post "show-access-rulebase" through postman_collection_v2-v1.7 gives error "404 not found"

[Satish]

Hi Team,

We are able to fetch NAT rules by specifying the Policy package name through "postman_collection_v2-v1.7" ( CP R81 )

But not able to fetch Rule base of all policy packages. Not getting option to set Policy package name in reqest body.

Let me know  which postman collection reqest can provide Network Policy details and how to set policy package name.

Regards,

Satish

[Amir_Senn]

I reproduced this exact error while using MDS but not regular SMS.

Are you using MDS?

[Satish]

No . I am using SMS.

Not able to fetch rulesbase of any policy package.

Regards,

Satish

[Amir_Senn]

You should name the package.

Try running this in SSH:

mgmt_cli -r true show access-rulebase offset 0 limit 20 package <policy_package_name> name "Network" details-level "standard" use-object-dictionary true --format json

[Daniel_Kuhl1]

Hi @Satish, I think the url in the Postman collection is wrong. It should be "{{server}}/web_api/show-access-rulebase".

Daniel

[Satish]

Hi Daniel,

It's not working. Error "404 not found".

Attaching snap for working NAT & non working Access Rule postman collection.

Access rule postman query not providing option to filter Policy package name.

I have added those parameters by refering NAT rules postman query. But no luck...

Regards,

Satish

[Daniel_Kuhl1]

Ah, sorry. You're are right. Your url was correct. Can you try without the package in the body of the request for the access rulebase?

[Satish]

Hi Daniel,

Without package name also 404 error.

Attaching the snap.

Thanks & Regards,

Satish

[Amir_Senn]

3 suggestion:

a. Try with command in SSH to see if there's a difference.

b. If you're not working with JHF, try to download latest.

c. Try to add "--domain "System Data"" to the command to see if it makes a difference.

[Daniel_Kuhl1 · Accepted solution]

Is the name "Network" correct for the access control layer? It seems the API request couldn't find it.

Attached is an example how it should look like.

[Satish]

Thanks a lot Daniel...

I have used the specific access profile name to extract the Application , Network rules..

It's working now..8)

Regards,

Satish