OPNSense

Manage OPNsense Firewall. For more information see OPNsense documentation. OPNsense is an open source, easy-to-use and easy-to-build HardenedBSD based firewall and routing platform.

Network Security · OPNSense

Details

IDOPNSense
ProviderDeciso B.V.
CategoryNetwork Security
From Version6.0.0
Docker Imagedemisto/opnsense:1.0.0.10133006
Supported ModulesAgentix XSIAM

README

Manage OPNsense Firewall.
For more information see OPNsense documentation.
OPNsense is an open source, easy-to-use and easy-to-build HardenedBSD based firewall and routing platform.
This integration was integrated and tested with version 22.1 of OPNSense

Configure OPNSense in Cortex

Parameter Required
Server URL (e.g. https://opnsense.mydomain.ltd) True
API Key True
API Secret True
Trust any certificate (not secure) False
Use system proxy settings False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

opnsense-alias-list

Get aliases list

Base Command

opnsense-alias-list

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Alias unknown Aliases list

opnsense-alias-add

Create new alias

Base Command

opnsense-alias-add

Input

Argument Name Description Required
name Alias name. Required
type Alias type. Possible values are: host, network, port, url, urltable, geoip, networkgroup, mac, external, dynipv6host. Required
enabled Alias enabled. Possible values are: 1, 0. Default is 1. Optional
proto Alias protocol. Possible values are: inet, inet6. Optional
updatefreq Alias update frequency. Optional
counters Alias statistics. Possible values are: 0, 1. Optional
description Alias description. Optional
content Alias content. Optional
auto_commit Apply automaticly aliases changes. Possible values are: False, True. Default is False. Optional

Context Output

Path Type Description
OPNSense.Alias unknown Alias UUID created

opnsense-alias-del

Delete alias with uuid

Base Command

opnsense-alias-del

Input

Argument Name Description Required
uuid Alias UUID. Required
auto_commit Apply automaticly aliases changes. Possible values are: False, True. Default is False. Optional

Context Output

Path Type Description
OPNSense.Alias unknown Alias UUID deleted

opnsense-alias-mod

Modify an existing alias

Base Command

opnsense-alias-mod

Input

Argument Name Description Required
uuid Alias UUID. Required
content Alias content seperated by comma (NB. will replace actual content!). Required
name Alias name. Optional
type Alias type. Possible values are: host, network, port, url, urltable, geoip, networkgroup, mac, external, dynipv6host. Optional
proto Alias protocol. Possible values are: inet, inet6. Optional
enabled Alias enabled. Possible values are: 0, 1. Optional
updatefreq Alias update frequency. Optional
counters Alias statistics. Possible values are: 0, 1. Optional
description Alias description. Optional
auto_commit Apply automaticly aliases changes. Possible values are: False, True. Default is False. Optional

Context Output

Path Type Description
OPNSense.Alias unknown Alias UUID modified

opnsense-alias-mod-additem

Add item into existing alias

Base Command

opnsense-alias-mod-additem

Input

Argument Name Description Required
name Alias name. Required
entry Entry to add. Optional
auto_commit Apply automaticly aliases changes. Possible values are: False, True. Default is False. Optional

Context Output

Path Type Description
OPNSense.Alias unknown Alias UUID modified

opnsense-alias-mod-delitem

Del item into existing alias

Base Command

opnsense-alias-mod-delitem

Input

Argument Name Description Required
name Alias name. Required
entry Entry to remove. Optional
auto_commit Apply automaticly aliases changes. Possible values are: False, True. Default is False. Optional

Context Output

Path Type Description
OPNSense.Alias unknown Alias UUID modified

opnsense-alias-get

Get alias details

Base Command

opnsense-alias-get

Input

Argument Name Description Required
uuid Alias UUID. Optional
name Alias name. Optional

Context Output

Path Type Description
OPNSense.Alias Unknown Alias details
OPNSense.Alias.name Unknown Alias name
OPNSense.Alias.content Unknown Alias content
OPNSense.Alias.description Unknown Alias description
OPNSense.Alias.enabled Unknown Alias enabled

opnsense-alias-get-uuid

Get alias UUID

Base Command

opnsense-alias-get-uuid

Input

Argument Name Description Required
name Alias name. Required

Context Output

Path Type Description
OPNSense.Alias Unknown Alias UUID

opnsense-interfaces-list

Get interfaces list

Base Command

opnsense-interfaces-list

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Interfaces Unknown Interfaces list

opnsense-category-list

Get categories list

Base Command

opnsense-category-list

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Category Unknown Categories list

opnsense-category-add

Create new category

Base Command

opnsense-category-add

Input

Argument Name Description Required
name Category name. Required
auto Automatically added, will be removed when unused. Possible values are: 0, 1. Optional
color Category color (format : #YVWXYZ). Optional

Context Output

Path Type Description
OPNSense.Category Unknown Category UUID

opnsense-category-del

Delete category with uuid

Base Command

opnsense-category-del

Input

Argument Name Description Required
uuid Category UUID. Required

Context Output

Path Type Description
OPNSense.Category Unknown Category UUID

opnsense-category-get

Get category details

Base Command

opnsense-category-get

Input

Argument Name Description Required
uuid Category UUID. Optional

Context Output

Path Type Description
OPNSense.Category Unknown Category details

opnsense-category-mod

Modify an axisting category

Base Command

opnsense-category-mod

Input

Argument Name Description Required
uuid Category UUID. Required
name Category name. Optional
color Category color (format : #YVWXYZ). Optional
auto Automatically added, will be removed when unused. Possible values are: 0, 1. Optional

Context Output

Path Type Description
cef2c7d7-68d8-41aa-b6b8-1cac38554d58 Unknown Category UUID

opnsense-rule-list

Get rules list

Base Command

opnsense-rule-list

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Rule Unknown Rules list

opnsense-rule-get

Get rule details

Base Command

opnsense-rule-get

Input

Argument Name Description Required
uuid Rule UUID. Required

Context Output

Path Type Description
OPNSense.Rule Unknown Rule details
OPNSense.Rule.description Unknown Rule description
OPNSense.Rule.enabled Unknown Rule enabled
OPNSense.Rule.source_net Unknown Source NET’s rule
OPNSense.Rule.destination_net Unknown Destination NET’s rule
OPNSense.Rule.interface Unknown Interface’s rule

opnsense-alias-apply

Apply configuration

Base Command

opnsense-alias-apply

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

There is no context output for this command.

opnsense-device-reboot

Reboot the device

Base Command

opnsense-device-reboot

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Device Unknown Reboot status

opnsense-firmware-info

Get firmware info

Base Command

opnsense-firmware-info

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Firmware Unknown Firmware info

opnsense-firmware-status

Get firmware status

Base Command

opnsense-firmware-status

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Firmware Unknown Firmware status

opnsense-firmware-upgradestatus

Get firmware upgrade status

Base Command

opnsense-firmware-upgradestatus

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Firmware Unknown Firmware upgrade status

opnsense-firmware-update

Do firmware update

Base Command

opnsense-firmware-update

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Firmware Unknown Firmware update

opnsense-firmware-upgrade

Do firmware upgrade

Base Command

opnsense-firmware-upgrade

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Firmware Unknown Firmware upgrade

opnsense-rule-del

Delete an existing rule

Base Command

opnsense-rule-del

Input

Argument Name Description Required
uuid Rule UUID. Required
auto_commit Apply automaticly aliases changes. Possible values are: None, True. Default is None. Optional

Context Output

Path Type Description
OPNSense.Rule Unknown Rule UUID

opnsense-rule-add

Create a new rule

Base Command

opnsense-rule-add

Input

Argument Name Description Required
action Rule action. Possible values are: pass, block, reject. Default is pass. Optional
enabled Rule enabled. Possible values are: 1, 0. Default is 1. Optional
quick Rule quick. Possible values are: 1, 0. Default is 1. Optional
interface Rule interface. Optional
direction Rule direction. Possible values are: in, out. Default is in. Optional
ipprotocol Rule IP Protocol. Possible values are: inet, inet6. Default is inet. Optional
protocol Rule protocol. Possible values are: any, ICMP, IGMP, GGP, IPENCAP, ST2, TCP, CBT, EGP, IGP, BBN-RCC, NVP, PUP, ARGUS, EMCON, XNET, CHAOS, UDP, MUX, DCN, HMP, PRM, XNS-IDP, TRUNK-1, TRUNK-2, LEAF-1, LEAF-2, RDP, ISO-TP4, NETBLT, MFE-NSP, MERIT-INP, DCCP, 3PC, IDPR, XTP, DDP, IDPR-CMTP, TP++, IL, IPV6, SDRP, IDRP, RSVP, GRE, DSR, BNA, ESP, AH, I-NLSP, SWIPE, NARP, MOBILE, TLSP, SKIP, IPV6-ICMP, CFTP, SAT-EXPAK, KRYPTOLAN, RVD, IPPC, SAT-MON, VISA, IPCV, CPNX, CPHB, WSN, PVP, BR-SAT-MON, SUN-ND, WB-MON, WB-EXPAK, ISO-IP, VMTP, SECURE-VMTP, VINES, TTP, NSFNET-IGP, DGP, TCF, EIGRP, OSPF, SPRITE-RPC, LARP, MTP, AX.25, IPIP, MICP, SCC-SP, ETHERIP, ENCAP, GMTP, IFMP, PNNI, PIM, ARIS, SCPS, QNX, A/N, IPCOMP, SNP, COMPAQ-PEER, IPX-IN-IP, CARP, PGM, L2TP, DDX, IATP, STP, SRP, UTI, SMP, SM, PTP, ISIS, CRTP, CRUDP, SPS, PIPE, SCTP, FC, RSVP-E2E-IGNORE, UDPLITE, MPLS-IN-IP, MANET, HIP, SHIM6, WESP, ROHC, PFSYNC, DIVERT. Default is any. Optional
source_net Source Net. Default is any. Optional
source_not Source NOT. Possible values are: 0, 1. Default is 0. Optional
source_port Source port. Optional
destination_net Destination Net. Default is any. Optional
destination_not Destination NOT. Possible values are: 0, 1. Default is 0. Optional
destination_port Destination port. Optional
log Enable logging. Possible values are: 0, 1. Default is 0. Optional
sequence Provide a valid sequence for sorting (1 - 99999). Default is 1. Optional
description Rule description. Optional
auto_commit Apply automaticly aliases changes. Possible values are: None, True. Default is None. Required

Context Output

Path Type Description
OPNSense.Rule Unknown Rule UUID

opnsense-rule-mod

Modify an existing rule

Base Command

opnsense-rule-mod

Input

Argument Name Description Required
uuid Rule UUID. Required
action Rule action. Possible values are: pass, block, reject. Default is pass. Optional
enabled Rule enabled. Possible values are: 1, 0. Default is 1. Optional
quick Rule quick. Possible values are: 1, 0. Default is 1. Optional
interface Rule interface. Optional
direction Rule description. Possible values are: in, out. Default is in. Optional
ipprotocol Rule IP protocol. Possible values are: inet, inet6. Default is inet. Optional
protocol Rule protocol. Possible values are: any, ICMP, IGMP, GGP, IPENCAP, ST2, TCP, CBT, EGP, IGP, BBN-RCC, NVP, PUP, ARGUS, EMCON, XNET, CHAOS, UDP, MUX, DCN, HMP, PRM, XNS-IDP, TRUNK-1, TRUNK-2, LEAF-1, LEAF-2, RDP, ISO-TP4, NETBLT, MFE-NSP, MERIT-INP, DCCP, 3PC, IDPR, XTP, DDP, IDPR-CMTP, TP++, IL, IPV6, SDRP, IDRP, RSVP, GRE, DSR, BNA, ESP, AH, I-NLSP, SWIPE, NARP, MOBILE, TLSP, SKIP, IPV6-ICMP, CFTP, SAT-EXPAK, KRYPTOLAN, RVD, IPPC, SAT-MON, VISA, IPCV, CPNX, CPHB, WSN, PVP, BR-SAT-MON, SUN-ND, WB-MON, WB-EXPAK, ISO-IP, VMTP, SECURE-VMTP, VINES, TTP, NSFNET-IGP, DGP, TCF, EIGRP, OSPF, SPRITE-RPC, LARP, MTP, AX.25, IPIP, MICP, SCC-SP, ETHERIP, ENCAP, GMTP, IFMP, PNNI, PIM, ARIS, SCPS, QNX, A/N, IPCOMP, SNP, COMPAQ-PEER, IPX-IN-IP, CARP, PGM, L2TP, DDX, IATP, STP, SRP, UTI, SMP, SM, PTP, ISIS, CRTP, CRUDP, SPS, PIPE, SCTP, FC, RSVP-E2E-IGNORE, UDPLITE, MPLS-IN-IP, MANET, HIP, SHIM6, WESP, ROHC, PFSYNC, DIVERT. Optional
source_net Source Net. Optional
source_not Source NOT. Possible values are: 0, 1. Default is 0. Optional
source_port Source port. Optional
destination_net Destination Net. Optional
destination_not Destination NOT. Optional
destination_port Destination port. Optional
log Enable log. Possible values are: 0, 1. Default is 0. Optional
description Rule description. Optional
auto_commit Apply automaticly aliases changes. Possible values are: None, True. Default is None. Optional

Context Output

Path Type Description
OPNSense.Rule Unknown Rule UUID

opnsense-rule-apply

Apply rules current configuration

Base Command

opnsense-rule-apply

Input

Argument Name Description Required
rollback_revision Rollback revision. Optional

Context Output

Path Type Description
OPNSense.Rule Unknown Action status

opnsense-rule-savepoint

Save rules current configuration

Base Command

opnsense-rule-savepoint

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
OPNSense.Rule Unknown Action status

opnsense-logs-search

Search into firewall logs

Base Command

opnsense-logs-search

Input

Argument Name Description Required
limit Log search limit. Default is 1000. Optional
ip Search IP in src or dst. Optional
interface Interface search filter. Optional

Context Output

| Path | Type | Description |
|—————————–| — | — |
| OPNSense.Logs | Unknown | OPNSense logs |
| OPNSense.Logs.interface | Unknown | interface in logs |
| OPNSense.Logs.src | Unknown | SRC in logs |
| OPNSense.Logs.srcport | Unknown | SRCPORT in logs |
| OPNSense.Logs.dst | Unknown | DST in logs |
| OPNSense.Logs.dstport | Unknown | DSTPORT in logs |
| OPNSense.Logs.action | Unknown | Action in logs |
| OPNSense.Logs.timestamp | Unknown | timestamp in logs |
| OPNSense.Logs.label | Unknown | label in logs |
| OPNSense.Logs.protoname | Unknown | protoname in logs |

opnsense-states-search

Query states

Base Command

opnsense-states-search

Input

Argument Name Description Required
ip Search IP in src or dst. Optional

Context Output

Path Type Description
OPNSense.States Unknown OPNSense States
OPNSense.States.label Unknown label in states
OPNSense.States.descr Unknown states description
OPNSense.States.nat_addr Unknown nat address in states
OPNSense.States.nat_port Unknown nat port in states
OPNSense.States.iface Unknown interface in states
OPNSense.States.ipproto Unknown IP Protocol in states
OPNSense.States.proto Unknown Protocol in states

opnsense-state-del

Delete state with ID

Base Command

opnsense-state-del

Input

Argument Name Description Required
state_id State ID. Optional

Context Output

There is no context output for this command.

opnsense-rule-revert

Revert config to given savepoint

Base Command

opnsense-rule-revert

Input

Argument Name Description Required
rollback_revision Rollback revision. Optional

Context Output

There is no context output for this command.

Configuration parameters

  • url — Server URL (e.g. https://opnsense.mydomain.ltd) (required)
  • apikey — API Key (required)
  • apisecret — API Secret (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (32)

  • opnsense-alias-add

    Create new alias.

  • opnsense-alias-apply

    Apply configuration.

  • opnsense-alias-del

    Delete alias with uuid.

  • opnsense-alias-get

    Get alias details.

  • opnsense-alias-get-uuid

    Get alias UUID.

  • opnsense-alias-list

    Get aliases list.

  • opnsense-alias-mod

    Modify an existing alias.

  • opnsense-alias-mod-additem

    Add item into existing alias.

  • opnsense-alias-mod-delitem

    Del item into existing alias.

  • opnsense-category-add

    Create new category.

  • opnsense-category-del

    Delete category with uuid.

  • opnsense-category-get

    Get category details.

  • opnsense-category-list

    Get categories list.

  • opnsense-category-mod

    Modify an axisting category.

  • opnsense-device-reboot

    Reboot the device.

  • opnsense-firmware-info

    Get firmware info.

  • opnsense-firmware-status

    Get firmware status.

  • opnsense-firmware-update

    Do firmware update.

  • opnsense-firmware-upgrade

    Do firmware upgrade.

  • opnsense-firmware-upgradestatus

    Get firmware upgrade status.

  • opnsense-interfaces-list

    Get interfaces list.

  • opnsense-logs-search

    Search into firewall logs.

  • opnsense-rule-add

    Create a new rule.

  • opnsense-rule-apply

    Apply rules current configuration.

  • opnsense-rule-del

    Delete an existing rule.

  • opnsense-rule-get

    Get rule details.

  • opnsense-rule-list

    Get rules list.

  • opnsense-rule-mod

    Modify an existing rule.

  • opnsense-rule-revert

    Revert config to given savepoint.

  • opnsense-rule-savepoint

    Save rules current configuration.

  • opnsense-state-del

    Delete state with ID.

  • opnsense-states-search

    Query states.

Source

OPNSense.py OPNSense_test.py OPNSense.yml OPNSense_description.md
Download History Raw 
commonfields:
  id: OPNSense
  version: -1
name: OPNSense
display: OPNSense
category: Network Security
provider: Deciso B.V.
description: >-
  Manage OPNsense Firewall. 

  For more information see OPNsense documentation.

  OPNsense is an open source, easy-to-use and easy-to-build HardenedBSD based firewall and routing platform.
configuration:
- name: url
  display: Server URL (e.g. https://opnsense.mydomain.ltd)
  required: true
  defaultvalue: https://opnsense.mydomain.ltd
  type: 0
  additionalinfo:
- name: apikey
  display: API Key
  required: true
  type: 4
- name: apisecret
  display: API Secret
  required: true
  type: 4
- name: insecure
  display: Trust any certificate (not secure)
  type: 8
  required: false
- name: proxy
  display: Use system proxy settings
  type: 8
  required: false
script:
  script: ""
  type: python
  commands:
  - name: opnsense-alias-list
    arguments: []
    outputs:
    - contextPath: OPNSense.Alias
      description: Aliases list.
    description: Get aliases list.
  - name: opnsense-alias-add
    arguments:
    - name: name
      required: true
      description: Alias name.
    - name: type
      required: true
      auto: PREDEFINED
      predefined:
      - host
      - network
      - port
      - url
      - urltable
      - geoip
      - networkgroup
      - mac
      - external
      - dynipv6host
      description: Alias type.
    - name: enabled
      default: true
      auto: PREDEFINED
      predefined:
      - "1"
      - "0"
      description: Alias enabled.
      defaultValue: "1"
    - name: proto
      auto: PREDEFINED
      predefined:
      - inet
      - inet6
      description: Alias protocol.
    - name: updatefreq
      description: Refresh Frequency (format A.B where A is day and B is hour, every 15 mins will be 0.01 for example).
    - name: counters
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Alias statistics.
    - name: description
      description: Alias description.
    - name: content
      description: Alias content.
      isArray: true
      type: textArea
    - name: auto_commit
      auto: PREDEFINED
      predefined:
      - "False"
      - "True"
      description: Apply automaticly aliases changes.
      defaultValue: "False"
    outputs:
    - contextPath: OPNSense.Alias
      description: Alias UUID created.
    description: Create new alias.
  - name: opnsense-alias-del
    arguments:
    - name: uuid
      required: true
      description: Alias UUID.
    - name: auto_commit
      default: true
      auto: PREDEFINED
      predefined:
      - "False"
      - "True"
      description: Apply automaticly aliases changes.
      defaultValue: "False"
    outputs:
    - contextPath: OPNSense.Alias
      description: Alias UUID deleted.
    description: Delete alias with uuid.
  - name: opnsense-alias-mod
    arguments:
    - name: uuid
      required: true
      description: Alias UUID.
    - name: content
      required: true
      description: Alias content seperated by comma (NB. will replace actual content!).
      isArray: true
      type: textArea
    - name: name
      description: Alias name.
    - name: type
      auto: PREDEFINED
      predefined:
      - host
      - network
      - port
      - url
      - urltable
      - geoip
      - networkgroup
      - mac
      - external
      - dynipv6host
      description: Alias type.
    - name: proto
      auto: PREDEFINED
      predefined:
      - inet
      - inet6
      description: Alias protocol.
    - name: enabled
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Alias enabled.
    - name: updatefreq
      description: Refresh Frequency (format A.B where A is day and B is hour, every 15 mins will be 0.01 for example).
    - name: counters
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Alias statistics.
    - name: description
      description: Alias description.
    - name: auto_commit
      default: true
      auto: PREDEFINED
      predefined:
      - "False"
      - "True"
      description: Apply automaticly aliases changes.
      defaultValue: "False"
    outputs:
    - contextPath: OPNSense.Alias
      description: Alias UUID modified.
    description: Modify an existing alias.
  - name: opnsense-alias-mod-additem
    arguments:
    - name: name
      required: true
      description: Alias name.
    - name: entry
      description: Entry to add.
    - name: auto_commit
      default: true
      auto: PREDEFINED
      predefined:
      - "False"
      - "True"
      description: Apply automaticly aliases changes.
      defaultValue: "False"
    outputs:
    - contextPath: OPNSense.Alias
      description: Alias UUID modified.
    description: Add item into existing alias.
  - name: opnsense-alias-mod-delitem
    arguments:
    - name: name
      required: true
      description: Alias name.
    - name: entry
      description: Entry to remove.
    - name: auto_commit
      default: true
      auto: PREDEFINED
      predefined:
      - "False"
      - "True"
      description: Apply automaticly aliases changes.
      defaultValue: "False"
    outputs:
    - contextPath: OPNSense.Alias
      description: Alias UUID modified.
    description: Del item into existing alias.
  - name: opnsense-alias-get
    arguments:
    - name: uuid
      description: Alias UUID (you must at least define the name or the uuid argument).
    - name: name
      description: Alias name (you must at least define the name or the uuid argument).
    description: Get alias details.
    outputs:
    - contextPath: OPNSense.Alias
      description: Alias details.
      type: Unknown
    - contextPath: OPNSense.Alias.name
      description: Alias name.
      type: Unknown
    - contextPath: OPNSense.Alias.content
      description: Alias content.
      type: Unknown
    - contextPath: OPNSense.Alias.description
      description: Alias description.
      type: Unknown
    - contextPath: OPNSense.Alias.enabled
      description: Alias enabled.
      type: Unknown
  - name: opnsense-alias-get-uuid
    arguments:
    - name: name
      required: true
      description: Alias name.
    description: Get alias UUID.
    outputs:
    - contextPath: OPNSense.Alias
      description: Alias UUID.
      type: Unknown
  - name: opnsense-interfaces-list
    arguments: []
    description: Get interfaces list.
    outputs:
    - contextPath: OPNSense.Interfaces
      description: Interfaces list.
      type: Unknown
  - name: opnsense-category-list
    arguments: []
    description: Get categories list.
    outputs:
    - contextPath: OPNSense.Category
      description: Categories list.
      type: Unknown
  - name: opnsense-category-add
    arguments:
    - name: name
      required: true
      description: Category name.
    - name: auto
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Automatically added, will be removed when unused.
    - name: color
      description: "Category color (format : #YVWXYZ)."
    description: Create new category.
    outputs:
    - contextPath: OPNSense.Category
      description: Category UUID.
      type: Unknown
  - name: opnsense-category-del
    arguments:
    - name: uuid
      required: true
      description: Category UUID.
    description: Delete category with uuid.
    outputs:
    - contextPath: OPNSense.Category
      description: Category UUID.
      type: Unknown
  - name: opnsense-category-get
    arguments:
    - name: uuid
      description: Category UUID.
    description: Get category details.
    outputs:
    - contextPath: OPNSense.Category
      description: Category details.
      type: Unknown
  - name: opnsense-category-mod
    arguments:
    - name: uuid
      required: true
      description: Category UUID.
    - name: name
      description: Category name.
    - name: color
      description: "Category color (format : #YVWXYZ)."
    - name: auto
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Automatically added, will be removed when unused.
    description: Modify an axisting category.
    outputs:
    - contextPath: cef2c7d7-68d8-41aa-b6b8-1cac38554d58
      description: Category UUID.
      type: Unknown
  - name: opnsense-rule-list
    arguments: []
    description: Get rules list.
    outputs:
    - contextPath: OPNSense.Rule
      description: Rules list.
      type: Unknown
  - name: opnsense-rule-get
    arguments:
    - name: uuid
      required: true
      description: Rule UUID.
    description: Get rule details.
    outputs:
    - contextPath: OPNSense.Rule
      description: Rule details.
      type: Unknown
    - contextPath: OPNSense.Rule.description
      description: Rule description.
      type: Unknown
    - contextPath: OPNSense.Rule.enabled
      description: Rule enabled.
      type: Unknown
    - contextPath: OPNSense.Rule.source_net
      description: Source NET's rule.
      type: Unknown
    - contextPath: OPNSense.Rule.destination_net
      description: Destination NET's rule.
      type: Unknown
    - contextPath: OPNSense.Rule.interface
      description: Interface's rule.
      type: Unknown
  - name: opnsense-alias-apply
    arguments: []
    description: Apply configuration.
    outputs: []
  - name: opnsense-device-reboot
    arguments: []
    description: Reboot the device.
    outputs:
    - contextPath: OPNSense.Device
      description: Reboot status.
      type: Unknown
  - name: opnsense-firmware-info
    arguments: []
    description: Get firmware info.
    outputs:
    - contextPath: OPNSense.Firmware
      description: Firmware info.
      type: Unknown
  - name: opnsense-firmware-status
    arguments: []
    description: Get firmware status.
    outputs:
    - contextPath: OPNSense.Firmware
      description: Firmware status.
      type: Unknown
  - name: opnsense-firmware-upgradestatus
    arguments: []
    description: Get firmware upgrade status.
    outputs:
    - contextPath: OPNSense.Firmware
      description: Firmware upgrade status.
      type: Unknown
  - name: opnsense-firmware-update
    arguments: []
    description: Do firmware update.
    outputs:
    - contextPath: OPNSense.Firmware
      description: Firmware update.
      type: Unknown
  - name: opnsense-firmware-upgrade
    arguments: []
    description: Do firmware upgrade.
    outputs:
    - contextPath: OPNSense.Firmware
      description: Firmware upgrade.
      type: Unknown
  - name: opnsense-rule-del
    arguments:
    - name: uuid
      required: true
      description: Rule UUID.
    - name: auto_commit
      auto: PREDEFINED
      predefined:
      - None
      - "True"
      description: Apply automaticly aliases changes.
      defaultValue: None
    description: Delete an existing rule.
    outputs:
    - contextPath: OPNSense.Rule
      description: Rule UUID.
      type: Unknown
  - name: opnsense-rule-add
    arguments:
    - name: action
      default: true
      auto: PREDEFINED
      predefined:
      - pass
      - block
      - reject
      description: Rule action.
      defaultValue: pass
    - name: enabled
      auto: PREDEFINED
      predefined:
      - "1"
      - "0"
      description: Rule enabled.
      defaultValue: "1"
    - name: quick
      auto: PREDEFINED
      predefined:
      - "1"
      - "0"
      description: Rule quick.
      defaultValue: "1"
    - name: interface
      description: Rule interface.
    - name: direction
      auto: PREDEFINED
      predefined:
      - in
      - out
      description: Rule direction.
      defaultValue: in
    - name: ipprotocol
      auto: PREDEFINED
      predefined:
      - inet
      - inet6
      description: Rule IP Protocol.
      defaultValue: inet
    - name: protocol
      auto: PREDEFINED
      predefined:
      - any
      - ICMP
      - IGMP
      - GGP
      - IPENCAP
      - ST2
      - TCP
      - CBT
      - EGP
      - IGP
      - BBN-RCC
      - NVP
      - PUP
      - ARGUS
      - EMCON
      - XNET
      - CHAOS
      - UDP
      - MUX
      - DCN
      - HMP
      - PRM
      - XNS-IDP
      - TRUNK-1
      - TRUNK-2
      - LEAF-1
      - LEAF-2
      - RDP
      - ISO-TP4
      - NETBLT
      - MFE-NSP
      - MERIT-INP
      - DCCP
      - 3PC
      - IDPR
      - XTP
      - DDP
      - IDPR-CMTP
      - TP++
      - IL
      - IPV6
      - SDRP
      - IDRP
      - RSVP
      - GRE
      - DSR
      - BNA
      - ESP
      - AH
      - I-NLSP
      - SWIPE
      - NARP
      - MOBILE
      - TLSP
      - SKIP
      - IPV6-ICMP
      - CFTP
      - SAT-EXPAK
      - KRYPTOLAN
      - RVD
      - IPPC
      - SAT-MON
      - VISA
      - IPCV
      - CPNX
      - CPHB
      - WSN
      - PVP
      - BR-SAT-MON
      - SUN-ND
      - WB-MON
      - WB-EXPAK
      - ISO-IP
      - VMTP
      - SECURE-VMTP
      - VINES
      - TTP
      - NSFNET-IGP
      - DGP
      - TCF
      - EIGRP
      - OSPF
      - SPRITE-RPC
      - LARP
      - MTP
      - AX.25
      - IPIP
      - MICP
      - SCC-SP
      - ETHERIP
      - ENCAP
      - GMTP
      - IFMP
      - PNNI
      - PIM
      - ARIS
      - SCPS
      - QNX
      - A/N
      - IPCOMP
      - SNP
      - COMPAQ-PEER
      - IPX-IN-IP
      - CARP
      - PGM
      - L2TP
      - DDX
      - IATP
      - STP
      - SRP
      - UTI
      - SMP
      - SM
      - PTP
      - ISIS
      - CRTP
      - CRUDP
      - SPS
      - PIPE
      - SCTP
      - FC
      - RSVP-E2E-IGNORE
      - UDPLITE
      - MPLS-IN-IP
      - MANET
      - HIP
      - SHIM6
      - WESP
      - ROHC
      - PFSYNC
      - DIVERT
      description: Rule protocol.
      defaultValue: any
    - name: source_net
      description: Source Net.
      defaultValue: any
    - name: source_not
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Source NOT.
      defaultValue: "0"
    - name: source_port
      description: Source port.
    - name: destination_net
      description: Destination Net.
      defaultValue: any
    - name: destination_not
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Destination NOT.
      defaultValue: "0"
    - name: destination_port
      description: Destination port.
    - name: log
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Enable logging.
      defaultValue: "0"
    - name: sequence
      description: Provide a valid sequence for sorting (1 - 99999).
      defaultValue: "1"
    - name: description
      description: Rule description.
    - name: auto_commit
      auto: PREDEFINED
      predefined:
      - None
      - "True"
      description: Apply automaticly aliases changes.
      defaultValue: None
    description: Create a new rule.
    outputs:
    - contextPath: OPNSense.Rule
      description: Rule UUID.
      type: Unknown
  - name: opnsense-rule-mod
    arguments:
    - name: uuid
      required: true
      description: Rule UUID.
    - name: action
      default: true
      auto: PREDEFINED
      predefined:
      - pass
      - block
      - reject
      description: Rule action.
      defaultValue: pass
    - name: enabled
      auto: PREDEFINED
      predefined:
      - "1"
      - "0"
      description: Rule enabled.
      defaultValue: "1"
    - name: quick
      auto: PREDEFINED
      predefined:
      - "1"
      - "0"
      description: Rule quick.
      defaultValue: "1"
    - name: interface
      description: Rule interface.
    - name: direction
      auto: PREDEFINED
      predefined:
      - in
      - out
      description: Rule description.
      defaultValue: in
    - name: ipprotocol
      auto: PREDEFINED
      predefined:
      - inet
      - inet6
      description: Rule IP protocol.
      defaultValue: inet
    - name: protocol
      auto: PREDEFINED
      predefined:
      - any
      - ICMP
      - IGMP
      - GGP
      - IPENCAP
      - ST2
      - TCP
      - CBT
      - EGP
      - IGP
      - BBN-RCC
      - NVP
      - PUP
      - ARGUS
      - EMCON
      - XNET
      - CHAOS
      - UDP
      - MUX
      - DCN
      - HMP
      - PRM
      - XNS-IDP
      - TRUNK-1
      - TRUNK-2
      - LEAF-1
      - LEAF-2
      - RDP
      - ISO-TP4
      - NETBLT
      - MFE-NSP
      - MERIT-INP
      - DCCP
      - 3PC
      - IDPR
      - XTP
      - DDP
      - IDPR-CMTP
      - TP++
      - IL
      - IPV6
      - SDRP
      - IDRP
      - RSVP
      - GRE
      - DSR
      - BNA
      - ESP
      - AH
      - I-NLSP
      - SWIPE
      - NARP
      - MOBILE
      - TLSP
      - SKIP
      - IPV6-ICMP
      - CFTP
      - SAT-EXPAK
      - KRYPTOLAN
      - RVD
      - IPPC
      - SAT-MON
      - VISA
      - IPCV
      - CPNX
      - CPHB
      - WSN
      - PVP
      - BR-SAT-MON
      - SUN-ND
      - WB-MON
      - WB-EXPAK
      - ISO-IP
      - VMTP
      - SECURE-VMTP
      - VINES
      - TTP
      - NSFNET-IGP
      - DGP
      - TCF
      - EIGRP
      - OSPF
      - SPRITE-RPC
      - LARP
      - MTP
      - AX.25
      - IPIP
      - MICP
      - SCC-SP
      - ETHERIP
      - ENCAP
      - GMTP
      - IFMP
      - PNNI
      - PIM
      - ARIS
      - SCPS
      - QNX
      - A/N
      - IPCOMP
      - SNP
      - COMPAQ-PEER
      - IPX-IN-IP
      - CARP
      - PGM
      - L2TP
      - DDX
      - IATP
      - STP
      - SRP
      - UTI
      - SMP
      - SM
      - PTP
      - ISIS
      - CRTP
      - CRUDP
      - SPS
      - PIPE
      - SCTP
      - FC
      - RSVP-E2E-IGNORE
      - UDPLITE
      - MPLS-IN-IP
      - MANET
      - HIP
      - SHIM6
      - WESP
      - ROHC
      - PFSYNC
      - DIVERT
      description: Rule protocol.
    - name: source_net
      description: Source Net.
    - name: source_not
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Source NOT.
      defaultValue: "0"
    - name: source_port
      description: Source port.
    - name: destination_net
      description: Destination Net.
    - name: destination_not
      description: Destination NOT.
    - name: destination_port
      description: Destination port.
    - name: log
      auto: PREDEFINED
      predefined:
      - "0"
      - "1"
      description: Enable log.
      defaultValue: "0"
    - name: description
      description: Rule description.
    - name: auto_commit
      auto: PREDEFINED
      predefined:
      - None
      - "True"
      description: Apply automaticly aliases changes.
      defaultValue: None
    description: Modify an existing rule.
    outputs:
    - contextPath: OPNSense.Rule
      description: Rule UUID.
      type: Unknown
  - name: opnsense-rule-apply
    arguments:
    - name: rollback_revision
      description: Rollback revision.
    description: Apply rules current configuration.
    outputs:
    - contextPath: OPNSense.Rule
      description: Action status.
      type: Unknown
  - name: opnsense-rule-savepoint
    arguments: []
    description: Save rules current configuration.
    outputs:
    - contextPath: OPNSense.Rule
      description: Action status.
      type: Unknown
  - name: opnsense-logs-search
    arguments:
    - name: limit
      default: true
      description: Log search limit.
      defaultValue: "1000"
    - name: ip
      description: Search IP in src or dst.
    - name: interface
      description: Interface search filter.
    description: Search into firewall logs.
    outputs:
    - contextPath: OPNSense.Logs
      description: OPNSense logs.
      type: Unknown
    - contextPath: OPNSense.Logs.interface
      description: interface in logs.
      type: Unknown
    - contextPath: OPNSense.Logs.src
      description: SRC in logs.
      type: Unknown
    - contextPath: OPNSense.Logs.srcport
      description: SRCPORT in logs.
      type: Unknown
    - contextPath: OPNSense.Logs.dst
      description: DST in logs.
      type: Unknown
    - contextPath: OPNSense.Logs.dstport
      description: DSTPORT in logs.
      type: Unknown
    - contextPath: OPNSense.Logs.action
      description: Action in logs.
      type: Unknown
    - contextPath: OPNSense.Logs.__timestamp__
      description: timestamp in logs.
      type: Unknown
    - contextPath: OPNSense.Logs.label
      description: label in logs.
      type: Unknown
    - contextPath: OPNSense.Logs.protoname
      description: protoname in logs.
      type: Unknown
  - name: opnsense-states-search
    arguments:
    - name: ip
      description: Search IP in src or dst.
    description: Query states.
    outputs:
    - contextPath: OPNSense.States
      description: OPNSense States.
      type: Unknown
    - contextPath: OPNSense.States.label
      description: label in states.
      type: Unknown
    - contextPath: OPNSense.States.descr
      description: states description.
      type: Unknown
    - contextPath: OPNSense.States.nat_addr
      description: nat address in states.
      type: Unknown
    - contextPath: OPNSense.States.nat_port
      description: nat port in states.
      type: Unknown
    - contextPath: OPNSense.States.iface
      description: interface in states.
      type: Unknown
    - contextPath: OPNSense.States.ipproto
      description: IP Protocol in states.
      type: Unknown
    - contextPath: OPNSense.States.proto
      description: Protocol in states.
      type: Unknown
  - name: opnsense-state-del
    arguments:
    - name: state_id
      description: State ID.
    description: Delete state with ID.
    outputs: []
  - name: opnsense-rule-revert
    arguments:
    - name: rollback_revision
      description: Rollback revision.
    description: Revert config to given savepoint.
    outputs: []
  dockerimage: demisto/opnsense:1.0.0.10133006
  subtype: python3
fromversion: 6.0.0
tests:
- No tests (auto formatted)