Skip to main content
Edit an existing threat protection object using its name or UID. The changes are automatically published after the command is executed.
External DocumentationTo learn more, visit the Check Point Management documentation.

​
Parameters

ParameterDescription
CommentsComments to add to the threat protection object.
Details LevelThe level of details to include in the response.
Follow UpSelect to tag the threat protection object with a follow-up flag.
NameThe name of the threat protection object to edit.
Object SelectorChoose which attribute (Name or UID) will be used to identify the threat protection object.
OverridesA JSON list of objects to override.

For more information refer to the API documentation.
Overrides RemoveA comma-separated list of objects to remove from the overrides collection.

Note: Remove override for Core protections removes only the action’s override. Remove override for Threat Cloud protections removes the action, track and packet captures.
Select ActionThe action to perform on the threat protection object.
UIDThe unique identifier (UID) of the threat protection object to edit.

​
Example Output

{
	"name": "Adobe Acrobat Reader Memory Corruption (APSB20-13: CVE-2020-3795)",
	"uid": "1954b42d-20b6-9815-4638-301530263660",
	"type": "threat-protection",
	"comments": "Example protection",
	"confidence-level": "Medium",
	"follow-up": false,
	"industry-reference": [
		"CVE-2020-3795"
	],
	"ipsAdditionalProperties": [
		{
			"name": "Protection Type",
			"uid": "016f4d01-628d-476a-938c-8c5934149098",
			"values": [
				{
					"name": "Signature",
					"uid": "173872c9-166c-4867-b52b-449767253592"
				}
			]
		}
	],
	"performance-impact": "Low",
	"profiles": [
		{
			"name": "Optimized",
			"uid": "f6265674-e3c1-4b19-b5a0-04359489679f",
			"default": {
				"action": "Prevent",
				"capture-packets": false,
				"track": "Log"
			},
			"final": {
				"action": "Prevent",
				"capture-packets": false,
				"track": "Log"
			},
			"override": {
				"action": "Prevent",
				"capture-packets": false,
				"track": "Log"
			}
		}
	],
	"protection-type": "Core",
	"release-date": "2020-03-24T00:00:00Z",
	"severity": "High",
	"update-date": "2020-03-24T00:00:00Z",
	"domain": {
		"name": "Check Point Data",
		"uid": "a0bbbc99-adef-4ef8-bb6d-defdefdefdef",
		"domain-type": "data domain"
	}
}

​
Workflow Library Example

Set Threat Protection with Check Point Management and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop