cp_mgmt_set_global_properties

Edit Global Properties through native controller HTTPAPI with owned sessions

Collection: check_point.mgmt

Full Name: check_point.mgmt.cp_mgmt_set_global_properties

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Edit Global Properties through native controller HTTPAPI with owned sessions

Parameters

Name	Type	Default	Description
advanced_conf	dict		Configure advanced global attributes. It’s highly recommended to consult with Check Point’s Technical Support before modifying these values.
allow_remote_registration_of_opsec_products	bool		After installing an OPSEC application, the remote administration (RA) utility enables an OPSEC product to finish registering itself without having to access the SmartConsole. If set to true, any host including the application host can run the utility. Otherwise, the RA utility can only be run from the Security Management host.
authentication	dict		Define Authentication properties that are common to all users and to the various ways that the Check Point Security Gateway asks for passwords (User, Client and Session Authentication).
auto_publish_session	bool	`false`	Publish the current session if changes have been performed after task completes.
carrier_security	dict		Specify system-wide properties. Select GTP intra tunnel inspection options, including anti-spoofing; tracking and logging options, and integrity tests.
connect_control	dict		Configure settings that relate to ConnectControl server load balancing.
data_access_control	dict		Configure automatic downloads from Check Point and anonymously share product data. Options selected here apply to all Security Gateways, Clusters and VSX devices managed by this management server.
details_level	str		The level of detail for some of the fields in the response can vary from showing only the UID value of the object to a fully detailed representation of the object.
domains_to_process	list		Indicates which domains to process the commands on. It cannot be used with the details-level full, must be run from the System Domain only and with ignore-warnings true. Valid values are, CURRENT_DOMAIN, ALL_DOMAINS_ON_THIS_SERVER.
firewall	dict		Add implied rules to or remove them from the Firewall Rule Base. Determine the position of the implied rules in the Rule Base, and whether or not to log them.
hit_count	dict		Enable the Hit Count feature that tracks the number of connections that each rule matches.
ignore_errors	bool		Apply changes ignoring errors. You won’t be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
ignore_warnings	bool		Apply changes ignoring warnings.
log_and_alert	dict		Define system-wide logging and alerting parameters.
nat	dict		Configure settings that apply to all NAT connections.
non_unique_ip_address_ranges	list		Specify Non Unique IP Address Ranges.
num_spoofing_errs_that_trigger_brute_force	int		Indicates how many incorrectly signed packets will be tolerated before assuming that there is an attack on the packet tagging and revoking the client’s key.
proxy	dict		Select whether a proxy server is used when servers, gateways, or clients need to access the internet for certain Check Point features and set the default proxy server that will be used.
qos	dict		Define the general parameters of Quality of Service (QoS) and apply them to QoS rules.
remote_access	dict		Configure Remote Access properties.
stateful_inspection	dict		Adjust Stateful Inspection parameters.
user_accounts	dict		Set the expiration for a user account and configure “about to expire” warnings.
user_authority	dict		Decide whether to display and access the WebAccess rule base. This policy defines which users (that is, which Windows Domains) have access to the internal sites of the organization.
user_check	dict		Set a language for the UserCheck message if the language setting in the user’s browser cannot be determined.
user_directory	dict		User can enable LDAP User Directory as well as specify global parameters for LDAP. If LDAP User Directory is enabled, this means that users are managed on an external LDAP server and not on the internal Check Point Security Gateway users databases.
version	str		Management API version path; omitted uses the default API version.
vpn	dict		Configure settings relevant to VPN.
wait_for_task	bool	`true`	Wait for returned asynchronous task identifiers; default true.
wait_for_task_timeout	int	`30`	Polling deadline in minutes; default 30, negative values use 30, maximum 1440.

Example

yaml

- name: set-global-properties
  check_point.mgmt.cp_mgmt_set_global_properties:
    firewall:
      security_server:
        http_servers:
          - host: host name of server
            logical_name: unique logical name
            port: 8080
            reauthentication: post request