https://github.com/diejel/rapidito_automation
Program that helps you with firewalls administration, operations and execution of several tasks made in Shell Script language and using the API for SmartConsole from CheckPoint
https://github.com/diejel/rapidito_automation
api api-management apimanagement automation bash firewall firewall-configuration linux quantum rapidito security-automation shell shell-script shell-scripting
Last synced: about 1 month ago
JSON representation
Program that helps you with firewalls administration, operations and execution of several tasks made in Shell Script language and using the API for SmartConsole from CheckPoint
- Host: GitHub
- URL: https://github.com/diejel/rapidito_automation
- Owner: diejel
- Created: 2021-08-12T04:25:16.000Z (almost 5 years ago)
- Default Branch: main
- Last Pushed: 2022-03-27T21:37:20.000Z (about 4 years ago)
- Last Synced: 2025-05-07T21:54:52.834Z (about 1 year ago)
- Topics: api, api-management, apimanagement, automation, bash, firewall, firewall-configuration, linux, quantum, rapidito, security-automation, shell, shell-script, shell-scripting
- Language: Shell
- Homepage:
- Size: 112 KB
- Stars: 4
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# r[API]dito Automation #
*r[API]dito* is an iniatitive software for contributing to automation CheckPoint Firewall tasks. It's based on the _API Management Tool_ and Shell script language.
---
## Features
- Creation of a well organized folder hierarchy since the first time you use it. This folder contains the output and logs of the task you have performed ordered by date.
- Due to its simple environment it does not require too many resources as Smart Console needs.
- Easy installation and simple customization, just editing a .ini format file according your actual name convention servers environment.
- Include your ticket number and tags in every operation, this helps to map and find easily ITSM tickets.
- Easily customization of objects colors from changing file values.
- Fully compatible with Firewalls and SMS R8X.X versions.
---
## What is New on v2.0 ?
- Addition of several IP addresses to blacklist group (simple copy/paste on terminal).
- Addition of a FQDN and non-FQDN extensive list to blacklist (simple copy/paste on terminal)
- Addition of an extensive list of IP addresses to a blacklist group from file.
- Add a Blocklist from feed.
- Schedule One-time Policy Installation Pre-defined Policy Package (cron-based).
- Schedule Recursively Policy Installation Pre-defined Policy Package (cron-based).
- Schedule Recursively Policy Installation in all existing Policies Packages.
- Creation of a CSV indicator file.
---
## Installation
r[API]dito should be placed in **/var** folder, it can be executed without problems since you configure it correctly and grant permission accordingly to the admin user you've created in Smart Console.
For stable released versions the parent folder should be named as **rapidito** and beta version as **rapibeta**. By default the ownership of files is **admin** for user and group.
- First, move the main folder to **/var** directory.
`[user@sms]# mv rapidito/ /var/`
- Inside Smart Console terminal, dentify which is the user you are working on and grant permissions as follows.
`[user@sms]# chown -R $(grep -i $(whoami) /etc/passwd | cut -d':' -f1): /var/rapidito`
- For ensuring security, take off permission to `others` users and grant just only `owner` user.
`[user@sms]# chmod -R u+rwx /var/rapidito`
- Inside the `setup` folder, run the `./install.sh` file.
- Finally, logout from current terminal and login again, now just type on terminal
`[user@sms]# rapidito`
- r[API]dito will start, that's all.
* There is one file within **config** folder called `init.rap`, in this file you can edit and change for the name of your existing groups in SmartConsole!
----
## Possible uses ##
- When you nedd to apply Bypass inspection and need to update some network objects which belongs to an specific application.
- When you have several neworks that must created and included in an specific new group.
- Host addition into an existing group.
- Several Network Objects creation.
- *[Important]*: When the script finish processing all the objects, do not forget to press [ENTER](↵), this is necessary for the script understand there will no exist more objects to be processed.
- Addition of a single IP address to blacklist group.
- Addition of several IP addresses to blacklist group (simple copy/paste on terminal).
- Addition of a FQDN and non-FQDN extensive list to blacklist (simple copy/paste on terminal)
- Addition of an extensive list of IP addresses to a blacklist group from file.
- Add a Blocklist from feed.
- Schedule One-time Policy Installation Pre-defined Policy Package (cron-based).
- Schedule Recursively Policy Installation Pre-defined Policy Package (cron-based).
- Schedule Recursively Policy Installation in all existing Policies Packages.
- Check IP Reputation (based on abusedbip).
- Routine for removing IPs from blacklist.
- Creation of a CSV indicator file.
---
## How does it work? ##
Example for : "Several Network Objects creation."
### Simple paste of Network in CIDR format ###
### Verification of creation process in Object Explorer within Smart Console ###
## Some other examples with videos.
### Several Network Objects creation
- [Video Link](https://www.linkedin.com/embed/feed/update/urn:li:ugcPost:6827238125153116160)
### Schedule Recursively Policy Installation in all existing Policies Packages.
- [Video Link](https://www.linkedin.com/embed/feed/update/urn:li:ugcPost:6827788466508632064)
### Addition of an extensive list of IP addresses to a blacklist group from file.
- [Video Link](https://www.linkedin.com/embed/feed/update/urn:li:ugcPost:6828887987909144576)
### Check IP Reputation (based on abusedbip) & Routine for removing IPs from blacklist.
- [Video Link](https://www.linkedin.com/embed/feed/update/urn:li:ugcPost:6829200844387344384)
### Creation of a CSV indicator file.
- [Video Link](https://www.linkedin.com/embed/feed/update/urn:li:ugcPost:6830343019972100096)
---
## Special Thanks
I can not leave to give special thanks to my friend **[@Nelson A Leite Jr](https://www.linkedin.com/in/nelson-a-leite-jr)**, due to the help with disruptives ideas, and new challenging situations that made me think '_out of the box_' and trust myself to continue this project.
## Connect with me ##
- [Linkedin ](https://linkedin.com/in/diegocuba)
- [Github](https://github.com/diejel)
- [Linux Foundation ](https://openprofile.dev/profile/dcubaz)
- [Check Point CHECKMATES ](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/67305)
- [Creddly ](https://www.credly.com/users/diego-cuba-zuniga/badges)
## Share and help others ##
If you like this initiative and you find interesting my work in automation tasks, please share this work and help others. Feel free to reach me oute and leave your comments, also suggest new ideas. Best Regards!
Diego.