Skip to main content

Check Point Firewall

Details
Content
Version History

Manage Check Point firewall via API

PUBLISHER

Cortex XSOAR

INFO

Certification	Certified	Read more
Supported By	Cortex XSOAR
Created	September 23, 2020
Last Release	September 26, 2021

WORKS WITH THE FOLLOWING INTEGRATIONS:

Check Point Firewall (Deprecated)

CheckPoint Firewall v2

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

Integrations

Name	Description
Check Point Firewall (Deprecated)	Deprecated. Use the Check Point Firewall v2 integration instead. Manage Check Point firewall via API
CheckPoint Firewall v2	Use this integration to read information and send commands to the Check Point Firewall server.

Automations

Name	Description
CheckpointFWCreateBackup	Connect to a Check Point firewall appliance using SSH and trigger a task to create a configuration backup of the device. The user account being used to access the device must be set to use the SSH shell and not the built-in Check Point CLI. For more information, consult the CheckPoint documentation.
CheckpointFWBackupStatus	Connect to a CheckPoint firewall appliance using SSH and retrieve the status for backup tasks. The user account being used to access the device must be set to use the SSH shell and not the built-in CheckPoint CLI. For more information, consult the CheckPoint documentation.
CheckPointDownloadBackup	Downloads the Check Point policy backup to the Cortex XSOAR War Room.

Playbooks

Name	Description
Checkpoint - Block IP - Custom Block Rule	This playbook blocks IP addresses using Custom Block Rules in Checkpoint Firewall. The playbook receives malicious IP addresses as inputs, creates a custom bi-directional rule to block them, and publish the configuration.
Checkpoint - Block URL	This playbook blocks URLs using Checkpoint Firewall through Custom URL Categories. The playbook checks whether the input URL category already exists, and if the URLs are a part of this category. Otherwise, it will create the category, block the URLs, and publish the configuration.
Checkpoint - Publish&Install configuration	Publish the Checkpoint Firewall configuration and install policy over all the gateways that are available.

2.1.4 - 7789574 (September 26, 2021)

Scripts

CheckpointFWBackupStatus

Updated the Docker image to: demisto/python:2.7.18.24066.

CheckpointFWCreateBackup

Updated the Docker image to: demisto/python:2.7.18.24066.

2.1.3 - 7740378 (September 23, 2021)

Scripts

CheckPointDownloadBackup

Updated the Docker image to: demisto/python3:3.9.7.24076.

2.1.2 - 7640590 (September 16, 2021)

Integrations

CheckPoint Firewall v2

Updated the Docker image to: demisto/python3:3.9.7.24076.

2.1.1 - 7440142 (September 3, 2021)

Integrations

CheckPoint Firewall v2

Fixed an issue where logout would be performed after every command execution.
Fixed an issue where provided server values starting with https:// would not work.
Updated the Docker image to: demisto/python3:3.9.6.24019.

2.1.0 - 414184 (August 20, 2021)

Integrations

CheckPoint Firewall v2

Fixed issues when logging in and using the integration with proxy connection.

2.0.12 - 413482 (August 19, 2021)

Playbooks

Checkpoint - Block IP - Custom Block Rule

Fixed an issue where the playbook would run only with a Checkpoint Firewall V1 instance.

Checkpoint - Publish&Install configuration

Fixed an issue where the playbook would run only with a Checkpoint Firewall V1 instance.

Checkpoint - Block URL

Fixed an issue where the playbook would run only with a Checkpoint Firewall V1 instance.

2.0.11 - 398245 (July 15, 2021)

Scripts

CheckpointFWCreateBackup

Updated the Docker image to: demisto/python:2.7.18.20958.

CheckPointDownloadBackup

Updated the Docker image to: demisto/python3:3.9.5.22665.

CheckpointFWBackupStatus

Updated the Docker image to: demisto/python:2.7.18.20958.

2.0.10 - R397182 (July 13, 2021)

Integrations

CheckPoint Firewall v2

Improved the error handling in test-module
Fixed an issue where the checkpoint-show-objects command failed because of changes in the api version.

2.0.9 - 384775 (June 14, 2021)

Integrations

CheckPoint Firewall v2

Upgraded the Docker image to: demisto/python3:3.9.5.21272.

2.0.8 - 370262 (May 30, 2021)

Integrations

CheckPoint Firewall v2

Added the ignore_warnings and ignore_errors arguments to the checkpoint-host-delete and checkpoint-host-add commands.
Added handling for the newly added IPv6 field.
Updated the Docker image to: demisto/python3:3.8.6.14516.

2.0.7 - R295871 (March 4, 2021)

Integrations

Check Point Firewall v2

Fixed display names for various integration parameters.
Upgraded the Docker image to: demisto/python3:3.9.1.15759.

2.0.6 - R264879 (January 27, 2021)

Integrations

Check Point Firewall v2

Updated checkpoint-login-and-get-session-id to add optional domain parameter allowingn MDS login
Upgraded the Docker image to demisto/python3:3.8.6.14516

2.0.5 - 208808 (December 2, 2020)

Integrations

Check Point Firewall v2

Breaking Change: Updated the checkpoint-package-list command outputs. Changed output prefix from: CheckPoint.Packages to CheckPoint.Package.
Upgraded the Docker image to demisto/python3:3.8.6.13358.

2.0.4 - 207944 (December 2, 2020)

Integrations

Check Point Firewall v2

Fixed an issue in the checkpoint-host-delete command in which the identifier argument was not processed properly.

2.0.3 - R180529 (November 9, 2020)

Integrations

Check Point Firewall v2

Added the checkpoint-package-list command.

2.0.2 - 156978 (October 22, 2020)

Integrations

Check Point Firewall v2

Documentation improvements.

2.0.1 - 148197 (October 15, 2020)

Integrations

Check Point Firewall (Deprecated)

Deprecated. Use the Check Point Firewall v2 integration instead.

Check Point Firewall v2

Integration display name updated.

2.0.0 - 133404 (October 4, 2020)

Integrations

New: CheckPointFirewall v2

Read information and to send commands to the Check Point Firewall server.

Playbooks

Checkpoint - Block IP - Custom Block Rule
- Blocks IP addresses using custom block rules in Checkpoint firewall.
Checkpoint - Block URL
- Blocks URLs using Checkpoint firewall through custom URL categories.
Checkpoint - Publish&Install configuration
- Publish the Checkpoint Firewall configuration and install policy over all the gateways that are available.

Scripts

CheckpointFWCreateBackup

Connects to a Checkpoint firewall appliance using SSH and trigger a task to create a configuration backup of the device. The user account that accesses the device must be setup to use the SSH shell and not the built in Checkpoint CLI. Consult the Checkpoint documentation for instructions on how to do this.

CheckpointFWBackupStatus

Connects a Checkpoint firewall appliance using SSH and retrieves the status of backup tasks. The user account that accesses the device must be setup to use the SSH shell and not the built in Checkpoint CLI. Consult the Checkpoint documentation for instructions on how to do this.

CheckPointDownloadBackup

Download CheckPoint policy backup to the Cortex XSOAR War Room.

1.1.0 - R124496 (September 23, 2020)