API to tag shared policy

[Shruthi123]

We have few shared policy and need to tag and disable them . Please help me with API deatails

[akuzhuppilly]

Hello @Shruthi123 

You may check the REST-API documentation to understand how an existing policy can be edited to include a tag and to disable it.

The rest-api documentation is available at: https://x.x.x.x/restapi-doc (where x.x.x.x is your device IP).

[BPry]

@Shruthi123 ,

If you use the API browser (https://<firewall>/api) it'll give you the actual XPath and complete API URL that you'll need to make the change. Easiest way to get the calls that you'll need to make in your actual environment instead of us giving you a generic call. 

Example to get you started: 

https://<ip>/api/?type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='<rule-name>']&element=<disabled>yes</disabled>

[Shruthi123]

@BPry

can you please help me for xpath that is specific for "Shared policy". I have tagged & disabled device-group Policies but facing issue while tagging and disables "Shared Policy".

Xpath used for "device-group" policy = 

Can you please help me with xpath of Shared policy?

[akuzhuppilly]

@Shruthi123 

The xpath for shared policy is :

/config/shared/pre-rulebase/security/rules/entry[@name='policy-name']

 You may easily verify it by going into the API documentation -  https://<ip>/api (IP = your Firewall/Panorama IP)