Global domain of an MDS machine.
custom_categorization_settings	dict		Website categorization mode - select the mode that is used for website categorization. This property is not available in the Global domain of an MDS machine.
domain_level_permission	bool		Allows the editing of applications, categories, and services. This property is used only in the Global Domain of an MDS machine.
enable_web_browsing	bool		If you do not enable URL Filtering on the Security Gateway, you can use a generic Web browser application called Web Browsing in the rule. This application includes all HTTP traffic that is not a defined application Application and URL Filtering assigns Web Browsing as the default application for all HTTP traffic that does not match an application in the Application and URL Filtering Database. This property is not available in the Global domain of an MDS machine.
httpi_non_standard_ports	bool		Enable HTTP inspection on non standard ports for application and URL filtering. This property is not available in the Global domain of an MDS machine.
internal_error_fail_mode	str		In case of internal system error, allow or block all connections. This property is not available in the Global domain of an MDS machine.
match_application_on_any_port	bool		Match Web application on ‘Any’ port when used in Block rule - By default this is set to true. and so applications are matched on all services when used in a Block rule.
url_filtering_settings	dict		In this section user can enable URL Filtering features. This property is not available in the Global domain of an MDS machine.
version	str		Management API version path; omitted uses the default API version.
wait_for_task	bool	`true`	Wait for returned asynchronous task identifiers; default true.
wait_for_task_timeout	int	`30`	Polling deadline in minutes; default 30, negative values use 30, maximum 1440.
web_browsing_services	list		Web browsing services are the services that match a Web-based custom Application/Site.
website_categorization_mode	str		Hold - Requests are blocked until categorization is complete. Background - Requests are allowed until categorization is complete. Custom - configure different settings depending on the service. Lets you set different modes for URL Filtering and Social Networking Widgets. This property is not available in the Global domain of an MDS machine.

Example

yaml

- name: set-app-control-advanced-settings
  check_point.mgmt.cp_mgmt_set_app_control_advanced_settings:
    block_request_when_web_service_is_unavailable: 'true'
    categorize_social_network_widgets: 'true'
    custom_categorization_settings:
      social_network_widgets_mode: background
      url_filtering_mode: hold
    enable_web_browsing: 'true'
    httpi_non_standard_ports: 'true'
    internal_error_fail_mode: block connections
    match_application_on_any_port: 'true'
    url_filtering_settings:
      categorize_cached_and_translated_pages: 'false'
      categorize_https_websites: 'true'
      enforce_safe_search: 'true'
    web_browsing_services:
      - AH
    website_categorization_mode: custom