Forcepoint Security Management Center

Forcepoint SMC provides unified, centralized management of all models of Forcepoint engines whether physical, virtual or cloud—across large, geographically distributed enterprise environments.
This integration was integrated and tested with version 6.10 of Forcepoint Security Management Center

Configure Forcepoint Security Management Center in Cortex

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

forcepoint-smc-ip-list-create

Creates an IP list.

Base Command

forcepoint-smc-ip-list-create

Input

Context Output

Command example

!forcepoint-smc-ip-list-create name="name" addresses="1.1.1.1" comment="test"

Context Example

{
    "ForcepointSMC": {
        "IPList": {
            "Addresses": [
                "1.1.1.1"
            ],
            "Comment": "test",
            "Name": "name"
        }
    }
}

Human Readable Output

IP List name was created successfully.

forcepoint-smc-ip-list-update

Updates an IP list.

Base Command

forcepoint-smc-ip-list-update

Input

Context Output

Command example

!forcepoint-smc-ip-list-update name="name" addresses="1.2.3.4" comment="test" is_override=True

Context Example

{
    "ForcepointSMC": {
        "IPList": {
            "Addresses": [
                "1.2.3.4"
            ],
            "Comment": "test",
            "Name": "name"
        }
    }
}

Human Readable Output

IP List name was updated successfully.

forcepoint-smc-ip-list-list

Lists the IP Lists in the system.

Base Command

forcepoint-smc-ip-list-list

Input

Context Output

Command example

!forcepoint-smc-ip-list-list name="name"

Context Example

{
    "ForcepointSMC": {
        "IPList": {
            "Addresses": [
                "1.2.3.4"
            ],
            "Comment": "test",
            "Name": "name"
        }
    }
}

Human Readable Output

IP Lists

Name	Addresses	Comment
name	1.2.3.4	test

forcepoint-smc-ip-list-delete

Deletes an IP list.

Base Command

forcepoint-smc-ip-list-delete

Input

Context Output

Command example

!forcepoint-smc-ip-list-delete name="name"

Context Example

{
    "ForcepointSMC": {
        "IPList": {
            "Deleted": true,
            "Name": "name"
        }
    }
}

Human Readable Output

IP List name was deleted successfully.

forcepoint-smc-host-list

Lists the hosts in the system.

Base Command

forcepoint-smc-host-list

Input

Context Output

Command example

!forcepoint-smc-host-list name="name"

Context Example

{
    "ForcepointSMC": {
        "Host": {
            "Address": "1.1.1.1",
            "Comment": null,
            "IPv6_address": "",
            "Name": "name",
            "Secondary_address": []
        }
    }
}

Human Readable Output

Hosts

Name	Address
name	1.1.1.1

forcepoint-smc-host-create

Creates a new host.

Base Command

forcepoint-smc-host-create

Input

Context Output

Command example

!forcepoint-smc-host-create name="name" address="1.1.1.1"

Context Example

{
    "ForcepointSMC": {
        "Host": {
            "Address": "1.1.1.1",
            "Comment": "",
            "IPv6_address": "",
            "Name": "name",
            "Secondary_address": []
        }
    }
}

Human Readable Output

Host name was created successfully.

forcepoint-smc-host-update

Updates a host.

Base Command

forcepoint-smc-host-update

Input

Context Output

Command example

!forcepoint-smc-host-update name="name" address="1.2.3.4"

Context Example

{
    "ForcepointSMC": {
        "Host": {
            "Address": "1.2.3.4",
            "Comment": null,
            "IPv6_address": "",
            "Name": "name",
            "Secondary_address": []
        }
    }
}

Human Readable Output

Host name was updated successfully.

forcepoint-smc-host-delete

Deletes a host.

Base Command

forcepoint-smc-host-delete

Input

Context Output

Command example

!forcepoint-smc-host-delete name="name"

Context Example

{
    "ForcepointSMC": {
        "Host": {
            "Deleted": true,
            "Name": "name"
        }
    }
}

Human Readable Output

Host name was deleted successfully.

forcepoint-smc-domain-create

Creates a new domain.

Base Command

forcepoint-smc-domain-create

Input

Context Output

Command example

!forcepoint-smc-domain-create name="name"

Context Example

{
    "ForcepointSMC": {
        "Domain": {
            "Comment": "",
            "Name": "name"
        }
    }
}

Human Readable Output

Domain name was created successfully.

forcepoint-smc-domain-list

Lists the domains in the system.

Base Command

forcepoint-smc-domain-list

Input

Context Output

Command example

!forcepoint-smc-domain-list name="name"

Context Example

{
    "ForcepointSMC": {
        "Domain": {
            "Comment": null,
            "Name": "name"
        }
    }
}

Human Readable Output

Domains

Name
name

forcepoint-smc-domain-delete

Deletes a domain.

Base Command

forcepoint-smc-domain-delete

Input

Context Output

Command example

!forcepoint-smc-domain-delete name="name"

Context Example

{
    "ForcepointSMC": {
        "Domain": {
            "Deleted": true,
            "Name": "name"
        }
    }
}

Human Readable Output

Domain name was deleted successfully.

forcepoint-smc-policy-template-list

Lists the policy templates in the system.

Base Command

forcepoint-smc-policy-template-list

Input

Context Output

Command example

!forcepoint-smc-policy-template-list limit=1

Context Example

{
    "ForcepointSMC": {
        "PolicyTemplate": {
            "Comment": "Firewall Template Policy that uses Inspection rules from the No Inspection Policy.",
            "Name": "Firewall Template"
        }
    }
}

Human Readable Output

Policy template

Name	Comment
Firewall Template	Firewall Template Policy that uses Inspection rules from the No Inspection Policy.

forcepoint-smc-firewall-policy-list

Lists the firewall policies in the system.

Base Command

forcepoint-smc-firewall-policy-list

Input

Context Output

Command example

!forcepoint-smc-firewall-policy-list limit=1

Context Example

{
    "ForcepointSMC": {
        "FirewallPolicy": {
            "Comment": null,
            "Name": "Policy For May To Test PC"
        }
    }
}

Human Readable Output

Firewall policies

Name
Policy For May To Test PC

forcepoint-smc-firewall-policy-create

Creates a firewall policy.

Base Command

forcepoint-smc-firewall-policy-create

Input

Context Output

Command example

!forcepoint-smc-firewall-policy-create name="name" template="Firewall Template"

Context Example

{
    "ForcepointSMC": {
        "Policy": {
            "Comment": null,
            "Name": "name"
        }
    }
}

Human Readable Output

Firewall policy name was created successfully.

forcepoint-smc-firewall-policy-delete

Deletes a firewall policy.

Base Command

forcepoint-smc-firewall-policy-delete

Input

Context Output

Command example

!forcepoint-smc-firewall-policy-delete name="name"

Context Example

{
    "ForcepointSMC": {
        "Policy": {
            "Deleted": true,
            "Name": "name"
        }
    }
}

Human Readable Output

Firewall policy name was deleted successfully.

forcepoint-smc-rule-create

Creates a rule.

Base Command

forcepoint-smc-rule-create

Input

Context Output

Command example

!forcepoint-smc-rule-create policy_name="name" action=allow rule_name="test" destination_ip_list="test" ip_version="V4"

Context Example

{
    "ForcepointSMC": {
        "Rule": {
            "Action": [
                "allow"
            ],
            "Comment": "",
            "Destinations": [
                "test"
            ],
            "ID": "2097186.0",
            "IP_version": "V4",
            "Name": "test",
            "Services": [],
            "Sources": []
        }
    }
}

Human Readable Output

The rule test to the policy name was created successfully.

forcepoint-smc-rule-update

Updates a rule.

Base Command

forcepoint-smc-rule-update

Input

Context Output

There is no context output for this command.

Command example

!forcepoint-smc-rule-update policy_name="name" action=continue rule_name="test" source_ip_list="test" ip_version="V4"

Human Readable Output

The rule test to the policy name was updated successfully.

forcepoint-smc-rule-list

Lists the rules in a specific policy.

Base Command

forcepoint-smc-rule-list

Input

Context Output

Command example

!forcepoint-smc-rule-list policy_name="name"

Context Example

{
    "ForcepointSMC": {
        "Rule": {
            "Actions": [
                "continue"
            ],
            "Comment": "",
            "Destinations": [
                "test"
            ],
            "ID": "2097186.1",
            "IP_version": "V4",
            "Name": "test",
            "Services": [],
            "Sources": [
                "test"
            ]
        }
    }
}

Human Readable Output

Rules

Name	ID	IP_version	Sources	Destinations	Actions
test	2097186.1	V4	test	test	continue

forcepoint-smc-rule-delete

Deletes a rule.

Base Command

forcepoint-smc-rule-delete

Input

Context Output

Command example

!forcepoint-smc-rule-delete policy_name="name" rule_name="test" ip_version=V4

Context Example

{
    "ForcepointSMC": {
        "Rule": {
            "Deleted": true,
            "Name": "test"
        }
    }
}

Human Readable Output

Rule test was deleted successfully.

forcepoint-smc-engine-list

Lists the engines in the system.

Base Command

forcepoint-smc-engine-list

Input

Context Output

Command example

!forcepoint-smc-engine-list limit=1

Context Example

{
    "ForcepointSMC": {
        "Engine": {
            "Comment": "Forcepoint Engine element pre-populated by installer",
            "Name": "Forcepoint Engine"
        }
    }
}

Human Readable Output

Engines

Name	Comment
Forcepoint Engine	Forcepoint Engine element pre-populated by installer

forcepoint-smc-engine-refresh

Refreshes the specified engines. Use the forcepoint-smc-engine-list command to list the engines in the system.

Base Command

forcepoint-smc-engine-refresh

Input

Context Output

There is no context output for this command.