F5 firewall

Manages F5 firewall rules.

Network Security · F5 firewall

Details

IDF5 firewall
ProviderF5
CategoryNetwork Security
From Version5.0.0
Supported ModulesAgentix XSIAM

README

Use the F5 Firewall integration to manage your F5 firewall rules.

Configure F5 Firewall in Cortex

Parameter Description Required
url URL True
port Port True
credentials Credentials True
advancedLogin Advanced login - set to true to authenticate via LDAP, AD etc False
insecure Trust any certificate (not secure) False
proxy Use system proxy settings False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

Create a firewall policy

Creates an F5 firewall policy.

Base Command

f5-create-policy

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

There is no context output for this command.

Command Example

##### Human Readable Output

### f5-create-rule

***
Creates a rule in a specific policy

##### Base Command

`f5-create-rule`

##### Input

| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| policy-name | The policy name the rule will be associated with | Required |

##### Context Output

There is no context output for this command.

##### Command Example
Human Readable Output

List all rules for a policy

Lists all the rules of a specific policy

Base Command

f5-list-rules

Input
Argument Name Description Required
policy-name The policy name that the rules displayed are associated with. Required
Context Output

There is no context output for this command.

Command Example

### Modify the rule for a policy

***
Modifies an F5 rule in a specific policy.

##### Base Command

`f5-modify-rule`

##### Input

| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| policy-name | The policy name the rule is associated with. | Required |
| rule-name | The rule name to modify. | Required |

##### Context Output

There is no context output for this command.

##### Command Example
Human Readable Output

Delete a rule

Delete an F5 rule.

Base Command

f5-del-rule

Input
Argument Name Description Required
policy-name The policy name the rule is associated with. Required
rule-name The name of the rule to delete. Required
Context Output

There is no context output for this command.

Command Example

### Add a policy to a global policy

***
Adds the specified policy to a global policy.

##### Base Command

`f5-modify-global-policy`

##### Input

| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| enforcedPolicy | The new enforced policy to add to the global policy. | Required |

##### Context Output

There is no context output for this command.

##### Command Example
Human Readable Output

Get a global policy

Display global policy.

Base Command

f5-show-global-policy

Input

There are no input arguments for this command.

Context Output

There is no context output for this command.

Command Example

### Delete a policy

***
Deletes a policy.

##### Base Command

`f5-del-policy`

##### Input

| **Argument Name** | **Description** | **Required** |
| --- | --- | --- |
| policy-name | The name of the policy to delete. | Required |

##### Context Output

There is no context output for this command.

##### Command Example
Human Readable Output

Get a list of all user sessions

Lists all the sessions with client IP for the given username.

Base Command

f5-list-all-user-sessions

Input
Argument Name Description Required
resource-ip Client IP address. Required
Context Output

There is no context output for this command.

Command Example

``````

Configuration parameters

  • url — URL (required)
  • port — Port (required)
  • credentials — Credentials (required)
  • advancedLogin — Advanced login - set to true to authenticate via LDAP, AD etc
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (9)

  • f5-create-policy

    Creates an F5 firewall policy.

  • f5-create-rule

    Creates a rule in a specific policy

  • f5-del-policy

    Delete a policy.

  • f5-del-rule

    Delete an F5 firewall rule.

  • f5-list-all-user-sessions

    Lists all the sessions with client IP for the given username.

  • f5-list-rules

    Lists all the rules of a specific policy.

  • f5-modify-global-policy

    Adds the specific policy to a global policy.

  • f5-modify-rule

    Modifies an F5 rule in a specific policy

  • f5-show-global-policy

    Display global policy.

Source

F5Firewall.js F5Firewall.yml
Download History Raw 
commonfields:
  id: F5 firewall
  version: -1
name: F5 firewall
display: F5 firewall
category: Network Security
provider: F5
description: Manages F5 firewall rules.
configuration:
- display: URL
  name: url
  defaultvalue: ""
  type: 0
  required: true
- display: Port
  name: port
  defaultvalue: "34993"
  type: 0
  required: true
- display: Credentials
  name: credentials
  defaultvalue: ""
  type: 9
  required: true
- display: Advanced login - set to true to authenticate via LDAP, AD etc
  name: advancedLogin
  defaultvalue: "false"
  type: 8
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
script:
  script: ''
  type: javascript
  commands:
  - name: f5-create-policy
    arguments: []
    description: Creates an F5 firewall policy.
  - name: f5-create-rule
    arguments:
    - name: policy-name
      required: true
      default: true
      description: The policy name the rule will be associated with.
    description: Creates a rule in a specific policy
  - name: f5-list-rules
    arguments:
    - name: policy-name
      required: true
      default: true
      description: The policy name that the rules displayed are associated with.
    description: Lists all the rules of a specific policy.
  - name: f5-modify-rule
    arguments:
    - name: policy-name
      required: true
      default: true
      description: The policy name the rule is associated with.
    - name: rule-name
      required: true
      description: The rule name to modify.
    description: Modifies an F5 rule in a specific policy
  - name: f5-del-rule
    arguments:
    - name: policy-name
      required: true
      default: true
      description: The policy name the rule is associated with.
    - name: rule-name
      required: true
      description: The name of the rule to delete.
    description: Delete an F5 firewall rule.
  - name: f5-modify-global-policy
    arguments:
    - name: enforcedPolicy
      required: true
      default: true
      description: The new enforced policy to add to the global policy.
    description: Adds the specific policy to a global policy.
  - name: f5-show-global-policy
    arguments: []
    description: Display global policy.
  - name: f5-del-policy
    arguments:
    - name: policy-name
      required: true
      default: true
      description: The name of the policy to delete.
    description: Delete a policy.
  - name: f5-list-all-user-sessions
    arguments:
    - name: resource-ip
      description: Client IP address.
      required: true
    description: Lists all the sessions with client IP for the given username.
tests:
- No test
fromversion: 5.0.0