R82.20 management coverage

CHANGELOG.rst

@@ -4,6 +4,68 @@ Check_Point.Mgmt Release Notes
 
 .. contents:: Topics
 
+v7.0.0
+======
+
+Release Summary
+---------------
+
+This is release 7.0.0 of ``check_point.mgmt``, released on 2026-08-11.
+
+Major Changes
+-------------
+
+- New R82.20 modules
+
+Minor Changes
+-------------
+
+- added new parameter 'additional_permission_profiles' to 'cp_mgmt_access_layer' module.
+- added new parameter 'distribute_logs_between_all_active_servers' to the 'logs_settings' parameter of 'cp_mgmt_simple_gateway' module.
+- added new parameter 'permissions_profiles' to 'cp_mgmt_threat_layer' module.
+- added new parameters 'identity_awareness' and 'identity_awareness_settings' to 'cp_mgmt_simple_gateway' module.
+
+New Modules
+-----------
+
+- check_point.mgmt.cp_mgmt_cloud_license_gateway_facts - Get cloud-license-gateway objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_cloud_license_pool_facts - Get cloud-license-pool objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_def_setting - Manages def-setting objects on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_def_setting_facts - Get def-setting objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_dlp_next_data_type - Manages dlp-next-data-type objects on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_dlp_next_data_type_facts - Get dlp-next-data-type objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_firewall_best_practice - Manages firewall-best-practice objects on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_firewall_best_practice_facts - Get firewall-best-practice objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_guideline - Manages guideline objects on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_guideline_cell_approvals - Manages guideline-cell-approvals objects on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_guideline_facts - Get guideline objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_prepare_software_package - Prepares the software package on target machines.
+- check_point.mgmt.cp_mgmt_regulation - Manages regulation objects on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_regulation_facts - Get regulation objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_requirement - Manages requirement objects on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_requirement_facts - Get requirement objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_set_best_practice - Edit an existing Best Practice using object name, uid or best practice id. Activate or deactivate the best practice and its relevant objects.
+- check_point.mgmt.cp_mgmt_set_cloud_license_gateway - Edit existing gateway license using name or uid.
+- check_point.mgmt.cp_mgmt_set_cloud_license_pool - Edit existing pool using name.
+- check_point.mgmt.cp_mgmt_set_cloud_license_scope - Set cloud license operational mode.
+- check_point.mgmt.cp_mgmt_set_threat_emulation_file_type - Edit a Threat Emulation file type support settings.
+- check_point.mgmt.cp_mgmt_set_threat_emulation_file_types - Edit support settings for multiple Threat Emulation file types in a single request.
+- check_point.mgmt.cp_mgmt_set_threat_extraction_file_type - Edit a Threat Extraction file type support settings.
+- check_point.mgmt.cp_mgmt_set_threat_extraction_file_types - Edit support settings for multiple Threat Extraction file types in a single request.
+- check_point.mgmt.cp_mgmt_set_threat_protection_category - Edit existing object using object name or uid.
+- check_point.mgmt.cp_mgmt_set_threat_protection_sub_category - Edit existing object using object name or uid.
+- check_point.mgmt.cp_mgmt_show_ad_content - Retrieves Active Directory users, groups, and machines for an Account Unit.
+- check_point.mgmt.cp_mgmt_show_cloud_license_scope - Show current cloud license mode.
+- check_point.mgmt.cp_mgmt_show_dlp_next_data_types_repository_content - Retrieve all DLP Next Data Type Objects from Infinity portal.
+- check_point.mgmt.cp_mgmt_show_guideline_cells - Showing guideline-cells metrics according to the given filters.
+- check_point.mgmt.cp_mgmt_test_ai_agent_security_api_key - Test the validity of an AI Agent Security API key.
+- check_point.mgmt.cp_mgmt_threat_emulation_file_type_facts - Get threat-emulation-file-type objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_threat_emulation_image_facts - Get threat-emulation-image objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_threat_extraction_file_type_facts - Get threat-extraction-file-type objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_threat_protection_category_facts - Get threat-protection-category objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_threat_protection_sub_category_facts - Get threat-protection-sub-category objects facts on Checkpoint over Web Services API
+- check_point.mgmt.cp_mgmt_update_cloud_license - Updates the existing license with the new license string.
+
 v6.9.0
 ======
 

galaxy.yml

@@ -9,7 +9,7 @@ namespace: check_point
 name: mgmt
 
 # The version of the collection. Must be compatible with semantic versioning
-version: 6.9.0
+version: 7.0.0
 
 # The path to the Markdown (.md) readme file. This path is relative to the root of the collection
 readme: README.md

plugins/module_utils/checkpoint.py

@@ -76,7 +76,15 @@
     "ignore-errors",
     "ignore-warnings",
     "gateway-uid",
-    "url"
+    "url",
+    "guideline",
+    "approvals",
+    "from",
+    "from-type",
+    "to",
+    "to-type",
+    "policy-package",
+    "delete-scope"
 ]
 
 remove_from_set_payload = {
@@ -277,7 +285,8 @@ def is_no_changes_command(command):
 
 
 def contains_show_identifier_param(payload):
-    identifier_params = ["name", "uid", "assigned-domain", "task-id", "signature", "url", "best-practice-id"]
+    identifier_params = ["name", "uid", "assigned-domain", "task-id", "signature", "url", "best-practice-id",
+                         "gateway", "pool", "file-type-id", "file-type"]
     for param in identifier_params:
         if payload.get(param) is not None:
             return True

plugins/modules/cp_mgmt_access_layer.py

@@ -48,6 +48,13 @@
       - Indicates whether to include a cleanup rule in the new layer.
       - Available from R80.10 management version.
     type: bool
+  additional_permission_profiles:
+    description:
+      - Collection of permission profiles identified by the name or UID.
+      - Available from R82.20 management version.
+    type: list
+    elements: str
+    version_added: "7.0.0"
   applications_and_url_filtering:
     description:
       - Whether to enable Applications & URL Filtering blade on the layer.
@@ -122,7 +129,7 @@
 - name: set-access-layer
   cp_mgmt_access_layer:
     applications_and_url_filtering: false
-    data_awareness: true
+    content_awareness: true
     name: New Layer 1
     state: present
 
@@ -150,6 +157,7 @@ def main():
     argument_spec = dict(
         name=dict(type="str", required=True),
         add_default_rule=dict(type="bool"),
+        additional_permission_profiles=dict(type="list", elements="str"),
         applications_and_url_filtering=dict(type="bool"),
         content_awareness=dict(type="bool"),
         detect_using_x_forward_for=dict(type="bool"),

plugins/modules/cp_mgmt_cloud_license_gateway_facts.py

@@ -0,0 +1,127 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Ansible module to manage CheckPoint Firewall (c) 2019
+#
+# Ansible is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# Ansible is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with Ansible.  If not, see <http://www.gnu.org/licenses/>.
+#
+
+from __future__ import (absolute_import, division, print_function)
+
+__metaclass__ = type
+
+ANSIBLE_METADATA = {'metadata_version': '1.1',
+                    'status': ['preview'],
+                    'supported_by': 'community'}
+
+DOCUMENTATION = """
+---
+module: cp_mgmt_cloud_license_gateway_facts
+short_description: Get cloud-license-gateway objects facts on Checkpoint over Web Services API
+description:
+  - Get cloud-license-gateway objects facts on Checkpoint devices.
+  - All operations are performed over Web Services API.
+  - This module handles both operations, get a specific object and get several objects,
+    For getting a specific object use the parameter 'name'.
+  - Available from R82.20 management version.
+version_added: "7.0.0"
+author: "Dor Berenstein (@chkp-dorbe)"
+options:
+  gateway:
+    description:
+      - Security gateway name or UID.
+    type: str
+  domain:
+    description:
+      - Domain name or UID of security gateway. Required when running from MDS context.
+    type: str
+  filter:
+    description:
+      - Search expression to filter objects by gateway name (supports substring matching).
+    type: str
+  limit:
+    description:
+      - The maximal number of returned results.
+        This parameter is relevant only for getting few objects.
+    type: int
+  offset:
+    description:
+      - Number of the results to initially skip.
+        This parameter is relevant only for getting few objects.
+    type: int
+  order:
+    description:
+      - Sorts the results by search criteria. Automatically sorts the results by Name, in the ascending order.
+        This parameter is relevant only for getting few objects.
+    type: list
+    elements: dict
+    suboptions:
+      ASC:
+        description:
+          - Sorts results by the given field in ascending order.
+        type: str
+        choices: ['name']
+      DESC:
+        description:
+          - Sorts results by the given field in descending order.
+        type: str
+        choices: ['name']
+extends_documentation_fragment: check_point.mgmt.checkpoint_facts
+"""
+
+EXAMPLES = """
+- name: show-cloud-license-gateway
+  cp_mgmt_cloud_license_gateway_facts:
+    gateway: GW_A
+
+- name: show-cloud-license-gateways
+  cp_mgmt_cloud_license_gateway_facts:
+"""
+
+RETURN = """
+ansible_facts:
+  description: The checkpoint object facts.
+  returned: always.
+  type: dict
+"""
+
+from ansible.module_utils.basic import AnsibleModule
+from ansible_collections.check_point.mgmt.plugins.module_utils.checkpoint import checkpoint_argument_spec_for_facts, api_call_facts
+
+
+def main():
+    argument_spec = dict(
+        gateway=dict(type='str'),
+        domain=dict(type='str'),
+        filter=dict(type='str'),
+        limit=dict(type='int'),
+        offset=dict(type='int'),
+        order=dict(type='list', elements='dict', options=dict(
+            ASC=dict(type='str', choices=['name']),
+            DESC=dict(type='str', choices=['name'])
+        ))
+    )
+    argument_spec.update(checkpoint_argument_spec_for_facts)
+
+    module = AnsibleModule(argument_spec=argument_spec, supports_check_mode=True)
+
+    api_call_object = "cloud-license-gateway"
+    api_call_object_plural_version = "cloud-license-gateways"
+
+    result = api_call_facts(module, api_call_object, api_call_object_plural_version)
+    module.exit_json(ansible_facts=result)
+
+
+if __name__ == '__main__':
+    main()

plugins/modules/cp_mgmt_cloud_license_pool_facts.py

@@ -0,0 +1,127 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+#
+# Ansible module to manage CheckPoint Firewall (c) 2019
+#
+# Ansible is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# Ansible is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with Ansible.  If not, see <http://www.gnu.org/licenses/>.
+#
+
+from __future__ import (absolute_import, division, print_function)
+
+__metaclass__ = type
+
+ANSIBLE_METADATA = {'metadata_version': '1.1',
+                    'status': ['preview'],
+                    'supported_by': 'community'}
+
+DOCUMENTATION = """
+---
+module: cp_mgmt_cloud_license_pool_facts
+short_description: Get cloud-license-pool objects facts on Checkpoint over Web Services API
+description:
+  - Get cloud-license-pool objects facts on Checkpoint devices.
+  - All operations are performed over Web Services API.
+  - This module handles both operations, get a specific object and get several objects,
+    For getting a specific object use the parameter 'name'.
+  - Available from R82.20 management version.
+version_added: "7.0.0"
+author: "Dor Berenstein (@chkp-dorbe)"
+options:
+  pool:
+    description:
+      - Pool name.
+    type: str
+  ck:
+    description:
+      - Certificate Key. Required to identify a specific pool when multiple pools share the same name.
+    type: str
+  filter:
+    description:
+      - Search expression to filter objects by gateway name (supports substring matching).
+    type: str
+  limit:
+    description:
+      - The maximal number of returned results.
+        This parameter is relevant only for getting few objects.
+    type: int
+  offset:
+    description:
+      - Number of the results to initially skip.
+        This parameter is relevant only for getting few objects.
+    type: int
+  order:
+    description:
+      - Sorts the results by search criteria. Automatically sorts the results by Name, in the ascending order.
+        This parameter is relevant only for getting few objects.
+    type: list
+    elements: dict
+    suboptions:
+      ASC:
+        description:
+          - Sorts results by the given field in ascending order.
+        type: str
+        choices: ['name']
+      DESC:
+        description:
+          - Sorts results by the given field in descending order.
+        type: str
+        choices: ['name']
+extends_documentation_fragment: check_point.mgmt.checkpoint_facts
+"""
+
+EXAMPLES = """
+- name: show-cloud-license-pool
+  cp_mgmt_cloud_license_pool_facts:
+    pool: VE-FIREWALL
+
+- name: show-cloud-license-pools
+  cp_mgmt_cloud_license_pool_facts:
+"""
+
+RETURN = """
+ansible_facts:
+  description: The checkpoint object facts.
+  returned: always.
+  type: dict
+"""
+
+from ansible.module_utils.basic import AnsibleModule
+from ansible_collections.check_point.mgmt.plugins.module_utils.checkpoint import checkpoint_argument_spec_for_facts, api_call_facts
+
+
+def main():
+    argument_spec = dict(
+        pool=dict(type='str'),
+        ck=dict(type='str'),
+        filter=dict(type='str'),
+        limit=dict(type='int'),
+        offset=dict(type='int'),
+        order=dict(type='list', elements='dict', options=dict(
+            ASC=dict(type='str', choices=['name']),
+            DESC=dict(type='str', choices=['name'])
+        ))
+    )
+    argument_spec.update(checkpoint_argument_spec_for_facts)
+
+    module = AnsibleModule(argument_spec=argument_spec, supports_check_mode=True)
+
+    api_call_object = "cloud-license-pool"
+    api_call_object_plural_version = "cloud-license-pools"
+
+    result = api_call_facts(module, api_call_object, api_call_object_plural_version)
+    module.exit_json(ansible_facts=result)
+
+
+if __name__ == '__main__':
+    main()