tufin / scripts Goto Github PK

Here is my (sanitized) syntax:
/usr/bin/perl ./apg_run_script.pl -device-name 'name_of_device' -policy-package 'policy1' -rule-list 34,35

We're running 15-4 HF2 on TufinOS 2.10 with the post-2.10 hotfix applied. I've verified that the strings inside the quotes do in fact match what is in the database tables. The help text says either "34,35" or "34-35" will work when specifying the rule list. However whenever I try to use the "-rule-list" option I get the output quoted below. Please help!

INFO
INFO ----> Welcome to the APG multiple job creation script version 1.0.
INFO ---->
Unknown option: rule-list
INFO ----> Number of days of analysis not specified, assuming APG job duration of 6 months.
INFO ----> Either Source or Destination zones is not defined, assuming global.
ERROR ----> No rules specified.

HELP has been requested.

Program : APG run multiple job script
Author : Stephane PEREZ ([email protected])
Date : 4 September 2015

Version : 1.0

Usage : apg_run_script.pl -device-name [-policy-package ]
-rule-list
-duration
[-debug ] [-help]
Parameters details:
rule-list : The list of rules on which the user wish to run APG on in the form
Accepted forms : 1,2-4
[-help]
Goodbye!

Our Check Point CMAs are listed in Tufin's database with spaces in the name, e.g. "CMAname1 Domain". I can't seem to get the apg_run_script to work on any of our Check Point devices. I believe it's because the name has spaces. Pertinent script output:

INFO  ----> We have a valid user, continuing...
INFO  ----> Adding job for rule 34.
WARNING ----> Rule #34 not found, skipping it.
INFO  ----> Adding job for rule 35.
WARNING ----> Rule #35 not found, skipping it.

Any chance of adding support for specifying device IDs in place of the name? Specifying by Tufin-assigned ID values would eliminate any issues with parsing the name. At least in my experience I've found this to be a more API-friendly approach. It's well-known that device IDs are easy to obtain via API and also by pressing 't' in the GUI.