diff options
Diffstat (limited to 'ansible_collections/check_point/mgmt/CHANGELOG.rst')
| -rw-r--r-- | ansible_collections/check_point/mgmt/CHANGELOG.rst | 235 |
1 files changed, 225 insertions, 10 deletions
diff --git a/ansible_collections/check_point/mgmt/CHANGELOG.rst b/ansible_collections/check_point/mgmt/CHANGELOG.rst index f81db85a4..62bd9645d 100644 --- a/ansible_collections/check_point/mgmt/CHANGELOG.rst +++ b/ansible_collections/check_point/mgmt/CHANGELOG.rst @@ -4,6 +4,214 @@ Check_Point.Mgmt Release Notes .. contents:: Topics +v5.2.3 +====== + +Release Summary +--------------- + +This is release 5.2.3 of ``check_point.mgmt``, released on 2024-03-04. + +v5.2.2 +====== + +Release Summary +--------------- + +This is release 5.2.2 of ``check_point.mgmt``, released on 2024-01-28. + +v5.2.1 +====== + +Release Summary +--------------- + +This is release 5.2.1 of ``check_point.mgmt``, released on 2024-01-16 + +v5.2.0 +====== + +Release Summary +--------------- + +This is release 5.2.0 of ``check_point.mgmt``, released on 2024-01-10. + +Minor Changes +------------- + +- New resource modules for R81.20 JHF Take 43 + +New Modules +----------- + +- check_point.mgmt.cp_mgmt_add_central_license - Add central license. +- check_point.mgmt.cp_mgmt_central_license_facts - Get central-license objects facts on Checkpoint over Web Services API. +- check_point.mgmt.cp_mgmt_delete_central_license - Delete central license. +- check_point.mgmt.cp_mgmt_distribute_cloud_licenses - Distribute licenses to target CloudGuard gateways. +- check_point.mgmt.cp_mgmt_show_cloud_licenses_usage - Show attached licenses usage. +- check_point.mgmt.cp_mgmt_show_ha_status - Retrieve domain high availability status. + +v5.1.3 +====== + +Release Summary +--------------- + +This is release 5.1.3 of ``check_point.mgmt``, released on 2023-12-13. + +Bugfixes +-------- + +- httpapi/checkpoint.py - Raise a fatal error if login wasn't successful. + +v5.1.2 +====== + +Release Summary +--------------- + +This is release 5.1.2 of ``check_point.mgmt``, released on 2023-12-12. + +Minor Changes +------------- + +- meta/runtime.yml - update minimum Ansible version required to 2.14.0. + +v5.1.1 +====== + +Release Summary +--------------- + +This is release 5.1.1 of ``check_point.mgmt``, released on 2023-05-25. + +Bugfixes +-------- + +- module_utils/checkpoint.py - fixed compile issue (Syntax Error) on python 2.7 + +v5.1.0 +====== + +Release Summary +--------------- + +This is release 5.1.0 of ``check_point.mgmt``, released on 2023-05-18. + +Minor Changes +------------- + +- cp_mgmt_vpn_community_star - new fields added. +- show command modules - no longer return result of changed=True. + +Bugfixes +-------- + +- cp_mgmt_access_rules - split vpn param that can accept either a String or list of objects to two + +v5.0.0 +====== + +Release Summary +--------------- + +This is release 5.0.0 of ``check_point.mgmt``, released on 2023-04-17. + +Deprecated Features +------------------- + +- add/set/delete nat-rule modules - will be replaced by the single cp_mgmt_nat_rule module. +- cp_mgmt_show_task/s modules - will be replaced by the by the single cp_mgmt_task_facts module. + +New Modules +----------- + +- check_point.mgmt.cp_mgmt_abort_get_interfaces - Attempt to abort an on-going "get-interfaces" operation. +- check_point.mgmt.cp_mgmt_access_layers - Manages ACCESS LAYERS resource module +- check_point.mgmt.cp_mgmt_access_point_name - Manages access-point-name objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_access_point_name_facts - Get access-point-name objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_add_repository_package - Add the software package to the central repository. +- check_point.mgmt.cp_mgmt_add_updatable_object - Import an updatable object from the repository to the management server. +- check_point.mgmt.cp_mgmt_checkpoint_host - Manages checkpoint-host objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_checkpoint_host_facts - Get checkpoint-host objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_delete_repository_package - Delete the repository software package from the central repository. +- check_point.mgmt.cp_mgmt_delete_updatable_object - Delete existing object using object name or uid. +- check_point.mgmt.cp_mgmt_dynamic_global_network_object - Manages dynamic-global-network-object objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_dynamic_global_network_object_facts - Get dynamic-global-network-object objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_export_management - Export the primary Security Management Server database or the primary Multi-Domain Server database or the single Domain database and the applicable Check Point configuration. + +- check_point.mgmt.cp_mgmt_export_smart_task - Export SmartTask to a file. +- check_point.mgmt.cp_mgmt_get_attachment - Retrieves a packet capture or blob data, according to the attributes of a log record. +- check_point.mgmt.cp_mgmt_get_interfaces - Get physical interfaces with or without their topology from a Gaia Security Gateway or Cluster. +- check_point.mgmt.cp_mgmt_gsn_handover_group - Manages gsn-handover-group objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_gsn_handover_group_facts - Get gsn-handover-group objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_ha_full_sync - Perform full sync from active server to standby peer. +- check_point.mgmt.cp_mgmt_hosts - Manages HOSTS resource module +- check_point.mgmt.cp_mgmt_https_layer - Manages https-layer objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_https_layer_facts - Get https-layer objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_import_management - Import the primary Security Management Server database or the primary Multi-Domain Server database or the single Domain database and the applicable Check Point configuration. + +- check_point.mgmt.cp_mgmt_import_smart_task - Import SmartTask from a file. +- check_point.mgmt.cp_mgmt_ips_protection_extended_attribute_facts - Get ips-protection-extended-attribute objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_lock_object - Lock object using uid or {name and type}. +- check_point.mgmt.cp_mgmt_lsv_profile - Manages lsv-profile objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_lsv_profile_facts - Get lsv-profile objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_nat_rule - Manages nat-rule objects on Checkpoint over Web Services API. +- check_point.mgmt.cp_mgmt_radius_group - Manages radius-group objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_radius_group_facts - Get radius-group objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_radius_server - Manages radius-server objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_radius_server_facts - Get radius-server objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_repository_package_facts - Get repository-package objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_service_citrix_tcp - Manages service-citrix-tcp objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_service_citrix_tcp_facts - Get service-citrix-tcp objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_service_compound_tcp - Manages service-compound-tcp objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_service_compound_tcp_facts - Get service-compound-tcp objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_set_api_settings - Edit API settings, the changes will be applied after publish followed by running 'api restart' command. +- check_point.mgmt.cp_mgmt_set_cloud_services - Set the connection settings between the Management Server and Check Point's Infinity Portal. +- check_point.mgmt.cp_mgmt_set_global_domain - Edit Global domain object using domain name or UID. +- check_point.mgmt.cp_mgmt_set_ha_state - Switch domain server high availability state. +- check_point.mgmt.cp_mgmt_set_ips_update_schedule - Edit IPS Update Schedule. +- check_point.mgmt.cp_mgmt_set_login_message - Edit Login message. +- check_point.mgmt.cp_mgmt_set_policy_settings - Edit Policy settings, the changes will be applied after publish. +- check_point.mgmt.cp_mgmt_set_vpn_community_remote_access - Edit existing Remote Access object. Using object name or uid is optional. +- check_point.mgmt.cp_mgmt_show_api_settings - Retrieve API Settings. +- check_point.mgmt.cp_mgmt_show_api_versions - Shows all supported API versions and current API version (the latest one). +- check_point.mgmt.cp_mgmt_show_azure_ad_content - Retrieve AzureAD Objects from Azure AD Server. +- check_point.mgmt.cp_mgmt_show_changes - Show changes between two sessions. +- check_point.mgmt.cp_mgmt_show_commands - Retrieve all of the supported Management API commands with their description. +- check_point.mgmt.cp_mgmt_show_gateways_and_servers - Shows list of Gateways & Servers sorted by name. +- check_point.mgmt.cp_mgmt_show_global_domain - Retrieve existing object using object name or uid. +- check_point.mgmt.cp_mgmt_show_ha_state - Retrieve domain high availability state. +- check_point.mgmt.cp_mgmt_show_ips_status - show ips status on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_show_ips_update_schedule - Retrieve IPS Update Schedule. +- check_point.mgmt.cp_mgmt_show_layer_structure - Shows the entire layer structure. +- check_point.mgmt.cp_mgmt_show_login_message - Retrieve Login message. +- check_point.mgmt.cp_mgmt_show_place_holder - Retrieve existing object using object uid. +- check_point.mgmt.cp_mgmt_show_policy_settings - Show Policy settings. +- check_point.mgmt.cp_mgmt_show_software_packages_per_targets - Shows software packages on targets. +- check_point.mgmt.cp_mgmt_show_unused_objects - Retrieve all unused objects. +- check_point.mgmt.cp_mgmt_show_updatable_objects_repository_content - Shows the content of the available updatable objects from the Check Point User Center. +- check_point.mgmt.cp_mgmt_show_validations - Show all validation incidents limited to 500. +- check_point.mgmt.cp_mgmt_smart_task - Manages smart-task objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_smart_task_facts - Get smart-task objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_smart_task_trigger_facts - Get smart-task-trigger objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_tacacs_group - Manages tacacs-group objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_tacacs_group_facts - Get tacacs-group objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_tacacs_server - Manages tacacs-server objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_tacacs_server_facts - Get tacacs-server objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_task_facts - Get task objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_threat_layers - Manages THREAT LAYERS resource module +- check_point.mgmt.cp_mgmt_time_group - Manages time-group objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_time_group_facts - Get time-group objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_unlock_administrator - Unlock administrator. +- check_point.mgmt.cp_mgmt_unlock_object - Unlock object using uid or {name and type}. +- check_point.mgmt.cp_mgmt_updatable_object_facts - Get updatable-object objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_update_updatable_objects_repository_content - Updates the content of the Updatable Objects repository from the Check Point User Center. +- check_point.mgmt.cp_mgmt_user_group - Manages user-group objects on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_user_group_facts - Get user-group objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_vpn_community_remote_access_facts - Get vpn-community-remote-access objects facts on Checkpoint over Web Services API +- check_point.mgmt.cp_mgmt_vsx_run_operation - Run the VSX operation by its name and parameters. +- check_point.mgmt.cp_mgmt_where_used - Searches for usage of the target object in other objects and rules. v4.0.0 ====== @@ -21,16 +229,16 @@ Major Changes Breaking Changes / Porting Guide -------------------------------- -- cp_mgmt_access_role - the 'machines' parameter now accepts a single str and a new parameter 'machines_list' of type dict has been added. the 'users' parameter now accepts a single str and a new parameter 'users_list' of type dict has been added. -- cp_mgmt_access_rule - the 'vpn' parameter now accepts a single str and a new parameter 'vpn_list' of type dict has been added. the 'position_by_rule' parameter has been changed to 'relative_position' with support of positioning above/below a section (and not just a rule). the 'relative_position' parameter has also 'top' and 'bottom' suboptions which allows positioning a rule at the top and bottom of a section respectively. a new parameter 'search_entire_rulebase' has been added to allow the relative positioning to be unlimited (was previously limited to 50 rules) -- cp_mgmt_administrator - the 'permissions_profile' parameter now accepts a single str and a new parameter 'permissions_profile_list' of type dict has been added. +- cp_mgmt_access_role- > The 'machines' parameter now accepts a single str and a new parameter 'machines_list' of type dict has been added. The 'users' parameter now accepts a single str and a new parameter 'users_list' of type dict has been added. +- cp_mgmt_access_rule- > The 'vpn' parameter now accepts a single str and a new parameter 'vpn_list' of type dict has been added. The 'position_by_rule' parameter has been changed to 'relative_position' with support of positioning above/below a section (and not just a rule). the 'relative_position' parameter has also 'top' and 'bottom' suboptions which allows positioning a rule at the top and bottom of a section respectively. A new parameter 'search_entire_rulebase' has been added to allow the relative positioning to be unlimited (was previously limited to 50 rules). +- cp_mgmt_administrator- > The 'permissions_profile' parameter now accepts a single str and a new parameter 'permissions_profile_list' of type dict has been added. - cp_mgmt_publish - the 'uid' parameter has been removed. Bugfixes -------- -- cp_mgmt_access_rule - support for relative positioning for rulebase with more than 50 rules (https://github.com/CheckPointSW/CheckPointAnsibleMgmtCollection/issues/69) -- cp_mgmt_administrator - specifying the administartor's permissions profile now works for both SMC and MDS (https://github.com/CheckPointSW/CheckPointAnsibleMgmtCollection/issues/83) +- cp_mgmt_access_rule- > support for relative positioning for rulebase with more than 50 rules (https://github.com/CheckPointSW/CheckPointAnsibleMgmtCollection/issues/69) +- cp_mgmt_administrator- > specifying the administartor's permissions profile now works for both SMC and MDS (https://github.com/CheckPointSW/CheckPointAnsibleMgmtCollection/issues/83) - meta/runtime.yml - update value of minimum ansible version and remove redirect (https://github.com/CheckPointSW/CheckPointAnsibleMgmtCollection/issues/84) v3.2.0 @@ -63,9 +271,12 @@ New Modules - check_point.mgmt.cp_mgmt_add_rules_batch - Creates new rules in batch. Use this API to achieve optimum performance when adding more than one rule. - check_point.mgmt.cp_mgmt_approve_session - Workflow feature - Approve and Publish the session. - check_point.mgmt.cp_mgmt_check_network_feed - Check if a target can reach or parse a network feed; can work with an existing feed object or with a new one (by providing all relevant feed parameters). + - check_point.mgmt.cp_mgmt_check_threat_ioc_feed - Check if a target can reach or parse a threat IOC feed; can work with an existing feed object or with a new one (by providing all relevant feed parameters). + - check_point.mgmt.cp_mgmt_cluster_members_facts - Retrieve all existing cluster members in domain. -- check_point.mgmt.cp_mgmt_connect_cloud_services - Securely connect the Management Server to Check Point's Infinity Portal. <br>This is a preliminary operation so that the management server can use various Check Point cloud-based security services hosted in the Infinity Portal. +- check_point.mgmt.cp_mgmt_connect_cloud_services - Securely connect the Management Server to Check Point's Infinity Portal. This is a preliminary operation so that the management server can use various Check Point cloud-based security services hosted in the Infinity Portal. + - check_point.mgmt.cp_mgmt_delete_rules_batch - Delete rules in batch from the same layer. Use this API to achieve optimum performance when removing more than one rule. - check_point.mgmt.cp_mgmt_disconnect_cloud_services - Disconnect the Management Server from Check Point's Infinity Portal. - check_point.mgmt.cp_mgmt_domain_permissions_profile - Manages domain-permissions-profile objects on Checkpoint over Web Services API @@ -74,9 +285,10 @@ New Modules - check_point.mgmt.cp_mgmt_idp_administrator_group - Manages idp-administrator-group objects on Checkpoint over Web Services API - check_point.mgmt.cp_mgmt_idp_administrator_group_facts - Get idp-administrator-group objects facts on Checkpoint over Web Services API - check_point.mgmt.cp_mgmt_idp_to_domain_assignment_facts - Get idp-to-domain-assignment objects facts on Checkpoint over Web Services API -- check_point.mgmt.cp_mgmt_import_outbound_inspection_certificate - Import Outbound Inspection certificate for HTTPS inspection. - check_point.mgmt.cp_mgmt_install_lsm_policy - Executes the lsm-install-policy on a given list of targets. Install the LSM policy that defined on the attached LSM profile on the targets devices. + - check_point.mgmt.cp_mgmt_install_lsm_settings - Executes the lsm-install-settings on a given list of targets. Install the provisioning settings that defined on the object on the targets devices. + - check_point.mgmt.cp_mgmt_interoperable_device - Manages interoperable-device objects on Checkpoint over Web Services API - check_point.mgmt.cp_mgmt_interoperable_device_facts - Get interoperable-device objects facts on Checkpoint over Web Services API - check_point.mgmt.cp_mgmt_lsm_cluster_profile_facts - Get lsm-cluster-profile objects facts on Checkpoint over Web Services API @@ -92,16 +304,18 @@ New Modules - check_point.mgmt.cp_mgmt_repository_script - Manages repository-script objects on Checkpoint over Web Services API - check_point.mgmt.cp_mgmt_repository_script_facts - Get repository-script objects facts on Checkpoint over Web Services API - check_point.mgmt.cp_mgmt_reset_sic - Reset Secure Internal Communication (SIC). To complete the reset operation need also to reset the device in the Check Point Configuration Tool (by running cpconfig in Clish or Expert mode). Communication will not be possible until you reset and re-initialize the device properly. + - check_point.mgmt.cp_mgmt_set_global_properties - Edit Global Properties. - check_point.mgmt.cp_mgmt_set_idp_default_assignment - Set default Identity Provider assignment to be use for Management server administrator access. - check_point.mgmt.cp_mgmt_set_idp_to_domain_assignment - Set Identity Provider assignment to domain, to allow administrator login to that domain using that identity provider, if there is no Identity Provider assigned to the domain the 'idp-default-assignment' will be used. This command only available for Multi-Domain server. -- check_point.mgmt.cp_mgmt_set_outbound_inspection_certificate - Create or update a certificate to be used as outbound certificate for HTTPS inspection. <br>The outbound CA certificate will be used by the Gateway to inspect SSL traffic. + + - check_point.mgmt.cp_mgmt_set_threat_advanced_settings - Edit Threat Prevention's Blades' Settings. - check_point.mgmt.cp_mgmt_show_cloud_services - Show the connection status of the Management Server to Check Point's Infinity Portal. - check_point.mgmt.cp_mgmt_show_global_properties - Retrieve Global Properties. - check_point.mgmt.cp_mgmt_show_idp_default_assignment - Retrieve default Identity Provider assignment that used for Management server administrator access. -- check_point.mgmt.cp_mgmt_show_outbound_inspection_certificate - Show outbound inspection certificate. -- check_point.mgmt.cp_mgmt_show_servers_and_processes - Shows the status of all processes in the current machine (Multi-Domain Server and all Domain Management / Log Servers). <br>This command is available only on Multi-Domain Server. +- check_point.mgmt.cp_mgmt_show_servers_and_processes - Shows the status of all processes in the current machine (Multi-Domain Server and all Domain Management / Log Servers). This command is available only on Multi-Domain Server. + - check_point.mgmt.cp_mgmt_show_threat_advanced_settings - Show Threat Prevention's Blades' Settings. - check_point.mgmt.cp_mgmt_simple_cluster - Manages simple-cluster objects on Checkpoint over Web Services API - check_point.mgmt.cp_mgmt_simple_cluster_facts - Get simple-cluster objects facts on Checkpoint over Web Services API @@ -109,6 +323,7 @@ New Modules - check_point.mgmt.cp_mgmt_smtp_server_facts - Get smtp-server objects facts on Checkpoint over Web Services API - check_point.mgmt.cp_mgmt_submit_session - Workflow feature - Submit the session for approval. - check_point.mgmt.cp_mgmt_test_sic_status - Test SIC Status reflects the state of the gateway after it has received the certificate issued by the ICA. If the SIC status is Unknown then there is no connection between the gateway and the Security Management Server. If the SIC status is No Communication, an error message will appear. It may contain specific instructions on how to fix the situation. + - check_point.mgmt.cp_mgmt_update_provisioned_satellites - Executes the update-provisioned-satellites on center gateways of VPN communities. v2.3.0 |