Skip to main content

Check Point Firewall

Details
Content
Dependencies
Version History
Download With Dependencies

Manage Check Point firewall via API

PUBLISHER

Cortex XSOAR

INFO

Certification	Certified	Read more
Supported By	Cortex XSOAR
Created	September 23, 2020
Last Release	January 10, 2022

WORKS WITH THE FOLLOWING INTEGRATIONS:

Check Point Firewall (Deprecated)

CheckPoint Firewall v2

RemoteAccess v2

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Playbooks

Name	Description
Checkpoint - Block URL	This playbook blocks URLs using Check Point Firewall through Custom URL Categories. The playbook checks whether the input URL category already exists, and if the URLs are a part of this category. Otherwise, it creates the category, blocks the URLs, and publishes the configuration.
Checkpoint - Block IP - Custom Block Rule	This playbook blocks IP addresses using Custom Block Rules in Check Point Firewall. The playbook receives malicious IP addresses as inputs, creates a custom bi-directional rule to block them, and publishes the configuration.
Checkpoint - Publish&Install configuration	Publish the Check Point Firewall configuration and install policy on all available gateways.
Checkpoint - Block IP - Append Group	The playbook receives malicious IP addresses as inputs, checks if the object group exists (if not, the object group is created), and appends the related IPs to that object. If you have not assigned the appended group to a rule in your firewall policy, you can use `rule_name` and the playbook creates a new rule.

Automations

Name	Description
CheckPointDownloadBackup	Downloads the Check Point policy backup to the Cortex XSOAR War Room.
CheckpointFWBackupStatus	Connect to a CheckPoint firewall appliance using SSH and retrieve the status for backup tasks. The user account being used to access the device must be set to use the SSH shell and not the built-in CheckPoint CLI. For more information, consult the CheckPoint documentation.
CheckpointFWCreateBackup	Connect to a Check Point firewall appliance using SSH and trigger a task to create a configuration backup of the device. The user account being used to access the device must be set to use the SSH shell and not the built-in Check Point CLI. For more information, consult the CheckPoint documentation.

Integrations

Name	Description
CheckPoint Firewall v2	Use this integration to read information and send commands to the Check Point Firewall server.
Check Point Firewall (Deprecated)	Deprecated. Use the Check Point Firewall v2 integration instead. Manage Check Point firewall via API

Required Content Packs (8)

Pack Name	Pack By
CommonPlaybooks	By: Cortex XSOAR
RemoteAccess	By: Cortex XSOAR
Base	By: Cortex XSOAR
CommonScripts	By: Cortex XSOAR
rasterize	By: Cortex XSOAR
FiltersAndTransformers	By: Cortex XSOAR
CommonTypes	By: Cortex XSOAR
DemistoRESTAPI	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

2.2.0 - 2233034 (January 10, 2022)

Playbooks

New: Checkpoint - Block IP - Append Group

This playbook uses an object group to block IPs.
The playbook receives malicious IP addresses as inputs, checks if the object group exists (if not, the object group is created), and appends the related IPs to that object.
If you have not assigned the appended group to a rule in your firewall policy, you can use rule_name and the playbook creates a new rule.

Checkpoint - Block URL

Fixed issues and bugs
Reordered tasks to avoid duplicates
Added new input "application_site_name"
Changed the created rule name from "Demisto" to "XSOAR"

Checkpoint - Publish&Install configuration

Fixed issues and bugs
Reordered tasks to avoid duplicates

Checkpoint - Block IP - Custom Block Rule

Fixed issues and bugs
Reordered tasks to avoid duplicates
Changed the created rule name from "Demisto" to "XSOAR"

2.1.10 - 2204013 (January 4, 2022)

Integrations

CheckPoint Firewall v2

Fixed outputs in commands:
checkpoint-show-objects
checkpoint-group-get
checkpoint-access-rule-list

2.1.9 - 2194409 (January 2, 2022)

Integrations

CheckPoint Firewall v2

Added new commands:
- checkpoint-add-objects-batch.
- checkpoint-delete-objects-batch.
Added the action argument in the checkpoint-group-update command.
Fixed an issue where checkpoint-application-site-update added the URLs list instead of removing it.
Updated the Docker image to: demisto/python3:3.9.7.24076.

2.1.8 - 2179441 (December 29, 2021)

Scripts

CheckPointDownloadBackup

Updated the Docker image to: demisto/python3:3.9.8.24399.

2.1.7 - 2150739 (December 22, 2021)

Playbooks

Checkpoint - Publish&Install configuration

Updated the task to Checkpoint logout to use CheckPointFirewall_v2 integration.

2.1.6 - R2146019 (December 21, 2021)

Scripts

CheckpointFWBackupStatus

Updated the Docker image to: demisto/python:2.7.18.24398.

CheckpointFWCreateBackup

Updated the Docker image to: demisto/python:2.7.18.24398.

2.1.5 - R2044864 (December 2, 2021)

Integrations

CheckPoint Firewall v2

Updated the Docker image to: demisto/python3:3.9.8.24399.

2.1.4 - 7789574 (September 26, 2021)

Scripts

CheckpointFWBackupStatus

Updated the Docker image to: demisto/python:2.7.18.24066.

CheckpointFWCreateBackup

Updated the Docker image to: demisto/python:2.7.18.24066.

2.1.3 - 7740378 (September 23, 2021)

Scripts

CheckPointDownloadBackup

Updated the Docker image to: demisto/python3:3.9.7.24076.

2.1.2 - 7640590 (September 16, 2021)

Integrations

CheckPoint Firewall v2

Updated the Docker image to: demisto/python3:3.9.7.24076.

2.1.1 - 7440142 (September 3, 2021)

Integrations

CheckPoint Firewall v2

Fixed an issue where logout would be performed after every command execution.
Fixed an issue where provided server values starting with https:// would not work.
Updated the Docker image to: demisto/python3:3.9.6.24019.

2.1.0 - 414184 (August 20, 2021)

Integrations

CheckPoint Firewall v2

Fixed issues when logging in and using the integration with proxy connection.

2.0.12 - 413482 (August 19, 2021)

Playbooks

Checkpoint - Block IP - Custom Block Rule

Fixed an issue where the playbook would run only with a Checkpoint Firewall V1 instance.

Checkpoint - Publish&Install configuration

Fixed an issue where the playbook would run only with a Checkpoint Firewall V1 instance.

Checkpoint - Block URL

Fixed an issue where the playbook would run only with a Checkpoint Firewall V1 instance.

2.0.11 - 398245 (July 15, 2021)

Scripts

CheckpointFWCreateBackup

Updated the Docker image to: demisto/python:2.7.18.20958.

CheckPointDownloadBackup

Updated the Docker image to: demisto/python3:3.9.5.22665.

CheckpointFWBackupStatus

Updated the Docker image to: demisto/python:2.7.18.20958.

2.0.10 - R397182 (July 13, 2021)

Integrations

CheckPoint Firewall v2

Improved the error handling in test-module
Fixed an issue where the checkpoint-show-objects command failed because of changes in the api version.

2.0.9 - 384775 (June 14, 2021)

Integrations

CheckPoint Firewall v2

Upgraded the Docker image to: demisto/python3:3.9.5.21272.

2.0.8 - 370262 (May 30, 2021)

Integrations

CheckPoint Firewall v2

Added the ignore_warnings and ignore_errors arguments to the checkpoint-host-delete and checkpoint-host-add commands.
Added handling for the newly added IPv6 field.
Updated the Docker image to: demisto/python3:3.8.6.14516.

2.0.7 - R295871 (March 4, 2021)

Integrations

Check Point Firewall v2

Fixed display names for various integration parameters.
Upgraded the Docker image to: demisto/python3:3.9.1.15759.

2.0.6 - R264879 (January 27, 2021)

Integrations

Check Point Firewall v2

Updated checkpoint-login-and-get-session-id to add optional domain parameter allowingn MDS login
Upgraded the Docker image to demisto/python3:3.8.6.14516

2.0.5 - 208808 (December 2, 2020)

Integrations

Check Point Firewall v2

Breaking Change: Updated the checkpoint-package-list command outputs. Changed output prefix from: CheckPoint.Packages to CheckPoint.Package.
Upgraded the Docker image to demisto/python3:3.8.6.13358.

2.0.4 - 207944 (December 2, 2020)

Integrations

Check Point Firewall v2

Fixed an issue in the checkpoint-host-delete command in which the identifier argument was not processed properly.

2.0.3 - R180529 (November 9, 2020)

Integrations

Check Point Firewall v2

Added the checkpoint-package-list command.

2.0.2 - 156978 (October 22, 2020)

Integrations

Check Point Firewall v2

Documentation improvements.

2.0.1 - 148197 (October 15, 2020)

Integrations

Check Point Firewall (Deprecated)

Deprecated. Use the Check Point Firewall v2 integration instead.

Check Point Firewall v2

Integration display name updated.

2.0.0 - 133404 (October 4, 2020)

Integrations

New: CheckPointFirewall v2

Read information and to send commands to the Check Point Firewall server.

Playbooks

Checkpoint - Block IP - Custom Block Rule
- Blocks IP addresses using custom block rules in Checkpoint firewall.
Checkpoint - Block URL
- Blocks URLs using Checkpoint firewall through custom URL categories.
Checkpoint - Publish&Install configuration
- Publish the Checkpoint Firewall configuration and install policy over all the gateways that are available.

Scripts

CheckpointFWCreateBackup

Connects to a Checkpoint firewall appliance using SSH and trigger a task to create a configuration backup of the device. The user account that accesses the device must be setup to use the SSH shell and not the built in Checkpoint CLI. Consult the Checkpoint documentation for instructions on how to do this.

CheckpointFWBackupStatus

Connects a Checkpoint firewall appliance using SSH and retrieves the status of backup tasks. The user account that accesses the device must be setup to use the SSH shell and not the built in Checkpoint CLI. Consult the Checkpoint documentation for instructions on how to do this.

CheckPointDownloadBackup

Download CheckPoint policy backup to the Cortex XSOAR War Room.

1.1.0 - R124496 (September 23, 2020)