topic Re: API to tag shared policy in General Topics

API to tag shared policy

Shruthi123 — Mon, 11 Sep 2023 01:53:53 GMT

We have few shared policy and need to tag and disable them . Please help me with API deatails

Re: API to tag shared policy

akuzhuppilly — Tue, 12 Sep 2023 02:14:07 GMT

You may check the REST-API documentation to understand how an existing policy can be edited to include a tag and to disable it.

The rest-api documentation is available at: https://x.x.x.x/restapi-doc (where x.x.x.x is your device IP).

Re: API to tag shared policy

BPry — Tue, 12 Sep 2023 02:22:01 GMT

@Shruthi123 ,

If you use the API browser (https://<firewall>/api) it'll give you the actual XPath and complete API URL that you'll need to make the change. Easiest way to get the calls that you'll need to make in your actual environment instead of us giving you a generic call.

Example to get you started:

https://<ip>/api/?type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='<rule-name>']&element=<disabled>yes</disabled>

Re: API to tag shared policy

Shruthi123 — Thu, 14 Sep 2023 12:10:37 GMT

@BPry

can you please help me for xpath that is specific for "Shared policy". I have tagged & disabled device-group Policies but facing issue while tagging and disables "Shared Policy".

Xpath used for "device-group" policy =

Can you please help me with xpath of Shared policy?

Re: API to tag shared policy

akuzhuppilly — Thu, 14 Sep 2023 15:40:00 GMT

@Shruthi123

The xpath for shared policy is :

/config/shared/pre-rulebase/security/rules/entry[@name='policy-name']

You may easily verify it by going into the API documentation - https://<ip>/api (IP = your Firewall/Panorama IP)