https://community.cisco.com/t5/network-security/how-to-often-fetch-the-access-rules-for-a-child-policy-with-fmc/m-p/4764296#M1097279 <P>The issue is with inheritance from the "parent policy".&nbsp; So, unless you are able to disable inheritance from the base policy (via GUI or API) then the only other thing you can do to filter out the rules you want is to write a script that extracts the Child Rules for you. i.e. copy the complete Child Policy rules, then delete the Base Policy rules.</P> Fri, 27 Jan 2023 21:35:36 GMT Marius Gunnerud 2023-01-27T21:35:36Z https://community.cisco.com/t5/network-security/how-to-often-fetch-the-access-rules-for-a-child-policy-with-fmc/m-p/4764281#M1097278 <P>I have got another problem I am trying to solve... When I use this URL to get the access rules for a policy, it gets the rules for its parent as well...</P><P>&nbsp;</P><LI-CODE lang="markup">“/api/fmc_config/v1/domain/{domain_id}/policy/accesspolicies/{accesspolicy_id}/accessrules?limit=500&amp;expanded=True”</LI-CODE><P>&nbsp;</P><P>Is there a way to only get it for the child policy?&nbsp;</P><P>Just in case you are curious about what I am trying to do. I want to duplicate a policy with the same prefilter and inheritance settings and with the same rules but without the Interface Zones in the configuration.</P><P>Thanks!</P> Fri, 27 Jan 2023 20:51:07 GMT https://community.cisco.com/t5/network-security/how-to-often-fetch-the-access-rules-for-a-child-policy-with-fmc/m-p/4764281#M1097278 Difan_Zhao 2023-01-27T20:51:07Z https://community.cisco.com/t5/network-security/how-to-often-fetch-the-access-rules-for-a-child-policy-with-fmc/m-p/4764296#M1097279 <P>The issue is with inheritance from the "parent policy".&nbsp; So, unless you are able to disable inheritance from the base policy (via GUI or API) then the only other thing you can do to filter out the rules you want is to write a script that extracts the Child Rules for you. i.e. copy the complete Child Policy rules, then delete the Base Policy rules.</P> Fri, 27 Jan 2023 21:35:36 GMT https://community.cisco.com/t5/network-security/how-to-often-fetch-the-access-rules-for-a-child-policy-with-fmc/m-p/4764296#M1097279 Marius Gunnerud 2023-01-27T21:35:36Z https://community.cisco.com/t5/network-security/how-to-often-fetch-the-access-rules-for-a-child-policy-with-fmc/m-p/4764328#M1097282 <P>Thanks for confirming Marius! Mind also helping me with my other question about inheritance? <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P><P><A href="https://community.cisco.com/t5/network-security/how-to-assign-a-parent-base-policy-to-an-access-policy-with-fmc/td-p/4764254" target="_blank">https://community.cisco.com/t5/network-security/how-to-assign-a-parent-base-policy-to-an-access-policy-with-fmc/td-p/4764254</A></P> Fri, 27 Jan 2023 23:15:17 GMT https://community.cisco.com/t5/network-security/how-to-often-fetch-the-access-rules-for-a-child-policy-with-fmc/m-p/4764328#M1097282 Difan_Zhao 2023-01-27T23:15:17Z