PARALLAX

cp_mgmt_threat_protection_override

Edit existing object using object name or uid through native controller HTTPAPI with owned sessions

Collection: check_point.mgmt

Full Name: check_point.mgmt.cp_mgmt_threat_protection_override

Controller module — runs on the local controller, not on remote hosts.

Synopsis

Edit existing object using object name or uid through native controller HTTPAPI with owned sessions

Parameters

NameTypeRequiredDefaultDescription
auto_publish_sessionboolfalsePublish this owned session explicitly after the operation; default false.
commentsstrProtection comments.
details_levelstrThe level of detail for some of the fields in the response can vary from showing only the UID value of the object to a fully detailed representation of the object.
follow_upboolTag the protection with pre-defined follow-up flag.
namestrObject name.
overrideslistOverrides per profile for this protection
Note, Remove override for Core protections removes only the action’s override. Remove override for Threat Cloud protections removes the action, track and packet captures.
versionstrManagement API version path; omitted uses the default API version.
wait_for_taskbooltrueWait for returned asynchronous task identifiers; default true.
wait_for_task_timeoutint30Polling deadline in minutes; default 30, negative values use 30, maximum 1440.

Example

yaml
- name: threat_protection_override
  check_point.mgmt.cp_mgmt_threat_protection_override:
    name: FTP Commands
    overrides:
      - action: Inactive
        capture_packets: true
        profile: New Profile 1
        track: none
Search
    ↑ ↓ move↵ openesc close