topic Bulk Apply Profiles in General Topics

Bulk Apply Profiles

wocomike — Mon, 12 May 2014 19:07:44 GMT

Hi All,

Is there any way to easily bulk-apply a threat prevention profile to a large list of Security Policies? Maybe through the CLI? We have about 600 security policies that do not have threat prevention turned on. I'd like to do so, and have the profile created, I just don't know how to apply to all of the policies.

Thanks in advance,

-Mike

Re: Bulk Apply Profiles

_slv_ — Mon, 12 May 2014 19:46:21 GMT

I don't thing is possible to do (even in CLI), maybe with export to .xml...

Please consider to create security profiles (Object > Security Profiles Groupd) and connect them to Security Policies insted of profiles.

It's much easier to modify them in future.

Regards

SLawek

Re: Bulk Apply Profiles

jvalentine — Mon, 12 May 2014 20:06:00 GMT

The other option is to script it out. Use the API to get a list of security policy rules, and then run through a 2nd script that adds the security profiles/security profile group to each of the policies. You might get some additional ideas & help in the DevCenter.

Re: Bulk Apply Profiles

HULK — Mon, 12 May 2014 20:23:56 GMT

A workaround through CLI:

admin@DADA> set cli config-output-format set

admin@DADA> configure

Entering configuration mode

[edit]

admin@DADA# show

admin@DADA# edit rulebase security

[edit rulebase security]

admin@DADA#

For example: you want to change/add the Antivirus profile into the security rules ( whether url-filtering is already added)

[edit rulebase security]

admin@DADA# show | match url-filtering

set rulebase security rules LAN-ISP profile-setting profiles url-filtering default

set rulebase security rules test-1 profile-setting profiles url-filtering default

[edit rulebase security]

Copy the output in a notepad and replace the url-filtering profile with the configured antivirus profile and paste it into the CLI.

set rulebase security rules LAN-ISP profile-setting profiles virus XYZ

set rulebase security rules test-1 profile-setting profiles virus XYZ

Thanks

Re: Bulk Apply Profiles

ssharma — Tue, 13 May 2014 14:15:41 GMT

Hi Wocomike,

Other option would be configure security group and have all anti-virus, vulnerability, spyware and url filtering. Export all config in a note pad as suggested by HULK and replace the url filtering profile with the security group. So that you have existing url- filtering profile as well as new threat profiles as well. HTH.