Get All Firewall Rules operation for version 8.2


The Get All Firewall Rules operation enables you to retrieve the rules in a firewall for a given zone in a specified container.

The following table describes the elements for the <items> XML element and adapter request for the Get All Firewall Rules operation:


 Elements for the <items> XML element and adapter request for the Get All Firewall Rules operation

The following figure shows a sample <items> XML element for the Get All Firewall Rules operation:

<items> XML element for the Get All Firewall Rules operation


<items>
  <item>
     <parameters>
       <container-name>LargeGoldContainer1</container-name>
       <fw-acl-selector-d-t-o>
         <vfw-name>VFW</vfw-name>
         <interface-name>inside</interface-name>
         <inbound-acl-flag>true</inbound-acl-flag>
       </fw-acl-selector-d-t-o>
      </parameters>
 </item>
</items>

The following figure shows a sample adapter request for the Get All Firewall Rules operation:

Sample adapter request for the Get All Firewall Rules operation


bmc-configuration-automation-networks-request>
   <entity>security</entity>
   <request>
       <operation-name>get-all-firewall-rules</operation-name>
       <parameters>
           <container-name>LargeGoldContainer1</container-name>
           <fw-acl-selector-d-t-o>
               <vfw-name>VFW</vfw-name>
               <interface-name>inside</interface-name>
               <inbound-acl-flag>true</inbound-acl-flag>
               <zone-name/>
           </fw-acl-selector-d-t-o>
       </parameters>
   </request>
</bmc-configuration-automation-networks-request>

The following figure illustrates the adapter response for the sample Get All Firewall Rules operation.

Note

The adapter response contains only those elements that do not contain empty values.

Adapter response for the Get All Firewall Rules operation

<bmc-configuration-automation-networks-response>
   <metadata>
       <status>success</status>
   </metadata>
   <parameters>
       <output>
           <rule-d-t-os>
               <element>
                   <description>New Rule</description>
                   <destination-host-address>1.1.1.1</destination-host-address>
                   <destination-port>1126</destination-port>
                   <enabled-flag>true</enabled-flag>
                   <permit-flag>true</permit-flag>
                   <source-host-address>1.1.1.1</source-host-address>
                   <transport-protocol>1</transport-protocol>
               </element>
           </rule-d-t-os>
           <vfw-last-updated-token>-832762361916829766</vfw-last-updated-token>
       </output>
   </parameters>
</bmc-configuration-automation-networks-response>

The following table describes the response elements for the Get All Firewall Rules operation:


 Response elements for the Get All Firewall Rules operation

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*