cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1114
Views
0
Helpful
1
Replies

FMC API Modify rule issue

Kenneth.chew
Level 1
Level 1

Hi,

I'm trying to update the Intrusion policy and logging settings for access rules via API. I'm able to successfully update the settings. However i found that the Source/Destination networks for some rules are being removed during the update. It seems this affects rules which are no using Network Objects such as the below. Can anyone advise how this can be done?

 

"destinationNetworks": {
"literals": [
{
"type": "FQDN",
"value": "10.1.1.1"
}
]

1 Reply 1

You could try the following:

For subnets:

[

 {

  "name": "insideLAN",

  "value": "10.1.1.0/24",

  "overridable": false,

  "description": "Inside LAN",

  "type": "Network"

 },

 {

  "name": "DMZ1",

  "value": "10.1.2.0/24",

  "overridable": false,

  "description": "DMZ1",

  "type": "Network"

 }

]

 

For hosts:
[

 {

  "name": "webserver1",

  "type": "Host",

  "value": "10.1.0.10",

  "description": "Web Server"

 },

 {

  "name": "FTPserver",

  "type": "Host",

  "value": "10.1.2.10",

  "description": "FTP Server"

 }
]

--
Please remember to select a correct answer and rate helpful posts
Review Cisco Networking for a $25 gift card