Check Point Deprecated

Deprecated. Use the Check Point Firewall v2 integration instead. Manage Check Point firewall via API

Network Security · Check Point Firewall

Details

IDCheck Point
ProviderCheckPoint Software Technologies
CategoryNetwork Security
From Version5.0.0
Supported ModulesAgentix XSIAM EDR Cortex Cloud Cloud Runtime Security

README

Use the Check Point Firewall integration to identify and control applications by user and scan content to stop threats.

Configure Check Point on Cortex XSOAR

  1. Navigate to Settings > Integrations > Servers & Services.
  2. Search for Check Point.
  3. Click Add instance to create and configure a new integration instance.
    • Name: a textual name for the integration instance.
    • Server URL (e.g., https://192.168.0.1)
    • Port
    • Username
    • Trust any certificate (not secure)
    • Use system proxy settings
  4. Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

  1. Get items in an access rulebase: checkpoint-show-access-rule-base
  2. Set attributes of an access rule object: checkpoint-set-rule
  3. Get the status of a Check Point task: checkpoint-task-status
  4. Get all host objects: checkpoint-show-hosts
  5. Block an IP address: checkpoint-block-ip
  6. Use the Check Point Management API: checkpoint
  7. Delete a rule: checkpoint-delete-rule

1. Get items in an access rulebase

Show items in an access rulebase configured in Check Point Firewall.

Base Command

checkpoint-show-access-rule-base

Input
Argument Name Description Required
name The object name. Should be unique in the domain. Required
uid The unique identifier of the object. Optional

 

Context Output
Path Type Description
CheckpointFWRule.Name string The object name. Should be unique in the domain.
CheckpointFWRule.UID string The unique identifier of the object.
CheckpointFWRule.Type string The object type.
CheckpointFWRule.Action string The level of detail returned depends on the “details-level” field of the request (Accept, Drop, Apply Layer, Ask, Info). This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWRule.ActionSetting string Action settings.
CheckpointFWRule.CustomFields string Custom fields.
CheckpointFWRule.Data string The level of detail returned depends on the “details-level” field of the request. This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWRule.Data.Name string The object name. Should be unique in the domain.
CheckpointFWRule.UID string The unique identifier of the object.
CheckpointFWRule.Type string The object type.
CheckpointFWRule.Data.Domain string Information about the domain that the object belongs to.
CheckpointFWRule.DataDirection string The direction the file types processing is applied to.
CheckpointFWRule.DataNegate string “True” if negate is set for data.
CheckpointFWRule.Destination string Collection of network objects identified by the name or UID. The level of detail returned depends on the “details-level” field of the request. This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWRule.DestinationNegate string “True” if negate is set for the destination.
CheckpointFWRule.Domain string Information about the domain that the object belongs to.
CheckpointFWRule.Domain.Name string The object name. Should be unique in the domain.
CheckpointFWRule.Domain.UID string The unique identifier of the object.
CheckpointFWRule.Domain.Type string The domain type.
CheckpointFWRule.Enabled string Whether the rule is enabled or disabled.
CheckpointFWRule.Hits number The hits count object.
CheckpointFWRule.Hits.FirstDate string The first date of hits.
CheckpointFWRule.Hits.LastDate string The last date of hits.
CheckpointFWRule.Hits.Level string The level of hits.
CheckpointFWRule.Hits.Percentage string The percentage of hits.
CheckpointFWRule.Hits.Value string The value of hits.

 

Command Example
!checkpoint-show-access-rule-base name="Network"
Human Readable Output

screen shot 2019-02-18 at 16 15 48

2. Set attributes of an access rule object

Sets attributes of an access rule object configured in Check Point Firewall.

Base Command

checkpoint-set-rule

Input
Argument Name Description Required
uid The unique identifier of the object. Optional
name The object name. Optional
rule_number The rule number. Optional
layer The layer that the rule belongs to, identified by the name or UID. Required
enabled If “true”, the rule will be enabled. If “false”, the rule will be disabled. Optional

 

Context Output
Path Type Description
CheckpointFWRule.Name string The object name. Should be unique in the domain.
CheckpointFWRule.UID string The unique identifier of the object.
CheckpointFWRule.Type string The object type.
CheckpointFWRule.Action string The level of detail returned depends on the “details-level” field of the request (Accept, Drop, Apply Layer, Ask, Info). This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWRule.ActionSetting string Action settings.
CheckpointFWRule.CustomFields string Custom fields.
CheckpointFWRule.Data string The level of detail returned depends on the “details-level” field of the request. This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWRule.Data.Name string The object name. Should be unique in the domain.
CheckpointFWRule.UID string The unique identifier of the object.
CheckpointFWRule.Type string The object type.
CheckpointFWRule.Data.Domain string Information about the domain that the object belongs to.
CheckpointFWRule.DataDirection string The direction the file types processing is applied to.
CheckpointFWRule.DataNegate string “True” if negate is set for data.
CheckpointFWRule.Destination string Collection of network objects identified by the name or UID. The level of detail returned depends on the “details-level” field of the request. This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWRule.DestinationNegate string “True” if negate is set for the destination.
CheckpointFWRule.Domain string Information about the domain that the object belongs to.
CheckpointFWRule.Domain.Name string Object name. Should be unique in domain
CheckpointFWRule.Domain.UID string The unique identifier of the object.
CheckpointFWRule.Domain.Type string Domain type.
CheckpointFWRule.Enabled string Whether the rule is enabled or disabled.
CheckpointFWRule.Hits number The hits count object.
CheckpointFWRule.Hits.FirstDate string The first date of hits.
CheckpointFWRule.Hits.LastDate string The last date of hits.
CheckpointFWRule.Hits.Level string The level of hits.
CheckpointFWRule.Hits.Percentage string The percentage of hits.
CheckpointFWRule.Hits.Value string The value of hits.

 

Command Example
!checkpoint-set-rule name="bar-from-6.6.6.5" layer="8a5e96fb-c793-457f-b78f-c667074223a5"
Human Readable Output

screen shot 2019-02-18 at 13 55 04

3. Get the status of a Check Point task

Shows status of a Check Point task, by task UUID.

Base Command

checkpoint-task-status

Input
Argument Name Description Required
task_id A CSV list of task unique identifiers. Required

 

Context Output
Path Type Description
CheckpointFWTask.Name string The object name. Should be unique in the domain.
CheckpointFWTask.UID string The unique identifier of the object.
CheckpointFWTask.Type string The object type.
CheckpointFWTask.Domain string Information about the domain that the object belongs to.
CheckpointFWTask.Domain.Name string The object name. Should be unique in the domain.
CheckpointFWTask.Domain.UID string The unique identifier of the object.
CheckpointFWTask.Domain.Type string Domain type.
CheckpointFWTask.LastUpdateTime string The last update date and time (in international ISO 8601 format).
CheckpointFWTask.MetaInfo.CreationTime string The object creation time.
CheckpointFWTask.MetaInfo.Creator string The object creator.
CheckpointFWTask.MetaInfo.LastModifier string The last modifier of object.
CheckpointFWTask.MetaInfo.LastModifyTime string The object last modification time.
CheckpointFWTask.MetaInfo.LockStatus string The object lock state. Editing objects locked by other sessions is not supported.
CheckpointFWTask.MetaInfo.ValidationStatus string The object validation state (ok, info, warning, error).
CheckpointFWTask.ProgressPercentage string The object progress percentage.
CheckpointFWTask.ReadOnly string Read only.
CheckpointFWTask.StartTime string The start time date and time (in international ISO 8601 format).
CheckpointFWTask.Status string The task status.
CheckpointFWTask.Suppressed string Is suppressed.
CheckpointFWTask.Tags string A collection of tag objects identified by the name or UID. The level of detail returned depends on the “details-level” field of the request. This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWTask.Details string The task details. The level of detail returned depends on the “details-level” field of the request. This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWTask.ID string The asynchronous unique identifier of the task.
CheckpointFWTask.TaskName string The task name.

 

4. Get all host objects

Shows all host objects configured in Check Point Firewall.

Base Command

checkpoint-show-hosts

Input
Argument Name Description Required
limit The maximum number of results to return. Optional
offset The number of results to skip before starting to return them. Optional
order Sorts results by the given field. The default is the random order. Optional

 

Context Output
Path Type Description
Endpoint.Hostname string Object name. Should be unique in domain
Endpoint.UID string The unique identifier of the object.
Endpoint.Type string The object type.
Endpoint.Domain string Information about the domain that the object belongs to.
Endpoint.Domain.Name string The object name. Should be unique in the domain.
Endpoint.Domain.UID string Object unique identifier
Endpoint.Domain.Type string Type of the object

 

Command Example
!checkpoint-show-hosts
Human Readable Output

screen shot 2019-02-18 at 14 26 54

5. Block an IP address

Block one or more IP addresses using Checkpoint Firewall

Base Command

checkpoint-block-ip

Input
Argument Name Description Required
ip A CSV list of IP addresses to block. Required
direction Whether to block traffic “to” or “from” the IPs, or “both”. Default is “both”. Optional
rulename The base name for added rules inside Check Point DB. Required

 

Context Output
Path Type Description
CheckpointFWRule.Name string The object name. Should be unique in the domain.
CheckpointFWRule.UID string The unique identifier of the object.
CheckpointFWRule.Type string Type of the object
CheckpointFWRule.Action string The level of detail returned depends on the "details-level" field of the request (Accept, Drop, Apply Layer, Ask, Info). This table shows the level of detail shown when 'details-level" is set to standard.
CheckpointFWRule.ActionSetting string Action settings.
CheckpointFWRule.CustomFields string Custom fields.
CheckpointFWRule.Data string The level of detail returned depends on the “details-level” field of the request. This table shows the level of detail shown when “details-level” is set to standard.
CheckpointFWRule.Data.Name string The object name. Should be unique in the domain.
CheckpointFWRule.UID string The unique identifier of the object.
CheckpointFWRule.Type string The object type.
CheckpointFWRule.Data.Domain string Information about the domain that the object belongs to.
CheckpointFWRule.DataDirection string The direction the file types processing is applied to.
CheckpointFWRule.DataNegate string "True" if negate is set for data.
CheckpointFWRule.Destination string A collection of network objects identified by the name or UID. The level of detail returned depends on the “details-level” field of the request. This table shows the level of detail shown when details-level is set to standard.
CheckpointFWRule.DestinationNegate string “True” if negate is set for the destination.
CheckpointFWRule.Domain string Information about the domain that the object belongs to.
CheckpointFWRule.Domain.Name string The object name. Should be unique in the domain.
CheckpointFWRule.Domain.UID string The unique identifer of the object.
CheckpointFWRule.Domain.Type string The domain type.
CheckpointFWRule.Enabled string Whether the rule is enabled or disabled.
CheckpointFWRule.Hits number Hits count object
CheckpointFWRule.Hits.FirstDate string First of hits
CheckpointFWRule.Hits.LastDate string The last date of hits.
CheckpointFWRule.Hits.Level string The level of hits.
CheckpointFWRule.Hits.Percentage string The percentage of hits.
CheckpointFWRule.Hits.Value string The value of hits.

 

6. Use the Check Point Management API

Enables you to use the Check Point Management API. When using this command, the required format is: ‘command’=.
This command requires management server R80 or later.

Base Command

checkpoint

Input

There are no inputs for this command.

Context Output

There is no context output for this command.

7. Delete a rule

Deletes a rule from Check Point Firewall.

Base Command

checkpoint-delete-rule

Input
Argument Name Description Required
uid The UID of the rule. Optional
name The name of the rule. Optional
layer The layer, for example: Network Required

 

Context Output

There is no context output for this command.

Troubleshooting

If you receive the following 400 Bad Request error when running the checkpoint-block-ip command, you need to disconnect (clear) all other sessions in the SmartConsole, even if they appear to be disconnected. In SmartConsole, navigate to Manage & Settings > Sessions > View Sessions.

400 Bad Request - Runtime error: An object is locked by another session 

Configuration parameters

  • server — Server URL (e.g. https://192.168.0.1) (required)
  • port — Port (required)
  • credentials — Username (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (7)

  • checkpoint

    Use Check Point's Management API (requires management server R80 or later). Specifying 'command'=<API command> is mandatory

  • checkpoint-block-ip

    Block one or more IP addresses using Checkpoint Firewall

  • checkpoint-delete-rule

    Delete rule from firewall

  • checkpoint-set-rule

    Set attributes of an access rule object configured in Checkpoint FW

  • checkpoint-show-access-rule-base

    Show items in an access rulebase configured in Checkpoint FW

  • checkpoint-show-hosts

    Show host objects configured in Checkpoint FW

  • checkpoint-task-status

    Shows status of a checkpoint task by task uuid

Source

CheckPoint.js CheckPoint.yml
Download History Raw 
commonfields:
  id: Check Point
  version: -1
name: Check Point
display: Check Point Firewall (Deprecated)
deprecated: true
category: Network Security
provider: CheckPoint Software Technologies
description: Deprecated. Use the Check Point Firewall v2 integration instead. Manage Check Point firewall via API
configuration:
- display: Server URL (e.g. https://192.168.0.1)
  name: server
  defaultvalue: ""
  type: 0
  required: true
- display: Port
  name: port
  defaultvalue: "443"
  type: 0
  required: true
- display: Username
  name: credentials
  defaultvalue: ""
  type: 9
  required: true
- display: Trust any certificate (not secure)
  name: insecure
  defaultvalue: ""
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  defaultvalue: ""
  type: 8
  required: false
script:
  script: ''
  type: javascript
  commands:
  - name: checkpoint-show-access-rule-base
    arguments:
    - name: name
      required: true
      description: Object name. Should be unique in domain.
    - name: uid
      description: Object unique identifier.
    outputs:
    - contextPath: CheckpointFWRule.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: CheckpointFWRule.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWRule.Type
      description: Type of the object
      type: string
    - contextPath: CheckpointFWRule.Action
      description: Accept, Drop, Apply Layer, Ask, Info. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWRule.ActionSetting
      description: Action settings
      type: string
    - contextPath: CheckpointFWRule.CustomFields
      description: Custom fields
      type: string
    - contextPath: CheckpointFWRule.Data
      description: How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWRule.Data.Name
      description: Object name. Should be unique in domain.
      type: string
    - contextPath: CheckpointFWRule.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWRule.Type
      description: Type of the object
      type: string
    - contextPath: CheckpointFWRule.Data.Domain
      description: Information about the domain the object belongs to
      type: string
    - contextPath: CheckpointFWRule.DataDirection
      description: On which direction the file types processing is applied
      type: string
    - contextPath: CheckpointFWRule.DataNegate
      description: True if negate is set for data
      type: string
    - contextPath: CheckpointFWRule.Destination
      description: Collection of Network objects identified by the name or UID. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWRule.DestinationNegate
      description: True if negate is set for destination.
      type: string
    - contextPath: CheckpointFWRule.Domain
      description: Information about the domain the object belongs to.
      type: string
    - contextPath: CheckpointFWRule.Domain.Name
      description: Object name. Should be unique in domain.
      type: string
    - contextPath: CheckpointFWRule.Domain.UID
      description: Object unique identifier.
      type: string
    - contextPath: CheckpointFWRule.Domain.Type
      description: Domain type
      type: string
    - contextPath: CheckpointFWRule.Enabled
      description: Enable/Disable the rule
      type: string
    - contextPath: CheckpointFWRule.Hits
      description: Hits count object
      type: number
    - contextPath: CheckpointFWRule.Hits.FirstDate
      description: First of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.LastDate
      description: Last date of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Level
      description: Level of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Percentage
      description: Percentage of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Value
      description: Value of hits
      type: string
    description: Show items in an access rulebase configured in Checkpoint FW
  - name: checkpoint-set-rule
    arguments:
    - name: uid
      description: Object unique identifier.
    - name: name
      description: Object name.
    - name: rule_number
      description: Rule number.
    - name: layer
      required: true
      description: Layer that the rule belongs to identified by the name or UID.
    - name: enabled
      description: true to enable the rule, false to disable it.
    outputs:
    - contextPath: CheckpointFWRule.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: CheckpointFWRule.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWRule.Type
      description: Type of the object
      type: string
    - contextPath: CheckpointFWRule.Action
      description: Accept, Drop, Apply Layer, Ask, Info. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWRule.ActionSetting
      description: Action settings
      type: string
    - contextPath: CheckpointFWRule.CustomFields
      description: Custom fields
      type: string
    - contextPath: CheckpointFWRule.Data
      description: How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set  to standard
      type: string
    - contextPath: CheckpointFWRule.Data.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: CheckpointFWRule.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWRule.Type
      description: Type of the object
      type: string
    - contextPath: CheckpointFWRule.Data.Domain
      description: Information about the domain the object belongs to
      type: string
    - contextPath: CheckpointFWRule.DataDirection
      description: On which direction the file types processing is applied
      type: string
    - contextPath: CheckpointFWRule.DataNegate
      description: True if negate is set for data
      type: string
    - contextPath: CheckpointFWRule.Destination
      description: Collection of Network objects identified by the name or UID. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWRule.DestinationNegate
      description: True if negate is set for destination
      type: string
    - contextPath: CheckpointFWRule.Domain
      description: Information about the domain the object belongs to
      type: string
    - contextPath: CheckpointFWRule.Domain.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: CheckpointFWRule.Domain.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWRule.Domain.Type
      description: Domain type
      type: string
    - contextPath: CheckpointFWRule.Enabled
      description: Enable/Disable the rule
      type: string
    - contextPath: CheckpointFWRule.Hits
      description: Hits count object
      type: number
    - contextPath: CheckpointFWRule.Hits.FirstDate
      description: First of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.LastDate
      description: Last date of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Level
      description: Level of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Percentage
      description: Percentage of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Value
      description: Value of hits
      type: string
    description: Set attributes of an access rule object configured in Checkpoint FW
  - name: checkpoint-task-status
    arguments:
    - name: task_id
      required: true
      description: Unique identifier of one or more tasks.
    outputs:
    - contextPath: CheckpointFWTask.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: CheckpointFWTask.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWTask.Type
      description: Type of the object
      type: string
    - contextPath: CheckpointFWTask.Domain
      description: Information about the domain the object belongs to.
      type: string
    - contextPath: CheckpointFWTask.Domain.Name
      description: Object name. Should be unique in domain.
      type: string
    - contextPath: CheckpointFWTask.Domain.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWTask.Domain.Type
      description: Domain type
      type: string
    - contextPath: CheckpointFWTask.LastUpdateTime
      description: Last update date and time represented in international ISO 8601 format
      type: string
    - contextPath: CheckpointFWTask.MetaInfo.CreationTime
      description: Object creation time
      type: string
    - contextPath: CheckpointFWTask.MetaInfo.Creator
      description: Object creator
      type: string
    - contextPath: CheckpointFWTask.MetaInfo.LastModifier
      description: Last modifier of object
      type: string
    - contextPath: CheckpointFWTask.MetaInfo.LastModifyTime
      description: Object last modification time
      type: string
    - contextPath: CheckpointFWTask.MetaInfo.LockStatus
      description: Object lock state. It's not allowed to edit objects locked by other session.
      type: string
    - contextPath: CheckpointFWTask.MetaInfo.ValidationStatus
      description: Object validation state - ok, info, warning, error
      type: string
    - contextPath: CheckpointFWTask.ProgressPercentage
      description: Object progress percentage
      type: string
    - contextPath: CheckpointFWTask.ReadOnly
      description: Read only
      type: string
    - contextPath: CheckpointFWTask.StartTime
      description: Start time date and time represented in international ISO 8601 format.
      type: string
    - contextPath: CheckpointFWTask.Status
      description: Task status
      type: string
    - contextPath: CheckpointFWTask.Suppressed
      description: Is suppressed
      type: string
    - contextPath: CheckpointFWTask.Tags
      description: Collection of tag objects identified by the name or UID. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWTask.Details
      description: Task details. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWTask.ID
      description: Asynchronous task unique identifier
      type: string
    - contextPath: CheckpointFWTask.TaskName
      description: Task name
      type: string
    description: Shows status of a checkpoint task by task uuid
  - name: checkpoint-show-hosts
    arguments:
    - name: limit
      description: No more than that many results will be returned.
    - name: offset
      description: Skip that many results before beginning to return them.
    - name: order
      auto: PREDEFINED
      predefined:
      - ASC
      - DESC
      description: Sorts results by the given field. The default is the random order.
    outputs:
    - contextPath: Endpoint.Hostname
      description: Object name. Should be unique in domain
      type: string
    - contextPath: Endpoint.UID
      description: Object unique identifier
      type: string
    - contextPath: Endpoint.Type
      description: Type of the object
      type: string
    - contextPath: Endpoint.Domain
      description: Information about the domain the object belongs to
      type: string
    - contextPath: Endpoint.Domain.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: Endpoint.Domain.UID
      description: Object unique identifier
      type: string
    - contextPath: Endpoint.Domain.Type
      description: Type of the object
      type: string
    description: Show host objects configured in Checkpoint FW
  - name: checkpoint-block-ip
    arguments:
    - name: ip
      required: true
      description: IP addresse to be blocked
    - name: direction
      auto: PREDEFINED
      predefined:
      - to
      - from
      - both
      description: Whether to block traffic "to" or "from" the IPs, or "both". Default     is "both".
    - name: rulename
      description: Base name for added rules inside checkpoint db
      deprecated: true
    - name: ipname
      required: true
      description: Base name for added ip/hosts inside checkpoint db
    outputs:
    - contextPath: CheckpointFWRule.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: CheckpointFWRule.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWRule.Type
      description: Type of the object
      type: string
    - contextPath: CheckpointFWRule.Action
      description: Accept, Drop, Apply Layer, Ask, Info. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWRule.ActionSetting
      description: Action settings
      type: string
    - contextPath: CheckpointFWRule.CustomFields
      description: Custom fields
      type: string
    - contextPath: CheckpointFWRule.Data
      description: How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWRule.Data.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: CheckpointFWRule.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWRule.Type
      description: Type of the object
      type: string
    - contextPath: CheckpointFWRule.Data.Domain
      description: Information about the domain the object belongs to
      type: string
    - contextPath: CheckpointFWRule.DataDirection
      description: On which direction the file types processing is applied
      type: string
    - contextPath: CheckpointFWRule.DataNegate
      description: True if negate is set for data
      type: string
    - contextPath: CheckpointFWRule.Destination
      description: Collection of Network objects identified by the name or UID. How much details are returned depends on the details-level field of the request. This table shows the level of detail shown when details-level is set to standard
      type: string
    - contextPath: CheckpointFWRule.DestinationNegate
      description: True if negate is set for destination
      type: string
    - contextPath: CheckpointFWRule.Domain
      description: Information about the domain the object belongs to
      type: string
    - contextPath: CheckpointFWRule.Domain.Name
      description: Object name. Should be unique in domain
      type: string
    - contextPath: CheckpointFWRule.Domain.UID
      description: Object unique identifier
      type: string
    - contextPath: CheckpointFWRule.Domain.Type
      description: Domain type
      type: string
    - contextPath: CheckpointFWRule.Enabled
      description: Enable/Disable the rule
      type: string
    - contextPath: CheckpointFWRule.Hits
      description: Hits count object
      type: number
    - contextPath: CheckpointFWRule.Hits.FirstDate
      description: First of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.LastDate
      description: Last date of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Level
      description: Level of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Percentage
      description: Percentage of hits
      type: string
    - contextPath: CheckpointFWRule.Hits.Value
      description: Value of hits
      type: string
    description: Block one or more IP addresses using Checkpoint Firewall
  - name: checkpoint
    arguments: []
    description: Use Check Point's Management API (requires management server R80 or later). Specifying 'command'=<API command> is mandatory
  - name: checkpoint-delete-rule
    arguments:
    - name: uid
      description: uid of the rule
    - name: name
      description: name of the rule
    - name: layer
      required: true
      default: true
      description: e.g. Network
    description: Delete rule from firewall
tests:
- No tests - deprecated
fromversion: 5.0.0