topic before add-access-rule in API / CLI Discussion

before add-access-rule

Manchuker — Thu, 21 Dec 2023 09:15:31 GMT

How to determine whether the added policy exists in the existing rulebases and does not conflict before adding an access rule.

use "show-access-rulebase"

I want use "show-access-rulebase" and filter to obtain the source, destination, and service, is that not possible?

"show-access-rulebase","filter": "source:{uid} AND source:{uid} AND destination:{uid} service:{uid}"

Can I find a unique match?

Re: before add-access-rule

_Val_ — Wed, 20 Dec 2023 10:23:55 GMT

You can search the existing rulebase by IP address and/or object name

Re: before add-access-rule

PhoneBoy — Wed, 20 Dec 2023 16:12:05 GMT

You'd have to programmatically parse the rulebase to see if an existing rule exists at current.
I believe it is something we are looking at for a future release.

Re: before add-access-rule

Manchuker — Thu, 21 Dec 2023 00:53:10 GMT

I plan to use the source, destination, and service in the rulebase to make a complete match, which is considered a duplicate strategy, but there are also other situations.