�
�Udac @` s� d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
m Z d d l m
Z
d d
l m Z m Z m Z d � Z e d k r� e � n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bys]
---
module: cp_mgmt_access_rule
short_description: Manages access-rule objects on Check Point over Web Services API
description:
- Manages access-rule objects on Check Point devices including creating, updating and removing objects.
- All operations are performed over Web Services API.
version_added: "2.9"
author: "Or Soffer (@chkp-orso)"
options:
layer:
description:
- Layer that the rule belongs to identified by the name or UID.
type: str
position:
description:
- Position in the rulebase.
type: str
name:
description:
- Object name.
type: str
required: True
action:
description:
- a "Accept", "Drop", "Ask", "Inform", "Reject", "User Auth", "Client Auth", "Apply Layer".
type: str
action_settings:
description:
- Action settings.
type: dict
suboptions:
enable_identity_captive_portal:
description:
- N/A
type: bool
limit:
description:
- N/A
type: str
content:
description:
- List of processed file types that this rule applies on.
type: list
content_direction:
description:
- On which direction the file types processing is applied.
type: str
choices: ['any', 'up', 'down']
content_negate:
description:
- True if negate is set for data.
type: bool
custom_fields:
description:
- Custom fields.
type: dict
suboptions:
field_1:
description:
- First custom field.
type: str
field_2:
description:
- Second custom field.
type: str
field_3:
description:
- Third custom field.
type: str
destination:
description:
- Collection of Network objects identified by the name or UID.
type: list
destination_negate:
description:
- True if negate is set for destination.
type: bool
enabled:
description:
- Enable/Disable the rule.
type: bool
inline_layer:
description:
- Inline Layer identified by the name or UID. Relevant only if "Action" was set to "Apply Layer".
type: str
install_on:
description:
- Which Gateways identified by the name or UID to install the policy on.
type: list
service:
description:
- Collection of Network objects identified by the name or UID.
type: list
service_negate:
description:
- True if negate is set for service.
type: bool
source:
description:
- Collection of Network objects identified by the name or UID.
type: list
source_negate:
description:
- True if negate is set for source.
type: bool
time:
description:
- List of time objects. For example, "Weekend", "Off-Work", "Every-Day".
type: list
track:
description:
- Track Settings.
type: dict
suboptions:
accounting:
description:
- Turns accounting for track on and off.
type: bool
alert:
description:
- Type of alert for the track.
type: str
choices: ['none', 'alert', 'snmp', 'mail', 'user alert 1', 'user alert 2', 'user alert 3']
enable_firewall_session:
description:
- Determine whether to generate session log to firewall only connections.
type: bool
per_connection:
description:
- Determines whether to perform the log per connection.
type: bool
per_session:
description:
- Determines whether to perform the log per session.
type: bool
type:
description:
- a "Log", "Extended Log", "Detailed Log", "None".
type: str
user_check:
description:
- User check settings.
type: dict
suboptions:
confirm:
description:
- N/A
type: str
choices: ['per rule', 'per category', 'per application/site', 'per data type']
custom_frequency:
description:
- N/A
type: dict
suboptions:
every:
description:
- N/A
type: int
unit:
description:
- N/A
type: str
choices: ['hours', 'days', 'weeks', 'months']
frequency:
description:
- N/A
type: str
choices: ['once a day', 'once a week', 'once a month', 'custom frequency...']
interaction:
description:
- N/A
type: str
vpn:
description:
- Communities or Directional.
type: list
suboptions:
community:
description:
- List of community name or UID.
type: list
directional:
description:
- Communities directional match condition.
type: list
suboptions:
from:
description:
- From community name or UID.
type: str
to:
description:
- To community name or UID.
type: str
comments:
description:
- Comments string.
type: str
details_level:
description:
- The level of detail for some of the fields in the response can vary from showing only the UID value of the object to a fully detailed
representation of the object.
type: str
choices: ['uid', 'standard', 'full']
ignore_warnings:
description:
- Apply changes ignoring warnings.
type: bool
ignore_errors:
description:
- Apply changes ignoring errors. You won't be able to publish such a changes. If ignore-warnings flag was omitted - warnings will also be ignored.
type: bool
extends_documentation_fragment: checkpoint_objects
s�
- name: add-access-rule
cp_mgmt_access_rule:
layer: Network
name: Rule 1
position: 1
service:
- SMTP
- AOL
state: present
- name: set-access-rule
cp_mgmt_access_rule:
action: Ask
action_settings:
enable_identity_captive_portal: true
limit: Upload_1Gbps
layer: Network
name: Rule 1
state: present
- name: delete-access-rule
cp_mgmt_access_rule:
layer: Network
name: Rule 2
state: absent
s�
cp_mgmt_access_rule:
description: The checkpoint object created or updated.
returned: always, except when deleting the object.
type: dict
( t
AnsibleModule( t
Connection( t$ checkpoint_argument_spec_for_objectst api_callt api_call_for_rulec B C` s t d t d d � d t d d � d t d d d t � d t d d � d t d d d
t d t d d � d
t d d � � � d t d d � d t d d d d d d g � d t d d � d t d d d
t d t d d � d t d d � d t d d � � � d t d d � d t d d � d t d d � d t d d � d t d d � d t d d � d t d d � d! t d d � d" t d d � d# t d d � d$ t d d d
t d% t d d � d& t d d d d' d& d( d) d* d+ d, g � d- t d d � d. t d d � d/ t d d � d t d d � � � d0 t d d d
t d1 t d d d d2 d3 d4 d5 g � d6 t d d d
t d7 t d d8 � d9 t d d d d: d; d< d= g � � � d> t d d d d? d@ dA dB g � dC t d d � � � dD t d d d
t dE t d d � dF t d d d
t dG t d d � � � � � dH t d d � dI t d d d dJ dK dL g � dM t d d � dN t d d � � } t d d � | dD d
dF d
dO <| j t � t dP | dQ t � } dR } | j d d k r�| j d d k r�t | | � } n t | | � } | j | � d S(S Nt layert typet strt positiont namet requiredt actiont action_settingst dictt optionst enable_identity_captive_portalt boolt limitt contentt listt content_directiont choicest anyt upt downt content_negatet
custom_fieldst field_1t field_2t field_3t destinationt destination_negatet enabledt inline_layert
install_ont servicet service_negatet sourcet
source_negatet timet trackt
accountingt alertt nonet snmpt mails user alert 1s user alert 2s user alert 3t enable_firewall_sessiont per_connectiont per_sessiont
user_checkt confirms per rules per categorys per application/sites
per data typet custom_frequencyt everyt intt unitt hourst dayst weekst monthst frequencys
once a days once a weeks once a months custom frequency...t interactiont vpnR t directionalt tot commentst
details_levelt uidt standardt fullt ignore_warningst
ignore_errorst fromt
argument_spect supports_check_modes access-rule(
R t Truet updateR
R t paramst NoneR R t exit_json( RP t modulet api_call_objectt result( ( s[ /usr/lib/python2.7/site-packages/ansible/modules/network/check_point/cp_mgmt_access_rule.pyt main sn *!'! #
&t __main__N( t
__future__R R R R t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNt ansible.module_utils.basicR t ansible.module_utils.connectionR t2 ansible.module_utils.network.checkpoint.checkpointR
R R RZ t __name__( ( ( s[ /usr/lib/python2.7/site-packages/ansible/modules/network/check_point/cp_mgmt_access_rule.pyt <module> s
� F
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell