check_point.mgmt.cp_mgmt_set_policy_settings module – Edit Policy settings, the changes will be applied after publish.

Note

This module is part of the check_point.mgmt collection (version 5.1.1).

You might already have this collection installed if you are using the ansible package. It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install check_point.mgmt.

To use it in a playbook, specify: check_point.mgmt.cp_mgmt_set_policy_settings.

New in check_point.mgmt 5.0.0

Synopsis

  • Edit Policy settings, the changes will be applied after publish.

  • All operations are performed over Web Services API.

Parameters

Parameter

Comments

last_in_cell

string

Added object after removing the last object in cell.

Choices:

  • "none"

  • "restore to default"

none_object_behavior

string

a ‘None’ object behavior. Rules with object ‘None’ will never be matched.

Choices:

  • "warning"

  • "error"

  • "none"

security_access_defaults

dictionary

Access Policy default values.

destination

string

Destination default value for new rule creation. Any or None.

service

string

Service and Applications default value for new rule creation. Any or None.

source

string

Source default value for new rule creation. Any or None.

version

string

Version of checkpoint. If not given one, the latest version taken.

wait_for_task

boolean

Wait for the task to end. Such as publish task.

Choices:

  • false

  • true ← (default)

wait_for_task_timeout

integer

How many minutes to wait until throwing a timeout error.

Default: 30

Examples

- name: set-policy-settings
  cp_mgmt_set_policy_settings:
    last_in_cell: any
    none_object_behavior: none
    security_access_defaults:
      destination: any
      service: any
      source: any

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

cp_mgmt_set_policy_settings

dictionary

The checkpoint set-policy-settings output.

Returned: always.

Authors

  • Eden Brillant (@chkp-edenbr)