cp_mgmt_threat_layers
Manages THREAT LAYERS resource module through native controller HTTPAPI with owned sessions
Collection: check_point.mgmt
Full Name: check_point.mgmt.cp_mgmt_threat_layers
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manages THREAT LAYERS resource module through native controller HTTPAPI with owned sessions
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| config | dict | A dictionary of THREAT LAYERS options | ||
| state | str | The state the configuration should be left in The state I(gathered) will get the module API configuration from the device and transform it into structured data in the format as per the module argspec and the value is returned in the I(gathered) key within the result. |
Example
yaml
- name: To Add Merge Threat-Layers config
check_point.mgmt.cp_mgmt_threat_layers:
state: merged
config:
name: New Layer 1
add_default_rule: true
tags:
- test_threat_layer
color: turquoise
comments: test description
ignore_warnings: false
ignore_errors: false
round_trip: true
# RUN output:
# -----------
# mgmt_threat_layers:
# after:
# color: turquoise
# comments: test description
# icon: ApplicationFirewall/rulebase
# ips-layer: false
# name: New Layer 1
# tags:
# - test_threat_layer
# before: {}
# Using REPLACED state
# --------------------
- name: Replace Threat-layer config
check_point.mgmt.cp_mgmt_threat_layers:
state: replaced
config:
name: New Layer 1
add_default_rule: true
tags:
- test_threat_layer_replaced
color: cyan
comments: REPLACED description
ignore_warnings: false
ignore_errors: false
round_trip: true
# RUN output:
# -----------
# mgmt_threat_layers:
# after:
# color: cyan
# comments: REPLACED description
# icon: ApplicationFirewall/rulebase
# ips-layer: false
# name: New Layer 1
# tags:
# - test_threat_layer_replaced
# before:
# color: turquoise
# comments: test description
# icon: ApplicationFirewall/rulebase
# ips-layer: false
# name: New Layer 1
# tags:
# - test_threat_layer
# Using GATHERED state
# --------------------
# 1. With Round Trip set to True
- name: To Gather threat-layer by Name
check_point.mgmt.cp_mgmt_threat_layers:
config:
name: New Layer 1
round_trip: true
state: gathered
# RUN output:
# -----------
# gathered:
# color: turquoise
# comments: test description
# domain: SMC User
# icon: ApplicationFirewall/rulebase
# ips-layer: false
# name: New Layer 1
# read-only: false
# tags:
# - test_threat_layer
# uid: 4dc060e2-0ed6-48c5-9b0f-3d2fbeb552ba
# 2. With Round Trip set to False which is the default behaviour
- name: To Gather threat-layer by Name
check_point.mgmt.cp_mgmt_threat_layers:
config:
name: New Layer 1
state: gathered
# RUN output:
# -----------
# gathered:
# color: turquoise
# comments: test description
# domain:
# domain-type: domain
# name: SMC User
# uid: 41e821a0-3720-11e3-aa6e-0800200c9fde
# icon: ApplicationFirewall/rulebase
# ips-layer: false
# meta-info:
# creation-time:
# iso-8601: 2022-11-21T07:30+0000
# posix: 1669015820472
# creator: admin
# last-modifier: admin
# last-modify-time:
# iso-8601: 2022-11-21T07:30+0000
# posix: 1669015821024
# lock: unlocked
# validation-state: ok
# name: New Layer 1
# read-only: false
# tags:
# - domain:
# domain-type: domain
# name: SMC User
# uid: 41e821a0-3720-11e3-aa6e-0800200c9fde
# name: test_threat_layer
# type: tag
# uid: 59f23149-ed5e-439f-9012-0cdf222a1c97
# type: threat-layer
# uid: ca196a80-fdc4-4e7b-8b25-e3eed125a25f
# 3. Gather ALL threat-layer config with DESC order filter
- name: To Gather ALL threat-layer and order by Name
check_point.mgmt.cp_mgmt_threat_layers:
config:
order:
- DESC: name
state: gathered
# RUN output:
# -----------
# gathered:
# - color: black
# comments: ''
# domain:
# domain-type: domain
# name: SMC User
# uid: 41e821a0-3720-11e3-aa6e-0800200c9fde
# icon: ApplicationFirewall/sharedrulebase
# ips-layer: true
# meta-info:
# creation-time:
# iso-8601: 2020-01-20T09:43+0000
# posix: 1579513387322
# creator: System
# last-modifier: System
# last-modify-time:
# iso-8601: 2020-01-20T09:43+0000
# posix: 1579513387377
# lock: unlocked
# validation-state: ok
# name: IPS
# read-only: false
# tags: []
# type: threat-layer
# uid: 90678011-1bcb-4296-8154-fa58c23ecf3b
# - color: black
# comments: ''
# domain:
# domain-type: domain
# name: SMC User
# uid: 41e821a0-3720-11e3-aa6e-0800200c9fde
# icon: ApplicationFirewall/rulebase
# ips-layer: false
# meta-info:
# creation-time:
# iso-8601: 2020-01-20T09:43+0000
# posix: 1579513386848
# creator: System
# last-modifier: System
# last-modify-time:
# iso-8601: 2020-01-20T09:43+0000
# posix: 1579513387396
# lock: unlocked
# validation-state: ok
# name: Standard Threat Prevention
# read-only: false
# tags: []
# type: threat-layer
# uid: 0dbe7c44-6d3f-4f28-8f2b-0e6790e57f8a
# Using DELETED state
# -------------------
- name: Delete Threat-layer config by Name and Layer
check_point.mgmt.cp_mgmt_threat_layers:
config:
name: First threat layer
round_trip: true
state: deleted
# RUN output:
# -----------
# mgmt_threat_layers:
# after: {}
# before:
# action: Optimized
# comments: This is the THREAT RULE
# destination:
# - Any
# destination_negate: false
# enabled: true
# install_on:
# - Policy Targets
# layer: 90678011-1bcb-4296-8154-fa58c23ecf3b
# name: First threat layer
# protected_scope:
# - All_Internet
# protected_scope_negate: false
# service:
# - Any
# service_negate: false
# source:
# - Any
# source_negate: false
# track: None
# track_settings:
# packet_capture: true