APIs áá»á¬ážááŸáá·áº API áá¯á¶á·ááŒááºááŸá¯áá»á¬ážááᯠááœá²ááŒááºážá
áááºááŒá¬ááẠá¡ááœáá·áºá¡áááºážáá»á¬áž áá±á«áºáá±á«ááºáá¬áá±á¬á¡áá« áááá¯ááááºáá¯ááºááŸáá·áº ááœá²áá¯á¶ážáá±á¬á¡áá«ááœáẠAPI áá»á¬ážááŸáá·áº á¡ááŒááºá¡ááŸááºá¡áá»áá¯ážáááºáá±á¬ááºááŸá¯á á
áœááºážá¡á¬ážááᯠáá¯ááºáá±á¬áºááŒááá«áááºá ááá¯á·áá±á¬áº áááááá¬ážáááá±ážáá±á Python Software Development Kit (áá±á¬ááºááœáẠPython SDK áᯠáááºááœáŸááºážáááº) Point Management API ááᯠá
á
áºáá±ážáá«ááá«áá±ááá·áº á¡ááá¬ážáá²á áááºážááẠdeveloper áá»á¬ážááŸáá·áº automation áá«ááá¬á¡áá¯ážáá»á¬ážá¡ááœáẠááááá¯ááá¯ááœááºáá°á
á±áááºá Python ááẠáááŒá¬áá±ážáá®á áá±áááºážá
á¬ážáá¬áá²á·ááŒá®áž ááœááºáááºááᯠááŒáá·áºá
áœááºááŒá®áž áááºáá¡ááºá¹áá«áááºáá»á¬ážááᯠááŒááºáááºáá¯á¶ážáááºááẠáá¯á¶ážááŒááºáá²á·áááºá . á€áá±á¬ááºážáá«ážááẠHabr á á¡ááŒá¬ážáá±á¬ááºážáá«ážá¡ááœáẠá¡ááœááºáá±á¬ááºážááœááºáá±á¬ ááŒáá·áºá
áœááºáá»ááºáá
áºáá¯ááŒá
áºáááºá . Python SDK ááá¯á¡áá¯á¶ážááŒá¯á scripts áá»á¬ážááᯠáááºááá¯á·áá±ážááááºááᯠá
ááºážá
á¬ážááŒá®áž áá¬ážááŸááºáž 1.6 ááœáẠManagement API á áá¯ááºáá±á¬ááºááá¯ááºá
áœááºážá¡áá
Ạ(R80.40 ááŸá
áááºá áá¶á·ááá¯ážáá±ážáááº) ááœáẠááá¯ááá¯á¡áá±ážá
áááºáá»áá±áá«áááºá áá±á¬ááºážáá«ážááᯠáá¬ážáááºáááºá API ááŸáá·áº Python ááŸáá·áº áá¯ááºáá±á¬ááºááŒááºážááá¯ááºáᬠá¡ááŒá±áᶠá¡ááááᬠááá¯á¡ááºáá«áááºá
Check Point ááẠAPI áá»á¬ážááᯠáááºááŒáœá
áœá¬ áá±á¬áºáá±á¬ááºáá±ááŒá®áž áá±á¬áá±á¬áááºááœáẠá¡á±á¬ááºáá«ááá¯á·ááᯠáá¯ááºááŒááºááá¯ááºáá«ááŒá®-
- â API ááŸáá áºááá·áº á á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬ááŸáá·áº á¡áá¯ááºáá¯ááºáá« (á á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬á ááááºážáá»á¯ááºááŸá¯á¡á±á¬ááºááœáẠááááºááá»á¬ážáá±á«áºááœáẠscripts áá»á¬ážááᯠáá¯ááºáá±á¬ááºááá¯ááºááŸá¯)
- - áá¯á¶ááŒá¯á¶áá±áž ááááºáá±á«ááºáá»á¬ážááŒáá·áº áá¯ááºáá±á¬ááºááá¯ááºááááºá
- â Check Point cloud ááŸá sandbox ááŸáá·áºá¡áá¯ááºáá¯ááºááŒááºážá
- â ááááºááá»á¬ážááœáẠIdentity Awareness blade ááŒáá·áº áá¯ááºáá±á¬ááºááŒááºážá
- - SMB áá¶áá«ážáá±á«áẠá á®áá¶ááá·áºááœá²ááŸá¯ áá±á«áºááẠ()
- - IoT ááááºážáá»á¯ááºáá°áá»á¬ážááŸáá·áº á¡ááŒááºá¡ááŸááºáááºáá¶ááŒááºážá
- - á¡áá°á¡áá¯ááºáá¯áẠ(SD-WAN áá¯á¶ááŒá¯á¶áá±ážááŒá±ááŸááºážáá»ááº)
- - á¡áá°á¡áá¯ááºáá¯ááº
Python SDK ááẠáááºááŸáááœáẠManagement API ááŸáá·áº á¡ááŒááºá¡ááŸááºáááºááœááºááŸá¯ááá¯áᬠáá¶á·ááá¯ážáá±ážáá«áááºá Gaia APIဠmodule ááŸá á¡áá±ážááŒá®ážáá¯á¶áž á¡áááºážáá»á¬ážá áááºážáááºážáá»á¬ážááŸáá·áº ááááºážááŸááºáá»á¬ážááᯠá¡áá»á¯á¶ážáááºáá«áááºá
module ááá¯áááºáááºááŒááºážá
á¡ááá¯ááºáž cpapi á០áá»ááºááŒááºááœááºáá°á áœá¬ áááºáááºáá±ážáááºá ááŒááº. PIP. á¡áá±ážá ááẠáááºáááºááŸá¯ áááºážááœáŸááºáá»ááºáá»á¬ážááᯠááœáẠááŒáá·áºááŸá¯ááá¯ááºáá«áááºá . ဠmodule ááẠPython áá¬ážááŸááºáž 2.7 ááŸáá·áº 3.7 ááá¯á·ááŸáá·áº á¡áá¯ááºáá¯ááºááẠááá¯ááºáá»á±á¬áá®ááœá±ááŒá áºá á±áááºá á€áá±á¬ááºážáá«ážááœááºá Python 3.7 ááᯠá¡áá¯á¶ážááŒá¯á ááá°áá¬áá»á¬ážááᯠáá±á¬áºááŒáá«áááºá ááá¯á·áá±á¬áºáááºáž Python SDK ááᯠCheck Point á á®áá¶ááá·áºááœá²ááŸá¯áá¬áᬠ(Smart Management) á០ááá¯ááºááá¯ááºáá¯ááºáá±á¬ááºááá¯ááºáá±á¬áºáááºáž áááºážááá¯á·ááœáẠPython 2.7 ááá¯áᬠáá¶á·ááá¯ážáá±ážáá±á¬ááŒá±á¬áá·áº áá¬ážááŸááºáž 2.7 á¡ááœáẠáá¯ááºááᯠáá±á¬ááºáá¯á¶ážá¡ááá¯ááºážááœáẠáá±ážáá«áááºá module ááá¯ááá·áºááœááºážááŒá®ážáá±á¬ááºáá»ááºáá»ááºážá áááºážááœáŸááºáá»á¬ážááœááºá¥ááá¬áá»á¬ážááá¯ááŒáá·áºááŸá¯áááºá¡ááŒá¶ááŒá¯áá«áááºá example_python2 О example_python3.
á áááº
áá»áœááºá¯ááºááá¯á·ááẠcpapi module áá¡á áááºá¡ááá¯ááºážáá»á¬ážááŸáá·áºá¡áá¯ááºáá¯ááºááá¯ááºá á±áááºá¡ááœááºá áááºážááᯠmodule ááŸáááºááœááºážáááºááá¯á¡ááºááẠcpapi á¡áááºážáá¯á¶ážááá¯á¡ááºáá±á¬á¡áááºážááŸá áºáá¯
APIClient О APIClientArgs
from cpapi import APIClient, APIClientArgs
á¡áááºážá¡á á¬áž APIClientArgs API server ááŸáá·áº class á áá»áááºáááºááŸá¯ parameters áá»á¬ážá¡ááœáẠáá¬áááºááŸááááºá APIClient API ááŸáá·áºá¡ááŒááºá¡ááŸááºáá¯á¶á·ááŒááºááŸá¯á¡ááœááºáá¬áááºááŸááááºá
áá»áááºáááºááŸá¯áá±á¬ááºáá»á¬ážááᯠáá»áœááºá¯ááºááá¯á·áááºááŸááºáááºá
API ááá¯á· á¡áá»áá¯ážáá»áá¯ážáá±á¬ áá»áááºáááºááŸá¯áá±á¬ááºáá»á¬ážááᯠáááºááŸááºáááºá á¡áááºážá á á¶ááá°áá¬áá áºáá¯ááᯠáááºáááºáá®ážááẠááá¯á¡ááºáááºá APIClientArgsáá°á¡áá áááºážááá±á¬ááºáá»á¬ážááᯠááŒáá¯áááºáááºááŸááºáá¬ážááŒá®áž á á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬ááœáẠscript ááᯠrun áá±á¬á¡áá«ááœáẠáááºážááá¯á·á¡á¬áž áááºááŸááºáááºáááá¯á¡ááºáá«á
client_args = APIClientArgs()ááá¯á·áá±á¬áº ááŒááºáá¡ááœá²á·á¡á ááºážáá áºáá¯á០áááºáá¶áá±á¬ááºááœááºáá±ážááá·áºá¡áá«ááœááºá áááºááẠá¡áááºážáá¯á¶áž API áá¬áá¬á host á¡ááẠ(ááá¯á·) á á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬á á¡áááºážáá¯á¶áž IP ááááºá á¬ááᯠáááºááŸááºááá«áááºá á¡á±á¬ááºáá±á¬áºááŒáá« á¥ááá¬ááœááºá áá»áœááºá¯ááºááá¯á·ááẠáá¬áá¬áá»áááºáááºááŸá¯ ááá·áºáááºáá±á¬ááºááᯠáááºááŸááºááŒá®áž áááºážá¡á¬áž á á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬á IP ááááºá á¬ááᯠá á¬ááŒá±á¬ááºážáá áºáá¯á¡ááŒá ẠáááºááŸááºáá±ážáááºá
client_args = APIClientArgs(server='192.168.47.241')API áá¬áá¬ááá¯á· áá»áááºáááºáá¬ááœáẠá¡áá¯á¶ážááŒá¯ááá¯ááºááá·áº ááá·áºáááºáá±á¬ááºáá»á¬ážááŸáá·áº áááºážááá¯á·á áá°áááºážáááºááá¯ážáá»á¬ážááᯠááŒáá·áºááŒáá«á áá¯á·á
APIClientArgs á¡áááºážá __init__ áááºážáááºážá á¡ááŒá±á¬ááºážááŒáá»ááºáá»á¬áž
class APIClientArgs:
"""
This class provides arguments for APIClient configuration.
All the arguments are configured with their default values.
"""
# port is set to None by default, but it gets replaced with 443 if not specified
# context possible values - web_api (default) or gaia_api
def __init__(self, port=None, fingerprint=None, sid=None, server="127.0.0.1", http_debug_level=0,
api_calls=None, debug_file="", proxy_host=None, proxy_port=8080,
api_version=None, unsafe=False, unsafe_auto_accept=False, context="web_api"):
self.port = port
# management server fingerprint
self.fingerprint = fingerprint
# session-id.
self.sid = sid
# management server name or IP-address
self.server = server
# debug level
self.http_debug_level = http_debug_level
# an array with all the api calls (for debug purposes)
self.api_calls = api_calls if api_calls else []
# name of debug file. If left empty, debug data will not be saved to disk.
self.debug_file = debug_file
# HTTP proxy server address (without "http://")
self.proxy_host = proxy_host
# HTTP proxy port
self.proxy_port = proxy_port
# Management server's API version
self.api_version = api_version
# Indicates that the client should not check the server's certificate
self.unsafe = unsafe
# Indicates that the client should automatically accept and save the server's certificate
self.unsafe_auto_accept = unsafe_auto_accept
# The context of using the client - defaults to web_api
self.context = contextAPIClientArgs á¡áááºážá ááŒá áºáááºáá»á¬ážááœáẠá¡áá¯á¶ážááŒá¯ááá¯ááºááá·áº á¡ááŒá±á¬ááºážááŒáá»ááºáá»á¬ážááẠCheck Point á á®áá¶ááá·áºááœá²áá°áá»á¬ážá á¡ááá¯ááᯠáá¬ážáááºááá¯ááºááŒá®áž á¡ááá¯ááŸááºáá»ááºáá»á¬áž áááá¯á¡ááºááŒá±á¬ááºáž áá»áœááºá¯ááºáá¯á¶ááŒááºáá«áááºá
APIClient ááŸáá·áº áááºá ááºáááºáá±áá»á¬ááŸáá áºááá·áº áá»áááºáááºáá±áááºá
á¡áááºážá¡á á¬áž APIClient context manager ááŸáá áºááá·áº á¡áá¯á¶ážááŒá¯ááẠá¡áááºááŒá±áá¯á¶ážááŒá áºáááºá APIClient á¡áááºážá¡á á¬áž á á¶ááá°áá¬ááá¯á· áá±ážááá¯á·ááẠááá¯á¡ááºááá»áŸááẠááááºá¡ááá·áºááœáẠáááºááŸááºáá¬ážáá±á¬ áá»áááºáááºááŸá¯ áá±á¬ááºáá»á¬ážááŒá áºáááºá
with APIClient(client_args) as client:
áááºá ááºáááºáá±áá»á¬ááẠAPI áá¬áá¬ááá¯á· áá±á¬á·ááºá¡ááºáá±á«áºááá¯ááŸá¯ááᯠá¡ááá¯á¡áá»á±á¬ááºáá¯ááºáá±á¬ááºáááºááá¯ááºáá±á¬áºáááºáž áááºážááŸááœááºááá·áºá¡áá« á¡áá±á¬áá·áºááœááºáá±á«áºááá¯ááŸá¯ááᯠáá¯ááºáá±á¬ááºáááºááŒá áºáááºá API áá±á«áºááá¯ááŸá¯áá»á¬ážááŸáá·áº áá¯ááºáá±á¬ááºááŒá®ážáá±á¬áẠá¡ááŒá±á¬ááºážááŒáá»ááºá¡áá»áá¯á·ááŒá±á¬áá·áº ááœááºáááºáááá¯á¡ááºáá«áá áááºááẠáááºá ááºáááºáá±áá»á¬ááᯠá¡áá¯á¶ážáááŒá¯áá² á áááºáá¯ááºáá±á¬ááºááẠááá¯á¡ááºáááº-
client = APIClient(clieng_args)áá»áááºáááºááŸá¯á ááºážáááºááŸá¯
áááºááŸááºáá¬ážáá±á¬ ááá·áºáááºáá±á¬ááºáá»á¬ážá¡ááá¯ááºáž áá»áááºáááºááŸá¯ááŸááááŸá á á áºáá±ážááẠá¡ááœááºáá¯á¶ážáááºážáááºážááŸá¬ á¡ááá¯áá«áááºážáááºážááᯠá¡áá¯á¶ážááŒá¯ááŒááºážááŒá áºáááºá check_fingerprint. API áá¬áá¬áááºááŸááºá¡ááœáẠsha1 hash á á áºáá±ážááŒááºáž áá¡á±á¬ááºááŒááºáá«á (áááºážáááºážááᯠááŒááºáá±ážáááºá ááŸá¬ážáá±á¬) ááá¯á·ááŒá áºáá»áŸáẠáááºážááẠá¡áá»á¬ážá¡á¬ážááŒáá·áº áá»áááºáááºááŸá¯ááŒá¿áá¬áá»á¬ážááŒá±á¬áá·áº ááŒá áºáá±á«áºáá¬ááŒá®áž áááá¯ááááºáá¯ááºáá±á¬ááºááŸá¯ááᯠáááºááá·áºááá¯ááºááẠ(ááá¯á·ááá¯áẠáá¯á¶ážá áœá²áá°á¡á¬áž áá»áááºáááºááŸá¯áá±áá¬ááᯠááŒá¯ááŒááºááẠá¡ááœáá·áºá¡áá±ážáá±ážáááº)á
if client.check_fingerprint() is False:
print("Could not get the server's fingerprint - Check connectivity with the server.")
exit(1)
áá±á¬ááºááœáẠá¡áááºážááᯠáááááŒá¯áá«á APIClient API áá±á«áºááá¯ááŸá¯ááá¯ááºáž (áááºážáááºážáá»á¬áž api_áá±á«áºááá¯ááŸá¯ О api_queryáááºážááá¯á·á¡ááŒá±á¬ááºáž á¡áááºážááẠáááºáá¶ááŒá±á¬ááá¯áá«áááº) API áá¬áá¬ááŸá áááºááŸááºá sha1 áááºááœá±áá¬á ááá¯á·áá±á¬áº API áá¬áá¬áááºááŸááºá sha1 áááºááœá±ááᯠá á áºáá±ážááá·áºá¡áá« á¡ááŸá¬ážá¡ááœááºážáá áºáᯠááœá±á·ááŸááá«á áááºážáááºážááẠáááºážáááºážá check_fingerprint áááºážááŸáá·áºáááºáááºááá·áº á¡áá»ááºá¡áááºáá»á¬ážááᯠá ááºááœááºážá ááºááœáẠá¡ááá¯á¡áá»á±á¬áẠááá·áºáááº/ááŒá±á¬ááºážáá²ááá¯ááºááŸá¯ááá¯á·ááᯠáá¶á·ááá¯ážáá±ážáááºááŒá áºáááºá á€á á áºáá±ážááŸá¯ááᯠáá¯á¶ážáááááºáá¬ážááá¯ááºááẠ(ááá¯á·áá±á¬áº API áá¬áá¬ááá¯ááºááá¯ááºá 127.0.0.1 ááŸáá·áº áá»áááºáááºáá±á¬á¡áá«ááœááºáᬠscripts áá»á¬ážáááºáááºáá±áá»áááºááœááºáᬠá¡ááŒá¶ááŒá¯ááá¯ááºáááº)á APIClientArgs á¡ááŒá±á¬ááºážááŒáá»ááºááᯠá¡áá¯á¶ážááŒá¯á - unsafe_auto_accept ("áá»áááºáááºááŸá¯áá±á¬ááºáá»á¬ážááᯠáááºááŸááºááŒááºáž" ááœáẠá¡á á±á¬ááá¯ááºáž APIClientArgs á¡ááŒá±á¬ááºáž ááá¯ááá¯ááŒáá·áºááŸá¯áá«á)
client_args = APIClientArgs(unsafe_auto_accept=True)API áá¬áá¬ááá¯á· áááºáá±á¬ááºáá«á
У APIClient API áá¬áá¬ááá¯á· áá±á¬á·ááºá¡ááºáááºááẠáááºážáááºáž 3 áá¯á¡áá ááŸáááŒá®áž áááºážááá¯á·áá áºáá¯á á®ááẠáááºááá¯ážááᯠááŸááºáááááºá Sidáá±á«ááºážá á®ážááŸá áá±á¬ááºáááºááœá² API áá±á«áºááá¯ááŸá¯ááá¯ááºážááœáẠá¡ááá¯á¡áá»á±á¬ááºá¡áá¯á¶ážááŒá¯ááá·áº (session-id) (á€ááá·áºáááºáááºááŸááºáá»ááºá¡ááœáẠáá±á«ááºážá á®ážááŸá á¡áááºááẠX-chkp-sid) ááá¯á·ááŒá±á¬áá·áº á€áááºááŸááºáá»ááºááᯠáááºáá¶áá¯ááºáá±á¬ááºááẠáááá¯á¡ááºáá«á
á¡áá±á¬áá·áºáááºáááºáž
áá±á¬á·ááºá¡ááºááŸáá·áº á áá¬ážááŸááºááᯠá¡áá¯á¶ážááŒá¯ááá·áº ááœá±ážáá»ááºááŸá¯ (á¥ááá¬ááœááºá á¡áá¯á¶ážááŒá¯áá°á¡ááẠá á®áá¶ááá·áºááœá²áá°ááŸáá·áº á áá¬ážááŸáẠ1q2w3e ááᯠáá±áá¬áá»áá¬ážáá±á¬ á¡ááŒá±á¬ááºážááŒáá»ááºáá»á¬ážá¡ááŒá Ạáá»á±á¬áºááŒááºáááº)
login = client.login('admin', '1q2w3e') áá±á¬á·ááºá¡ááºáááºážáááºážááœáẠáá±á¬ááºáááºááœá±ážáá»ááºááá¯ááºáá±á¬ ááá·áºáááºáá±á¬ááºáá»á¬ážáá«ááŸááá«áááºá á€áááºááŸá¬ áááºážááá¯á·áá¡áááºáá»á¬ážááŸáá·áº áá°áááºážáááºááá¯ážáá»á¬ážááŒá áºáááº-
continue_last_session=False, domain=None, read_only=False, payload=Noneáááºážáááºáž login_with_api_key
API áá±á¬á·ááᯠá¡áá¯á¶ážááŒá¯á ááœá±ážáá»ááºááœáá·áº (á á®áá¶ááá·áºááœá²ááŸá¯áá¬ážááŸááºáž R80.40/Management API v1.6á "3TsbPJ8ZKjaJGvFyoFqHFA==" á€áááºááŸá¬ API áá±á¬á·ááœáá·áºááŒá¯áá»ááºáááºážáááºážááŒáá·áº á á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬ááŸá áá¯á¶ážá áœá²áá°áá áºáŠážá¡ááœáẠAPI áá±á¬á·áááºááá¯ážááŒá áºáááº)á
login = client.login_with_api_key('3TsbPJ8ZKjaJGvFyoFqHFA==') áááºážáááºáž login_with_api_key method ááœááºáá²á·ááá¯á·áá°áá®áá±á¬ááœá±ážáá»ááºááœáá·áºáá±á¬ááºáá»á¬ážááá¯áááá¯ááºáááºá áá±á¬á·ááºá¡ááº.
login_as_root áááºážáááºáž
API áá¬áá¬ááŒáá·áº áá±áááœááºážá ááºááá¯á· á¡áá±á¬áá·áºáááºááẠááœá±ážáá»ááºááŸá¯-
login = client.login_as_root()á€áááºážáááºážá¡ááœáẠááœá±ážáá»ááºááá¯ááºáá±á¬ ááá·áºáááºáá±á¬ááºááŸá áºáá¯áᬠááŸááá«áááºá
domain=None, payload=Noneáá±á¬ááºáá¯á¶ážáá±á¬á· API á áá°ááá¯á·ááá¯ááºáá°ááá¯á· áá±á«áºáááºá
áááºážáááºážáá»á¬ážááŸáá áºááá·áº API áá±á«áºááá¯ááŸá¯áá»á¬ážááŒá¯áá¯ááºááẠáá»áœááºá¯ááºááá¯á·ááœáẠááœá±ážáá»ááºá áá¬ááŸá áºáá¯ááŸááááºá api_áá±á«áºááá¯ááŸá¯ О api_query. áá°ááá¯á·ááŒá¬ážá áá¬ááœá¬ááŒá¬ážáá² ááá¯áᬠá¡ááŒá±ááŸá¬ááŒáá·áºáá¡á±á¬ááºá
api_áá±á«áºááá¯ááŸá¯
á€áááºážáááºážááẠáááºááá·áºáá±á«áºááá¯ááŸá¯áá»á¬ážá¡ááœááºáááᯠá¡áá¯á¶ážááŒá¯ááá¯ááºáááºá ááá¯á¡ááºáá«á áá±á¬ááºážááá¯áá»ááºááá¯ááºáááºááœáẠapi áá±á«áºááá¯ááŸá¯ááŸáá·áº payload á¡ááœáẠáá±á¬ááºáá¯á¶ážá¡ááá¯ááºážááᯠáá»á±á¬áºááœá¬ážáááºááá¯á¡ááºáá«áááºá payload ááẠááá¬ááŒá áºáá«áá áááºážááᯠá¡áá¯á¶ážá á¯á¶ áá»ááºááŸááºáá¬ážááá¯ááºáááº-
api_versions = client.api_call('show-api-versions') á€áá±á¬ááºážááá¯áá»ááºá¡ááœáẠááááºááẠááŒááºáá±á¬ááºááŸá¯á¡á±á¬ááºááœáẠááŸááá«áááºá
In [23]: api_versions
Out[23]:
APIResponse({
"data": {
"current-version": "1.6",
"supported-versions": [
"1",
"1.1",
"1.2",
"1.3",
"1.4",
"1.5",
"1.6"
]
},
"res_obj": {
"data": {
"current-version": "1.6",
"supported-versions": [
"1",
"1.1",
"1.2",
"1.3",
"1.4",
"1.5",
"1.6"
]
},
"status_code": 200
},
"status_code": 200,
"success": true
})
show_host = client.api_call('show-host', {'name' : 'h_8.8.8.8'})á€áá±á¬ááºážááá¯áá»ááºá¡ááœáẠááááºááẠááŒááºáá±á¬ááºááŸá¯á¡á±á¬ááºááœáẠááŸááá«áááºá
In [25]: show_host
Out[25]:
APIResponse({
"data": {
"color": "black",
"comments": "",
"domain": {
"domain-type": "domain",
"name": "SMC User",
"uid": "41e821a0-3720-11e3-aa6e-0800200c9fde"
},
"groups": [],
"icon": "Objects/host",
"interfaces": [],
"ipv4-address": "8.8.8.8",
"meta-info": {
"creation-time": {
"iso-8601": "2020-05-01T21:49+0300",
"posix": 1588358973517
},
"creator": "admin",
"last-modifier": "admin",
"last-modify-time": {
"iso-8601": "2020-05-01T21:49+0300",
"posix": 1588358973517
},
"lock": "unlocked",
"validation-state": "ok"
},
"name": "h_8.8.8.8",
"nat-settings": {
"auto-rule": false
},
"read-only": false,
"tags": [],
"type": "host",
"uid": "c210af07-1939-49d3-a351-953a9c471d9e"
},
"res_obj": {
"data": {
"color": "black",
"comments": "",
"domain": {
"domain-type": "domain",
"name": "SMC User",
"uid": "41e821a0-3720-11e3-aa6e-0800200c9fde"
},
"groups": [],
"icon": "Objects/host",
"interfaces": [],
"ipv4-address": "8.8.8.8",
"meta-info": {
"creation-time": {
"iso-8601": "2020-05-01T21:49+0300",
"posix": 1588358973517
},
"creator": "admin",
"last-modifier": "admin",
"last-modify-time": {
"iso-8601": "2020-05-01T21:49+0300",
"posix": 1588358973517
},
"lock": "unlocked",
"validation-state": "ok"
},
"name": "h_8.8.8.8",
"nat-settings": {
"auto-rule": false
},
"read-only": false,
"tags": [],
"type": "host",
"uid": "c210af07-1939-49d3-a351-953a9c471d9e"
},
"status_code": 200
},
"status_code": 200,
"success": true
})
api_query
á¡á±á¬á·ááºáááºáᯠáá°áááá·áº á¡ááœááºááŸá¯ááºážááẠáá¯ááºážáá±á«áºááá¯ááŸá¯áá»á¬ážá¡ááœááºáᬠá€áááºážáááºážááᯠá¡áá¯á¶ážááŒá¯ááá¯ááºááŒá±á¬ááºáž áá»ááºáá»ááºáž ááŒáá¯áááºá á¬áááºážáá±ážáá«áá á±á ááá¯ááá¯á·áá±á¬ááœááºááŸáááŸá¯ááẠáááºážááœáẠá¡áá»ááºá¡áááºá¡áá»á¬ážá¡ááŒá¬ážáá«áááºááá¯ááºááẠááá¯á·ááá¯áẠááá¬ááá»á¬ážá áœá¬áá«áááºááá·áºá¡áá«ááœáẠááŒá áºáá±á«áºáááºá á¥ááá¬á¡á¬ážááŒáá·áºá áááºážááẠá á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬ááŸá áááºáá®ážáá¬ážáá±á¬ host-type objects á á¬áááºážáá áºáá¯á¡ááœáẠáá±á¬ááºážááá¯ááŸá¯áá áºáᯠááŒá áºááá¯ááºáááºá ááá¯ááá¯á·áá±á¬áá±á¬ááºážááá¯ááŸá¯áá»á¬ážá¡ááœááºá API ááẠáá¯á¶ááŸááºá¡á¬ážááŒáá·áº á¡áá¬ááá¹áᯠ50 áá á¬áááºážááᯠááŒááºáá±ážááẠ(áá¯á¶á·ááŒááºááŸá¯ááœáẠá¡áá¬ááá¹áᯠ500 á¡áá ááá·áºáááºáá»ááºááᯠáááºááá¯ážááŒáŸáá·áºááá¯ááºáááº)á á¡áá»ááºá¡áááºááᯠá¡ááŒáááºáá±á«ááºážáá»á¬ážá áœá¬ ááœá²áá°ááŒááºážáááŒá¯ááẠAPI áá±á¬ááºážááá¯áá»ááºááœáẠá¡á±á¬á·ááºáááºáá«áá¬áá®áá¬ááᯠááŒá±á¬ááºážáá²áááºá¡ááœááºá áááºážááẠá¡ááá¯á¡áá»á±á¬ááºáá¯ááºáá±á¬ááºááá¯ááºááá·áº áááºážáááºáž api_query ááŸááá«áááºá á€áááºážáááºážááá¯á¡ááºááá·áº áá±á«áºááá¯ááŸá¯áá»á¬ážá á¥ááá¬áá»á¬áž- show-sessionsá show-hostsá show-networksá show-wildcardsá show-groupsá show-address- rangesá show-simple-gatewaysá show-simple-clustersá show-access-roles, show-trusted-clients, show-packages. á¡ááŸááºáá±á¬á·á ဠAPI áá±á«áºááá¯ááŸá¯áá»á¬ážáá¡áááºááœáẠáá»áœááºá¯ááºááá¯á·ááẠá¡áá»á¬ážááááºážááŒáá·áº á áá¬ážáá¯á¶ážáá»á¬ážááᯠááœá±á·ááááºá ááá¯á·ááŒá±á¬áá·áº á€áá±á«áºááá¯ááŸá¯áá»á¬ážááŸáá áºááá·áº ááá¯ááºááœááºááẠááá¯ááá¯ááœááºáá°áááºááŒá áºáááºá api_query
show_hosts = client.api_query('show-hosts') á€áá±á¬ááºážááá¯áá»ááºá¡ááœáẠááááºááẠááŒááºáá±á¬ááºááŸá¯á¡á±á¬ááºááœáẠááŸááá«áááºá
In [21]: show_hosts
Out[21]:
APIResponse({
"data": [
{
"domain": {
"domain-type": "domain",
"name": "SMC User",
"uid": "41e821a0-3720-11e3-aa6e-0800200c9fde"
},
"ipv4-address": "192.168.47.1",
"name": "h_192.168.47.1",
"type": "host",
"uid": "5d7d7086-d70b-4995-971a-0583b15a2bfc"
},
{
"domain": {
"domain-type": "domain",
"name": "SMC User",
"uid": "41e821a0-3720-11e3-aa6e-0800200c9fde"
},
"ipv4-address": "8.8.8.8",
"name": "h_8.8.8.8",
"type": "host",
"uid": "c210af07-1939-49d3-a351-953a9c471d9e"
}
],
"res_obj": {
"data": {
"from": 1,
"objects": [
{
"domain": {
"domain-type": "domain",
"name": "SMC User",
"uid": "41e821a0-3720-11e3-aa6e-0800200c9fde"
},
"ipv4-address": "192.168.47.1",
"name": "h_192.168.47.1",
"type": "host",
"uid": "5d7d7086-d70b-4995-971a-0583b15a2bfc"
},
{
"domain": {
"domain-type": "domain",
"name": "SMC User",
"uid": "41e821a0-3720-11e3-aa6e-0800200c9fde"
},
"ipv4-address": "8.8.8.8",
"name": "h_8.8.8.8",
"type": "host",
"uid": "c210af07-1939-49d3-a351-953a9c471d9e"
}
],
"to": 2,
"total": 2
},
"status_code": 200
},
"status_code": 200,
"success": true
})
API áá±á«áºááá¯ááŸá¯ááááºáá»á¬ážááᯠáá¯ááºáá±á¬ááºáá±áá«áááºá
áááºážááŒá®ážáá±á¬ááºá áááºááẠclass á variable áá»á¬ážááŸáá·áº method ááá¯áá¯á¶ážááá¯ááºáááºá API áá¯á¶á·ááŒááºááŸá¯(á¡ááœááºážááŸáá·áºááŒááºá áááºá ááºáááºáá±áá»á¬)á á¡áááºáž API áá¯á¶á·ááŒááºááŸá¯ ááŒáá¯áááºáááºááŸááºáá¬ážáá±á¬ áááºážáááºáž 4 áá¯ááŸáá·áº variable 5 áá¯ááŸááááºá áá»áœááºá¯ááºááá¯á·ááẠá¡áá±ážá áááºáá»áá±á¬ á¡áá±ážááŒá®ážáá¯á¶ážáá»á¬ážááᯠáááºáááºáá±á¬áºááŒáá«áááºá
á¡á±á¬ááºááŒááºááŒááºáž
ááááŠážá áœá¬á API áá±á«áºááá¯ááŸá¯ á¡á±á¬ááºááŒááºááŒá®áž ááááºáá áºáᯠááŒááºáá¬ááŒá±á¬ááºáž áá±áá»á¬á á±áááºá¡ááœáẠáá±á¬ááºážáá«áááºá áá®á¡ááœáẠáááºážáááºážáá áºáá¯ááŸááá«áááºá á¡á±á¬ááºááŒááºááŒááºáž:
In [49]: api_versions.success
Out[49]: True
API áá±á«áºááá¯ááŸá¯ á¡á±á¬ááºááŒááºáá«á ááŸááºááẠ(áá¯á¶á·ááŒááºááŸá¯áá¯áẠ- 200) ááŸáá·áº áá¡á±á¬ááºááŒááºáá«á False (á¡ááŒá¬ážáá¯á¶á·ááŒááºááŸá¯áá¯ááºáá»á¬áž)á áá¯á¶á·ááŒááºáá¯ááºáá±á«áºáá°áááºá ááá°áá®áá±á¬á¡áá»ááºá¡áááºáá»á¬ážááá¯ááŒáááẠAPI áá±á«áºááá¯ááŒá®ážáá±á¬áẠáá»ááºáá»ááºážá¡áá¯á¶ážááŒá¯ááẠá¡áááºááŒá±áááºá
if api_ver.success:
print(api_versions.data)
else:
print(api_versions.err_message) á¡ááŒá±á¡áá±áá¯ááº
API áá±á«áºááá¯ááŸá¯ááᯠáá¯ááºáá±á¬ááºááŒá®ážáá±á¬áẠáá¯á¶á·ááŒááºáá¯ááºááᯠááŒááºáá±ážáááºá
In [62]: api_versions.status_code
Out[62]: 400
ááŒá áºááá¯ááºáá±á¬ áá¯á¶á·ááŒááºááŸá¯áá¯ááºáá»á¬áž 200,400,401,403,404,409,500,501.
set_success_á¡ááŒá±á¡áá±
á€ááá á¹á ááœááºá á¡á±á¬ááºááŒááºááŸá¯á¡ááŒá±á¡áá±ááááºááá¯ážááᯠááŒá±á¬ááºážáá²ááẠááá¯á¡ááºáá±áááºá áááºážááá¬á¡áá áá¯á¶ááŸááºááŒáá¯ážáá áºáá»á±á¬ááºážáá±á¬áẠáááºá¡áá¬ááá¯áááᯠáá¬ážááá¯á·ááá«áááºá ááá¯á·áá±á¬áº áááá·áºá¥ááá¬áá áºáá¯ááẠá¡áá»áá¯á·áá±á¬á¡ááŒá±á¡áá±áá»á¬ážá¡á±á¬ááºááœáẠá€ááá·áºáááºáá±á¬ááºááᯠFalse ááá¯á· ááŒááºáááºáááºááŸááºáááºááŒá áºáááºá á á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬ááœáẠáá¯ááºáá±á¬ááºáá±áá±á¬ á¡áá¯ááºáá»á¬ážááŸááá±áá±á¬á¡áá« á¡á±á¬ááºááœáẠá¥ááá¬á¡á¬áž á¡á¬áá¯á¶á áá¯ááºáá«á ááá¯á·áá±á¬áº á€áá±á¬ááºážááá¯áá»áẠáá¡á±á¬ááºááŒááºáᯠáá»áœááºá¯ááºááá¯á· áá°ááá«ááẠ(á¡á±á¬ááºááŒááºááŸá¯áá¯á¶á á¶ááᯠáá»áœááºá¯ááºááá¯á· áááºááŸááºáá«áááºá ááŸá¬ážáá±á¬API áá±á«áºááá¯ááŸá¯ á¡á±á¬ááºááŒááºááŒá®áž áá¯áẠ200 ááᯠááŒááºáá±ážáá²á·áá±á¬áºáááºáž)á
for task in task_result.data["tasks"]:
if task["status"] == "failed" or task["status"] == "partially succeeded":
task_result.set_success_status(False)
breakáá¯á¶á·ááŒááºááŸá¯()
áá¯á¶á·ááŒááºááŸá¯áááºážáááºážááẠááá·áºá¡á¬áž áá¯á¶á·ááŒááºáá¯áẠ(status_code) ááŸáá·áº áá¯á¶á·ááŒááºááŸá¯ááá¯ááºááẠ(ááá¯ááºáááº) ááá¯á·áá«ááŸááá±á¬ á¡áááá¬ááºááᯠááŒáá·áºááŸá¯ááá¯ááºá á±áá«áááºá
In [94]: api_versions.response()
Out[94]:
{'status_code': 200,
'data': {'current-version': '1.6',
'supported-versions': ['1', '1.1', '1.2', '1.3', '1.4', '1.5', '1.6']}}
áá±áá¬
áááá¯á¡ááºáá±á¬ á¡áá»ááºá¡áááºááá«áá² áá¯á¶á·ááŒááºááŸá¯ááá¯ááºáááºááá¯áᬠááŒááºááá¯ááºá á±áá«áááºá
In [93]: api_versions.data
Out[93]:
{'current-version': '1.6',
'supported-versions': ['1', '1.1', '1.2', '1.3', '1.4', '1.5', '1.6']}
error_message
API áá±á¬ááºážááá¯áá»áẠ(áá¯á¶á·ááŒááºááŸá¯áá¯ááºááᯠáá¯ááºáá±á¬ááºáá±á ááºááœáẠá¡ááŸá¬ážá¡ááœááºážáá áºáᯠááŒá áºááœá¬ážáá±á¬á¡áá«ááŸáᬠá€á¡áá»ááºá¡áááºááᯠáááŸáááá¯ááºáááºá ááá¯áẠááá)á Output á¥ááá¬
In [107]: api_versions.error_message
Out[107]: 'code: generic_err_invalid_parameter_namenmessage: Unrecognized parameter [1]n'
á¡áá¯á¶ážáááºáá±á¬ á¥ááá¬áá»á¬áž
á¡á±á¬ááºáá«á¥ááá¬áá»á¬ážááẠManagement API áá¬ážááŸááºáž 1.6 ááœáẠááá·áºááœááºážáá¬ážááá·áº API áá±á«áºááá¯ááŸá¯áá»á¬ážááᯠá¡áá¯á¶ážááŒá¯áá«áááºá
áá±á«áºááá¯ááŸá¯áá»á¬áž áá¯ááºáá±á¬ááºáá¯á¶ááᯠááŒáá·áºááŒááºážááŒáá·áº á áááºááŒáá«á áá¯á·á add-host О add-address-range. áá»áœááºá¯ááºááá¯á·ááẠ192.168.0.0/24 subnet á IP ááááºá á¬áá»á¬ážá¡á¬ážáá¯á¶ážááᯠáááºáá®ážááẠááá¯á¡ááºááŒá®áž áá±á¬ááºáá¯á¶áž octet ááŒá áºááá·áº 5 ááẠhost type objects áá»á¬ážááŒá áºááŒá®áž address range type objects áá»á¬ážá¡ááŒá Ạá¡ááŒá¬ážáá±á¬ IP ááááºá á¬á¡á¬ážáá¯á¶ážááᯠáá±ážááááºááá¯áá«á áá¯á·á á€ááá á¹á ááœááºá subnet ááááºá á¬ááŸáá·áº á¡áá¶ááœáŸáá·áºááááºá á¬ááᯠáááºáá¯ááºáá«á
ááá¯á·ááŒá±á¬áá·áºá á¡á±á¬ááºááœáẠá€ááŒá¿áá¬ááá¯ááŒá±ááŸááºážáá±ážááá·áº script áá áºáá¯ááŒá áºááŒá®áž áááºáá¶áá°á¡áá»áá¯ážá¡á á¬ážá¡áá¬ááá¹áᯠ50 ááŸáá·áº ááááºá á¬á¡ááá¯ááºážá¡ááŒá¬ážá¡áá»áá¯ážá¡á á¬ážá¡áá¬ááá¹áᯠ51 áá¯ááá¯áááºáá®ážáá±ážáá«áááºá ááŒá¿áá¬ááá¯ááŒá±ááŸááºážááẠ101 API áá±á«áºááá¯ááŸá¯áá»á¬áž ááá¯á¡ááºááẠ(áá±á¬ááºáá¯á¶ážáá¯ááºáá±ááá·áºáá±á«áºááá¯ááŸá¯á¡á¬áž áá±ááœááºááŒááºážááá¯ááºáá«)á ááá¯á·á¡ááŒááºá timeit module ááᯠá¡áá¯á¶ážááŒá¯á á¡ááŒá±á¬ááºážá¡áá²áá»á¬áž ááá¯ááºáá±ááá»ááºáž script ááᯠáá¯ááºáá±á¬ááºááẠá¡áá»áááºááᯠááœááºáá»ááºáá«áááºá
add-host ááŸáá·áº add-address-range ááá¯áá¯á¶ážá script
import timeit
from cpapi import APIClient, APIClientArgs
start = timeit.default_timer()
first_ip = 1
last_ip = 4
client_args = APIClientArgs(server="192.168.47.240")
with APIClient(client_args) as client:
login = client.login_with_api_key('3TsbPJ8ZKjaJGvFyoFqHFA==')
for ip in range(5,255,5):
add_host = client.api_call("add-host", {"name" : f"h_192.168.0.{ip}", "ip-address": f'192.168.0.{ip}'})
while last_ip < 255:
add_range = client.api_call("add-address-range", {"name": f"r_192.168.0.{first_ip}-{last_ip}", "ip-address-first": f"192.168.0.{first_ip}", "ip-address-last": f"192.168.0.{last_ip}"})
first_ip+=5
last_ip+=5
stop = timeit.default_timer()
publish = client.api_call("publish")
print(f'Time to execute batch request: {stop - start} seconds')
áá»áœááºá¯ááºááá¬ááºááœá²áááºážáááºáááºážáá»ááºááœááºá á€áá¬ááºááœáŸááºážááẠá á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬áá±á«áºááŸá áááºáá±á«áº áá°áááºá áá¯ááºáá±á¬ááºááẠá áá¹ááá·áº 30 á០50 ááŒá¬ážááŒá¬ááŒáá·áºáááºá
ááᯠAPI áá±á«áºááá¯ááŸá¯ááᯠá¡áá¯á¶ážááŒá¯á á¡áá¬ážáá°ááŒá¿áá¬ááᯠáááºááá¯á·ááŒá±ááŸááºážááááºááᯠááŒáá·áºááŒáá«á áá¯á· add-objects-batchAPI áá¬ážááŸááºáž 1.6 ááœáẠááá·áºááœááºážáá¬ážááá·áº áá¶á·ááá¯ážááŸá¯á á€áá±á«áºááá¯ááŸá¯ááẠAPI áá±á¬ááºážááá¯áá»ááºáá áºáá¯ááœáẠá¡áá¬áá»á¬ážá áœá¬ááᯠáá áºááŒáá¯ááºáááºáááºáá®ážááá¯ááºá á±áá«áááºá ááá¯á·á¡ááŒááºá áááºážááá¯á·ááẠááá°áá®áá±á¬á¡áá»áá¯ážá¡á á¬ážáá»á¬áž (á¥ááá¬á hostsá subnets ááŸáá·áº address ranges) áá»á¬ážááŒá áºááá¯ááºáááºá ááá¯á·ááŒá±á¬áá·áºá áá»áœááºá¯ááºááá¯á·ááá¬áááºááᯠAPI áá±á«áºááá¯ááŸá¯áá áºáá¯ááá±á¬ááºá¡ááœááºáž ááŒá±ááŸááºážááá¯ááºáááºá
add-objects-batch ááᯠá¡áá¯á¶ážááŒá¯á Script
import timeit
from cpapi import APIClient, APIClientArgs
start = timeit.default_timer()
client_args = APIClientArgs(server="192.168.47.240")
objects_list_ip = []
objects_list_range = []
for ip in range(5,255,5):
data = {"name": f'h_192.168.0.{ip}', "ip-address": f'192.168.0.{ip}'}
objects_list_ip.append(data)
first_ip = 1
last_ip = 4
while last_ip < 255:
data = {"name": f"r_192.168.0.{first_ip}-{last_ip}", "ip-address-first": f"192.168.0.{first_ip}", "ip-address-last": f"192.168.0.{last_ip}"}
objects_list_range.append(data)
first_ip+=5
last_ip+=5
data_for_batch = {
"objects" : [ {
"type" : "host",
"list" : objects_list_ip
}, {
"type" : "address-range",
"list" : objects_list_range
}]
}
with APIClient(client_args) as client:
login = client.login_with_api_key('3TsbPJ8ZKjaJGvFyoFqHFA==')
add_objects_batch = client.api_call("add-objects-batch", data_for_batch)
stop = timeit.default_timer()
publish = client.api_call("publish")
print(f'Time to execute batch request: {stop - start} seconds')
áá»áœááºá¯ááºááá¬ááºááœá²áááºážáááºáááºážáá»ááºááœáẠá€áá¬ááºááœáŸááºážááᯠá¡áá±á¬ááºá¡áááºáá±á¬áºááŒááºážááẠá á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬áá±á«áºááŸááááºáá±á«áº áá°áááºá 3 á០7 á áá¹ááá·áºá¡áá ááŒá¬áá«áááºá ááá¯ááá¯áááºááŸá¬á áá»ááºážáá»áŸá¡á¬ážááŒáá·áºá á¡áá¬ááá¹áᯠ101 áá¯ááœááºá batch á¡áá»áá¯ážá¡á á¬ážá API áá±á«áºááá¯ááŸá¯ááẠ10 áááá¯ááá¯ááŒááºáááºáááºá ááá¯áá»á¬ážáá±á¬ á¡áá¬ááá¹áá¯áá»á¬ážááœááºá ááœá¬ááŒá¬ážáá»ááºááẠááá¯áááẠá¡áááºááŒá®ážá áᬠááŒá áºáááá·áºáááºá
áá² áááºááá¯á¡áá¯ááºáá¯ááºáá² ááŒáá·áºáá¡á±á¬áẠset-objects-batch. ဠAPI áá±á«áºááá¯ááŸá¯ááŒáá·áº áá»áœááºá¯ááºááá¯á·ááẠáááºááá·áº parameter ááá¯áááᯠá¡á á¯ááá¯ááºááŒá±á¬ááºážáá²ááá¯ááºáááºá ááááºááá°áá¬á០ááááºá á¬áá»á¬ážá ááááá áºáááºááᯠ(.124 hosts áá»á¬ážá¡ááá á¡ááá¯ááºážá¡ááŒá¬ážáá»á¬ážá¡áá) ááᯠcolor sienna ááá¯á· áááºááŸááºááŒá®áž ááááºá á¬áá»á¬ážá áá¯ááááá áºáááºááᯠcolor khaki ááá¯á· áááºááŸááºááŒáá«á áá¯á·á
ááááºá¥ááá¬ááœáẠáááºáá®ážáá¬ážáá±á¬ á¡áá¬ááá¹áá¯áá»á¬ážá á¡áá±á¬ááºááᯠááŒá±á¬ááºážáá²ááŒááºážá
from cpapi import APIClient, APIClientArgs
client_args = APIClientArgs(server="192.168.47.240")
objects_list_ip_first = []
objects_list_range_first = []
objects_list_ip_second = []
objects_list_range_second = []
for ip in range(5,125,5):
data = {"name": f'h_192.168.0.{ip}', "color": "sienna"}
objects_list_ip_first.append(data)
for ip in range(125,255,5):
data = {"name": f'h_192.168.0.{ip}', "color": "khaki"}
objects_list_ip_second.append(data)
first_ip = 1
last_ip = 4
while last_ip < 125:
data = {"name": f"r_192.168.0.{first_ip}-{last_ip}", "color": "sienna"}
objects_list_range_first.append(data)
first_ip+=5
last_ip+=5
while last_ip < 255:
data = {"name": f"r_192.168.0.{first_ip}-{last_ip}", "color": "khaki"}
objects_list_range_second.append(data)
first_ip+=5
last_ip+=5
data_for_batch_first = {
"objects" : [ {
"type" : "host",
"list" : objects_list_ip_first
}, {
"type" : "address-range",
"list" : objects_list_range_first
}]
}
data_for_batch_second = {
"objects" : [ {
"type" : "host",
"list" : objects_list_ip_second
}, {
"type" : "address-range",
"list" : objects_list_range_second
}]
}
with APIClient(client_args) as client:
login = client.login_with_api_key('3TsbPJ8ZKjaJGvFyoFqHFA==')
set_objects_batch_first = client.api_call("set-objects-batch", data_for_batch_first)
set_objects_batch_second = client.api_call("set-objects-batch", data_for_batch_second)
publish = client.api_call("publish")
API áá±á«áºááá¯ááŸá¯áá áºáá¯áááºážááœáẠá¡áá¬áá»á¬ážá áœá¬ááᯠáááºáá»ááºááá¯ááºáááºá delete-objects-batch. ááá¯á¡á¬ážááŒáá·áº ááááºá áááºáá®ážáá¬ážáá±á¬ host á¡á¬ážáá¯á¶ážááᯠáá»ááºáá áºááá·áº áá¯ááºááá°áá¬ááᯠááŒáá·áºááŒáá«á áá¯á· add-objects-batch.
delete-objects-batch ááŒáá·áº á¡áá¬ááá¹áá¯áá»á¬ážááᯠáá»ááºááŒááºážá
from cpapi import APIClient, APIClientArgs
client_args = APIClientArgs(server="192.168.47.240")
objects_list_ip = []
objects_list_range = []
for ip in range(5,255,5):
data = {"name": f'h_192.168.0.{ip}'}
objects_list_ip.append(data)
first_ip = 1
last_ip = 4
while last_ip < 255:
data = {"name": f"r_192.168.0.{first_ip}-{last_ip}"}
objects_list_range.append(data)
first_ip+=5
last_ip+=5
data_for_batch = {
"objects" : [ {
"type" : "host",
"list" : objects_list_ip
}, {
"type" : "address-range",
"list" : objects_list_range
}]
}
with APIClient(client_args) as client:
login = client.login_with_api_key('3TsbPJ8ZKjaJGvFyoFqHFA==')
delete_objects_batch = client.api_call("delete-objects-batch", data_for_batch)
publish = client.api_call("publish")
print(delete_objects_batch.data)
Check Point áá±á¬á·ááºáá²ááºá¡áá áºááœááºááŸáááŸá¯ááœááºáá±á«áºáá¬ááá·áºáá¯ááºáá±á¬ááºáá»ááºáá»á¬ážá¡á¬ážáá¯á¶ážááẠAPI áá±á«áºááá¯ááŸá¯áá»á¬ážááá¯áá»ááºáá»ááºážáááŸááááºááŒá áºáááºá ááá¯á·ááŒá±á¬áá·áºá R80.40 ááœáẠááŒááºáááºááŒááºáááºááŒááºážááŸáá·áº Smart Task áá²á·ááá¯á· "á¡ááºá¹áá«áááºáá»á¬áž" áá±á«áºáá¬ááŒá®áž áááºááá¯ááºáᬠAPI áá±á«áºááá¯ááŸá¯áá»á¬ážááᯠáááºážááá¯á·á¡ááœáẠáá»ááºáá»ááºážááŒááºáááºáá²á·áááºá ááá¯á·á¡ááŒááºá Legacy consoles á០Unified Policy áá¯ááºááá¯á·ááŒá±á¬ááºážááá·áºá¡áá« áá¯ááºáá±á¬ááºááá¯ááºá áœááºážá¡á¬ážáá¯á¶áž API áá¶á·ááá¯ážááŸá¯ááá¯áááºáž áááŸááá«áááºá á¥ááá¬á¡á¬ážááŒáá·áºá R80.40 áá±á¬á·ááºáá²ááºáá¬ážááŸááºážááœáẠá á±á¬áá·áºáá»áŸá±á¬áºáá±áá±á¬ á¡ááºááááºááẠá¡ááœá±á¡ááŸá áºáá¯ááºá០áá±á«ááºážá ááºážáá¬ážáá±á¬ áá°áá«ááá¯ááºááá¯á· HTTPS á á áºáá±ážáá±ážáá°áá«áá ááŒá±á¬ááºážááœáŸá±á·ááŸá¯ááŒá áºááŒá®ážá á€áá¯ááºáá±á¬ááºáá»ááºááẠAPI áá±á«áºááá¯ááŸá¯áá»á¬ážááᯠáá»ááºáá»ááºážáááºáá¶áááŸááá²á·áááºá á€áááºááŸá¬ ááá¯ááºáá¶á¡áá»á¬ážá¡ááŒá¬ážááŸá á¥ááá±ááŸáá·áºá¡áá® á á áºáá±ážááŒááºážáááŒá¯ááẠáá¬ážááŒá áºáá¬ážáá±á¬ á á áºáá±ážááŒááºážá០á¡áá»áá¯ážá¡á á¬áž 3 áᯠ(áá»ááºážáá¬áá±ážá ááá¹áá¬áá±ážá á¡á áá¯ážááááºáá±á¬ááºááŸá¯áá»á¬áž) ááᯠáááºáá¯ááºáá¬ážááá·áº HTTPS á á áºáá±ážáá±ážáá°áá«áá ááááºáááºážáá¬áá°ážááá¯á· á ááºážáá»ááºážáá áºáá¯áááºáá±á¬ááºážááá·áº ááá°áá¬áá áºáá¯ááŒá áºáááºá
HTTPS á á áºáá±ážáá±ážáá°áá«áááœáẠá ááºážáá»ááºážáá áºáá¯ááá·áºáá«á
from cpapi import APIClient, APIClientArgs
client_args = APIClientArgs(server="192.168.47.240")
data = {
"layer" : "Default Layer",
"position" : "top",
"name" : "Legal Requirements",
"action": "bypass",
"site-category": ["Health", "Government / Military", "Financial Services"]
}
with APIClient(client_args) as client:
login = client.login_with_api_key('3TsbPJ8ZKjaJGvFyoFqHFA==')
add_https_rule = client.api_call("add-https-rule", data)
publish = client.api_call("publish")
Check Point Management Server ááœáẠPython Script áá»á¬ážááᯠáá¯ááºáá±á¬ááºááŒááºážá
á¡á¬ážáá¯á¶ážá¡áá°áá°áá«áá²á ááááºážáá»á¯ááºáá¬áá¬á០Python scripts áá»á¬ážááᯠááá¯ááºááá¯ááºáááºáááºáá¯á¶ááŸáá·áºáááºáááºááá·áº á¡áá»ááºá¡áááºáá«ááŸááááºá á¡ááŒá¬ážá ááºá០API áá¬áá¬ááá¯á· áá»áááºáááºááááá±á¬á¡áá« áááºážááẠá¡áá¯á¶ážáááºáááºá áá±á¬áºáá»á°ážááᯠááá·áºááœááºážááŒááºážá¡ááœáẠááŒáá·áºááŸá¯ááá·áº ááŒá±á¬ááºáááá áºááŒá¬ áá®áá®ááá¯ááᯠááŸááºáááºážáááºáá²á·áááºá cpapi á á®áá¶ááá·áºááœá²ááŸá¯áá¬áá¬ááœáẠPython scripts áá»á¬ážáááºáááºááŒááºážáá¡ááºá¹áá«áááºáá»á¬ážá á¥ááá¬á¡áá±ááŒáá·áºá network auditing áá²á·ááá¯á·áá±á¬ áá¯ááºáááºážáá áºáá¯á¡ááœáẠgateway á¡áá áºáá áºáá¯á configuration ááᯠá¡ááá¯á¡áá»á±á¬ááºáá¯ááºáá±á¬ááºáá±ážááá·áº script áá áºáá¯ááᯠrun ááẠáá¯á¶ááŒá¯á¶áá±ážá á áºáá±ážááŸá¯. áá»áœááºáá±á¬áºááá¯ááºááœááºáá²á·ááá±á¬á¡ááºá¹áá«áááºáá»á¬ážáá²ááŸáá áºáá¯- Python 2.7 ááœááºá áá¯ááºáá±á¬ááºáá»ááºáááºááá±á«áºáá±ážáá«á input ááá¯ááá¯á·ááŒá±á¬áá·áº á¡áá¯á¶ážááŒá¯áá°á០ááá·áºááœááºážáá¬ážáá±á¬ á¡áá»ááºá¡áááºáá»á¬ážááᯠáá¯ááºáá±á¬ááºááẠáá¯ááºáá±á¬ááºáá»ááºááᯠá¡áá¯á¶ážááŒá¯áá«áááºá raw_ááá·áºááœááºážááŸá¯. ááá¯ááºáá«áá áá¯ááºááẠá¡ááŒá¬ážá ááºáá»á¬ážá០á áááºááŒááºážáá²á·ááá¯á·áááºááŒá áºááŒá®áž áááºážááẠáá¯ááºáá±á¬ááºáá»ááºááᯠá¡áá¯á¶ážááŒá¯ááẠááá¯áá¡áááºááŒá±áá«áááºá login_as_rootááááºážáá»á¯ááºáá¬áá¬á áááºáááá¯ááºááá¯ááºá¡áá¯á¶ážááŒá¯áá°á¡áááºá á áá¬ážááŸááºááŸáá·áº IP ááááºá á¬ááá¯á·ááᯠáááºáá¶ááááºááŸááºáááºá
Security CheckUp ááᯠá¡ááŒááºááá·áºááœááºážáááºá¡ááœáẠScript
from __future__ import print_function
import getpass
import sys, os
sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), '..')))
from cpapi import APIClient, APIClientArgs
def main():
with APIClient() as client:
# if client.check_fingerprint() is False:
# print("Could not get the server's fingerprint - Check connectivity with the server.")
# exit(1)
login_res = client.login_as_root()
if login_res.success is False:
print("Login failed:n{}".format(login_res.error_message))
exit(1)
gw_name = raw_input("Enter the gateway name:")
gw_ip = raw_input("Enter the gateway IP address:")
if sys.stdin.isatty():
sic = getpass.getpass("Enter one-time password for the gateway(SIC): ")
else:
print("Attention! Your password will be shown on the screen!")
sic = raw_input("Enter one-time password for the gateway(SIC): ")
version = raw_input("Enter the gateway version(like RXX.YY):")
add_gw = client.api_call("add-simple-gateway", {'name' : gw_name, 'ipv4-address' : gw_ip, 'one-time-password' : sic, 'version': version.capitalize(), 'application-control' : 'true', 'url-filtering' : 'true', 'ips' : 'true', 'anti-bot' : 'true', 'anti-virus' : 'true', 'threat-emulation' : 'true'})
if add_gw.success and add_gw.data['sic-state'] != "communicating":
print("Secure connection with the gateway hasn't established!")
exit(1)
elif add_gw.success:
print("The gateway was added successfully.")
gw_uid = add_gw.data['uid']
gw_name = add_gw.data['name']
else:
print("Failed to add the gateway - {}".format(add_gw.error_message))
exit(1)
change_policy = client.api_call("set-access-layer", {"name" : "Network", "applications-and-url-filtering": "true", "content-awareness": "true"})
if change_policy.success:
print("The policy has been changed successfully")
else:
print("Failed to change the policy- {}".format(change_policy.error_message))
change_rule = client.api_call("set-access-rule", {"name" : "Cleanup rule", "layer" : "Network", "action": "Accept", "track": {"type": "Detailed Log", "accounting": "true"}})
if change_rule.success:
print("The cleanup rule has been changed successfully")
else:
print("Failed to change the cleanup rule- {}".format(change_rule.error_message))
# publish the result
publish_res = client.api_call("publish", {})
if publish_res.success:
print("The changes were published successfully.")
else:
print("Failed to publish the changes - {}".format(install_tp_policy.error_message))
install_access_policy = client.api_call("install-policy", {"policy-package" : "Standard", "access" : 'true', "threat-prevention" : 'false', "targets" : gw_uid})
if install_access_policy.success:
print("The access policy has been installed")
else:
print("Failed to install access policy - {}".format(install_tp_policy.error_message))
install_tp_policy = client.api_call("install-policy", {"policy-package" : "Standard", "access" : 'false', "threat-prevention" : 'true', "targets" : gw_uid})
if install_tp_policy.success:
print("The threat prevention policy has been installed")
else:
print("Failed to install threat prevention policy - {}".format(install_tp_policy.error_message))
# add passwords and passphrases to dictionary
with open('additional_pass.conf') as f:
line_num = 0
for line in f:
line_num += 1
add_password_dictionary = client.api_call("run-script", {"script-name" : "Add passwords and passphrases", "script" : "printf "{}" >> $FWDIR/conf/additional_pass.conf".format(line), "targets" : gw_name})
if add_password_dictionary.success:
print("The password dictionary line {} was added successfully".format(line_num))
else:
print("Failed to add the dictionary - {}".format(add_password_dictionary.error_message))
main() á
áá¬ážááŸááºá¡áááá¬ááºáá
áºáá¯áá«ááŸááá±á¬ ááá¯ááºáá
áºáá¯áá¥ááá¬
{
"passwords" : ["malware","malicious","infected","Infected"],
"phrases" : ["password","Password","Pass","pass","codigo","key","pwd","паÑПлÑ","ÐаÑПлÑ","ÐлÑÑ","клÑÑ","ÑОÑÑ","КОÑÑ"]
}
áá±á¬ááºáá»ááº
á€áá±á¬ááºážáá«ážááẠá¡áá¯ááºá á¡ááŒá±áá¶ááŒá áºááá¯ááºááŒá±áá»á¬ážááá¯áᬠááŒá¯á¶áá¯á¶áá«áááºá Python SDK ááŸáá·áº module cpapi(ááẠááá·áºááŸááºážáá¬ážááá·áºá¡ááá¯ááºážá á€á¡áá¬áá»á¬ážááẠá¡ááŸááºáááẠáá°áá®áá±á¬ á¡áááá¹áá«ááºáá»á¬ážááŒá áºáááº)á ဠmodule ááœáẠáá¯ááºááᯠáá±á·áá¬ááŒá®ážáá±á¬ááºá áááºážááŸáá·áº á¡áá¯ááºáá¯ááºáá¬ááœáẠááá¯áááẠááŒá áºááá¯ááºáá»á±áá»á¬ážááᯠáááºááœá±á·ááŸááááá·áºáááºá ááá·áºááá¯ááºááá¯áẠá¡áááºážáá»á¬ážá áá¯ááºáá±á¬ááºáá»ááºáá»á¬ážá áááºážáááºážáá»á¬ážááŸáá·áº ááááºážááŸááºáá»á¬ážááŒáá·áº ááŒáá·áºá áœááºááá¯áá±á¬ ááá¹áááŸáááẠááŒá áºááá¯ááºáááºá áááºááẠáááºáááá¯ážáááºááŸá¯áá»á¬ážááᯠá¡ááŒá²áá»áŸáá±ááá¯ááºááŒá®áž ááá¹áááŸá Check Point á¡ááœáẠá¡ááŒá¬áž script áá»á¬ážááᯠááŒáá·áºááŸá¯ááá¯ááºáá«áááºá á¡ááá¯ááºážá¡ááá¯ááºážáá²ááŸá¬ áá¯ááºáá¯áẠdeveloper áá»á¬ážááŸáá·áº á¡áá¯á¶ážááŒá¯áá°áá»á¬áž ááŸá áºáá¯áá¯á¶ážááᯠá á¯á ááºážáá±ážáá±á¬á
áá»á±á¬áºááœáŸááºá
áœá¬ coding áá²á· á¡áá¯á¶ážáááááºáá±ážáá²á·á¡ááœáẠáá»á±ážáá°ážáááºáá«áááºá
source: www.habr.com
