Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- sophos [2025/02/06 11:56]
jango [API]
+++ sophos [2025/02/12 11:15] (aktuell)
jango [Network]
@@ Zeile 5: / Zeile 5: @@
 [[https://support.sophos.com/support/s/article/KBA-000002405?language=en_US|Reset]]
-Sophos Central ist ein zentrales Managment Tool in der Cloud.
+Sophos Central ist ein zentrales Managment Tool in der Cloud (für UTM9?).
-{{https://i.ibb.co/5Bph4D6/utm9.png}}
 <code>
@@ Zeile 43: / Zeile 41: @@
 <M> fw-akm:/root # cc get_objects network
 <M> fw-akm:/root # cc get_object "REF_xxxxxx"
+<M> fw-akm:/root # cc get packetfilter rules
+<M> fw-akm:/root # cc get packetfilter rules_auto
 </code>
@@ Zeile 49: / Zeile 50: @@
 Die API (Web Interface) ist unter https://sophos:4444/api erreichbar. [[https://www.sophos.com/en-us/medialibrary/PDFs/documentation/UTMonAWS/Sophos-UTM-RESTful-API.ashx|Documentation]]
+Parameter werden mit "Referenzen" verknüpft. Einträge die mit "REF_" beginnen sind Referenzen. Referenzen kann man leider nicht via REST API suchen, dazu muss man in der Shell das Tool cc verwenden.
+====AAA====
 <code>
-/api/objects/network/network
+# AAA
+/api/objects/aaa/user // Definitions & Users -> Users
-/api/objects/network/interface_address
+/api/objects/aaa/group // Definitions & Users -> Groups
-/api/objects/network/interface_network
+</code>
-# User & Groups
-/api/objects/aaa/user
-/api/objects/group
+====Authentication====
+<code>
 # Authentication
-/api/objects/authentication/adirectory
+/api/objects/authentication/adirectory // Definitions & Users -> Authentication Services -> Servers
-/api/objects/authentication/edirectory
+/api/objects/authentication/edirectory // Definitions & Users -> Authentication Services -> Servers
 /api/objects/authentication/group
-/api/objects/authentication/otp_token
+/api/objects/authentication/otp_token // Definitions & Users -> Authentication Services -> One-Time Passwords
-/api/objects/authentication/ldap
+/api/objects/authentication/ldap // Definitions & Users -> Authentication Services -> Servers
-/api/objects/authentication/radius
+/api/objects/authentication/radius // Definitions & Users -> Authentication Services -> Servers
-/api/objects/authentication/tacacs
+/api/objects/authentication/tacacs // Definitions & Users -> Authentication Services -> Servers
+</code>
-# Firewall services
-/api/objects/service/tcp
-/api/objects/service/udp
-/api/objects/service/tcpudp
-# Routes
-/api/objects/route/policy
-/api/objects/route/static
-# Virtual webservers
-/api/objects/reverse_proxy/frontend // Virtual webserver
-/api/objects/reverse_proxy/backend // Real webservers
-/api/objects/reverse_proxy/location // site path routing
+====CA====
+<code>
 # Certificate authority
 /api/objects/ca/crl
@@ Zeile 94: / Zeile 85: @@
 /api/objects/ca/signing_ca
 /api/objects/ca/verification_ca
+</code>
+====Clientless VPN====
+<code>
 # Clientless VPN
-/api/objects/clientless_vpn/connection´
+/api/objects/clientless_vpn/connection
 /api/objects/clientless_vpn/group
+</code>
+====Conditions====
+<code>
 # Conditions
 /api/objects/condition/group
 /api/objects/condition/objref
+</code>
+====DHCP====
+<code>
 # DHCP
 /api/objects/dhcp/group
@@ Zeile 110: / Zeile 110: @@
 /api/objects/dhcp/server6
 /api/objects/dhcp/stateless
+</code>
+====DNS====
+<code>
 # DNS
 /api/objects/dns/axfr
 /api/objects/dns/group
 /api/objects/dns/route
+</code>
+====Endpoint protection====
+<code>
 # Endpoint protection
 /api/objects/epp/av_exception
@@ Zeile 125: / Zeile 131: @@
 /api/objects/epp/endpoints_group
 /api/objects/epp/group
+</code>
-# HTTP
+====HTTP====
+====Interfaces====
+<code>
 # Interfaces
 /api/objects/interface/bridge
@@ Zeile 138: / Zeile 147: @@
 /api/objects/interface/tunnel
 /api/objects/interface/vlan
+</code>
+====Intrusion prevention====
+<code>
 # Intrusion prevention
 /api/objects/ips/exception
@@ Zeile 144: / Zeile 156: @@
 /api/objects/ips/rule
 /api/objects/ips/rule_modifier
+</code>
+====IPSec====
+<code>
 # IPSec
 /api/objects/ipsec/group
 /api/objects/ipsec/policy
 /api/objects/ipsec/remote_gateway
+</code>
+====IPSec connection====
+<code>
 # IPSec connection
 /api/objects/ipsec_connection/amazon_vpc
@@ Zeile 159: / Zeile 177: @@
 /api/objects/ipsec_connection/roadwarrior_x509
 /api/objects/ipsec_connection/site2site
+</code>
+====IPSec Auth====
+<code>
 # IPSec Auth
 /api/objects/ipsec_remote_auth/ca
@@ Zeile 166: / Zeile 187: @@
 /api/objects/ipsec_remote_auth/rsa
 /api/objects/ipsec_remote_auth/x509
+</code>
-# WLAN ???
+====Interface Hardware====
+<code>
+# Interface Hardware
 /api/objects/itfhw/awe_network
 /api/objects/itfhw/awe_network_group
@@ Zeile 179: / Zeile 203: @@
 /api/objects/itfhw/usbserial
 /api/objects/itfhw/virtual
+</code>
+====Interface Params====
+<code>
 /api/objects/itfparams/bridge_port
 /api/objects/itfparams/group
@@ Zeile 185: / Zeile 212: @@
 /api/objects/itfparams/primary
 /api/objects/itfparams/secondary
+</code>
+====MAC list====
+<code>
 #
 /objects/mac_list/group
 /objects/mac_list/mac_list
+</code>
+====Network====
+<code>
 # Network
-/api/objects/network/aaa
+/api/objects/network/aaa (???)
 /api/objects/network/any
 /api/objects/network/availability_group
@@ Zeile 202: / Zeile 235: @@
 /api/objects/network/interface_network
 /api/objects/network/multicast
-/api/objects/network/network
+/api/objects/network/network // Definitions & Users -> Network Definitions
 /api/objects/network/range
+</code>
+====Notification====
+<code>
 # Notification
 /api/objects/notification/group
 /api/objects/notification/notification
+</code>
+====OSPF====
+<code>
 # OSPF
 /api/objects/ospf/area
@@ Zeile 214: / Zeile 253: @@
 /api/objects/ospf/interface
 /api/objects/ospf/message_digest_key
+</code>
+====Packetfilter====
+<code>
 # Packetfilter
 /api/objects/packetfilter/1to1nat
@@ Zeile 225: / Zeile 267: @@
 /api/objects/packetfilter/packetfilter
 /api/objects/packetfilter/ruleset
+</code>
+====QoS====
+<code>
+# QoS
+/api/objects/qos/application_selector
+/api/objects/qos/group
+/api/objects/qos/ingress_rule
+/api/objects/qos/interface
+/api/objects/qos/rule
+/api/objects/qos/traffic_selector
+/api/objects/qos/traffic_selector_group
+</code>
+====Remote Syslog====
+<code>
+# Remote Syslog
+/api/objects/remote_syslog/group
+/api/objects/remote_syslog/server
+</code>
+====Reverse proxy (virtual webserver====
+<code>
+/api/objects/reverse_proxy/auth_profile
+/api/objects/reverse_proxy/backend // Webserver Protection -> WAF -> Real Webservers
+/api/objects/reverse_proxy/blockpage
+/api/objects/reverse_proxy/exception
+/api/objects/reverse_proxy/filter
+/api/objects/reverse_proxy/form_template
+/api/objects/reverse_proxy/frontend // Webserver Protection -> WAF -> Virtual Webservers
+/api/objects/reverse_proxy/group
+/api/objects/reverse_proxy/location // Webserver Protection -> WAF -> Site Path Routing
+/api/objects/reverse_proxy/profile
+/api/objects/reverse_proxy/redirection
+/api/objects/reverse_proxy/threats_filter
+</code>
+====Rights====
+<code>
+# Rights
+/api/objects/right/group
+/api/objects/right/right
+</code>
+====Role====
+<code>
+# Role
+/api/objects/role/group
+/api/objects/role/role
+</code>
+====Route====
+<code>
+# Route
+/api/objects/route/group
+/api/objects/route/policy
+/api/objects/route/static
+</code>
+====Scheduler====
+<code>
+# Scheduler
+/api/objects/scheduler/group
+/api/objects/scheduler/loadbalance
+/api/objects/scheduler/rule
+</code>
+====Services====
+<code>
+# Services (Firewall)
+/api/objects/service/ah
+/api/objects/service/any
+/api/objects/service/esp
+/api/objects/service/group
+/api/objects/service/icmp
+/api/objects/service/icmpv6
+/api/objects/service/ip
+/api/objects/service/tcp
+/api/objects/service/tcpudp
+/api/objects/service/udp
+</code>
+====SMTP====
+<code>
+# SMTP
+/api/objects/smtp/exception
+/api/objects/smtp/group
+/api/objects/smtp/header_operation
+/api/objects/smtp/profile
+</code>
+====SNMP====
+<code>
+# SNMP
+/api/objects/snmp/group
+/api/objects/snmp/trap
+</code>
+====SPX====
+<code>
+# SPX
+/api/objects/spx/group
+/api/objects/spx/template
+</code>
+====SSL VPN====
+<code>
+# SSL VPN
+/api/objects/ssl_vpn/client_connection
+/api/objects/ssl_vpn/group
+/api/objects/ssl_vpn/remote_access_profile
+/api/objects/ssl_vpn/server_connection
 </code>

MBCDN

Benutzer-Werkzeuge

Webseiten-Werkzeuge

Unterschiede

Seiten-Werkzeuge