ansible.builtin.cp_mgmt_threat_protection_override (v2.9.17) — module

Edit existing object using object name or uid.

| "added in version" 2.9 of ansible.builtin"

Authors: Or Soffer (@chkp-orso)

preview | supported by community

Install Ansible via pip

Install with pip install ansible==2.9.17

Description

Edit existing object using object name or uid.

All operations are performed over Web Services API.

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: threat_protection_override
  cp_mgmt_threat_protection_override:
    name: FTP Commands
    overrides:
    - action: inactive
      capture_packets: true
      profile: New Profile 1
      track: None
    state: present

Inputs

    
name:
    description:
    - Object name.
    type: str

version:
    description:
    - Version of checkpoint. If not given one, the latest version taken.
    type: str

comments:
    description:
    - Protection comments.
    type: str

follow_up:
    description:
    - Tag the protection with pre-defined follow-up flag.
    type: bool

overrides:
    description:
    - Overrides per profile for this protection<br> Note, Remove override for Core protections
      removes only the action's override. Remove override for Threat Cloud protections
      removes the action, track and packet captures.
    suboptions:
      action:
        choices:
        - 'Threat Cloud: Inactive'
        - Detect
        - 'Prevent <br> Core: Drop'
        - Inactive
        - Accept
        description:
        - Protection action.
        type: str
      capture_packets:
        description:
        - Capture packets.
        type: bool
      profile:
        description:
        - Profile name.
        type: str
      track:
        choices:
        - none
        - log
        - alert
        - mail
        - snmp trap
        - user alert
        - user alert 1
        - user alert 2
        description:
        - Tracking method for protection.
        type: str
    type: list

details_level:
    choices:
    - uid
    - standard
    - full
    description:
    - The level of detail for some of the fields in the response can vary from showing
      only the UID value of the object to a fully detailed representation of the object.
    type: str

wait_for_task:
    default: true
    description:
    - Wait for the task to end. Such as publish task.
    type: bool

auto_publish_session:
    default: false
    description:
    - Publish the current session if changes have been performed after task completes.
    type: bool

wait_for_task_timeout:
    default: 30
    description:
    - How many minutes to wait until throwing a timeout error.
    type: int

Outputs

cp_mgmt_threat_protection_override:
  description: The checkpoint threat_protection_override output.
  returned: always.
  type: dict