FMC API Modify rule issue

Kenneth.chew — Sun, 26 Jul 2020 03:54:13 GMT

Hi,

I'm trying to update the Intrusion policy and logging settings for access rules via API. I'm able to successfully update the settings. However i found that the Source/Destination networks for some rules are being removed during the update. It seems this affects rules which are no using Network Objects such as the below. Can anyone advise how this can be done?

"destinationNetworks": {
"literals": [
{
"type": "FQDN",
"value": "10.1.1.1"
}
]

Re: FMC API Modify rule issue

Marius Gunnerud — Sun, 26 Jul 2020 08:41:22 GMT

You could try the following:

For subnets:

[

{

"name": "insideLAN",

"value": "10.1.1.0/24",

"overridable": false,

"description": "Inside LAN",

"type": "Network"

{

"name": "DMZ1",

"value": "10.1.2.0/24",

"overridable": false,

"description": "DMZ1",

"type": "Network"

}

]

For hosts:
[

{

"name": "webserver1",

"type": "Host",

"value": "10.1.0.10",

"description": "Web Server"

{

"name": "FTPserver",

"type": "Host",

"value": "10.1.2.10",

"description": "FTP Server"

}
]

topic FMC API Modify rule issue in Network Security

FMC API Modify rule issue

Re: FMC API Modify rule issue