sophos_firewall
On-premise firewall by Sophos enables you to manage your firewall, respond to threats, and monitor what’s happening on your network.
Network Security · Sophos XG Firewall
Details
| ID | sophos_firewall |
|---|---|
| Provider | Thoma Bravo |
| Category | Network Security |
| From Version | 5.0.0 |
| Docker Image | demisto/python3:3.12.13.10116658 |
| Supported Modules | Agentix XSIAM EDR Cortex Cloud Cloud Runtime Security |
README
On-Premise firewall by Sophos enables you to manage your firewall, respond to threats, and monitor what’s
happening on your network.
Configure Sophos Firewall in Cortex
| Parameter | Description | Required |
|---|---|---|
| server_url | Server URL | True |
| credentials | User Credentials | True |
| insecure | Trust any certificate (not secure) | False |
| proxy | Use system proxy settings | False |
Commands
You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.
sophos-firewall-rule-list
Lists all firewall rules. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-rule-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicy.Name | String | Name of the rule. |
| SophosFirewall.SecurityPolicy.Description | String | Description of the rule. |
| SophosFirewall.SecurityPolicy.Status | String | Status of the rule. |
| SophosFirewall.SecurityPolicy.PolicyType | String | Policy type of the rule. |
| SophosFirewall.SecurityPolicy.IPFamily | String | IP family of the security policy. Either IPv4 or IPv6. |
| SophosFirewall.SecurityPolicy.AttachIdentity | String | Rule attach identity status. |
| SophosFirewall.SecurityPolicy.Action | String | Current rule action. |
| SophosFirewall.SecurityPolicy.LogTraffic | Number | Rule traffic logging code. |
Command Example
!sophos-firewall-rule-list start=0 end=6
Context Example
{
"SophosFirewall": {
"SecurityPolicy": [
{
"After": {
"Name": "[example] Traffic to DMZ"
},
"ApplyNAT": "CustomNatPolicy",
"Description": "This rule was added automatically by SFOS MTA. However you could edit this policy based on network requirement.",
"DestSecurityHeartbeat": "Disable",
"IPFamily": "IPv4",
"IntrusionPrevention": "None",
"IsDeleted": false,
"LogTraffic": "Disable",
"MatchIdentity": "Disable",
"MinimumDestinationHBPermitted": "No Restriction",
"MinimumSourceHBPermitted": "No Restriction",
"Name": "Auto added firewall policy for MTA",
"OutboundAddress": "MASQ",
"OverrideGatewayDefaultNATPolicy": "Disable",
"PolicyType": "PublicNonHTTPPolicy",
"Position": "After",
"PublicNonHTTPBasedPolicy": {
"ScanIMAP": "Disable",
"ScanIMAPS": "Disable",
"ScanPOP3": "Disable",
"ScanPOP3S": "Disable",
"ScanSMTP": "Enable",
"ScanSMTPS": "Enable"
},
"SourceSecurityHeartbeat": "Disable",
"Status": "Enable",
"TrafficShappingPolicy": "None"
},
{
"Action": "Drop",
"After": {
"Name": "[example] Traffic to WAN"
},
"Description": "A disabled Firewall rule with the destination zone as DMZ. Such rules would be added to Traffic to DMZ group on the first match basis if user selects automatic grouping option.",
"DestinationZones": {
"Zone": "DMZ"
},
"IPFamily": "IPv4",
"IsDeleted": false,
"LogTraffic": "Enable",
"MatchIdentity": "Enable",
"Name": "[example] Traffic to DMZ",
"PolicyType": "User",
"Position": "After",
"Schedule": "All The Time",
"ShowCaptivePortal": "Enable",
"Status": "Disable"
},
{
"Action": "Drop",
"After": {
"Name": "after"
},
"Description": "A disabled Firewall rule with the destination zone as WAN. Such rules would be added to Traffic to WAN group on the first match basis if user selects automatic grouping option.",
"DestinationZones": {
"Zone": "WAN"
},
"IPFamily": "IPv4",
"IsDeleted": false,
"LogTraffic": "Enable",
"MatchIdentity": "Disable",
"Name": "[example] Traffic to WAN",
"PolicyType": "Network",
"Position": "After",
"Schedule": "All The Time",
"Status": "Disable"
},
{
"Action": "Drop",
"After": {
"Name": "Auto added firewall policy for MTA"
},
"Description": null,
"IPFamily": "IPv4",
"IsDeleted": false,
"LogTraffic": "Disable",
"MatchIdentity": "Disable",
"Name": "[example] Traffic to Internal Zones",
"PolicyType": "Network",
"Position": "After",
"Schedule": "All The Time",
"Status": "Enable"
},
{
"Action": "Drop",
"Description": null,
"IPFamily": "IPv4",
"IsDeleted": false,
"LogTraffic": "Disable",
"MatchIdentity": "Disable",
"Name": "Blocked IPs",
"PolicyType": "Network",
"Position": "Top",
"Schedule": "All The Time",
"SourceNetworks": {
"Network": "Blocked by Playbook"
},
"Status": "Enable"
},
{
"Action": "Drop",
"After": {
"Name": "before"
},
"Description": null,
"IPFamily": "IPv4",
"IsDeleted": false,
"LogTraffic": "Disable",
"MatchIdentity": "Disable",
"Name": "after",
"PolicyType": "Network",
"Position": "After",
"Schedule": "All The Time",
"Status": "Enable"
}
]
}
}
Human Readable Output
Showing 0 to 6 SecurityPolicy objects out of 8
Name Description Status PolicyType IPFamily Action LogTraffic Auto added firewall policy for MTA This rule was added automatically by SFOS MTA. However you could edit this policy based on network requirement. Enable PublicNonHTTPPolicy IPv4 Disable [example] Traffic to DMZ A disabled Firewall rule with the destination zone as DMZ. Such rules would be added to Traffic to DMZ group on the first match basis if user selects automatic grouping option. Disable User IPv4 Drop Enable [example] Traffic to WAN A disabled Firewall rule with the destination zone as WAN. Such rules would be added to Traffic to WAN group on the first match basis if user selects automatic grouping option. Disable Network IPv4 Drop Enable [example] Traffic to Internal Zones Enable Network IPv4 Drop Disable Blocked IPs Enable Network IPv4 Drop Disable after Enable Network IPv4 Drop Disable
sophos-firewall-rule-get
Gets a single firewall rule by name.
Base Command
sophos-firewall-rule-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the rule to get. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicy.Name | String | Name of the rule. |
| SophosFirewall.SecurityPolicy.Description | String | Description of the rule. |
| SophosFirewall.SecurityPolicy.Status | String | Status of the rule. |
| SophosFirewall.SecurityPolicy.PolicyType | String | Policy type of the rule. |
| SophosFirewall.SecurityPolicy.IPFamily | String | IP family of the security policy. Either IPv4 or IPv6. |
| SophosFirewall.SecurityPolicy.AttachIdentity | String | Rule attach identity status. |
| SophosFirewall.SecurityPolicy.Action | String | Current rule action. |
| SophosFirewall.SecurityPolicy.LogTraffic | Number | Rule traffic logging code. |
Command Example
!sophos-firewall-rule-get name=user_rule
Context Example
{
"SophosFirewall": {
"SecurityPolicy": {
"Action": "Drop",
"After": {
"Name": "1"
},
"Description": null,
"DestinationZones": {
"Zone": "LAN"
},
"IPFamily": "IPv4",
"IsDeleted": false,
"LogTraffic": "Enable",
"MatchIdentity": "Disable",
"Name": "user_rule",
"PolicyType": "Network",
"Position": "After",
"Schedule": "All The Time",
"SourceZones": {
"Zone": "LAN"
},
"Status": "Enable"
}
}
}
Human Readable Output
SecurityPolicy Object details
Name Status PolicyType IPFamily Action LogTraffic user_rule Enable Network IPv4 Drop Enable
sophos-firewall-rule-add
Adds a new firewall rule.
Base Command
sophos-firewall-rule-add
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the new rule. | Required |
| description | Description of the new rule. | Optional |
| status | Whether the rule is enabled. Possible values: “Enable” and “Disable”. Default is “Enable”. | Optional |
| ip_family | The IP family. Possible values: “IPv4” and “IPv6”. Default is “IPv4”. | Optional |
| position | Whether the rule should be at the “top” or “bottom” of the list, or “before” or\ \ “after” a specific rule? IMPORTANT: If “before” or “after” is selected, provide the\ \ position_policy_name parameter. | Required |
| position_policy_name | The name of the policy that the rule should be created before or after. REQUIRED: When the position is “before” or “after”. | Optional |
| policy_type | Type of the new rule (policy). Possible values: “User” and “Network”. | Required |
| source_zones | Source zones to add to the rule. Possible values: “Any”, “LAN”. “WAN”, “VPN”, “DMZ”, “WiFi”. | Optional |
| source_networks | Source networks to add to the rule. | Optional |
| destination_zones | Destination zones to add to the rule. Possible values: “Any”, “LAN”. “WAN”, “VPN”, “DMZ”, “WiFi”. | Optional |
| destination_networks | Destination networks to add to the rule. | Optional |
| services | Destination services to add to the rule. | Optional |
| schedule | The schedule for the rule. Possible values: “All the time”, “Work hours (5 Day week)”, “Work hours (6 Day week)”, “All Time on Weekdays”, “All Time on Weekends”, “All Time on Sunday”, “All Days 10:00 to 19:00”. IMPORTANT: Creating a new schedule is available from the web console. | Optional |
| log_traffic | Whether to enable traffic logging for the policy. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| match_identity | Whether to check if the specified user/user group from the\ \ selected zone is allowed to access the selected service. Possible values: “Enable” and “Disable”. Default is “Disable”. IMPORTANT: When enabling match_identity, the members argument is required. | Optional |
| show_captive_portal | Whether to accept traffic from unknown users. Captive portal page\ \ is displayed to the user where the user can login to access the Internet.\ \ Possible values: “Enable” and “Disable”. Default is “Disable”. IMPORTANT: MatchIdentity must be Enabled. PARAMETER OF: UserPolicy. | Optional |
| members | An existing user(s) or group(s) to add to the rule. REQUIRED when match_identity is enabled. | Optional |
| action | Action for the rule traffic. Possible values: “Accept”, “Reject”, and “Drop”. Default is “Drop”. | Optional |
| dscp_marking | The DSCP marking level to classify the flow of packets based on the Traffic Shaping policy. | Optional |
| primary_gateway | The primary gateway. Applicable only in case of multiple gateways. | Optional |
| backup_gateway | The backup gateway. Applicable only in case of multiple gateways. | Optional |
| application_control | The Application Filter policy for the rule. Default is “Allow All”. | Optional |
| application_based_qos_policy | Whether to limit the bandwidth for the applications categorized\ \ under the Application category. This tag is only applicable when\ \ an application_control is selected. Possible values: “Apply” and “Revoke”. Default is “Revoke”. | Optional |
| web_filter | The Web Filter policy for the rule. Default is “Allow All”. | Optional |
| web_category_base_qos_policy | Whether to limit the bandwidth for the URLs categorized under the Web\ \ category. This tag is only applicable when any web_filter is defined.” Possible values: “Apply” and “Revoke”. Default is “Revoke”. | Optional |
| traffic_shaping_policy | The Traffic Shaping policy for the rule. Default is “None”. | Optional |
| scan_http | Whether to enable virus and spam scanning for HTTP protocol. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| scan_https | Whether to enable virus and spam scanning for HTTPS protocol. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| sandstorm | Whether to enable sandstorm analysis. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| block_quick_quic | Whether to enable Google websites to use HTTP/s instead of QUICK QUIC. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| scan_ftp | Whether to enable scanning of FTP traffic. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| data_accounting | Whether to exclude a user’s network traffic from data accounting. This option is available only if the parameter “Match rule-based on user identity” is enabled. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| rewrite_source_address | Whether to enable the NAT policy. Possible values: “Enable” and “Disable”. Default is “Enable”. | Optional |
| web_filter_internet_scheme | Whether to enable the internet scheme to apply the user-based Web Filter policy for the rule. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| application_control_internet_scheme | Whether to enable the internet scheme to apply user-based Application Filter Policy for the rule. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| override_gateway_default_nat_policy | Whether to override the gateway of the default NAT policy. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| source_security_heartbeat | Whether to enable the source security heartbeat. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| destination_security_heartbeat | Whether to enable the destination security heartbeat. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| outbound_address | The NAT policy to be applied. Default is “MASQ”. | Optional |
| minimum_source_hb_permitted | The minimum source health status permitted. Default is “No Restriction”. | Optional |
| minimum_destination_hb_permitted | The minimum destination health status permitted. Default is “No Restriction”. | Optional |
| intrusion_prevention | The IPS policy for the rule. Default is “generalpolicy”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicy.Name | String | Name of the rule. |
| SophosFirewall.SecurityPolicy.Description | String | Description of the rule. |
| SophosFirewall.SecurityPolicy.Status | String | Status of the rule. |
| SophosFirewall.SecurityPolicy.PolicyType | String | Policy type of the rule. |
| SophosFirewall.SecurityPolicy.IPFamily | String | IP family of the security policy. Either IPv4 or IPv6. |
| SophosFirewall.SecurityPolicy.AttachIdentity | String | Rule attach identity status. |
| SophosFirewall.SecurityPolicy.Action | String | Current rule action. |
| SophosFirewall.SecurityPolicy.LogTraffic | Number | Rule traffic logging code. |
Command Example
!sophos-firewall-rule-add name=user_rule action=Accept ip_family=IPv4 log_traffic=Disable policy_type=User position=bottom match_identity=Enable show_captive_portal=Enable destination_zones=LAN members="Guest Group"
Context Example
{
"SophosFirewall": {
"SecurityPolicy": {
"Action": "Accept",
"After": {
"Name": "1"
},
"ApplicationBaseQoSPolicy": "Revoke",
"ApplicationControl": "Allow All",
"ApplicationControlInternetScheme": "Disable",
"BackupGateway": null,
"BlockQuickQuic": "Disable",
"DSCPMarking": null,
"DataAccounting": "Disable",
"Description": null,
"DestSecurityHeartbeat": "Disable",
"DestinationZones": {
"Zone": "LAN"
},
"IPFamily": "IPv4",
"Identity": {
"Member": "Guest Group"
},
"IntrusionPrevention": "generalpolicy",
"IsDeleted": false,
"LogTraffic": "Disable",
"MatchIdentity": "Enable",
"MinimumDestinationHBPermitted": "No Restriction",
"MinimumSourceHBPermitted": "No Restriction",
"Name": "user_rule",
"OutboundAddress": "MASQ",
"OverrideGatewayDefaultNATPolicy": "Disable",
"PolicyType": "User",
"Position": "After",
"PrimaryGateway": null,
"RewriteSourceAddress": "Enable",
"Sandstorm": "Disable",
"ScanFTP": "Disable",
"ScanHTTP": "Disable",
"ScanHTTPS": "Disable",
"Schedule": "All The Time",
"ShowCaptivePortal": "Enable",
"SourceSecurityHeartbeat": "Disable",
"Status": "Enable",
"TrafficShappingPolicy": "None",
"WebCategoryBaseQoSPolicy": "Revoke",
"WebFilter": "Allow All",
"WebFilterInternetScheme": "Disable"
}
}
}
Human Readable Output
SecurityPolicy Object details
Name Status PolicyType IPFamily Action LogTraffic user_rule Enable User IPv4 Accept Disable
sophos-firewall-rule-update
Updates an existing firewall rule.
Base Command
sophos-firewall-rule-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the new rule. | Required |
| description | Description of the new rule. | Optional |
| status | Whether the rule is enabled. Possible values: “Enable” and “Disable”. Default is “Enable”. | Optional |
| ip_family | The IP family. Possible values: “IPv4” and “IPv6”. Default is “IPv4”. | Optional |
| position | Whether the rule should be at the “top” or “bottom” of the list, or “before” or\ \ “after” a specific rule? IMPORTANT: If “before” or “after” is selected, provide the\ \ position_policy_name parameter. | Optional |
| position_policy_name | The name of the policy that the rule should be created before or after. REQUIRED: When the position is “before” or “after”. | Optional |
| policy_type | Type of the new rule (policy). Possible values: “User” and “Network”. | Optional |
| source_zones | Source zones to add to the rule. Possible values: “Any”, “LAN”. “WAN”, “VPN”, “DMZ”, “WiFi”. | Optional |
| source_networks | Source networks to add to the rule. | Optional |
| destination_zones | Destination zones to add to the rule. Possible values: “Any”, “LAN”. “WAN”, “VPN”, “DMZ”, “WiFi”. | Optional |
| destination_networks | Destination networks to add to the rule. | Optional |
| services | Destination services to add to the rule. | Optional |
| schedule | The schedule for the rule. Possible values: “All the time”, “Work hours (5 Day week)”, “Work hours (6 Day week)”, “All Time on Weekdays”, “All Time on Weekends”, “All Time on Sunday”, “All Days 10:00 to 19:00”. IMPORTANT: Creating a new schedule is available in the web console. | Optional |
| log_traffic | Whether to enable traffic logging for the policy. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| match_identity | Whether to check if the specified user/user group from the\ \ selected zone is allowed to access the selected service. Possible values: “Enable” and “Disable”. Default is “Disable”. IMPORTANT: When enabling match_identity, the members argument is required. | Optional |
| show_captive_portal | Whether to accept traffic from unknown users. Captive portal page\ \ is displayed to the user where the user can login to access the Internet.\ \ Possible values: “Enable” and “Disable”. Default is “Disable”. IMPORTANT: MatchIdentity must be Enabled. PARAMETER OF: UserPolicy. | Optional |
| members | An existing user(s) or group(s) to add to the rule. REQUIRED when match_identity is enabled. | Optional |
| action | Action for the rule traffic. Possible values: “Accept”, “Reject”, and “Drop”. Default is “Drop”. | Optional |
| dscp_marking | The DSCP marking level to classify the flow of packets based on the Traffic Shaping policy. | Optional |
| primary_gateway | The primary gateway. Applicable only in case of multiple gateways. | Optional |
| backup_gateway | The backup gateway. Applicable only in case of multiple gateways. | Optional |
| application_control | The Application Filter policy for the rule. Default is “Allow All”. | Optional |
| application_based_qos_policy | Whether to limit the bandwidth for the applications categorized\ \ under the Application category. This tag is only applicable when\ \ an application_control is selected. Possible values: “Apply” and “Revoke”. Default is “Revoke”. | Optional |
| web_filter | The Web Filter policy for the rule. Default is “Allow All”. | Optional |
| web_category_base_qos_policy | Whether to limit the bandwidth for the URLs categorized under the Web\ \ category. This tag is only applicable when any web_filter is defined.” Possible values: “Apply” and “Revoke”. Default is “Revoke”. | Optional |
| traffic_shaping_policy | The Traffic Shaping policy for the rule. Default is “None”. | Optional |
| scan_http | Whether to enable virus and spam scanning for HTTP protocol. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| scan_https | Whether to enable virus and spam scanning for HTTPS protocol. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| sandstorm | Whether to enable sandstorm analysis. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| block_quick_quic | Whether to enable Google websites to use HTTP/s instead of QUICK QUIC. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| scan_ftp | Whether to enable scanning of FTP traffic. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| data_accounting | Whether to exclude a user’s network traffic from data accounting. This option is available only if the parameter “Match rule-based on user identity” is enabled. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| rewrite_source_address | Whether to enable the NAT policy. Possible values: “Enable” and “Disable”. Default is “Enable”. | Optional |
| web_filter_internet_scheme | Whether to enable the internet scheme to apply the user-based Web Filter policy for the rule. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| application_control_internet_scheme | Whether to enable the internet scheme to apply user-based Application Filter Policy for the rule. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| override_gateway_default_nat_policy | Whether to override the gateway of the default NAT policy. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| source_security_heartbeat | Whether to enable the source security heartbeat. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| destination_security_heartbeat | Whether to enable the destination security heartbeat. Possible values: “Enable” and “Disable”. Default is “Disable”. | Optional |
| outbound_address | The NAT policy to be applied. Default is “MASQ”. | Optional |
| minimum_source_hb_permitted | The minimum source health status permitted. Default is “No Restriction”. | Optional |
| minimum_destination_hb_permitted | The minimum destination health status permitted. Default is “No Restriction”. | Optional |
| intrusion_prevention | The IPS policy for the rule. Default is “generalpolicy”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicy.Name | String | Name of the rule. |
| SophosFirewall.SecurityPolicy.Description | String | Description of the rule. |
| SophosFirewall.SecurityPolicy.Status | String | Status of the rule. |
| SophosFirewall.SecurityPolicy.PolicyType | String | Policy type of the rule. |
| SophosFirewall.SecurityPolicy.IPFamily | String | IP family of the security policy. Either IPv4 or IPv6. |
| SophosFirewall.SecurityPolicy.AttachIdentity | String | Rule attach identity status. |
| SophosFirewall.SecurityPolicy.Action | String | Current rule action. |
| SophosFirewall.SecurityPolicy.LogTraffic | Number | Rule traffic logging code. |
Command Example
!sophos-firewall-rule-update name=user_rule log_traffic=Enable source_zones=LAN
Context Example
{
"SophosFirewall": {
"SecurityPolicy": {
"Action": "Drop",
"After": {
"Name": "1"
},
"Description": null,
"DestinationZones": {
"Zone": "LAN"
},
"IPFamily": "IPv4",
"IsDeleted": false,
"LogTraffic": "Enable",
"MatchIdentity": "Disable",
"Name": "user_rule",
"PolicyType": "Network",
"Position": "After",
"Schedule": "All The Time",
"SourceZones": {
"Zone": "LAN"
},
"Status": "Enable"
}
}
}
Human Readable Output
SecurityPolicy Object details
Name Status PolicyType IPFamily Action LogTraffic user_rule Enable Network IPv4 Drop Enable
sophos-firewall-rule-delete
Deletes an existing firewall rule.
Base Command
sophos-firewall-rule-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the rule. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicy.Name | String | Name of the rule. |
| SophosFirewall.SecurityPolicy.IsDeleted | Bool | Whether the rule is deleted. |
Command Example
!sophos-firewall-rule-delete name=user_rule
Context Example
{
"SophosFirewall": {
"SecurityPolicy": {
"IsDeleted": true,
"Name": "user_rule"
}
}
}
Human Readable Output
Deleting SecurityPolicy Objects Results
Name IsDeleted user_rule true
sophos-firewall-rule-group-list
Lists all firewall rule groups. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-rule-group-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicyGroup.Name | String | Name of the group. |
| SophosFirewall.SecurityPolicyGroup.Description | String | Description of the group. |
| SophosFirewall.SecurityPolicyGroup.SecurityPolicyList.SecurityPolicy | String | Rules contained inside the group. |
| SophosFirewall.SecurityPolicyGroup.SourceZones.Zone | String | Source zone in the group. |
| SophosFirewall.SecurityPolicyGroup.DestinationZones.Zone | String | Destination zone in the group. |
| SophosFirewall.SecurityPolicyGroup.PolicyType | Number | Type of the rules in the group. |
Command Example
!sophos-firewall-rule-group-list start=0 end=6
Context Example
{
"SophosFirewall": {
"SecurityPolicyGroup": [
{
"Description": "Inbound traffic to DMZ. Firewall rules with the destination zone as DMZ would be added to this group on the first match basis if user selects automatic grouping option. This is the default group.",
"DestinationZones": {
"Zone": "DMZ"
},
"IsDeleted": false,
"Name": "Traffic to DMZ",
"Policytype": "Any",
"SecurityPolicyList": {
"SecurityPolicy": "[example] Traffic to DMZ"
}
},
{
"Description": null,
"IsDeleted": false,
"Name": "hi",
"Policytype": "Any"
},
{
"Description": null,
"IsDeleted": false,
"Name": "forunitest",
"Policytype": "Any"
},
{
"Description": "Outbound traffic to WAN. Firewall rules with the destination zone as WAN would be added to this group on the first match basis if user selects automatic grouping option. This is the default group.",
"DestinationZones": {
"Zone": "WAN"
},
"IsDeleted": false,
"Name": "Traffic to WAN",
"Policytype": "Any",
"SecurityPolicyList": {
"SecurityPolicy": "[example] Traffic to WAN"
}
},
{
"Description": null,
"IsDeleted": false,
"Name": "unitest",
"Policytype": "Any"
},
{
"Description": "For testing only",
"IsDeleted": false,
"Name": "unitest2",
"Policytype": "Any"
}
]
}
}
Human Readable Output
Showing 0 to 6 SecurityPolicyGroup objects out of 8
Name Description SecurityPolicyList DestinationZones Traffic to DMZ Inbound traffic to DMZ. Firewall rules with the destination zone as DMZ would be added to this group on the first match basis if user selects automatic grouping option. This is the default group. SecurityPolicy: [example] Traffic to DMZ Zone: DMZ hi forunitest Traffic to WAN Outbound traffic to WAN. Firewall rules with the destination zone as WAN would be added to this group on the first match basis if user selects automatic grouping option. This is the default group. SecurityPolicy: [example] Traffic to WAN Zone: WAN unitest unitest2 For testing only
sophos-firewall-rule-group-get
Gets a single firewall rule group by name.
Base Command
sophos-firewall-rule-group-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the firewall rule group. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicyGroup.Name | String | Name of the group. |
| SophosFirewall.SecurityPolicyGroup.Description | String | Description of the group. |
| SophosFirewall.SecurityPolicyGroup.SecurityPolicyList.SecurityPolicy | String | Rules contained inside the group. |
| SophosFirewall.SecurityPolicyGroup.SourceZones.Zone | String | Source zone in the group. |
| SophosFirewall.SecurityPolicyGroup.DestinationZones.Zone | String | Destination zone in the group. |
| SophosFirewall.SecurityPolicyGroup.PolicyType | Number | Type of the rules in the group. |
Command Example
!sophos-firewall-rule-group-get name=rulegroup
Context Example
{
"SophosFirewall": {
"SecurityPolicyGroup": {
"Description": "rulegroup for user/network rules",
"IsDeleted": false,
"Name": "rulegroup",
"Policytype": "User/network rule",
"SecurityPolicyList": {
"SecurityPolicy": [
"network_rule",
"user_rule"
]
}
}
}
}
Human Readable Output
SecurityPolicyGroup Object details
Name Description SecurityPolicyList rulegroup rulegroup for user/network rules SecurityPolicy: network_rule,
user_rule
sophos-firewall-rule-group-add
Adds a new firewall rule group.
Base Command
sophos-firewall-rule-group-add
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the rule group. | Required |
| description | Description of the rule group. | Optional |
| policy_type | Type of the rules (policies) inside the group. Possible values: “Any”, “User/network rule”, “User rule”, “Business application rule”. | Optional |
| rules | Rules contained in the group. | Optional |
| source_zones | Source zones contained in the group. Possible values: “Any”, “LAN”, “WAN”, “VPN”, “DMZ”, “WiFi. | Optional |
| destination_zones | Destination zones contained in the group. Possible values: “Any”, “LAN”, “WAN”, “VPN”, “DMZ”, “WiFi. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicyGroup.Name | String | Name of the group. |
| SophosFirewall.SecurityPolicyGroup.Description | String | Description of the group. |
| SophosFirewall.SecurityPolicyGroup.SecurityPolicyList.SecurityPolicy | String | Rules contained in the group. |
| SophosFirewall.SecurityPolicyGroup.SourceZones.Zone | String | Source zone in the group. |
| SophosFirewall.SecurityPolicyGroup.DestinationZones.Zone | String | Destination zone in the group. |
| SophosFirewall.SecurityPolicyGroup.PolicyType | Number | Type of the rules in the group. |
Command Example
!sophos-firewall-rule-group-add name=rulegroup policy_type="User/network rule" rules=user_rule,network_rule
Context Example
{
"SophosFirewall": {
"SecurityPolicyGroup": {
"Description": null,
"IsDeleted": false,
"Name": "rulegroup",
"Policytype": "User/network rule",
"SecurityPolicyList": {
"SecurityPolicy": [
"user_rule",
"network_rule"
]
}
}
}
}
Human Readable Output
SecurityPolicyGroup Object details
Name SecurityPolicyList rulegroup SecurityPolicy: user_rule,
network_rule
sophos-firewall-rule-group-update
Updates an existing firewall rule group.
Base Command
sophos-firewall-rule-group-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the rule group. | Required |
| description | Description of the rule group. | Optional |
| policy_type | Type of the rules (policies) inside the group. Possible values: “Any”, “User/network rule”, “User rule”, “Business application rule”. | Optional |
| rules | Rules contained in the group. | Optional |
| source_zones | Source zones contained in the group. Possible values: “Any”, “LAN”, “WAN”, “VPN”, “DMZ”, “WiFi. | Optional |
| destination_zones | Destination zones contained in the group. Possible values: “Any”, “LAN”, “WAN”, “VPN”, “DMZ”, “WiFi. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicyGroup.Name | String | Name of the group. |
| SophosFirewall.SecurityPolicyGroup.Description | String | Description of the group. |
| SophosFirewall.SecurityPolicyGroup.SecurityPolicyList.SecurityPolicy | String | Rules contained in the group. |
| SophosFirewall.SecurityPolicyGroup.SourceZones.Zone | String | Source zone in the group. |
| SophosFirewall.SecurityPolicyGroup.DestinationZones.Zone | String | Destination zone in the group. |
| SophosFirewall.SecurityPolicyGroup.PolicyType | Number | Type of the rules in the group. |
Command Example
!sophos-firewall-rule-group-update name=rulegroup description="rulegroup for user/network rules"
Context Example
{
"SophosFirewall": {
"SecurityPolicyGroup": {
"Description": "rulegroup for user/network rules",
"IsDeleted": false,
"Name": "rulegroup",
"Policytype": "User/network rule",
"SecurityPolicyList": {
"SecurityPolicy": [
"network_rule",
"user_rule"
]
}
}
}
}
Human Readable Output
SecurityPolicyGroup Object details
Name Description SecurityPolicyList rulegroup rulegroup for user/network rules SecurityPolicy: network_rule,
user_rule
sophos-firewall-rule-group-delete
Deletes an existing firewall group.
Base Command
sophos-firewall-rule-group-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the group. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.SecurityPolicyGroup.Name | String | Name of the group. |
| SophosFirewall.SecurityPolicyGroup.IsDeleted | Bool | Whether the group is deleted. |
Command Example
!sophos-firewall-rule-group-delete name=rulegroup
Context Example
{
"SophosFirewall": {
"SecurityPolicyGroup": {
"IsDeleted": true,
"Name": "rulegroup"
}
}
}
Human Readable Output
Deleting SecurityPolicyGroup Objects Results
Name IsDeleted rulegroup true
sophos-firewall-url-group-list
Lists all URL groups. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-url-group-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterURLGroup.Name | String | Name of the URL group. |
| SophosFirewall.WebFilterURLGroup.Description | String | Description of the URL group. |
| SophosFirewall.WebFilterURLGroup.URLlist.URL | String | URL in the group. |
Command Example
!sophos-firewall-url-group-list start=0 end=6
Context Example
{
"SophosFirewall": {
"WebFilterURLGroup": [
{
"Description": "1desc",
"IsDeleted": false,
"Name": "1",
"URLlist": {
"URL": [
"www.x.com",
"www.y.com"
]
}
},
{
"Description": null,
"IsDeleted": false,
"Name": "2",
"URLlist": {
"URL": "www.z.com"
}
},
{
"Description": null,
"IsDeleted": false,
"Name": "google",
"URLlist": {
"URL": "www.google.com"
}
},
{
"Description": null,
"IsDeleted": false,
"Name": "urlgroup1",
"URLlist": {
"URL": "www.blockthisurl.com"
}
},
{
"Description": null,
"IsDeleted": false,
"Name": "forunitest",
"URLlist": {
"URL": "badwebsite.com"
}
},
{
"Description": null,
"IsDeleted": false,
"Name": "forunitest2",
"URLlist": {
"URL": "badwebsite2.com"
}
}
]
}
}
Human Readable Output
Showing 0 to 6 WebFilterURLGroup objects out of 12
Name Description URLlist 1 1desc URL: www.x.com,
www.y.com2 URL: www.z.com URL: www.google.com urlgroup1 URL: www.blockthisurl.com forunitest URL: badwebsite.com forunitest2 URL: badwebsite2.com
sophos-firewall-url-group-get
Gets a single URL group by name.
Base Command
sophos-firewall-url-group-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the group. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterURLGroup.Name | String | Name of the URL group. |
| SophosFirewall.WebFilterURLGroup.Description | String | Description of the URL group. |
| SophosFirewall.WebFilterURLGroup.URLlist.URL | String | URL contained in the group. |
Command Example
!sophos-firewall-url-group-get name=urlgroup
Context Example
{
"SophosFirewall": {
"WebFilterURLGroup": {
"Description": null,
"IsDeleted": false,
"Name": "urlgroup",
"URLlist": {
"URL": [
"www.example.com",
"www.another-example.com"
]
}
}
}
}
Human Readable Output
WebFilterURLGroup Object details
Name URLlist urlgroup URL: www.example.com,
www.another-example.com
sophos-firewall-url-group-add
Adds a new URL group.
Base Command
sophos-firewall-url-group-add
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the group. | Required |
| description | Description of the group. | Optional |
| urls | URLs to add to the group. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterURLGroup.Name | String | Name of the URL group. |
| SophosFirewall.WebFilterURLGroup.Description | String | Description of the URL group. |
| SophosFirewall.WebFilterURLGroup.URLlist.URL | String | URL contained in the group. |
Command Example
!sophos-firewall-url-group-add name=urlgroup urls=www.example.com
Context Example
{
"SophosFirewall": {
"WebFilterURLGroup": {
"Description": null,
"IsDeleted": false,
"Name": "urlgroup",
"URLlist": {
"URL": [
"www.example.com"
]
}
}
}
}
sophos-firewall-url-group-update
Updates an existing URL group.
Base Command
sophos-firewall-url-group-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the group. | Required |
| description | Description of the group. | Optional |
| urls | URLs to add to the group. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterURLGroup.Name | String | Name of the URL group. |
| SophosFirewall.WebFilterURLGroup.Description | String | Description of the URL group. |
| SophosFirewall.WebFilterURLGroup.URLlist.URL | String | URL contained in the group. |
Command Example
!sophos-firewall-url-group-update name=urlgroup urls=www.another-example.com
Context Example
{
"SophosFirewall": {
"WebFilterURLGroup": {
"Description": null,
"IsDeleted": false,
"Name": "urlgroup",
"URLlist": {
"URL": [
"www.example.com",
"www.another-example.com"
]
}
}
}
}
Human Readable Output
WebFilterURLGroup Object details
Name URLlist urlgroup URL: www.example.com,
www.another-example.com
sophos-firewall-url-group-delete
Deletes an existing URL group or groups.
Base Command
sophos-firewall-url-group-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the group(s). | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterURLGroup.Name | String | Name of the URL group. |
| SophosFirewall.WebFilterURLGroup.IsDeleted | Bool | Whether the URL group is deleted. |
Command Example
!sophos-firewall-url-group-delete name=urlgroup
Context Example
{
"SophosFirewall": {
"WebFilterURLGroup": {
"IsDeleted": true,
"Name": "urlgroup"
}
}
}
Human Readable Output
Deleting WebFilterURLGroup Objects Results
Name IsDeleted urlgroup true
sophos-firewall-ip-host-list
Lists all IP hosts. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-ip-host-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHost.Name | String | Name of the IP host. |
| SophosFirewall.IPHost.IPFamily | String | IP family of the host group. Either IPv4 or IPv6. |
| SophosFirewall.IPHost.HostType | String | Type of the host. |
Command Example
!sophos-firewall-ip-host-list start=0 end=6
Context Example
{
"SophosFirewall": {
"IPHost": [
{
"HostType": "System Host",
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "##ALL_RW"
},
{
"HostType": "System Host",
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "##ALL_IPSEC_RW"
},
{
"HostType": "System Host",
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "##ALL_SSLVPN_RW"
},
{
"HostType": "System Host",
"IPFamily": "IPv6",
"IsDeleted": false,
"Name": "##ALL_RW6"
},
{
"HostType": "System Host",
"IPFamily": "IPv6",
"IsDeleted": false,
"Name": "##ALL_SSLVPN_RW6"
},
{
"HostType": "System Host",
"IPFamily": "IPv6",
"IsDeleted": false,
"Name": "##ALL_IPSEC_RW6"
}
]
}
}
Human Readable Output
Showing 0 to 6 IPHost objects out of 13
Name IPFamily HostType ##ALL_RW IPv4 System Host ##ALL_IPSEC_RW IPv4 System Host ##ALL_SSLVPN_RW IPv4 System Host ##ALL_RW6 IPv6 System Host ##ALL_SSLVPN_RW6 IPv6 System Host ##ALL_IPSEC_RW6 IPv6 System Host
sophos-firewall-ip-host-get
Gets a single IP host by name.
Base Command
sophos-firewall-ip-host-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the IP host. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHost.Name | String | Name of the IP host. |
| SophosFirewall.IPHost.IPFamily | String | IP family of the host group. Either IPv4 or IPv6. |
| SophosFirewall.IPHost.HostType | String | Type of the host. |
Command Example
!sophos-firewall-ip-host-get name=iphost
Context Example
{
"SophosFirewall": {
"IPHost": {
"HostType": "IP",
"IPAddress": "2.2.2.2",
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "iphost"
}
}
}
Human Readable Output
IPHost Object details
Name IPFamily HostType iphost IPv4 IP
sophos-firewall-ip-host-add
Adds a new IP host.
Base Command
sophos-firewall-ip-host-add
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the IP host. | Required |
| host_type | Type of the host. Possible values: “IP”, “Network”, “IPRange”, “IPList”. | Required |
| ip_family | The IP family. Possible values: “IPv4” and “IPv6”. Default is “IPv4”. | Optional |
| ip_address | IP address if IP or network was the chosen type. | Optional |
| subnet_mask | Subnet mask if network was the chosen type. | Optional |
| start_ip | Start of the IP range if IPRange was chosen. | Optional |
| end_ip | End of the IP range if IPRange was chosen. | Optional |
| ip_addresses | List of IP addresses if IPList was chosen. | Optional |
| host_group | Select the host group to which the host belongs. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHost.Name | String | Name of the IP host. |
| SophosFirewall.IPHost.IPFamily | String | IP family of the host group. Either IPv4 or IPv6. |
| SophosFirewall.IPHost.HostType | String | Type of the host. |
Command Example
!sophos-firewall-ip-host-add name=iphost host_type=IP ip_address=1.1.1.1
Context Example
{
"SophosFirewall": {
"IPHost": {
"HostType": "IP",
"IPAddress": "1.1.1.1",
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "iphost"
}
}
}
Human Readable Output
IPHost Object details
Name IPFamily HostType iphost IPv4 IP
sophos-firewall-ip-host-update
Updates an existing IP host.
Base Command
sophos-firewall-ip-host-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the IP host. | Required |
| host_type | Type of the host. Possible values: “IP”, “Network”, “IPRange”, “IPList”. | Optional |
| ip_family | The IP family. Possible values: “IPv4” and “IPv6”. Default is “IPv4”. | Optional |
| ip_address | IP address if IP or network was the chosen type. | Optional |
| subnet_mask | Subnet mask if network was the chosen type. | Optional |
| start_ip | Start of the IP range if IPRange was chosen. | Optional |
| end_ip | End of the IP range if IPRange was chosen. | Optional |
| ip_addresses | List of IP addresses if IPList was chosen. | Optional |
| host_group | Select the host group to which the host belongs. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHost.Name | String | Name of the IP host. |
| SophosFirewall.IPHost.IPFamily | String | IP family of the host group. Either IPv4 or IPv6. |
| SophosFirewall.IPHost.HostType | String | Type of the host. |
Command Example
!sophos-firewall-ip-host-update name=iphost ip_address=2.2.2.2
Context Example
{
"SophosFirewall": {
"IPHost": {
"HostType": "IP",
"IPAddress": "2.2.2.2",
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "iphost"
}
}
}
Human Readable Output
IPHost Object details
Name IPFamily HostType iphost IPv4 IP
sophos-firewall-ip-host-delete
Deletes an existing IP host.
Base Command
sophos-firewall-ip-host-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the host. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHost.Name | String | Name of the IP host. |
| SophosFirewall.IPHost.IsDeleted | Bool | Whether the IP host is deleted. |
Command Example
!sophos-firewall-ip-host-delete name=iphost
Context Example
{
"SophosFirewall": {
"IPHost": {
"IsDeleted": true,
"Name": "iphost"
}
}
}
Human Readable Output
Deleting IPHost Objects Results
Name IsDeleted iphost true
sophos-firewall-ip-host-group-list
Lists all IP host groups. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-ip-host-group-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHostGroup.Name | String | Name of the IP host group. |
| SophosFirewall.IPHostGroup.description | String | Description of the IP host group. |
| SophosFirewall.IPHostGroup.HostList.Host | String | Host contained in the host group. |
| SophosFirewall.IPHostGroup.IPFamily | String | IP family of the host group. Either IPv4 or IPv6. |
Command Example
!sophos-firewall-ip-host-group-list start=0 end=6
Context Example
{
"SophosFirewall": {
"IPHostGroup": [
{
"Description": null,
"HostList": {
"Host": [
"1.2.3.4",
"8.8.8.8"
]
},
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "Blocked by Playbook"
},
{
"Description": "FOR TESTING",
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "unitest2"
},
{
"Description": null,
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "Noam-Test"
}
]
}
}
Human Readable Output
Showing 0 to 3 IPHostGroup objects out of 3
Name Description IPFamily HostList Blocked by Playbook IPv4 Host: 1.2.3.4,
8.8.8.8unitest2 FOR TESTING IPv4 Noam-Test IPv4
sophos-firewall-ip-host-group-get
Gets a single IP host group by name.
Base Command
sophos-firewall-ip-host-group-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the IP host group. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHostGroup.Name | String | Name of the IP host group. |
| SophosFirewall.IPHostGroup.description | String | Description of the IP host group. |
| SophosFirewall.IPHostGroup.HostList.Host | String | Host contained inside the host group. |
| SophosFirewall.IPHostGroup.IPFamily | String | IP family of the host group. Either IPv4 or IPv6. |
Command Example
!sophos-firewall-ip-host-group-get name=iphostgroup
Context Example
{
"SophosFirewall": {
"IPHostGroup": {
"Description": null,
"HostList": {
"Host": "iphost"
},
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "iphostgroup"
}
}
}
Human Readable Output
IPHostGroup Object details
Name IPFamily HostList iphostgroup IPv4 Host: iphost
sophos-firewall-ip-host-group-add
Adds a new IP host group.
Base Command
sophos-firewall-ip-host-group-add
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the IP host group. | Required |
| description | Description of the IP host group. | Optional |
| ip_family | The IP family. Possible values: “IPv4” and “IPv6”. | Optional |
| hosts | IP hosts contained in the group. Must be hosts already existing in the system. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHostGroup.Name | String | Name of the IP host group. |
| SophosFirewall.IPHostGroup.description | String | Description of the IP host group. |
| SophosFirewall.IPHostGroup.HostList.Host | String | Host contained in the host group. |
| SophosFirewall.IPHostGroup.IPFamily | String | IP family of the host group. Either IPv4 or IPv6. |
Command Example
!sophos-firewall-ip-host-group-add name=iphostgroup
Context Example
{
"SophosFirewall": {
"IPHostGroup": {
"Description": null,
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "iphostgroup"
}
}
}
Human Readable Output
IPHostGroup Object details
Name IPFamily iphostgroup IPv4
sophos-firewall-ip-host-group-update
Updates an existing IP host group.
Base Command
sophos-firewall-ip-host-group-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the IP host group. | Required |
| description | Description of the IP host group. | Optional |
| ip_family | The IP family. Possible values: “IPv4” and “IPv6”. | Optional |
| hosts | IP hosts contained in the group. Must be hosts already existing in the system. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHostGroup.Name | String | Name of the IP host group. |
| SophosFirewall.IPHostGroup.description | String | Description of the IP host group. |
| SophosFirewall.IPHostGroup.HostList.Host | String | Host contained inside the host group. |
| SophosFirewall.IPHostGroup.IPFamily | String | IP family of the host group. Either IPv4 or IPv6. |
Command Example
!sophos-firewall-ip-host-group-update name=iphostgroup hosts=iphost
Context Example
{
"SophosFirewall": {
"IPHostGroup": {
"Description": null,
"HostList": {
"Host": "iphost"
},
"IPFamily": "IPv4",
"IsDeleted": false,
"Name": "iphostgroup"
}
}
}
Human Readable Output
IPHostGroup Object details
Name IPFamily HostList iphostgroup IPv4 Host: iphost
sophos-firewall-ip-host-group-delete
Deletes an existing IP host group.
Base Command
sophos-firewall-ip-host-group-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the group. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.IPHostGroup.Name | String | Name of the IP host group. |
| SophosFirewall.IPHostGroup.IsDeleted | Bool | Whether the IP host group is deleted. |
Command Example
!sophos-firewall-ip-host-group-delete name=iphostgroup
Context Example
{
"SophosFirewall": {
"IPHostGroup": {
"IsDeleted": true,
"Name": "iphostgroup"
}
}
}
Human Readable Output
Deleting IPHostGroup Objects Results
Name IsDeleted iphostgroup true
sophos-firewall-services-list
Lists all firewall services. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-services-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.Services.Name | String | Name of the firewall service. |
| SophosFirewall.Services.Type | String | Type of the firewall service. |
| SophosFirewall.Services.ServiceDetails.ServiceDetail | String | Details about the service. |
Command Example
!sophos-firewall-services-list start=0 end=6
Context Example
{
"SophosFirewall": {
"Services": [
{
"IsDeleted": false,
"Name": "AH",
"ServiceDetails": {
"ServiceDetail": {
"ProtocolName": "AH"
}
},
"Type": "IP"
},
{
"IsDeleted": false,
"Name": "AOL",
"ServiceDetails": {
"ServiceDetail": {
"DestinationPort": "5190:5194",
"Protocol": "TCP",
"SourcePort": "1:65535"
}
},
"Type": "TCPorUDP"
},
{
"IsDeleted": false,
"Name": "BGP",
"ServiceDetails": {
"ServiceDetail": {
"DestinationPort": "179",
"Protocol": "TCP",
"SourcePort": "1:65535"
}
},
"Type": "TCPorUDP"
},
{
"IsDeleted": false,
"Name": "DHCP",
"ServiceDetails": {
"ServiceDetail": {
"DestinationPort": "67:68",
"Protocol": "UDP",
"SourcePort": "67:68"
}
},
"Type": "TCPorUDP"
},
{
"IsDeleted": false,
"Name": "DNS",
"ServiceDetails": {
"ServiceDetail": [
{
"DestinationPort": "53",
"Protocol": "TCP",
"SourcePort": "1:65535"
},
{
"DestinationPort": "53",
"Protocol": "UDP",
"SourcePort": "1:65535"
}
]
},
"Type": "TCPorUDP"
},
{
"IsDeleted": false,
"Name": "ESP",
"ServiceDetails": {
"ServiceDetail": {
"ProtocolName": "ESP"
}
},
"Type": "IP"
}
]
}
}
Human Readable Output
Showing 0 to 6 Services objects out of 63
Name Type ServiceDetails AH IP ServiceDetail: {“ProtocolName”: “AH”} AOL TCPorUDP ServiceDetail: {“SourcePort”: “1:65535”, “DestinationPort”: “5190:5194”, “Protocol”: “TCP”} BGP TCPorUDP ServiceDetail: {“SourcePort”: “1:65535”, “DestinationPort”: “179”, “Protocol”: “TCP”} DHCP TCPorUDP ServiceDetail: {“SourcePort”: “67:68”, “DestinationPort”: “67:68”, “Protocol”: “UDP”} DNS TCPorUDP ServiceDetail: {‘SourcePort’: ‘1:65535’, ‘DestinationPort’: ‘53’, ‘Protocol’: ‘TCP’},
{‘SourcePort’: ‘1:65535’, ‘DestinationPort’: ‘53’, ‘Protocol’: ‘UDP’}ESP IP ServiceDetail: {“ProtocolName”: “ESP”}
sophos-firewall-services-get
Gets a single service by name.
Base Command
sophos-firewall-services-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the firewall service. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.Services.Name | String | Name of the firewall service. |
| SophosFirewall.Services.Type | String | Type of the firewall service. |
| SophosFirewall.Services.ServiceDetails.ServiceDetail | String | Details about the service. |
Command Example
!sophos-firewall-services-get name=service
Context Example
{
"SophosFirewall": {
"Services": {
"IsDeleted": false,
"Name": "service",
"ServiceDetails": {
"ServiceDetail": [
{
"ProtocolName": "Compaq-Peer"
},
{
"ProtocolName": "AH"
}
]
},
"Type": "IP"
}
}
}
Human Readable Output
Services Object details
Name Type ServiceDetails service IP ServiceDetail: {‘ProtocolName’: ‘Compaq-Peer’},
{‘ProtocolName’: ‘AH’}
sophos-firewall-services-add
Adds a new firewall service.
Base Command
sophos-firewall-services-add
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the firewall service. | Required |
| service_type | Type of service. Possible values: “TCPorUDP”, “IP”, “ICMP”, “ICMPv6”. | Required |
| protocol | The protocol for the service if service_type is TCPorUDP. Possible values: “TCP” and “UDP”. | Optional |
| source_port | Source port if service_type is TCPorUDP. | Optional |
| destination_port | Destination port if service_type is TCPorUDP. | Optional |
| protocol_name | Protocol name if service_type is IP. | Optional |
| icmp_type | ICMP type if service_type is ICMP. | Optional |
| icmp_code | ICMP code if service_type is ICMP. | Optional |
| icmp_v6_type | ICMPv6 type if service_type is ICMPv6. | Optional |
| icmp_v6_code | ICMPv6 code if service_type is ICMPv6. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.Services.Name | String | Name of the firewall service. |
| SophosFirewall.Services.Type | String | Type of the firewall service. |
| SophosFirewall.Services.ServiceDetails.ServiceDetail | String | Details about the service. |
Command Example
!sophos-firewall-services-add name=service service_type=IP protocol_name="Compaq-Peer"
Context Example
{
"SophosFirewall": {
"Services": {
"IsDeleted": false,
"Name": "service",
"ServiceDetails": {
"ServiceDetail": {
"ProtocolName": "Compaq-Peer"
}
},
"Type": "IP"
}
}
}
Human Readable Output
Services Object details
Name Type ServiceDetails service IP ServiceDetail: {“ProtocolName”: “Compaq-Peer”}
sophos-firewall-services-update
Updates an existing firewall service.
Base Command
sophos-firewall-services-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the firewall service. | Required |
| service_type | Type of service. Possible values: “TCPorUDP”, “IP”, “ICMP”, “ICMPv6”. | Optional |
| protocol | The protocol for the service if service_type is TCPorUDP. Possible values: “TCP” and “UDP”. | Optional |
| source_port | Source port if service_type is TCPorUDP. | Optional |
| destination_port | Destination port if service_type is TCPorUDP. | Optional |
| protocol_name | Protocol name if service_type is IP. | Optional |
| icmp_type | ICMP type if service_type is ICMP. | Optional |
| icmp_code | ICMP code if service_type is ICMP. | Optional |
| icmp_v6_type | ICMPv6 type if service_type is ICMPv6. | Optional |
| icmp_v6_code | ICMPv6 code if service_type is ICMPv6. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.Services.Name | String | Name of the firewall service. |
| SophosFirewall.Services.Type | String | Type of the firewall service. |
| SophosFirewall.Services.ServiceDetails.ServiceDetail | String | Details about the service. |
Command Example
!sophos-firewall-services-update name=service service_type=IP protocol_name=AH
Context Example
{
"SophosFirewall": {
"Services": {
"IsDeleted": false,
"Name": "service",
"ServiceDetails": {
"ServiceDetail": [
{
"ProtocolName": "Compaq-Peer"
},
{
"ProtocolName": "AH"
}
]
},
"Type": "IP"
}
}
}
Human Readable Output
Services Object details
Name Type ServiceDetails service IP ServiceDetail: {‘ProtocolName’: ‘Compaq-Peer’},
{‘ProtocolName’: ‘AH’}
sophos-firewall-services-delete
Deletes an existing firewall service.
Base Command
sophos-firewall-services-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the service. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.Services.Name | String | Name of the firewall service. |
| SophosFirewall.Services.IsDeleted | Bool | Whether the firewall service is deleted. |
Command Example
!sophos-firewall-services-delete name=service
Context Example
{
"SophosFirewall": {
"Services": {
"IsDeleted": true,
"Name": "service"
}
}
}
Human Readable Output
Deleting Services Objects Results
Name IsDeleted service true
sophos-firewall-user-list
Lists all users. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-user-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.User.Name | String | Name of the user. |
| SophosFirewall.User.Username | String | Username of the user. |
| SophosFirewall.User.Description | String | Description of the user. |
| SophosFirewall.User.EmailList.EmailID | String | Email of the user. |
| SophosFirewall.User.Group | String | Group of the user. |
| SophosFirewall.User.UserType | String | User type of the user. |
| SophosFirewall.User.Status | String | Status of the user. |
Command Example
!sophos-firewall-user-list start=0 end=6
Context Example
{
"SophosFirewall": {
"User": [
{
"AccessTimePolicy": "Allowed all the time",
"CISCO": "Disable",
"ClientlessPolicy": "No Policy Applied",
"DataTransferPolicy": "100 MB Total Data Transfer policy",
"Description": null,
"EmailList": {
"EmailID": "test@test.com"
},
"Group": "Open Group",
"IsDeleted": false,
"IsEncryptCert": "Disable",
"L2TP": "Disable",
"LoginRestriction": "UserGroupNode",
"LoginRestrictionForAppliance": null,
"MACBinding": "Disable",
"Name": "user_new",
"PPTP": "Disable",
"Password": {
"#text": "0488F379742662C337D2FB1BDD1F08D9",
"@passwordform": "encrypt"
},
"QoSPolicy": "High Guarantee User",
"QuarantineDigest": "Disable",
"SSLVPNPolicy": "sg",
"ScheduleForApplianceAccess": "All The Time",
"SimultaneousLoginsGlobal": "Enable",
"Status": "Active",
"SurfingQuotaPolicy": "Unlimited Internet Access",
"UserType": "User",
"Username": "user new"
},
{
"AccessTimePolicy": "Allowed all the time",
"CISCO": "Disable",
"ClientlessPolicy": "No Policy Applied",
"DataTransferPolicy": "100 MB Total Data Transfer policy",
"Description": "new desc",
"EmailList": {
"EmailID": "test@test.com"
},
"Group": "Guest Group",
"IsDeleted": false,
"IsEncryptCert": "Disable",
"L2TP": "Disable",
"LoginRestriction": "UserGroupNode",
"LoginRestrictionForAppliance": null,
"MACBinding": "0",
"Name": "sg",
"PPTP": "Disable",
"Password": {
"#text": "ECA5ABF3D68822A1C3C9193F8AAE1522",
"@passwordform": "encrypt"
},
"Profile": "Administrator",
"QoSPolicy": "High Guarantee User",
"QuarantineDigest": "0",
"SSLVPNPolicy": "No Policy Applied",
"ScheduleForApplianceAccess": "All The Time",
"SimultaneousLoginsGlobal": "Enable",
"Status": "Active",
"SurfingQuotaPolicy": "Unlimited Internet Access",
"UserType": "User",
"Username": "sg1"
},
{
"AccessTimePolicy": "Allowed all the time",
"CISCO": "Disable",
"ClientlessPolicy": "No Policy Applied",
"DataTransferPolicy": "100 MB Total Data Transfer policy",
"Description": "1",
"Group": "Guest Group",
"IsDeleted": false,
"IsEncryptCert": "Disable",
"L2TP": "Disable",
"LoginRestriction": "UserGroupNode",
"LoginRestrictionForAppliance": null,
"MACBinding": "0",
"Name": "1",
"PPTP": "Disable",
"Password": {
"#text": "A8DFE8F6454F585D404E04435416C95E",
"@passwordform": "encrypt"
},
"QoSPolicy": "High Guarantee User",
"QuarantineDigest": "0",
"SSLVPNPolicy": "No Policy Applied",
"ScheduleForApplianceAccess": "All The Time",
"SimultaneousLoginsGlobal": "Enable",
"Status": "Active",
"SurfingQuotaPolicy": "Unlimited Internet Access",
"UserType": "User",
"Username": "1"
},
{
"AccessTimePolicy": "Allowed all the time",
"CISCO": "Disable",
"ClientlessPolicy": "No Policy Applied",
"DataTransferPolicy": "100 MB Total Data Transfer policy",
"Description": null,
"EmailList": {
"EmailID": "test@test.test"
},
"Group": "Guest Group",
"IsDeleted": false,
"IsEncryptCert": "Disable",
"L2TP": "Disable",
"LoginRestriction": "UserGroupNode",
"LoginRestrictionForAppliance": null,
"MACBinding": "0",
"Name": "unitest2",
"PPTP": "Disable",
"Password": {
"#text": "F5A7EFCF49F10328D7198A1968618B38",
"@passwordform": "encrypt"
},
"QoSPolicy": "High Guarantee User",
"QuarantineDigest": "Disable",
"SSLVPNPolicy": "No Policy Applied",
"ScheduleForApplianceAccess": "All The Time",
"SimultaneousLoginsGlobal": "Enable",
"Status": "Active",
"SurfingQuotaPolicy": "Unlimited Internet Access",
"UserType": "User",
"Username": "unitestuser"
},
{
"AccessTimePolicy": "Allowed all the time",
"CISCO": "Disable",
"ClientlessPolicy": "No Policy Applied",
"DataTransferPolicy": "100 MB Total Data Transfer policy",
"Description": null,
"EmailList": {
"EmailID": "test@test.test"
},
"Group": "Guest Group",
"IsDeleted": false,
"IsEncryptCert": "Disable",
"L2TP": "Disable",
"LoginRestriction": "UserGroupNode",
"LoginRestrictionForAppliance": null,
"MACBinding": "0",
"Name": "unitest3",
"PPTP": "Disable",
"Password": {
"#text": "F5A7EFCF49F10328D7198A1968618B38",
"@passwordform": "encrypt"
},
"QoSPolicy": "High Guarantee User",
"QuarantineDigest": "Disable",
"SSLVPNPolicy": "No Policy Applied",
"ScheduleForApplianceAccess": "All The Time",
"SimultaneousLoginsGlobal": "Enable",
"Status": "Active",
"SurfingQuotaPolicy": "Unlimited Internet Access",
"UserType": "User",
"Username": "unitestuser2"
}
]
}
}
Human Readable Output
Showing 0 to 6 User objects out of 8
Username Name Description EmailList Group UserType Status user new user_new EmailID: test@test.com Open Group User Active sg sg This is sg desc EmailID: test@test.com Guest Group Administrator Active 1 1 1 Guest Group User Active sg1 sg new desc Guest Group User Active unitestuser unitest2 EmailID: test@test.test Guest Group User Active unitestuser2 unitest3 EmailID: test@test.test Guest Group User Active
sophos-firewall-user-get
Gets a single user by name.
Base Command
sophos-firewall-user-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the user. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.User.Name | String | Name of the user. |
| SophosFirewall.User.Username | String | Username of the user. |
| SophosFirewall.User.Description | String | Description of the user. |
| SophosFirewall.User.EmailList.EmailID | String | Email of the user. |
| SophosFirewall.User.Group | String | Group of the user. |
| SophosFirewall.User.UserType | String | User type of the user. |
| SophosFirewall.User.Status | String | Status of the user. |
Command Example
!sophos-firewall-user-get name=user
Context Example
{
"SophosFirewall": {
"User": {
"AccessTimePolicy": "Allowed all the time",
"CISCO": "Disable",
"ClientlessPolicy": "No Policy Applied",
"DataTransferPolicy": "100 MB Total Data Transfer policy",
"Description": "Description for the user",
"Group": "Guest Group",
"IsDeleted": false,
"IsEncryptCert": "Disable",
"L2TP": "Disable",
"LoginRestriction": "UserGroupNode",
"LoginRestrictionForAppliance": null,
"MACBinding": "0",
"Name": "user",
"PPTP": "Disable",
"Password": {
"#text": "A8DFE8F6454F585D404E04435416C95E",
"@passwordform": "encrypt"
},
"QoSPolicy": "High Guarantee User",
"QuarantineDigest": "0",
"SSLVPNPolicy": "No Policy Applied",
"ScheduleForApplianceAccess": "All The Time",
"SimultaneousLoginsGlobal": "Enable",
"Status": "Active",
"SurfingQuotaPolicy": "Unlimited Internet Access",
"UserType": "User",
"Username": "user"
}
}
}
Human Readable Output
User Object details
Username Name Description Group UserType Status user user Description for the user Guest Group User Active
sophos-firewall-user-add
Adds a new user.
Base Command
sophos-firewall-user-add
Input
| Argument Name | Description | Required |
|---|---|---|
| username | Username of the user. | Required |
| name | Name of the user. | Required |
| description | Description of the user. | Optional |
| Email of the user. | Required | |
| group | Group of the user. Default is “Guest Group”. | Optional |
| password | The password of the user. | Required |
| user_type | The type of the user. Possible values: “Administrator” and “User”. Default is “User”. | Optional |
| profile | Profile of the administrator if user_type is Administrator. Possible values: “Administrator”, “Crypto Admin”, “Security Admin”, “Audit Admin”, “HAProfile”. IMPORTANT: You can add more types in the web console. | Optional |
| surfing_quota_policy | The Surfing Quota policy. Default is “Unlimited Internet Access”. | Optional |
| access_time_policy | The Access Time policy. Default is “Allowed all the time”. | Optional |
| ssl_vpn_policy | The SSL VPN policy. Default is “No Policy Applied”. | Optional |
| clientless_policy | The clientless policy. Default is “No Policy Applied”. | Optional |
| data_transfer_policy | The Data Transfer policy. Default is: “100 MB Total Data Transfer policy”. | Optional |
| simultaneous_logins_global | Whether to enable simultaneous logins global. Possible values: “Enable” and “Disable”. Default is “Eanble”. | Optional |
| schedule_for_appliance_access | The schedule for appliance access. Default is “All The Time”. IMPORTANT: This option\ \ is available only for Administrators. | Optional |
| qos_policy | The QoS policy. Default is “High Guarantee User”. | Optional |
| login_restriction | The login restriction option. Possible values: “AnyNode” and “UserGroupNode”. Default is “UserGroupNode”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.User.Name | String | Name of the user. |
| SophosFirewall.User.Username | String | Username of the user. |
| SophosFirewall.User.Description | String | Description of the user. |
| SophosFirewall.User.EmailList.EmailID | String | Email of the user. |
| SophosFirewall.User.Group | String | Group of the user. |
| SophosFirewall.User.UserType | String | User type of the user. |
| SophosFirewall.User.Status | String | Status of the user. |
Command Example
!sophos-firewall-user-add name=user username=user password=1234 email=user@mail.com
Context Example
{
"SophosFirewall": {
"User": {
"AccessTimePolicy": "Allowed all the time",
"CISCO": "Disable",
"ClientlessPolicy": "No Policy Applied",
"DataTransferPolicy": "100 MB Total Data Transfer policy",
"Description": null,
"EmailList": {
"EmailID": "user@mail.com"
},
"Group": "Guest Group",
"IsDeleted": false,
"IsEncryptCert": "Disable",
"L2TP": "Disable",
"LoginRestriction": "UserGroupNode",
"LoginRestrictionForAppliance": null,
"MACBinding": "0",
"Name": "user",
"PPTP": "Disable",
"Password": {
"#text": "A8DFE8F6454F585D404E04435416C95E",
"@passwordform": "encrypt"
},
"QoSPolicy": "High Guarantee User",
"QuarantineDigest": "Disable",
"SSLVPNPolicy": "No Policy Applied",
"ScheduleForApplianceAccess": "All The Time",
"SimultaneousLoginsGlobal": "Enable",
"Status": "Active",
"SurfingQuotaPolicy": "Unlimited Internet Access",
"UserType": "User",
"Username": "user"
}
}
}
Human Readable Output
User Object details
Username Name EmailList Group UserType Status user user EmailID: user@mail.com Guest Group User Active
sophos-firewall-user-update
Updates a user.
Base Command
sophos-firewall-user-update
Input
| Argument Name | Description | Required |
|---|---|---|
| username | Username of the user. | Required |
| name | Name of the user. | Required |
| description | Description of the user. | Optional |
| Email of the user. | Optional | |
| group | Group of the user. Default is “Guest Group”. | Optional |
| password | The password of the user. | Optional |
| user_type | The type of the user. Possible values: “Administrator” and “User”. Default is “User”. | Optional |
| profile | Profile of the administrator if user_type is Administrator. Possible values: “Administrator”, “Crypto Admin”, “Security Admin”, “Audit Admin”, “HAProfile”. IMPORTANT: You can add more types in the web console. | Optional |
| surfing_quota_policy | The Surfing Quota policy. Default is “Unlimited Internet Access”. | Optional |
| access_time_policy | The Access Time policy. Default is “Allowed all the time”. | Optional |
| ssl_vpn_policy | The SSL VPN policy. Default is “No Policy Applied”. | Optional |
| clientless_policy | The clientless policy. Default is “No Policy Applied”. | Optional |
| data_transfer_policy | The Data Transfer policy. Default is: “100 MB Total Data Transfer policy”. | Optional |
| simultaneous_logins_global | Whether to enable simultaneous logins global. Possible values: “Enable” and “Disable”. Default is “Eanble”. | Optional |
| schedule_for_appliance_access | The schedule for appliance access. Default is “All The Time”.IMPORTANT: This option\ \ is available only for Administrators. | Optional |
| qos_policy | The QoS policy. Default is “High Guarantee User”. | Optional |
| login_restriction | The login restriction option. Possible values: “AnyNode” and “UserGroupNode”. Default is “UserGroupNode”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.User.Name | String | Name of the user. |
| SophosFirewall.User.Username | String | Username of the user. |
| SophosFirewall.User.Description | String | Description of the user. |
| SophosFirewall.User.EmailList.EmailID | String | Email of the user. |
| SophosFirewall.User.Group | String | Group of the user. |
| SophosFirewall.User.UserType | String | User type of the user. |
| SophosFirewall.User.Status | String | Status of the user. |
Command Example
!sophos-firewall-user-update name=user username=user description="Description for the user"
Context Example
{
"SophosFirewall": {
"User": {
"AccessTimePolicy": "Allowed all the time",
"CISCO": "Disable",
"ClientlessPolicy": "No Policy Applied",
"DataTransferPolicy": "100 MB Total Data Transfer policy",
"Description": "Description for the user",
"Group": "Guest Group",
"IsDeleted": false,
"IsEncryptCert": "Disable",
"L2TP": "Disable",
"LoginRestriction": "UserGroupNode",
"LoginRestrictionForAppliance": null,
"MACBinding": "0",
"Name": "user",
"PPTP": "Disable",
"Password": {
"#text": "A8DFE8F6454F585D404E04435416C95E",
"@passwordform": "encrypt"
},
"QoSPolicy": "High Guarantee User",
"QuarantineDigest": "0",
"SSLVPNPolicy": "No Policy Applied",
"ScheduleForApplianceAccess": "All The Time",
"SimultaneousLoginsGlobal": "Enable",
"Status": "Active",
"SurfingQuotaPolicy": "Unlimited Internet Access",
"UserType": "User",
"Username": "user"
}
}
}
Human Readable Output
User Object details
Username Name Description Group UserType Status user user Description for the user Guest Group User Active
sophos-firewall-user-delete
Deletes an existing user.
Base Command
sophos-firewall-user-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the user. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.User.Name | String | Name of the user. |
| SophosFirewall.User.IsDeleted | Bool | Whether the user is deleted. |
Command Example
!sophos-firewall-user-delete name=user
Context Example
{
"SophosFirewall": {
"User": {
"IsDeleted": true,
"Name": "user"
}
}
}
Human Readable Output
Deleting User Objects Results
Name IsDeleted user true
sophos-firewall-app-policy-list
Lists all app policies. IMPORTANT: Listing starst at 0 (not 1)!
Base Command
sophos-firewall-app-policy-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.ApplicationFilterPolicy.Name | String | Name of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.Description | String | Description of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.MicroAppSupport | String | Whether the policy support microapps. |
| SophosFirewall.ApplicationFilterPolicy.DefaultAction | String | Default action the policy executes. |
| SophosFirewall.ApplicationFilterPolicy.RuleList.Rule | String | Details of the rule. |
Command Example
!sophos-firewall-app-policy-list start=0 end=6
Context Example
{
"SophosFirewall": {
"ApplicationFilterPolicy": [
{
"DefaultAction": "Allow",
"Description": "Allow All Policy.",
"IsDeleted": false,
"MicroAppSupport": "True",
"Name": "Allow All"
},
{
"DefaultAction": "Allow",
"Description": "Drops traffic from applications that tunnels other apps, proxy and tunnel apps, and from apps that can bypass firewall policy. These applications allow users to anonymously browse Internet by connecting to servers on the Internet via encrypted SSL tunnels. This, in turn, enables users to bypass network security measures.",
"IsDeleted": false,
"MicroAppSupport": "True",
"Name": "Block filter avoidance apps",
"RuleList": {
"Rule": [
{
"Action": "Deny",
"ApplicationList": {
"Application": [
"test"
]
},
"CategoryList": {
"Category": "Proxy and Tunnel"
},
"Schedule": "All The Time",
"SelectAllRule": "Enable",
"SmartFilter": null
},
{
"Action": "Deny",
"ApplicationList": {
"Application": [
"test"
]
},
"CharacteristicsList": {
"Characteristics": "Can bypass firewall policy"
},
"Schedule": "All The Time",
"SelectAllRule": "Enable",
"SmartFilter": null
},
{
"Action": "Deny",
"ApplicationList": {
"Application": [
"test"
]
},
"CharacteristicsList": {
"Characteristics": "Tunnels other apps"
},
"Schedule": "All The Time",
"SelectAllRule": "Enable",
"SmartFilter": null
}
]
}
}
]
}
}
Human Readable Output
Showing 0 to 6 ApplicationFilterPolicy objects out of 12
Name Description MicroAppSupport DefaultAction RuleList Allow All Allow All Policy. True Allow Block filter avoidance apps Drops traffic from applications that tunnels other apps, proxy and tunnel apps, and from apps that can bypass firewall policy. These applications allow users to anonymously browse Internet by connecting to servers on the Internet via encrypted SSL tunnels. This, in turn, enables users to bypass network security measures. True Allow Rule: {‘SelectAllRule’: ‘Enable’, ‘CategoryList’: {‘Category’: ‘Proxy and Tunnel’}, ‘SmartFilter’: None, ‘ApplicationList’: {‘Application’: ‘test’}, ‘Action’: ‘Deny’, ‘Schedule’: ‘All The Time’} Block generally unwanted apps Drops generally unwanted applications traffic. This includes file transfer apps, proxy & tunnel apps, risk prone apps, peer to peer networking (P2P) apps and apps that causes loss of productivity. True Allow Rule: {‘SelectAllRule’: ‘Enable’, ‘CategoryList’: {‘Category’: ‘P2P’}, ‘SmartFilter’: None, ‘ApplicationList’: {‘Application’: [‘test’]}, ‘Action’: ‘Deny’, ‘Schedule’: ‘All The Time’} Block high risk (Risk Level 4 and 5) apps Drops traffic that are classified under high risk apps (Risk Level- 4 and 5). True Allow Rule: {‘SelectAllRule’: ‘Enable’, ‘RiskList’: {‘Risk’: ‘High’}, ‘SmartFilter’: None, ‘ApplicationList’: {‘Application’: [‘test’]}, ‘Action’: ‘Deny’, ‘Schedule’: ‘All The Time’} Block peer to peer (P2P) networking apps Drops traffic from applications that are categorized as P2P apps. P2P could be a mechanism for distributing Bots, Spywares, Adware, Trojans, Rootkits, Worms and other types of malwares. It is generally advised to have P2P application blocked in your network. True Allow Rule: {“SelectAllRule”: “Enable”, “CategoryList”: {“Category”: “P2P”}, “SmartFilter”: null, “ApplicationList”: {“Application”: [“test”]}, “Action”: “Deny”, “Schedule”: “All The Time”} Block very high risk (Risk Level 5) apps Drops traffic that are classified under very high risk apps (Risk Level- 5). True Allow Rule: {“SelectAllRule”: “Enable”, “RiskList”: {“Risk”: “Very High”}, “SmartFilter”: null, “ApplicationList”: {“Application”: [“test]}, “Action”: “Deny”, “Schedule”: “All The Time”}
sophos-firewall-app-policy-get
Gets a single app policy by name.
Base Command
sophos-firewall-app-policy-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the policy. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.ApplicationFilterPolicy.Name | String | Name of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.Description | String | Description of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.MicroAppSupport | String | Does the policy support microapps. |
| SophosFirewall.ApplicationFilterPolicy.DefaultAction | String | Default action the policy executes. |
| SophosFirewall.ApplicationFilterPolicy.RuleList.Rule | String | Details of the rule. |
Command Example
!sophos-firewall-app-policy-get name=apppolicy
Context Example
{
"SophosFirewall": {
"ApplicationFilterPolicy": {
"DefaultAction": "Allow",
"Description": "Description for app policy object",
"IsDeleted": false,
"MicroAppSupport": "True",
"Name": "apppolicy"
}
}
}
Human Readable Output
ApplicationFilterPolicy Object details
Name Description MicroAppSupport DefaultAction apppolicy Description for app policy object True Allow
sophos-firewall-app-policy-add
Adds a new app policy.
Base Command
sophos-firewall-app-policy-add
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the policy. | Required |
| description | Description of the policy. | Optional |
| micro_app_support | Whether microapp support is enabled. Possible values: “true” and “false”. | Optional |
| default_action | Default action for the policy. Possible values: “Allow” and “Deny”. | Optional |
| select_all | Whether to enable the select all rule. Possible values: “Enable” and “Disable”. | Optional |
| categories | Categories to add to the rule. | Optional |
| risks | Risks to add to the rule. | Optional |
| applications | Applications to add to the rule. | Optional |
| characteristics | Characteristics to add to the rule. | Optional |
| technologies | Technologies to add to the rule. | Optional |
| classifications | Classifications to add to the rule. | Optional |
| action | Action for the rule. Possible values: “Allow” and “Deny”. | Optional |
| schedule | The schedule for the rule. Possible values: “All the time”, “Work hours (5 Day week)”, “Work hours (6 Day week)”, “All Time on Weekdays”, “All Time on Weekends”, “All Time on Sunday”, “All Days 10:00 to 19:00”. IMPORTANT: Creating a new schedule is available in the web console. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.ApplicationFilterPolicy.Name | String | Name of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.Description | String | Description of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.MicroAppSupport | String | Whether the policy supports microapps. |
| SophosFirewall.ApplicationFilterPolicy.DefaultAction | String | Default action the policy executes. |
| SophosFirewall.ApplicationFilterPolicy.RuleList.Rule | String | Details of the rule. |
Command Example
!sophos-firewall-app-policy-add name=apppolicy
Context Example
{
"SophosFirewall": {
"ApplicationFilterPolicy": {
"DefaultAction": "Allow",
"Description": null,
"IsDeleted": false,
"MicroAppSupport": "True",
"Name": "apppolicy"
}
}
}
Human Readable Output
ApplicationFilterPolicy Object details
Name MicroAppSupport DefaultAction apppolicy True Allow
sophos-firewall-app-policy-update
Updates an existing app policy.
Base Command
sophos-firewall-app-policy-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the policy. | Required |
| description | Description of the policy. | Optional |
| micro_app_support | Whether microapp support is enabled. Possible values: “true” and “false”. | Optional |
| default_action | Default action for the policy. Possible values: “Allow” and “Deny”. | Optional |
| select_all | Whether to enable the select all rule. Possible values: “Enable” and “Disable”. | Optional |
| categories | Categories to add to the rule. | Optional |
| risks | Risks to add to the rule. | Optional |
| applications | Applications to add to the rule. | Optional |
| characteristics | Characteristics to add to the rule. | Optional |
| technologies | Technologies to add to the rule. | Optional |
| classifications | Classifications to add to the rule. | Optional |
| action | Action for the rule. Possible values: “Allow” and “Deny”. | Optional |
| schedule | The schedule for the rule. Possible values: “All the time”, “Work hours (5 Day week)”, “Work hours (6 Day week)”, “All Time on Weekdays”, “All Time on Weekends”, “All Time on Sunday”, “All Days 10:00 to 19:00”. IMPORTANT: Creating a new schedule is available in the web console. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.ApplicationFilterPolicy.Name | String | Name of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.Description | String | Description of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.MicroAppSupport | String | Whether the policy supports microapps. |
| SophosFirewall.ApplicationFilterPolicy.DefaultAction | String | Default action the policy executes. |
| SophosFirewall.ApplicationFilterPolicy.RuleList.Rule | String | Details of the rule. |
Command Example
!sophos-firewall-app-policy-update name=apppolicy description="Description for app policy object"
Context Example
{
"SophosFirewall": {
"ApplicationFilterPolicy": {
"DefaultAction": "Allow",
"Description": "Description for app policy object",
"IsDeleted": false,
"MicroAppSupport": "True",
"Name": "apppolicy"
}
}
}
Human Readable Output
ApplicationFilterPolicy Object details
Name Description MicroAppSupport DefaultAction apppolicy Description for app policy object True Allow
sophos-firewall-app-policy-delete
Deletes an existing app policy.
Base Command
sophos-firewall-app-policy-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the policy. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.ApplicationFilterPolicy.Name | String | Name of the firewall app policy. |
| SophosFirewall.ApplicationFilterPolicy.IsDeleted | Bool | Whether the firewall app policy is deleted. |
Command Example
!sophos-firewall-app-policy-delete name=apppolicy
Context Example
{
"SophosFirewall": {
"ApplicationFilterPolicy": {
"IsDeleted": true,
"Name": "apppolicy"
}
}
}
Human Readable Output
Deleting ApplicationFilterPolicy Objects Results
Name IsDeleted apppolicy true
sophos-firewall-app-category-list
Lists all app filter categories. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-app-category-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.ApplicationFilterCategory.Name | String | Name of the app category. |
| SophosFirewall.ApplicationFilterCategory.Description | String | Description of the app category. |
| SophosFirewall.ApplicationFilterCategory.QoSPolicy | String | QoS policy of the category. |
| SophosFirewall.ApplicationFilterCategory.BandwidthUsageType | String | Bandwidth usage type of the category. |
Command Example
!sophos-firewall-app-category-list start=0 end=6
Context Example
{
"SophosFirewall": {
"ApplicationFilterCategory": [
{
"BandwidthUsageType": null,
"Description": "Conferencing",
"IsDeleted": false,
"Name": "Conferencing",
"QoSPolicy": "None"
},
{
"BandwidthUsageType": null,
"Description": "Desktop Mail",
"IsDeleted": false,
"Name": "Desktop Mail",
"QoSPolicy": "None"
},
{
"BandwidthUsageType": null,
"Description": "Database Applications",
"IsDeleted": false,
"Name": "Download Applications",
"QoSPolicy": "None"
},
{
"BandwidthUsageType": null,
"Description": "E-commerce",
"IsDeleted": false,
"Name": "E-commerce",
"QoSPolicy": "None"
},
{
"BandwidthUsageType": null,
"Description": "File Transfer",
"IsDeleted": false,
"Name": "File Transfer",
"QoSPolicy": "None"
},
{
"BandwidthUsageType": "Individual",
"Description": "Gaming Sites and Applications",
"IsDeleted": false,
"Name": "Gaming",
"QoSPolicy": "policy"
}
]
}
}
Human Readable Output
Showing 0 to 6 ApplicationFilterCategory objects out of 25
Name Description QoSPolicy BandwidthUsageType Conferencing Conferencing None Desktop Mail Desktop Mail None Download Applications Database Applications None E-commerce E-commerce None File Transfer File Transfer None Gaming Gaming Sites and Applications policy Individual
sophos-firewall-app-category-get
Gets a single app filter category by name.
Base Command
sophos-firewall-app-category-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the app category. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.ApplicationFilterCategory.Name | String | Name of the app category. |
| SophosFirewall.ApplicationFilterCategory.Description | String | Description of the app category. |
| SophosFirewall.ApplicationFilterCategory.QoSPolicy | String | QoS policy of the category. |
| SophosFirewall.ApplicationFilterCategory.BandwidthUsageType | String | Bandwidth usage type of the category. |
Command Example
!sophos-firewall-app-category-get name=Gaming
Context Example
{
"SophosFirewall": {
"ApplicationFilterCategory": {
"BandwidthUsageType": "Individual",
"Description": "Gaming Sites and Applications",
"IsDeleted": false,
"Name": "Gaming",
"QoSPolicy": "policy"
}
}
}
Human Readable Output
ApplicationFilterCategory Object details
Name Description QoSPolicy BandwidthUsageType Gaming Gaming Sites and Applications policy Individual
sophos-firewall-app-category-update
Updates an existing app filter category.
Base Command
sophos-firewall-app-category-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the app category. | Required |
| description | The description of the category. | Optional |
| qos_policy | QoS policy of the category. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.ApplicationFilterCategory.Name | String | Name of the app category. |
| SophosFirewall.ApplicationFilterCategory.Description | String | Description of the app category. |
| SophosFirewall.ApplicationFilterCategory.QoSPolicy | String | QoS policy of the category. |
| SophosFirewall.ApplicationFilterCategory.BandwidthUsageType | String | Bandwidth usage type of the category. |
Command Example
!sophos-firewall-app-category-update name=Gaming qos_policy=policy
Context Example
{
"SophosFirewall": {
"ApplicationFilterCategory": {
"BandwidthUsageType": "Individual",
"Description": "Gaming Sites and Applications",
"IsDeleted": false,
"Name": "Gaming",
"QoSPolicy": "policy"
}
}
}
Human Readable Output
ApplicationFilterCategory Object details
Name Description QoSPolicy BandwidthUsageType Gaming Gaming Sites and Applications policy Individual
sophos-firewall-web-filter-list
Lists all web filter policies. IMPORTANT: Listing starts at 0 (not 1)!
Base Command
sophos-firewall-web-filter-list
Input
| Argument Name | Description | Required |
|---|---|---|
| start | The start index for the rules to list, e.g: 5. Default is “0”. | Optional |
| end | The end index for the rules to list, e.g: 20. Default is “50”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterPolicy.Name | String | Name of the policy. |
| SophosFirewall.WebFilterPolicy.DefaultAction | String | Default action for the web filter policy. |
| SophosFirewall.WebFilterPolicy.Description | String | Description of the rule. |
| SophosFirewall.WebFilterPolicy.EnableReporting | String | Whether the policy reports events. |
| SophosFirewall.WebFilterPolicy.DownloadFileSizeRestriction | Number | Maximum file size that can be downloaded. |
| SophosFirewall.WebFilterPolicy.DownloadFileSizeRestrictionEnabled | String | Whether the file size restriction is active. |
| SophosFirewall.WebFilterPolicy.RuleList.Rule | String | Rule list information. |
Command Example
!sophos-firewall-web-filter-list start=0 end=6
Context Example
{
"SophosFirewall": {
"WebFilterPolicy": [
{
"DefaultAction": "Allow",
"Description": "Deny access to web mail and online chat sites",
"DownloadFileSizeRestriction": "0",
"DownloadFileSizeRestrictionEnabled": "0",
"EnableReporting": "Enable",
"EnforceImageLicensing": "0",
"EnforceSafeSearch": "0",
"GoogAppDomainList": null,
"GoogAppDomainListEnabled": "0",
"IsDeleted": false,
"Name": "No Web Mail or Chat",
"RuleList": {
"Rule": [
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Web E-Mail",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Online Chat",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
}
]
},
"YoutubeFilterEnabled": "0",
"YoutubeFilterIsStrict": "0"
},
{
"DefaultAction": "Allow",
"Description": "Deny access to web mail sites",
"DownloadFileSizeRestriction": "0",
"DownloadFileSizeRestrictionEnabled": "0",
"EnableReporting": "Enable",
"EnforceImageLicensing": "0",
"EnforceSafeSearch": "0",
"GoogAppDomainList": null,
"GoogAppDomainListEnabled": "0",
"IsDeleted": false,
"Name": "No Web Mail",
"RuleList": {
"Rule": {
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Web E-Mail",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
}
},
"YoutubeFilterEnabled": "0",
"YoutubeFilterIsStrict": "0"
},
{
"DefaultAction": "Allow",
"Description": "Deny access to online chat sites",
"DownloadFileSizeRestriction": "0",
"DownloadFileSizeRestrictionEnabled": "0",
"EnableReporting": "Enable",
"EnforceImageLicensing": "0",
"EnforceSafeSearch": "0",
"GoogAppDomainList": null,
"GoogAppDomainListEnabled": "0",
"IsDeleted": false,
"Name": "No Online Chat",
"RuleList": {
"Rule": {
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Online Chat",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
}
},
"YoutubeFilterEnabled": "0",
"YoutubeFilterIsStrict": "0"
},
{
"DefaultAction": "Allow",
"Description": "Restrict users from uploading content to any site",
"DownloadFileSizeRestriction": "0",
"DownloadFileSizeRestrictionEnabled": "0",
"EnableReporting": "Enable",
"EnforceImageLicensing": "0",
"EnforceSafeSearch": "0",
"GoogAppDomainList": null,
"GoogAppDomainListEnabled": "0",
"IsDeleted": false,
"Name": "No web uploads",
"RuleList": {
"Rule": {
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "HTTPUpload",
"type": "DynamicCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
}
},
"YoutubeFilterEnabled": "0",
"YoutubeFilterIsStrict": "0"
},
{
"DefaultAction": "Allow",
"Description": "Deny access to categories most commonly unwanted in professional environments",
"DownloadFileSizeRestriction": "0",
"DownloadFileSizeRestrictionEnabled": "0",
"EnableReporting": "Enable",
"EnforceImageLicensing": "0",
"EnforceSafeSearch": "0",
"GoogAppDomainList": null,
"GoogAppDomainListEnabled": "0",
"IsDeleted": false,
"Name": "Default Workplace Policy",
"RuleList": {
"Rule": [
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Weapons",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Extreme",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Phishing & Fraud",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Militancy & Extremist",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Gambling",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Criminal Activity",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Pro-Suicide & Self-Harm",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Intellectual Piracy",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Marijuana",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Controlled substances",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Legal highs",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Hunting & Fishing",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Anonymizers",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Sexually Explicit",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Nudity",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
}
]
},
"YoutubeFilterEnabled": "0",
"YoutubeFilterIsStrict": "0"
},
{
"DefaultAction": "Allow",
"Description": "Deny access to sexually explicit sites",
"DownloadFileSizeRestriction": "0",
"DownloadFileSizeRestrictionEnabled": "0",
"EnableReporting": "Enable",
"EnforceImageLicensing": "0",
"EnforceSafeSearch": "0",
"GoogAppDomainList": null,
"GoogAppDomainListEnabled": "0",
"IsDeleted": false,
"Name": "No Explicit Content",
"RuleList": {
"Rule": {
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Sexually Explicit",
"type": "WebCategory"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Deny",
"HTTPSAction": "Deny",
"PolicyRuleEnabled": "1",
"Schedule": "All The Time"
}
},
"YoutubeFilterEnabled": "0",
"YoutubeFilterIsStrict": "0"
}
]
}
}
Human Readable Output
Showing 0 to 6 WebFilterPolicy objects out of 12
Name Description DefaultAction EnableReporting DownloadFileSizeRestrictionEnabled DownloadFileSizeRestriction RuleList No Web Mail or Chat Deny access to web mail and online chat sites Allow Enable 0 0 Rule: {‘CategoryList’: {‘Category’: {‘ID’: ‘Web E-Mail’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Online Chat’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’}No Web Mail Deny access to web mail sites Allow Enable 0 0 Rule: {“CategoryList”: {“Category”: {“ID”: “Web E-Mail”, “type”: “WebCategory”}}, “HTTPAction”: “Deny”, “HTTPSAction”: “Deny”, “FollowHTTPAction”: “1”, “ExceptionList”: {“FileTypeCategory”: null}, “Schedule”: “All The Time”, “PolicyRuleEnabled”: “1”, “CCLRuleEnabled”: “0”} No Online Chat Deny access to online chat sites Allow Enable 0 0 Rule: {“CategoryList”: {“Category”: {“ID”: “Online Chat”, “type”: “WebCategory”}}, “HTTPAction”: “Deny”, “HTTPSAction”: “Deny”, “FollowHTTPAction”: “1”, “ExceptionList”: {“FileTypeCategory”: null}, “Schedule”: “All The Time”, “PolicyRuleEnabled”: “1”, “CCLRuleEnabled”: “0”} No web uploads Restrict users from uploading content to any site Allow Enable 0 0 Rule: {“CategoryList”: {“Category”: {“ID”: “HTTPUpload”, “type”: “DynamicCategory”}}, “HTTPAction”: “Deny”, “HTTPSAction”: “Deny”, “FollowHTTPAction”: “1”, “ExceptionList”: {“FileTypeCategory”: null}, “Schedule”: “All The Time”, “PolicyRuleEnabled”: “1”, “CCLRuleEnabled”: “0”} Default Workplace Policy Deny access to categories most commonly unwanted in professional environments Allow Enable 0 0 Rule: {‘CategoryList’: {‘Category’: {‘ID’: ‘Weapons’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Extreme’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Phishing & Fraud’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Militancy & Extremist’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Gambling’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Criminal Activity’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Pro-Suicide & Self-Harm’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Intellectual Piracy’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Marijuana’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Controlled substances’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Legal highs’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Hunting & Fishing’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Anonymizers’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Sexually Explicit’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘Nudity’, ‘type’: ‘WebCategory’}}, ‘HTTPAction’: ‘Deny’, ‘HTTPSAction’: ‘Deny’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All The Time’, ‘PolicyRuleEnabled’: ‘1’, ‘CCLRuleEnabled’: ‘0’}No Explicit Content Deny access to sexually explicit sites Allow Enable 0 0 Rule: {“CategoryList”: {“Category”: {“ID”: “Sexually Explicit”, “type”: “WebCategory”}}, “HTTPAction”: “Deny”, “HTTPSAction”: “Deny”, “FollowHTTPAction”: “1”, “ExceptionList”: {“FileTypeCategory”: null}, “Schedule”: “All The Time”, “PolicyRuleEnabled”: “1”, “CCLRuleEnabled”: “0”}
sophos-firewall-web-filter-get
Gets a single web filter policy by name.
Base Command
sophos-firewall-web-filter-get
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the policy. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterPolicy.Name | String | Name of the policy. |
| SophosFirewall.WebFilterPolicy.DefaultAction | String | Default action for the web filter policy. |
| SophosFirewall.WebFilterPolicy.Description | String | Description of the rule. |
| SophosFirewall.WebFilterPolicy.EnableReporting | String | Whether the policy reports events. |
| SophosFirewall.WebFilterPolicy.DownloadFileSizeRestriction | Number | Maximum file size that can be downloaded. |
| SophosFirewall.WebFilterPolicy.DownloadFileSizeRestrictionEnabled | String | Whether the file size restriction is active. |
| SophosFirewall.WebFilterPolicy.RuleList.Rule | String | Rule list information. |
Command Example
!sophos-firewall-web-filter-get name=webfilter
Context Example
{
"SophosFirewall": {
"WebFilterPolicy": {
"DefaultAction": "Allow",
"Description": "Description for web filter",
"DownloadFileSizeRestriction": "300",
"DownloadFileSizeRestrictionEnabled": "1",
"EnableReporting": "Enable",
"EnforceImageLicensing": "0",
"EnforceSafeSearch": "1",
"GoogAppDomainList": "gmail.com",
"GoogAppDomainListEnabled": "1",
"IsDeleted": false,
"Name": "webfilter",
"RuleList": {
"Rule": [
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Blocked URLs for Default Policy",
"type": "URLGroup"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Allow",
"HTTPSAction": "Allow",
"PolicyRuleEnabled": "0",
"Schedule": "All Time on Sunday"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "1",
"type": "URLGroup"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "0",
"HTTPAction": "Allow",
"HTTPSAction": "Allow",
"PolicyRuleEnabled": "0",
"Schedule": "All Time on Sunday"
}
]
},
"YoutubeFilterEnabled": "1",
"YoutubeFilterIsStrict": "0"
}
}
}
Human Readable Output
WebFilterPolicy Object details
Name Description DefaultAction EnableReporting DownloadFileSizeRestrictionEnabled DownloadFileSizeRestriction RuleList webfilter Description for web filter Allow Enable 1 300 Rule: {‘CategoryList’: {‘Category’: {‘ID’: ‘Blocked URLs for Default Policy’, ‘type’: ‘URLGroup’}}, ‘HTTPAction’: ‘Allow’, ‘HTTPSAction’: ‘Allow’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All Time on Sunday’, ‘PolicyRuleEnabled’: ‘0’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘1’, ‘type’: ‘URLGroup’}}, ‘HTTPAction’: ‘Allow’, ‘HTTPSAction’: ‘Allow’, ‘FollowHTTPAction’: ‘0’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All Time on Sunday’, ‘PolicyRuleEnabled’: ‘0’, ‘CCLRuleEnabled’: ‘0’}
sophos-firewall-web-filter-add
Adds a new web filter policy.
Base Command
sophos-firewall-web-filter-add
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the policy | Required |
| description | Description of the policy. | Optional |
| default_action | Default action for the policy. Possible values: “Allow” and “Deny”. | Required |
| download_file_size_restriction_enabled | Whether the max download file size is enabled. Possible values: “0” and “1”. | Optional |
| download_file_size_restriction | Maximum file size to enable downloading in MB. | Optional |
| goog_app_domain_list_enabled | Enable to specify domains allowed to access google service. Possible values: “0” and “1”. | Optional |
| goog_app_domain_list | The domains allowed to access google service. | Optional |
| youtube_filter_enabled | Whether to enable YouTube Restricted Mode to restrict the content that is accessible. Possible values: “0” and “1”. | Optional |
| youtube_filter_is_strict | Whether to adjust the policy used for YouTube Restricted Mode. Possible values: “0” and “1”. | Optional |
| enforce_safe_search | Enable to block websites containing pornography and explicit sexual content from appearing in the search results of Google, Yahoo, Bing search results. Possible values: “0” and “1”. | Optional |
| enforce_image_licensing | Whether to further limit inappropriate content by enforcing search engine filters for Creative Commons licensed images. Possible values: “0” and “1”. | Optional |
| url_group_names | Comma-separted list of URL groups to block, allow, warn, or log. | Optional |
| http_action | The HTTP action. Possible values: “Deny”, “Allow”, “Warn”, and “Log”. | Optional |
| https_action | The HTTPs action. Possible values: “Deny”, “Allow”, “Warn”, and “Log”. | Optional |
| schedule | The schedule for the rule. Possible values: “All the time”, “Work hours (5 Day week)”, “Work hours (6 Day week)”, “All Time on Weekdays”, “All Time on Weekends”, “All Time on Sunday”, “All Days 10:00 to 19:00”. IMPORTANT: Creating a new schedule is available in the web console. | Optional |
| policy_rule_enabled | Whether to enable the policy rule. Possible values: “1” and “0”. | Optional |
| user_names | A comma-separated list of users who this rule will apply to. | Optional |
| ccl_names | A comma-separated list of CCL names. REQUIRED: When ccl_rule_enabled is ON. | Optional |
| ccl_rule_enabled | Whether to enable the CCL rule. Possible values: “0” and “1”. IMPORTANT: If enabled, ccl_name is required. | Optional |
| follow_http_action | Whether to enable the HTTP action. Possible values: “0” and “1”. | Optional |
| enable_reporting | Whether to enable reporting of the policy. Possible values: “Enable” and “Disable”. Default is “Enable”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterPolicy.Name | String | Name of the policy. |
| SophosFirewall.WebFilterPolicy.DefaultAction | String | Default action for the web filter policy. |
| SophosFirewall.WebFilterPolicy.Description | String | Description of the rule. |
| SophosFirewall.WebFilterPolicy.EnableReporting | String | Whether the policy reports events. |
| SophosFirewall.WebFilterPolicy.DownloadFileSizeRestriction | Number | Maximum file size that can be downloaded. |
| SophosFirewall.WebFilterPolicy.DownloadFileSizeRestrictionEnabled | String | Whether the file size restriction is active. |
| SophosFirewall.WebFilterPolicy.RuleList.Rule | String | Rule list information. |
Command Example
!sophos-firewall-web-filter-add name=webfilter default_action=Allow enable_reporting=Enable download_file_size_restriction=300 download_file_size_restriction_enabled=1 enforce_image_licensing=1 enforce_safe_search=1 goog_app_domain_list=gmail.com goog_app_domain_list_enabled=1 http_action=Allow https_action=Allow schedule="All Time on Sunday" youtube_filter_enabled=1 youtube_filter_is_strict=1 ccl_rule_enabled=0 follow_http_action=1 policy_rule_enabled=0 url_group_names="Blocked URLs for Default Policy"
Context Example
{
"SophosFirewall": {
"WebFilterPolicy": {
"DefaultAction": "Allow",
"Description": null,
"DownloadFileSizeRestriction": "300",
"DownloadFileSizeRestrictionEnabled": "1",
"EnableReporting": "Enable",
"EnforceImageLicensing": "1",
"EnforceSafeSearch": "1",
"GoogAppDomainList": "gmail.com",
"GoogAppDomainListEnabled": "1",
"IsDeleted": false,
"Name": "webfilter",
"RuleList": {
"Rule": {
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Blocked URLs for Default Policy",
"type": "URLGroup"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Allow",
"HTTPSAction": "Allow",
"PolicyRuleEnabled": "0",
"Schedule": "All Time on Sunday"
}
},
"YoutubeFilterEnabled": "1",
"YoutubeFilterIsStrict": "1"
}
}
}
Human Readable Output
WebFilterPolicy Object details
Name DefaultAction EnableReporting DownloadFileSizeRestrictionEnabled DownloadFileSizeRestriction RuleList webfilter Allow Enable 1 300 Rule: {“CategoryList”: {“Category”: {“ID”: “Blocked URLs for Default Policy”, “type”: “URLGroup”}}, “HTTPAction”: “Allow”, “HTTPSAction”: “Allow”, “FollowHTTPAction”: “1”, “ExceptionList”: {“FileTypeCategory”: null}, “Schedule”: “All Time on Sunday”, “PolicyRuleEnabled”: “0”, “CCLRuleEnabled”: “0”}
sophos-firewall-web-filter-update
Updates an existing web filter policy.
Base Command
sophos-firewall-web-filter-update
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the policy. | Required |
| description | Description of the policy. | Optional |
| default_action | Default action for the policy. Possible values: “Allow” and “Deny”. | Required |
| download_file_size_restriction_enabled | Whether the maximum download file size is enabled. Possible values: “0” and “1”. | Optional |
| download_file_size_restriction | The maximum file size to enable downloading in MB. | Optional |
| goog_app_domain_list_enabled | Whether to enable specifying domains allowed to access the Google service. Possible values: “0” and “1”. | Optional |
| goog_app_domain_list | Comma-separated list of domains allowed to access google service. | Optional |
| youtube_filter_enabled | Whether to enable YouTube Restricted Mode to restrict the content that is accessible. Possible values: “0” and “1”. | Optional |
| youtube_filter_is_strict | Whether to adjust the policy used for YouTube Restricted Mode. Possible values: “0” and “1”. | Optional |
| enforce_safe_search | Whether to enable blocking websites containing pornography and explicit sexual content from appearing in the search results of Google, Yahoo, and Bing search results. Possible values: “0” and “1”. | Optional |
| enforce_image_licensing | Whether to further limit inappropriate content by enforcing search engine filters for Creative Commons licensed images. Possible values: “0” and “1”. | Optional |
| url_group_names | Comma-separated list of URL groups to block, allow, warn, or log. | Optional |
| http_action | The HTTP action. Possible values: “Deny”, “Allow”, “Warn”, and “Log”. | Optional |
| https_action | The HTTPs action. Possible values: “Deny”, “Allow”, “Warn”, and “Log”. | Optional |
| schedule | The schedule for the rule. Possible values: “All the time”, “Work hours (5 Day week)”, “Work hours (6 Day week)”, “All Time on Weekdays”, “All Time on Weekends”, “All Time on Sunday”, “All Days 10:00 to 19:00”. IMPORTANT: Creating a new schedule is available in the web console. | Optional |
| policy_rule_enabled | Whether to enable the policy rule. Possible values: “1” and “0”. | Optional |
| user_names | A comma-separated list of users who this rule will apply to. | Optional |
| ccl_names | A comma-separated list of CCL names. REQUIRED: when ccl_rule_enabled is ON | Optional |
| ccl_rule_enabled | Whether to enable the CCL rule. Possible values: “0” and “1”. IMPORTANT: If enabled, ccl_name is required. | Optional |
| follow_http_action | Whether to enable the HTTP action. Possible values: “0” and “1”. | Optional |
| enable_reporting | Whether to enable reporting of the policy. Possible values: “Enable” and “Disable”. Default is “Enable”. | Optional |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterPolicy.Name | String | Name of the policy. |
| SophosFirewall.WebFilterPolicy.DefaultAction | String | Default action for the web filter policy. |
| SophosFirewall.WebFilterPolicy.Description | String | Description of the rule. |
| SophosFirewall.WebFilterPolicy.EnableReporting | String | Whether the policy reports events. |
| SophosFirewall.WebFilterPolicy.DownloadFileSizeRestriction | Number | Maximum file size that can be downloaded. |
| SophosFirewall.WebFilterPolicy.DownloadFileSizeRestrictionEnabled | String | Whether the file size restriction is active. |
| SophosFirewall.WebFilterPolicy.RuleList.Rule | String | Rule list information. |
Command Example
!sophos-firewall-web-filter-update name=webfilter default_action=Allow enable_reporting=Enable download_file_size_restriction=300 download_file_size_restriction_enabled=1 enforce_image_licensing=0 enforce_safe_search=1 goog_app_domain_list=gmail.com goog_app_domain_list_enabled=1 http_action=Allow https_action=Allow schedule="All Time on Sunday" youtube_filter_enabled=1 youtube_filter_is_strict=0 ccl_rule_enabled=0 follow_http_action=0 policy_rule_enabled=0 url_group_names=1 description="Description for web filter"
Context Example
{
"SophosFirewall": {
"WebFilterPolicy": {
"DefaultAction": "Allow",
"Description": "Description for web filter",
"DownloadFileSizeRestriction": "300",
"DownloadFileSizeRestrictionEnabled": "1",
"EnableReporting": "Enable",
"EnforceImageLicensing": "0",
"EnforceSafeSearch": "1",
"GoogAppDomainList": "gmail.com",
"GoogAppDomainListEnabled": "1",
"IsDeleted": false,
"Name": "webfilter",
"RuleList": {
"Rule": [
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "Blocked URLs for Default Policy",
"type": "URLGroup"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "1",
"HTTPAction": "Allow",
"HTTPSAction": "Allow",
"PolicyRuleEnabled": "0",
"Schedule": "All Time on Sunday"
},
{
"CCLRuleEnabled": "0",
"CategoryList": {
"Category": {
"ID": "1",
"type": "URLGroup"
}
},
"ExceptionList": {
"FileTypeCategory": null
},
"FollowHTTPAction": "0",
"HTTPAction": "Allow",
"HTTPSAction": "Allow",
"PolicyRuleEnabled": "0",
"Schedule": "All Time on Sunday"
}
]
},
"YoutubeFilterEnabled": "1",
"YoutubeFilterIsStrict": "0"
}
}
}
Human Readable Output
WebFilterPolicy Object details
Name Description DefaultAction EnableReporting DownloadFileSizeRestrictionEnabled DownloadFileSizeRestriction RuleList webfilter Description for web filter Allow Enable 1 300 Rule: {‘CategoryList’: {‘Category’: {‘ID’: ‘Blocked URLs for Default Policy’, ‘type’: ‘URLGroup’}}, ‘HTTPAction’: ‘Allow’, ‘HTTPSAction’: ‘Allow’, ‘FollowHTTPAction’: ‘1’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All Time on Sunday’, ‘PolicyRuleEnabled’: ‘0’, ‘CCLRuleEnabled’: ‘0’},
{‘CategoryList’: {‘Category’: {‘ID’: ‘1’, ‘type’: ‘URLGroup’}}, ‘HTTPAction’: ‘Allow’, ‘HTTPSAction’: ‘Allow’, ‘FollowHTTPAction’: ‘0’, ‘ExceptionList’: {‘FileTypeCategory’: None}, ‘Schedule’: ‘All Time on Sunday’, ‘PolicyRuleEnabled’: ‘0’, ‘CCLRuleEnabled’: ‘0’}
sophos-firewall-web-filter-delete
Deletes an existing web filter policy.
Base Command
sophos-firewall-web-filter-delete
Input
| Argument Name | Description | Required |
|---|---|---|
| name | Name of the policy. | Required |
Context Output
| Path | Type | Description |
|---|---|---|
| SophosFirewall.WebFilterPolicy.Name | String | Name of the policy. |
| SophosFirewall.WebFilterPolicy.IsDeleted | Bool | Whether the policy is deleted. |
Command Example
!sophos-firewall-web-filter-delete name=webfilter
Context Example
{
"SophosFirewall": {
"WebFilterPolicy": {
"IsDeleted": true,
"Name": "webfilter"
}
}
}
Human Readable Output
Deleting WebFilterPolicy Objects Results
Name IsDeleted webfilter true
Configuration parameters
server_url— Server URL (required)credentials— User Credentials (required)insecure— Trust any certificate (not secure)proxy— Use system proxy settings
Commands (48)
-
sophos-firewall-app-category-getGets a single app filter category by name.
-
sophos-firewall-app-category-listLists all app filter categories. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-app-category-updateUpdates an existing app filter category.
-
sophos-firewall-app-policy-addAdds a new app policy.
-
sophos-firewall-app-policy-deleteDeletes an existing app policy.
-
sophos-firewall-app-policy-getGets a single app policy by name.
-
sophos-firewall-app-policy-listLists all app policies. IMPORTANT: The list starst at 0 (not 1)!
-
sophos-firewall-app-policy-updateUpdates an existing app policy.
-
sophos-firewall-ip-host-addAdds a new IP host.
-
sophos-firewall-ip-host-deleteDeletes an existing IP host.
-
sophos-firewall-ip-host-getGets a single IP host by name.
-
sophos-firewall-ip-host-group-addAdds a new IP host group.
-
sophos-firewall-ip-host-group-deleteDeletes an existing IP host group.
-
sophos-firewall-ip-host-group-getGets a single IP host group by name.
-
sophos-firewall-ip-host-group-listLists all IP host groups. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-ip-host-group-updateUpdates an existing IP host group.
-
sophos-firewall-ip-host-listLists all IP hosts. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-ip-host-updateUpdates an existing IP host.
-
sophos-firewall-rule-addAdds a new firewall rule.
-
sophos-firewall-rule-deleteDeletes an existing firewall rule.
-
sophos-firewall-rule-getGets a single firewall rule by name.
-
sophos-firewall-rule-group-addAdds a new firewall rule group.
-
sophos-firewall-rule-group-deleteDeletes an existing firewall group.
-
sophos-firewall-rule-group-getGets a single firewall rule group by name.
-
sophos-firewall-rule-group-listLists all firewall rule groups. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-rule-group-updateUpdates an existing firewall rule group.
-
sophos-firewall-rule-listLists all firewall rules. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-rule-updateUpdates an existing firewall rule.
-
sophos-firewall-services-addAdds a new firewall service.
-
sophos-firewall-services-deleteDeletes an existing firewall service.
-
sophos-firewall-services-getGets a single service by name.
-
sophos-firewall-services-listLists all firewall services. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-services-updateUpdates an existing firewall service.
-
sophos-firewall-url-group-addAdds new URLs to the group.
-
sophos-firewall-url-group-deleteDeletes an existing URL group or groups.
-
sophos-firewall-url-group-getGets a single URL group by name.
-
sophos-firewall-url-group-listLists all URL groups. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-url-group-updateUpdates an existing URL group.
-
sophos-firewall-user-addAdds a new user.
-
sophos-firewall-user-deleteDeletes an existing user.
-
sophos-firewall-user-getGets a single user by name.
-
sophos-firewall-user-listLists all users. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-user-updateUpdates a user.
-
sophos-firewall-web-filter-addAdds a new web filter policy.
-
sophos-firewall-web-filter-deleteDeletes an existing web filter policy.
-
sophos-firewall-web-filter-getGets a single web filter policy by name.
-
sophos-firewall-web-filter-listLists all web filter policies. IMPORTANT: The list starts at 0 (not 1)!
-
sophos-firewall-web-filter-updateUpdates an existing web filter policy.
category: Network Security provider: Thoma Bravo commonfields: id: sophos_firewall version: -1 configuration: - additionalinfo: 'Server URL used to enter the Sophos XG Firewall web console. e.g., https://ip:port/' display: Server URL name: server_url required: true type: 0 - display: User Credentials name: credentials required: true type: 9 - display: Trust any certificate (not secure) name: insecure type: 8 required: false - display: Use system proxy settings name: proxy type: 8 required: false description: On-premise firewall by Sophos enables you to manage your firewall, respond to threats, and monitor what’s happening on your network. display: Sophos Firewall name: sophos_firewall script: commands: - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all firewall rules. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-rule-list outputs: - contextPath: SophosFirewall.SecurityPolicy.Name description: Name of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.Description description: Description of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.Status description: Status of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.PolicyType description: Policy type of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.IPFamily description: IP family of the security policy. Either IPv4 or IPv6. type: String - contextPath: SophosFirewall.SecurityPolicy.AttachIdentity description: Rule attach identity status. type: String - contextPath: SophosFirewall.SecurityPolicy.Action description: Current rule action. type: String - contextPath: SophosFirewall.SecurityPolicy.LogTraffic description: Rule traffic logging code. type: Number - arguments: - description: Name of the rule to get. name: name required: true description: Gets a single firewall rule by name. name: sophos-firewall-rule-get outputs: - contextPath: SophosFirewall.SecurityPolicy.Name description: Name of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.Description description: Description of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.Status description: Status of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.PolicyType description: Policy type of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.IPFamily description: IP family of the security policy. Either IPv4 or IPv6. type: String - contextPath: SophosFirewall.SecurityPolicy.AttachIdentity description: Rule attach identity status. type: String - contextPath: SophosFirewall.SecurityPolicy.Action description: Current rule action. type: String - contextPath: SophosFirewall.SecurityPolicy.LogTraffic description: Rule traffic logging code. type: Number - arguments: - description: Name of the new rule. name: name required: true - description: Description of the new rule. name: description - auto: PREDEFINED defaultValue: Enable description: 'Whether to enable the new rule. Possible values: "Enable" and "Disable". Default is "Enable".' name: status predefined: - Enable - Disable - auto: PREDEFINED defaultValue: IPv4 description: 'The IP family. Possible values: "IPv4" and "IPv6". Default is "IPv4".' name: ip_family predefined: - IPv4 - IPv6 - auto: PREDEFINED description: 'The position of the new rule in the list. Possible values: "top", "bottom", "before", and "after". If "before" or "after" is selected, you must provide a value for the position_policy_name argument.' name: position predefined: - top - bottom - after - before required: true - description: 'The name of the policy that the rule should be created before or after. This argument is required when the value of the position argument is "before" or "after".' name: position_policy_name - auto: PREDEFINED description: 'Policy type of the new rule. Possible values: "User" and "Network".' name: policy_type predefined: - User - Network required: true - auto: PREDEFINED description: 'Source zones to add to the rule. Possible values: "Any", "LAN". "WAN", "VPN", "DMZ", and "WiFi".' isArray: true name: source_zones predefined: - Any - LAN - WAN - VPN - DMZ - WiFi - description: Source networks to add to the rule. isArray: true name: source_networks - auto: PREDEFINED description: 'Destination zones to add to the rule. Possible values: "Any", "LAN". "WAN", "VPN", "DMZ", and "WiFi".' isArray: true name: destination_zones predefined: - Any - LAN - WAN - VPN - DMZ - WiFi - description: Destination networks to add to the rule. isArray: true name: destination_networks - description: Destination services to add to the rule. isArray: true name: services - auto: PREDEFINED description: 'The schedule for the rule. Possible values: "All the time", "Work hours (5 Day week)", "Work hours (6 Day week)", "All Time on Weekdays", "All Time on Weekends", "All Time on Sunday", "All Days 10:00 to 19:00". IMPORTANT: Creating a new schedule is available from the web console.' name: schedule predefined: - All the time - Work hours (5 Day week) - Work hours (6 Day week) - All Time on Weekdays - All Time on Weekends - All Time on Sunday - All Days 10:00 to 19:00 - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable traffic logging for the policy. Possible values: "Enable" and "Disable". Default is "Disable".' name: log_traffic predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to check if the specified user/user group from the\ \ selected zone is allowed to access the selected service. Possible values: "Enable" and "Disable". Default is "Disable". When enabling match_identity, the members argument is required.' name: match_identity predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to accept traffic from unknown users. The captive portal page\ \ is displayed to the user where the user can log in to access the Internet.\ \ Possible values: "Enable" and "Disable". Default is "Disable". To enable this argument, the match_identity argument must be enabled and the value of the policy_type is "User".' name: show_captive_portal predefined: - Enable - Disable - description: An existing user(s) or group(s) to add to the rule. This argument is required when match_identity is enabled. isArray: true name: members - auto: PREDEFINED defaultValue: Drop description: 'Action for the rule traffic. Possible values: "Accept", "Reject", and "Drop". Default is "Drop".' name: action predefined: - Accept - Reject - Drop - description: The DSCP marking level to classify the flow of packets based on the Traffic Shaping policy. name: dscp_marking - description: The primary gateway. Applicable only in case of multiple gateways. name: primary_gateway - description: The backup gateway. Applicable only in case of multiple gateways. name: backup_gateway - defaultValue: Allow All description: The Application Filter policy for the rule. Default is "Allow All". name: application_control - auto: PREDEFINED defaultValue: Revoke description: 'Whether to limit the bandwidth for the applications categorized\ \ under the Application category. This tag is only applicable when\ \ an application_control is selected. Possible values: "Apply" and "Revoke". Default is "Revoke".' name: application_based_qos_policy predefined: - Apply - Revoke - defaultValue: Allow All description: The Web Filter policy for the rule. Default is "Allow All". name: web_filter - auto: PREDEFINED defaultValue: Revoke description: 'Whether to limit the bandwidth for the URLs categorized under the Web\ \ category. This tag is only applicable when a web_filter is defined." Possible values: "Apply" and "Revoke". Default is "Revoke".' name: web_category_base_qos_policy predefined: - Apply - Revoke - defaultValue: None description: The Traffic Shaping policy for the rule. Default is "None". name: traffic_shaping_policy - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable virus and spam scanning for the HTTP protocol. Possible values: "Enable" and "Disable". Default is "Disable".' name: scan_http predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable virus and spam scanning for the HTTPS protocol. Possible values: "Enable" and "Disable". Default is "Disable".' name: scan_https predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable sandstorm analysis. Possible values: "Enable" and "Disable". Default is "Disable".' name: sandstorm predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable Google websites to use HTTP/s instead of QUICK QUIC. Possible values: "Enable" and "Disable". Default is "Disable".' name: block_quick_quic predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable scanning of FTP traffic. Possible values: "Enable" and "Disable". Default is "Disable".' name: scan_ftp predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to exclude a user''s network traffic from data accounting. This option is available only if the match_identity argument is enabled. Possible values: "Enable" and "Disable". Default is "Disable".' name: data_accounting predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Enable description: 'Whether to enable the NAT policy. Possible values: "Enable" and "Disable". Default is "Enable".' name: rewrite_source_address predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable the Internet scheme to apply the user-based Web Filter policy for the rule. Possible values: "Enable" and "Disable". Default is "Disable".' name: web_filter_internet_scheme predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable the Internet scheme to apply user-based Application Filter policy for the rule. Possible values: "Enable" and "Disable". Default is "Disable".' name: application_control_internet_scheme predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to override the gateway of the default NAT policy. Possible values: "Enable" and "Disable". Default is "Disable".' name: override_gateway_default_nat_policy predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable the source security heartbeat. Possible values: "Enable" and "Disable". Default is "Disable".' name: source_security_heartbeat predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable the destination security heartbeat. Possible values: "Enable" and "Disable". Default is "Disable".' name: destination_security_heartbeat predefined: - Enable - Disable - defaultValue: MASQ description: The NAT policy to apply. Default is "MASQ". name: outbound_address - defaultValue: No Restriction description: The minimum source health status permitted. Default is "No Restriction". name: minimum_source_hb_permitted - defaultValue: No Restriction description: The minimum destination health status permitted. Default is "No Restriction". name: minimum_destination_hb_permitted - defaultValue: generalpolicy description: The IPS policy for the rule. Default is "generalpolicy". name: intrusion_prevention description: Adds a new firewall rule. name: sophos-firewall-rule-add outputs: - contextPath: SophosFirewall.SecurityPolicy.Name description: Name of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.Description description: Description of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.Status description: Status of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.PolicyType description: Policy type of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.IPFamily description: IP family of the security policy. Either IPv4 or IPv6. type: String - contextPath: SophosFirewall.SecurityPolicy.AttachIdentity description: Rule attach identity status. type: String - contextPath: SophosFirewall.SecurityPolicy.Action description: Current rule action. type: String - contextPath: SophosFirewall.SecurityPolicy.LogTraffic description: Rule traffic logging code. type: Number - arguments: - description: Name of the new rule. name: name required: true - description: Description of the new rule. name: description - auto: PREDEFINED defaultValue: Enable description: 'Whether the rule is enabled. Possible values: "Enable" and "Disable". Default is "Enable".' name: status predefined: - Enable - Disable - auto: PREDEFINED defaultValue: IPv4 description: 'The IP family. Possible values: "IPv4" and "IPv6". Default is "IPv4".' name: ip_family predefined: - IPv4 - IPv6 - auto: PREDEFINED description: 'The position of the new rule in the list. Possible values: "top", "bottom", "before", and "after". If "before" or "after" is selected, you must provide a value for the position_policy_name argument.' name: position predefined: - top - bottom - after - before - description: 'The name of the policy that the rule should be created before or after. This argument is required when the value of the position argument is "before" or "after".' name: position_policy_name - auto: PREDEFINED description: 'Policy type of the new rule. Possible values: "User" and "Network".' name: policy_type predefined: - User - Network - auto: PREDEFINED description: 'Source zones to add to the rule. Possible values: "Any", "LAN". "WAN", "VPN", "DMZ", and "WiFi".' isArray: true name: source_zones predefined: - Any - LAN - WAN - VPN - DMZ - WiFi - description: Source networks to add to the rule. isArray: true name: source_networks - auto: PREDEFINED description: 'Destination zones to add to the rule. Possible values: "Any", "LAN". "WAN", "VPN", "DMZ", and "WiFi".' isArray: true name: destination_zones predefined: - Any - LAN - WAN - VPN - DMZ - WiFi - description: Destination networks to add to the rule. isArray: true name: destination_networks - description: Destination services to add to the rule. isArray: true name: services - auto: PREDEFINED description: 'The schedule for the rule. Possible values: "All the time", "Work hours (5 Day week)", "Work hours (6 Day week)", "All Time on Weekdays", "All Time on Weekends", "All Time on Sunday", "All Days 10:00 to 19:00". IMPORTANT: Creating a new schedule is available in the web console.' name: schedule predefined: - All the time - Work hours (5 Day week) - Work hours (6 Day week) - All Time on Weekdays - All Time on Weekends - All Time on Sunday - All Days 10:00 to 19:00 - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable traffic logging for the policy. Possible values: "Enable" and "Disable". Default is "Disable".' name: log_traffic predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to check if the specified user/user group from the\ \ selected zone is allowed to access the selected service. Possible values: "Enable" and "Disable". Default is "Disable". IMPORTANT: When enabling match_identity, the members argument is required.' name: match_identity predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to accept traffic from unknown users. The captive portal page\ \ is displayed to the user where the user can log in to access the Internet.\ \ Possible values: "Enable" and "Disable". Default is "Disable". To enable this argument, the match_identity argument must be enabled and the value of the policy_type is "User".' name: show_captive_portal predefined: - Enable - Disable - description: An existing user(s) or group(s) to add to the rule. This argument is required when match_identity is enabled. isArray: true name: members - auto: PREDEFINED defaultValue: Drop description: 'Action for the rule traffic. Possible values: "Accept", "Reject", and "Drop". Default is "Drop".' name: action predefined: - Accept - Reject - Drop - description: The DSCP marking level to classify the flow of packets based on the Traffic Shaping policy. name: dscp_marking - description: The primary gateway. Applicable only in case of multiple gateways. name: primary_gateway - description: The backup gateway. Applicable only in case of multiple gateways. name: backup_gateway - defaultValue: Allow All description: The Application Filter policy for the rule. Default is "Allow All". name: application_control - auto: PREDEFINED defaultValue: Revoke description: 'Whether to limit the bandwidth for the applications categorized\ \ under the Application category. This tag is only applicable when\ \ an application_control is selected. Possible values: "Apply" and "Revoke". Default is "Revoke".' name: application_based_qos_policy predefined: - Apply - Revoke - defaultValue: Allow All description: The Web Filter policy for the rule. Default is "Allow All". name: web_filter - auto: PREDEFINED defaultValue: Revoke description: 'Whether to limit the bandwidth for the URLs categorized under the Web\ \ category. This tag is only applicable when a web_filter is defined." Possible values: "Apply" and "Revoke". Default is "Revoke".' name: web_category_base_qos_policy predefined: - Apply - Revoke - defaultValue: None description: The Traffic Shaping policy for the rule. Default is "None". name: traffic_shaping_policy - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable virus and spam scanning for HTTP protocol. Possible values: "Enable" and "Disable". Default is "Disable".' name: scan_http predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable virus and spam scanning for HTTPS protocol. Possible values: "Enable" and "Disable". Default is "Disable".' name: scan_https predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable sandstorm analysis. Possible values: "Enable" and "Disable". Default is "Disable".' name: sandstorm predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable Google websites to use HTTP/s instead of QUICK QUIC. Possible values: "Enable" and "Disable". Default is "Disable".' name: block_quick_quic predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable scanning of FTP traffic. Possible values: "Enable" and "Disable". Default is "Disable".' name: scan_ftp predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to exclude a user''s network traffic from data accounting. This option is available only if the match_identity argument is enabled. Possible values: "Enable" and "Disable". Default is "Disable".' name: data_accounting predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Enable description: 'Whether to enable the NAT policy. Possible values: "Enable" and "Disable". Default is "Enable".' name: rewrite_source_address predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable the Internet scheme to apply the user-based Web Filter policy for the rule. Possible values: "Enable" and "Disable". Default is "Disable".' name: web_filter_internet_scheme predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable the Internet scheme to apply user-based Application Filter Policy for the rule. Possible values: "Enable" and "Disable". Default is "Disable".' name: application_control_internet_scheme predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to override the gateway of the default NAT policy. Possible values: "Enable" and "Disable". Default is "Disable".' name: override_gateway_default_nat_policy predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable the source security heartbeat. Possible values: "Enable" and "Disable". Default is "Disable".' name: source_security_heartbeat predefined: - Enable - Disable - auto: PREDEFINED defaultValue: Disable description: 'Whether to enable the destination security heartbeat. Possible values: "Enable" and "Disable". Default is "Disable".' name: destination_security_heartbeat predefined: - Enable - Disable - defaultValue: MASQ description: The NAT policy to be applied. Default is "MASQ". name: outbound_address - defaultValue: No Restriction description: The minimum source health status permitted. Default is "No Restriction". name: minimum_source_hb_permitted - defaultValue: No Restriction description: The minimum destination health status permitted. Default is "No Restriction". name: minimum_destination_hb_permitted - defaultValue: generalpolicy description: The IPS policy for the rule. Default is "generalpolicy". name: intrusion_prevention description: Updates an existing firewall rule. name: sophos-firewall-rule-update outputs: - contextPath: SophosFirewall.SecurityPolicy.Name description: Name of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.Description description: Description of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.Status description: Status of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.PolicyType description: Policy type of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.IPFamily description: IP family of the security policy. Either IPv4 or IPv6. type: String - contextPath: SophosFirewall.SecurityPolicy.AttachIdentity description: Rule attach identity status. type: String - contextPath: SophosFirewall.SecurityPolicy.Action description: Current rule action. type: String - contextPath: SophosFirewall.SecurityPolicy.LogTraffic description: Rule traffic logging code. type: Number - arguments: - description: Name of the rule. name: name required: true description: Deletes an existing firewall rule. name: sophos-firewall-rule-delete outputs: - contextPath: SophosFirewall.SecurityPolicy.Name description: Name of the rule. type: String - contextPath: SophosFirewall.SecurityPolicy.IsDeleted description: Whether the rule is deleted. type: Bool - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all firewall rule groups. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-rule-group-list outputs: - contextPath: SophosFirewall.SecurityPolicyGroup.Name description: Name of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.Description description: Description of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.SecurityPolicyList.SecurityPolicy description: Rules contained inside the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.SourceZones.Zone description: Source zone in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.DestinationZones.Zone description: Destination zone in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.PolicyType description: Type of the rules in the group. type: Number - arguments: - description: Name of the firewall rule group. name: name description: Gets a single firewall rule group by name. name: sophos-firewall-rule-group-get outputs: - contextPath: SophosFirewall.SecurityPolicyGroup.Name description: Name of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.Description description: Description of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.SecurityPolicyList.SecurityPolicy description: Rules contained inside the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.SourceZones.Zone description: Source zone in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.DestinationZones.Zone description: Destination zone in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.PolicyType description: Type of the rules in the group. type: Number - arguments: - description: Name of the rule group. name: name required: true - description: Description of the rule group. name: description - auto: PREDEFINED description: 'Type of the rules (policies) inside the group. Possible values: "Any", "User/network rule", "User rule", and "Business application rule".' name: policy_type predefined: - Any - User/network rule - Network rule - User rule - Business application rule - description: Rules contained in the group. isArray: true name: rules - auto: PREDEFINED description: 'Source zones contained in the group. Possible values: "Any", "LAN", "WAN", "VPN", "DMZ", and "WiFi.' isArray: true name: source_zones predefined: - Any - LAN - WAN - VPN - DMZ - WiFi - auto: PREDEFINED description: 'Destination zones contained in the group. Possible values: "Any", "LAN", "WAN", "VPN", "DMZ", and "WiFi.' isArray: true name: destination_zones predefined: - Any - LAN - WAN - VPN - DMZ - WiFi description: Adds a new firewall rule group. name: sophos-firewall-rule-group-add outputs: - contextPath: SophosFirewall.SecurityPolicyGroup.Name description: Name of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.Description description: Description of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.SecurityPolicyList.SecurityPolicy description: Rules contained in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.SourceZones.Zone description: Source zone in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.DestinationZones.Zone description: Destination zone in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.PolicyType description: Type of the rules in the group. type: Number - arguments: - description: Name of the rule group. name: name required: true - description: Description of the rule group. name: description - auto: PREDEFINED description: 'Type of the rules (policies) inside the group. Possible values: "Any", "User/network rule", "User rule", and "Business application rule".' name: policy_type predefined: - Any - User/network rule - Network rule - User rule - Business application rule - description: Rules contained in the group. isArray: true name: rules - auto: PREDEFINED description: 'Source zones contained in the group. Possible values: "Any", "LAN", "WAN", "VPN", "DMZ", and "WiFi.' isArray: true name: source_zones predefined: - Any - LAN - WAN - VPN - DMZ - WiFi - auto: PREDEFINED description: 'Destination zones contained in the group. Possible values: "Any", "LAN", "WAN", "VPN", "DMZ", and "WiFi.' isArray: true name: destination_zones predefined: - Any - LAN - WAN - VPN - DMZ - WiFi description: Updates an existing firewall rule group. name: sophos-firewall-rule-group-update outputs: - contextPath: SophosFirewall.SecurityPolicyGroup.Name description: Name of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.Description description: Description of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.SecurityPolicyList.SecurityPolicy description: Rules contained in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.SourceZones.Zone description: Source zone in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.DestinationZones.Zone description: Destination zone in the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.PolicyType description: Type of the rules in the group. type: Number - arguments: - description: Name of the group. name: name required: true description: Deletes an existing firewall group. name: sophos-firewall-rule-group-delete outputs: - contextPath: SophosFirewall.SecurityPolicyGroup.Name description: Name of the group. type: String - contextPath: SophosFirewall.SecurityPolicyGroup.IsDeleted description: Whether the group is deleted. type: Bool - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all URL groups. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-url-group-list outputs: - contextPath: SophosFirewall.WebFilterURLGroup.Name description: Name of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.Description description: Description of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.URLlist.URL description: URL contained in the group. type: String - arguments: - description: Name of the group. isArray: true name: name required: true description: Gets a single URL group by name. name: sophos-firewall-url-group-get outputs: - contextPath: SophosFirewall.WebFilterURLGroup.Name description: Name of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.Description description: Description of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.URLlist.URL description: URL contained in the group. type: String - arguments: - description: Name of the group. isArray: true name: name required: true - description: Description of the group. name: description - description: Comma-separated list of URLs to add to the group. isArray: true name: urls required: true description: Adds new URLs to the group. name: sophos-firewall-url-group-add outputs: - contextPath: SophosFirewall.WebFilterURLGroup.Name description: Name of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.Description description: Description of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.URLlist.URL description: URL contained in the group. type: String - arguments: - description: Name of the group. isArray: true name: name required: true - description: Description of the group. name: description - description: Comma-separated list of URLs to add to the group. isArray: true name: urls description: Updates an existing URL group. name: sophos-firewall-url-group-update outputs: - contextPath: SophosFirewall.WebFilterURLGroup.Name description: Name of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.Description description: Description of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.URLlist.URL description: URL contained in the group. type: String - arguments: - description: Name of the group(s). isArray: true name: name required: true description: Deletes an existing URL group or groups. name: sophos-firewall-url-group-delete outputs: - contextPath: SophosFirewall.WebFilterURLGroup.Name description: Name of the URL group. type: String - contextPath: SophosFirewall.WebFilterURLGroup.IsDeleted description: Whether the URL group is deleted. type: Bool - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all IP hosts. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-ip-host-list outputs: - contextPath: SophosFirewall.IPHost.Name description: Name of the IP host. type: String - contextPath: SophosFirewall.IPHost.IPFamily description: IP family of the host group. Either IPv4 or IPv6. type: String - contextPath: SophosFirewall.IPHost.HostType description: Type of the host. type: String - arguments: - description: Name of the IP host. name: name required: true description: Gets a single IP host by name. name: sophos-firewall-ip-host-get outputs: - contextPath: SophosFirewall.IPHost.Name description: Name of the IP host. type: String - contextPath: SophosFirewall.IPHost.IPFamily description: IP family of the host group. Either IPv4 or IPv6. type: String - contextPath: SophosFirewall.IPHost.HostType description: Type of the host. type: String - arguments: - description: Name of the IP host. name: name required: true - auto: PREDEFINED description: 'Type of the host. Possible values: "IP", "Network", "IPRange", and "IPList".' name: host_type predefined: - IP - Network - IPRange - IPList required: true - auto: PREDEFINED defaultValue: IPv4 description: 'The IP family. Possible values: "IPv4" and "IPv6". Default is "IPv4".' name: ip_family predefined: - IPv4 - IPv6 - description: IP address if IP or Network was the chosen host_type. name: ip_address - description: Subnet mask if Network was the chosen host_type. name: subnet_mask - description: Start of the IP range if IPRange was the chosen host_type. name: start_ip - description: End of the IP range if IPRange was the chosen host_type. name: end_ip - description: List of IP addresses if IPList was the chosen host_type. isArray: true name: ip_addresses - description: Select the host group to which the host belongs. isArray: true name: host_group description: Adds a new IP host. name: sophos-firewall-ip-host-add outputs: - contextPath: SophosFirewall.IPHost.Name description: Name of the IP host. type: String - contextPath: SophosFirewall.IPHost.IPFamily description: IP family of the host group. Either IPv4 or IPv6. type: String - contextPath: SophosFirewall.IPHost.HostType description: Type of the host. type: String - arguments: - description: Name of the IP host. name: name required: true - auto: PREDEFINED description: 'Type of the host. Possible values: "IP", "Network", "IPRange", and "IPList".' name: host_type predefined: - IP - Network - IPRange - IPList - auto: PREDEFINED defaultValue: IPv4 description: 'The IP family. Possible values: "IPv4" and "IPv6". Default is "IPv4".' name: ip_family predefined: - IPv4 - IPv6 - description: IP address if IP or Network was the chosen host_type. name: ip_address - description: Subnet mask if Network was the chosen host_type. name: subnet_mask - description: Start of the IP range if IPRange was the chosen host_type. name: start_ip - description: End of the IP range if IPRange was the chosen host_type. name: end_ip - description: List of IP addresses if IPList was the chosen host_type. isArray: true name: ip_addresses - description: Select the host group to which the host belongs. isArray: true name: host_group description: Updates an existing IP host. name: sophos-firewall-ip-host-update outputs: - contextPath: SophosFirewall.IPHost.Name description: Name of the IP host. type: String - contextPath: SophosFirewall.IPHost.IPFamily description: IP family of the host group. Either IPv4 or IPv6. type: String - contextPath: SophosFirewall.IPHost.HostType description: Type of the host. type: String - arguments: - description: Name of the host. name: name required: true description: Deletes an existing IP host. name: sophos-firewall-ip-host-delete outputs: - contextPath: SophosFirewall.IPHost.Name description: Name of the IP host. type: String - contextPath: SophosFirewall.IPHost.IsDeleted description: Whether the IP host is deleted. type: Bool - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all IP host groups. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-ip-host-group-list outputs: - contextPath: SophosFirewall.IPHostGroup.Name description: Name of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.description description: Description of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.HostList.Host description: Host contained in the host group. type: String - contextPath: SophosFirewall.IPHostGroup.IPFamily description: IP family of the host group. Either IPv4 or IPv6. type: String - arguments: - description: Name of the IP host group. name: name required: true description: Gets a single IP host group by name. name: sophos-firewall-ip-host-group-get outputs: - contextPath: SophosFirewall.IPHostGroup.Name description: Name of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.description description: Description of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.HostList.Host description: Host contained inside the host group. type: String - contextPath: SophosFirewall.IPHostGroup.IPFamily description: IP family of the host group. Either IPv4 or IPv6. type: String - arguments: - description: Name of the IP host group. name: name required: true - description: Description of the IP host group. name: description - auto: PREDEFINED description: 'The IP family. Possible values: "IPv4" and "IPv6".' name: ip_family predefined: - IPv4 - IPv6 - description: IP hosts contained in the group. Must be hosts that exist in the system. isArray: true name: hosts description: Adds a new IP host group. name: sophos-firewall-ip-host-group-add outputs: - contextPath: SophosFirewall.IPHostGroup.Name description: Name of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.description description: Description of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.HostList.Host description: Host contained in the host group. type: String - contextPath: SophosFirewall.IPHostGroup.IPFamily description: IP family of the host group. Either IPv4 or IPv6. type: String - arguments: - description: Name of the IP host group. name: name required: true - description: Description of the IP host group. name: description - auto: PREDEFINED description: 'The IP family. Possible values: "IPv4" and "IPv6".' name: ip_family predefined: - IPv4 - IPv6 - description: IP hosts contained in the group. Must be hosts that exist in the system. isArray: true name: hosts description: Updates an existing IP host group. name: sophos-firewall-ip-host-group-update outputs: - contextPath: SophosFirewall.IPHostGroup.Name description: Name of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.description description: Description of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.HostList.Host description: Host contained inside the host group. type: String - contextPath: SophosFirewall.IPHostGroup.IPFamily description: IP family of the host group. Either IPv4 or IPv6. type: String - arguments: - description: Name of the group. name: name required: true description: Deletes an existing IP host group. name: sophos-firewall-ip-host-group-delete outputs: - contextPath: SophosFirewall.IPHostGroup.Name description: Name of the IP host group. type: String - contextPath: SophosFirewall.IPHostGroup.IsDeleted description: Whether the IP host group is deleted. type: Bool - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all firewall services. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-services-list outputs: - contextPath: SophosFirewall.Services.Name description: Name of the firewall service. type: String - contextPath: SophosFirewall.Services.Type description: Type of the firewall service. type: String - contextPath: SophosFirewall.Services.ServiceDetails.ServiceDetail description: Details about the service. type: String - arguments: - description: Name of the firewall service. name: name required: true description: Gets a single service by name. name: sophos-firewall-services-get outputs: - contextPath: SophosFirewall.Services.Name description: Name of the firewall service. type: String - contextPath: SophosFirewall.Services.Type description: Type of the firewall service. type: String - contextPath: SophosFirewall.Services.ServiceDetails.ServiceDetail description: Details about the service. type: String - arguments: - description: Name of the firewall service. name: name required: true - auto: PREDEFINED description: 'Type of service. Possible values: "TCPorUDP", "IP", "ICMP", and "ICMPv6".' name: service_type predefined: - TCPorUDP - IP - ICMP - ICMPv6 required: true - auto: PREDEFINED description: 'The protocol for the service if service_type is TCPorUDP. Possible values: "TCP" and "UDP".' name: protocol predefined: - TCP - UDP - description: 'Source port if service_type is TCPorUDP.' name: source_port - description: 'Destination port if service_type is TCPorUDP.' name: destination_port - auto: PREDEFINED description: Protocol name if service_type is IP. name: protocol_name predefined: - HOPOPT - ICMP - IGMPGGP - IP - ST - TCP - CBT - EGP - IGP - BBN-RCC-MON - NVP-II - PUP - ARGUS - EMCON - XNET - CHAOS - UDP - MUX - DCN-MEAS - HMP - PRM - XNS-IDP - TRUNK-1 - TRUNK-2 - LEAF-1 - LEAF-2 - RDP - IRTP - ISO-TP4 - NETBLT - MFE-NSP - MERIT-INP - DCCP - 3PC - IDPRXTP - DDP - IDPR-CMTP - TP++ - IL - IPv6 - SDRP - IPv6-Route - IPv6-Frag - IDRP - RSVP - GRE - DSR - BNA - ESP - AH - I-NLSP - SWIPE - NARP - MOBILE - TLSP - SKIP - IPv6-ICMP - IPv6-NoNxt - IPv6-Opts - IPProto61 - CFTP - IPProto63 - SAT-EXPAK - KRYPTOLAN - RVD - IPPC - IPProto68 - SAT-MON - VISA - IPCV - CPNX - CPHB - WSN - PVP - BR-SAT-MON - SUN-ND - WB-MON - WB-EXPAK - ISO-IP - VMTP - SECURE-VMTP - VINES - TTP - NSFNET-IGP - DGP - TCF - EIGRP - OSPFIGP - Sprite-RPC - LARP - MTP - '25' - IPIP - MICP - SCC-SP - ETHERIP - ENCAP - IPProto99 - GMTP - IFMP - PNNI - PIM - ARIS - SCPS - QNX - A - N - IPComp - SNP - Compaq-Peer - IPX-in-IP - VRRP - PGM - IPProto114 - L2TP - DDX - IATP - STP - SRP - UTI - SMP - SM - PTP - ISIS - FIRE - CRTP - CRUDP - SSCOPMCE - IPLT - SPS - PIPE - SCTP - FC - RSVP-E2E-IGNORE - IPProto135 - UDPLite - MPLS-in-IP - manet - HIP - Shim6 - WESP - ROHC - IPProto143 - IPProto144 - IPProto145 - IPProto146 - IPProto147 - IPProto148 - IPProto149 - IPProto150 - IPProto151 - IPProto152 - IPProto153 - IPProto154 - IPProto155 - IPProto156 - IPProto157 - IPProto158 - IPProto159 - IPProto160 - IPProto161 - IPProto162 - IPProto163 - IPProto164 - IPProto165 - IPProto166 - IPProto167 - IPProto168 - IPProto169 - IPProto170 - IPProto171 - IPProto172 - IPProto173 - IPProto174 - IPProto175 - IPProto176 - IPProto177 - IPProto178 - IPProto179 - IPProto180 - IPProto181 - IPProto182 - IPProto183 - IPProto184 - IPProto185 - IPProto186 - IPProto187 - IPProto188 - IPProto189 - IPProto190 - IPProto191 - IPProto192 - IPProto193 - IPProto194 - IPProto195 - IPProto196 - IPProto197 - IPProto198 - IPProto199 - IPProto200 - IPProto201 - IPProto202 - IPProto203 - IPProto204 - IPProto205 - IPProto206 - IPProto207 - IPProto208 - IPProto209 - IPProto210 - IPProto211 - IPProto212 - IPProto213 - IPProto214 - IPProto215 - IPProto216 - IPProto217 - IPProto218 - IPProto219 - IPProto220 - IPProto221 - IPProto222 - IPProto223 - IPProto224 - IPProto225 - IPProto226 - IPProto227 - IPProto228 - IPProto229 - IPProto230 - IPProto231 - IPProto232 - IPProto233 - IPProto234 - IPProto235 - IPProto236 - IPProto237 - IPProto238 - IPProto239 - IPProto240 - IPProto241 - IPProto242 - IPProto243 - IPProto244 - IPProto245 - IPProto246 - IPProto247 - IPProto248 - IPProto249 - IPProto250 - IPProto251 - IPProto252 - IPProto253 - IPProto254 - IPProto255 - auto: PREDEFINED description: ICMP type if service_type is ICMP. name: icmp_type predefined: - Echo Reply - Destination Unreachable - Source Quench - Redirect - Alternate Host Address - Echo - Router Advertisement - Router Selection - Time Exceeded - Parameter Problem - Timestamp - Timestamp Reply - Information Request - Information Reply - Address Mask Request - Address Mask Reply - Traceroute - Datagram Conversion Error - Mobile Host Redirect - IPv6 Where-Are-You - IPv6 I-Am-Here - Mobile Registration Request - Mobile Registration Reply - Domain Name Request - Domain Name Reply - SKIP - Photuris - Any Type - auto: PREDEFINED description: ICMP code if service_type is ICMP. name: icmp_code predefined: - '0' - '-1' - '1' - '2' - '3' - '4' - '5' - '6' - '7' - '8' - '9' - '10' - '11' - '12' - '13' - '14' - '15' - auto: PREDEFINED description: ICMPv6 type if service_type is ICMPv6. name: icmp_v6_type predefined: - Destination Unreachable - Packet Too Big - Time Exceeded - Parameter Problem - Private experimentation - Private experimentation - Echo Request - Echo Reply - Multicast Listener Query - Multicast Listener Report - Multicast Listener Done - Router Solicitation - Router Advertisement - Neighbor Solicitation - Neighbor Advertisement - Redirect Message - Router Renumbering - ICMP Node Information Query - ICMP Node Information Response - Inverse Neighbor Discovery Solicitation Message - Inverse Neighbor Discovery Advertisement Message - Version 2 Multicast Listener Report - Home Agent Address Discovery Request Message - Home Agent Address Discovery Reply Message - Mobile Prefix Solicitation - Mobile Prefix Advertisement - Certification Path Solicitation Message - Certification Path Advertisement Message - ICMP messages utilized by experimental mobility protocols such as Seamoby - Multicast Router Advertisement - Multicast Router Solicitation - Multicast Router Termination - FMIPv6 Messages - RPL Control Message - ILNPv6 Locator Update Message - Duplicate Address Request - Duplicate Address Confirmation - Private experimentation - Private experimentation - Any Type - auto: PREDEFINED description: ICMPv6 code if service_type is ICMPv6. name: icmp_v6_code predefined: - '0' - '-1' - '1' - '2' - '3' - '4' - '5' - '6' - '7' - '8' - '9' - '10' - '11' - '12' - '13' - '14' - '15' description: Adds a new firewall service. name: sophos-firewall-services-add outputs: - contextPath: SophosFirewall.Services.Name description: Name of the firewall service. type: String - contextPath: SophosFirewall.Services.Type description: Type of the firewall service. type: String - contextPath: SophosFirewall.Services.ServiceDetails.ServiceDetail description: Details about the service. type: String - arguments: - description: Name of the firewall service. name: name required: true - auto: PREDEFINED description: 'Type of service. Possible values: "TCPorUDP", "IP", "ICMP", and "ICMPv6".' name: service_type predefined: - TCPorUDP - IP - ICMP - ICMPv6 - auto: PREDEFINED description: 'The protocol for the service if service_type is TCPorUDP. Possible values: "TCP" and "UDP".' name: protocol predefined: - TCP - UDP - description: 'Source port if service_type is TCPorUDP.' name: source_port - description: 'Destination port if service_type is TCPorUDP.' name: destination_port - auto: PREDEFINED description: Protocol name if service_type is IP. name: protocol_name predefined: - HOPOPT - ICMP - IGMPGGP - IP - ST - TCP - CBT - EGP - IGP - BBN-RCC-MON - NVP-II - PUP - ARGUS - EMCON - XNET - CHAOS - UDP - MUX - DCN-MEAS - HMP - PRM - XNS-IDP - TRUNK-1 - TRUNK-2 - LEAF-1 - LEAF-2 - RDP - IRTP - ISO-TP4 - NETBLT - MFE-NSP - MERIT-INP - DCCP - 3PC - IDPRXTP - DDP - IDPR-CMTP - TP++ - IL - IPv6 - SDRP - IPv6-Route - IPv6-Frag - IDRP - RSVP - GRE - DSR - BNA - ESP - AH - I-NLSP - SWIPE - NARP - MOBILE - TLSP - SKIP - IPv6-ICMP - IPv6-NoNxt - IPv6-Opts - IPProto61 - CFTP - IPProto63 - SAT-EXPAK - KRYPTOLAN - RVD - IPPC - IPProto68 - SAT-MON - VISA - IPCV - CPNX - CPHB - WSN - PVP - BR-SAT-MON - SUN-ND - WB-MON - WB-EXPAK - ISO-IP - VMTP - SECURE-VMTP - VINES - TTP - NSFNET-IGP - DGP - TCF - EIGRP - OSPFIGP - Sprite-RPC - LARP - MTP - '25' - IPIP - MICP - SCC-SP - ETHERIP - ENCAP - IPProto99 - GMTP - IFMP - PNNI - PIM - ARIS - SCPS - QNX - A - N - IPComp - SNP - Compaq-Peer - IPX-in-IP - VRRP - PGM - IPProto114 - L2TP - DDX - IATP - STP - SRP - UTI - SMP - SM - PTP - ISIS - FIRE - CRTP - CRUDP - SSCOPMCE - IPLT - SPS - PIPE - SCTP - FC - RSVP-E2E-IGNORE - IPProto135 - UDPLite - MPLS-in-IP - manet - HIP - Shim6 - WESP - ROHC - IPProto143 - IPProto144 - IPProto145 - IPProto146 - IPProto147 - IPProto148 - IPProto149 - IPProto150 - IPProto151 - IPProto152 - IPProto153 - IPProto154 - IPProto155 - IPProto156 - IPProto157 - IPProto158 - IPProto159 - IPProto160 - IPProto161 - IPProto162 - IPProto163 - IPProto164 - IPProto165 - IPProto166 - IPProto167 - IPProto168 - IPProto169 - IPProto170 - IPProto171 - IPProto172 - IPProto173 - IPProto174 - IPProto175 - IPProto176 - IPProto177 - IPProto178 - IPProto179 - IPProto180 - IPProto181 - IPProto182 - IPProto183 - IPProto184 - IPProto185 - IPProto186 - IPProto187 - IPProto188 - IPProto189 - IPProto190 - IPProto191 - IPProto192 - IPProto193 - IPProto194 - IPProto195 - IPProto196 - IPProto197 - IPProto198 - IPProto199 - IPProto200 - IPProto201 - IPProto202 - IPProto203 - IPProto204 - IPProto205 - IPProto206 - IPProto207 - IPProto208 - IPProto209 - IPProto210 - IPProto211 - IPProto212 - IPProto213 - IPProto214 - IPProto215 - IPProto216 - IPProto217 - IPProto218 - IPProto219 - IPProto220 - IPProto221 - IPProto222 - IPProto223 - IPProto224 - IPProto225 - IPProto226 - IPProto227 - IPProto228 - IPProto229 - IPProto230 - IPProto231 - IPProto232 - IPProto233 - IPProto234 - IPProto235 - IPProto236 - IPProto237 - IPProto238 - IPProto239 - IPProto240 - IPProto241 - IPProto242 - IPProto243 - IPProto244 - IPProto245 - IPProto246 - IPProto247 - IPProto248 - IPProto249 - IPProto250 - IPProto251 - IPProto252 - IPProto253 - IPProto254 - IPProto255 - auto: PREDEFINED description: ICMP type if service_type is ICMP. name: icmp_type predefined: - Echo Reply - Destination Unreachable - Source Quench - Redirect - Alternate Host Address - Echo - Router Advertisement - Router Selection - Time Exceeded - Parameter Problem - Timestamp - Timestamp Reply - Information Request - Information Reply - Address Mask Request - Address Mask Reply - Traceroute - Datagram Conversion Error - Mobile Host Redirect - IPv6 Where-Are-You - IPv6 I-Am-Here - Mobile Registration Request - Mobile Registration Reply - Domain Name Request - Domain Name Reply - SKIP - Photuris - Any Type - auto: PREDEFINED description: ICMP code if service_type is ICMP. name: icmp_code predefined: - '0' - '-1' - '1' - '2' - '3' - '4' - '5' - '6' - '7' - '8' - '9' - '10' - '11' - '12' - '13' - '14' - '15' - auto: PREDEFINED description: ICMPv6 type if service_type is ICMPv6. name: icmp_v6_type predefined: - Destination Unreachable - Packet Too Big - Time Exceeded - Parameter Problem - Private experimentation - Private experimentation - Echo Request - Echo Reply - Multicast Listener Query - Multicast Listener Report - Multicast Listener Done - Router Solicitation - Router Advertisement - Neighbor Solicitation - Neighbor Advertisement - Redirect Message - Router Renumbering - ICMP Node Information Query - ICMP Node Information Response - Inverse Neighbor Discovery Solicitation Message - Inverse Neighbor Discovery Advertisement Message - Version 2 Multicast Listener Report - Home Agent Address Discovery Request Message - Home Agent Address Discovery Reply Message - Mobile Prefix Solicitation - Mobile Prefix Advertisement - Certification Path Solicitation Message - Certification Path Advertisement Message - ICMP messages utilized by experimental mobility protocols such as Seamoby - Multicast Router Advertisement - Multicast Router Solicitation - Multicast Router Termination - FMIPv6 Messages - RPL Control Message - ILNPv6 Locator Update Message - Duplicate Address Request - Duplicate Address Confirmation - Private experimentation - Private experimentation - Any Type - auto: PREDEFINED description: ICMPv6 code if service_type is ICMPv6. name: icmp_v6_code predefined: - '0' - '-1' - '1' - '2' - '3' - '4' - '5' - '6' - '7' - '8' - '9' - '10' - '11' - '12' - '13' - '14' - '15' description: Updates an existing firewall service. name: sophos-firewall-services-update outputs: - contextPath: SophosFirewall.Services.Name description: Name of the firewall service. type: String - contextPath: SophosFirewall.Services.Type description: Type of the firewall service. type: String - contextPath: SophosFirewall.Services.ServiceDetails.ServiceDetail description: Details about the service. type: String - arguments: - description: Name of the service. name: name required: true description: Deletes an existing firewall service. name: sophos-firewall-services-delete outputs: - contextPath: SophosFirewall.Services.Name description: Name of the firewall service. type: String - contextPath: SophosFirewall.Services.IsDeleted description: Whether the firewall service is deleted. type: Bool - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all users. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-user-list outputs: - contextPath: SophosFirewall.User.Name description: Name of the user. type: String - contextPath: SophosFirewall.User.Username description: Username of the user. type: String - contextPath: SophosFirewall.User.Description description: Description of the user. type: String - contextPath: SophosFirewall.User.EmailList.EmailID description: Email of the user. type: String - contextPath: SophosFirewall.User.Group description: Group of the user. type: String - contextPath: SophosFirewall.User.UserType description: User type of the user. type: String - contextPath: SophosFirewall.User.Status description: Status of the user. type: String - arguments: - description: Name of the user. name: name required: true description: Gets a single user by name. name: sophos-firewall-user-get outputs: - contextPath: SophosFirewall.User.Name description: Name of the user. type: String - contextPath: SophosFirewall.User.Username description: Username of the user. type: String - contextPath: SophosFirewall.User.Description description: Description of the user. type: String - contextPath: SophosFirewall.User.EmailList.EmailID description: Email of the user. type: String - contextPath: SophosFirewall.User.Group description: Group of the user. type: String - contextPath: SophosFirewall.User.UserType description: User type of the user. type: String - contextPath: SophosFirewall.User.Status description: Status of the user. type: String - arguments: - description: Username of the user. name: username required: true - description: Name of the user. name: name required: true - description: Description of the user. name: description - description: Email of the user. name: email required: true - defaultValue: Guest Group description: Group of the user. Default is "Guest Group". name: group - description: The password of the user. name: password required: true secret: true - auto: PREDEFINED defaultValue: User description: 'The type of the user. Possible values: "Administrator" and "User". Default is "User".' name: user_type predefined: - Administrator - User - auto: PREDEFINED description: 'Profile of the administrator if user_type is Administrator. Possible values: "Administrator", "Crypto Admin", "Security Admin", "Audit Admin", and "HAProfile". IMPORTANT: You can add more types in the web console.' name: profile predefined: - Administrator - Crypto Admin - Security Admin - Audit Admin - HAProfile - defaultValue: Unlimited Internet Access description: The Surfing Quota policy. Default is "Unlimited Internet Access". name: surfing_quota_policy - defaultValue: Allowed all the time description: The Access Time policy. Default is "Allowed all the time". name: access_time_policy - defaultValue: No Policy Applied description: The SSL VPN policy. Default is "No Policy Applied". name: ssl_vpn_policy - defaultValue: No Policy Applied description: The clientless policy. Default is "No Policy Applied". name: clientless_policy - defaultValue: 100 MB Total Data Transfer policy description: 'The Data Transfer policy. Default is: "100 MB Total Data Transfer policy".' name: data_transfer_policy - auto: PREDEFINED defaultValue: Enable description: 'Whether to enable simultaneous logins global. Possible values: "Enable" and "Disable". Default is "Enable".' name: simultaneous_logins_global predefined: - Enable - Disable - defaultValue: All The Time description: 'The schedule for appliance access. Default is "All The Time". IMPORTANT: This option\ \ is available only for Administrators.' name: schedule_for_appliance_access - defaultValue: High Guarantee User description: The QoS policy. Default is "High Guarantee User". name: qos_policy - auto: PREDEFINED defaultValue: UserGroupNode description: 'The login restriction option. Possible values: "AnyNode" and "UserGroupNode". Default is "UserGroupNode".' name: login_restriction predefined: - AnyNode - UserGroupNode description: Adds a new user. name: sophos-firewall-user-add outputs: - contextPath: SophosFirewall.User.Name description: Name of the user. type: String - contextPath: SophosFirewall.User.Username description: Username of the user. type: String - contextPath: SophosFirewall.User.Description description: Description of the user. type: String - contextPath: SophosFirewall.User.EmailList.EmailID description: Email of the user. type: String - contextPath: SophosFirewall.User.Group description: Group of the user. type: String - contextPath: SophosFirewall.User.UserType description: User type of the user. type: String - contextPath: SophosFirewall.User.Status description: Status of the user. type: String - arguments: - description: Username of the user. name: username required: true - description: Name of the user. name: name required: true - description: Description of the user. name: description - description: Email of the user. name: email - defaultValue: Guest Group description: Group of the user. Default is "Guest Group". name: group - description: The password of the user. name: password secret: true - auto: PREDEFINED defaultValue: User description: 'The type of the user. Possible values: "Administrator" and "User". Default is "User".' name: user_type predefined: - Administrator - User - auto: PREDEFINED description: 'Profile of the administrator if user_type is Administrator. Possible values: "Administrator", "Crypto Admin", "Security Admin", "Audit Admin", and "HAProfile". IMPORTANT: You can add more types in the web console.' name: profile predefined: - Administrator - Crypto Admin - Security Admin - Audit Admin - HAProfile - defaultValue: Unlimited Internet Access description: The Surfing Quota policy. Default is "Unlimited Internet Access". name: surfing_quota_policy - defaultValue: Allowed all the time description: The Access Time policy. Default is "Allowed all the time". name: access_time_policy - defaultValue: No Policy Applied description: The SSL VPN policy. Default is "No Policy Applied". name: ssl_vpn_policy - defaultValue: No Policy Applied description: The clientless policy. Default is "No Policy Applied". name: clientless_policy - defaultValue: 100 MB Total Data Transfer policy description: 'The Data Transfer policy. Default is: "100 MB Total Data Transfer policy".' name: data_transfer_policy - auto: PREDEFINED defaultValue: Enable description: 'Whether to enable simultaneous logins global. Possible values: "Enable" and "Disable". Default is "Enable".' name: simultaneous_logins_global predefined: - Enable - Disable - defaultValue: All The Time description: 'The schedule for appliance access. Default is "All The Time".IMPORTANT: This option\ \ is available only for Administrators.' name: schedule_for_appliance_access - defaultValue: High Guarantee User description: The QoS policy. Default is "High Guarantee User". name: qos_policy - auto: PREDEFINED defaultValue: UserGroupNode description: 'The login restriction option. Possible values: "AnyNode" and "UserGroupNode". Default is "UserGroupNode".' name: login_restriction predefined: - AnyNode - UserGroupNode description: Updates a user. name: sophos-firewall-user-update outputs: - contextPath: SophosFirewall.User.Name description: Name of the user. type: String - contextPath: SophosFirewall.User.Username description: Username of the user. type: String - contextPath: SophosFirewall.User.Description description: Description of the user. type: String - contextPath: SophosFirewall.User.EmailList.EmailID description: Email of the user. type: String - contextPath: SophosFirewall.User.Group description: Group of the user. type: String - contextPath: SophosFirewall.User.UserType description: User type of the user. type: String - contextPath: SophosFirewall.User.Status description: Status of the user. type: String - arguments: - description: Name of the user. name: name required: true description: Deletes an existing user. name: sophos-firewall-user-delete outputs: - contextPath: SophosFirewall.User.Name description: Name of the user. type: String - contextPath: SophosFirewall.User.IsDeleted description: Whether the user is deleted. type: Bool - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all app policies. IMPORTANT: The list starst at 0 (not 1)!' name: sophos-firewall-app-policy-list outputs: - contextPath: SophosFirewall.ApplicationFilterPolicy.Name description: Name of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.Description description: Description of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.MicroAppSupport description: Whether the policy support microapps. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.DefaultAction description: Default action the policy executes. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.RuleList.Rule description: Details of the rule. type: String - arguments: - description: Name of the policy. name: name required: true description: Gets a single app policy by name. name: sophos-firewall-app-policy-get outputs: - contextPath: SophosFirewall.ApplicationFilterPolicy.Name description: Name of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.Description description: Description of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.MicroAppSupport description: Whether the policy supports microapps. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.DefaultAction description: Default action the policy executes. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.RuleList.Rule description: Details of the rule. type: String - arguments: - description: Name of the policy. name: name required: true - description: Description of the policy. name: description - auto: PREDEFINED description: 'Whether microapp support is enabled. Possible values: "true" and "false".' name: micro_app_support predefined: - 'true' - 'false' - auto: PREDEFINED description: 'Default action for the policy. Possible values: "Allow" and "Deny".' name: default_action predefined: - Allow - Deny - auto: PREDEFINED description: 'Whether to enable the select all rule. Possible values: "Enable" and "Disable".' name: select_all predefined: - Enable - Disable - description: Categories to add to the rule. isArray: true name: categories - description: Risks to add to the rule. isArray: true name: risks - description: Applications to add to the rule. isArray: true name: applications - description: Characteristics to add to the rule. isArray: true name: characteristics - description: Technologies to add to the rule. isArray: true name: technologies - description: Classifications to add to the rule. isArray: true name: classifications - auto: PREDEFINED description: 'Action for the rule. Possible values: "Allow" and "Deny".' name: action predefined: - Allow - Deny - auto: PREDEFINED description: 'The schedule for the rule. Possible values: "All the time", "Work hours (5 Day week)", "Work hours (6 Day week)", "All Time on Weekdays", "All Time on Weekends", "All Time on Sunday", "All Days 10:00 to 19:00". IMPORTANT: Creating a new schedule is available in the web console.' name: schedule predefined: - All the time - Work hours (5 Day week) - Work hours (6 Day week) - All Time on Weekdays - All Time on Weekends - All Time on Sunday - All Days 10:00 to 19:00 description: Adds a new app policy. name: sophos-firewall-app-policy-add outputs: - contextPath: SophosFirewall.ApplicationFilterPolicy.Name description: Name of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.Description description: Description of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.MicroAppSupport description: Whether the policy supports microapps. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.DefaultAction description: Default action the policy executes. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.RuleList.Rule description: Details of the rule. type: String - arguments: - description: Name of the policy. name: name required: true - description: Description of the policy. name: description - auto: PREDEFINED description: 'Whether microapp support is enabled. Possible values: "true" and "false".' name: micro_app_support predefined: - 'true' - 'false' - auto: PREDEFINED description: 'Default action for the policy. Possible values: "Allow" and "Deny".' name: default_action predefined: - Allow - Deny - auto: PREDEFINED description: 'Whether to enable the select all rule. Possible values: "Enable" and "Disable".' name: select_all predefined: - Enable - Disable - description: Categories to add to the rule. isArray: true name: categories - description: Risks to add to the rule. isArray: true name: risks - description: Applications to add to the rule. isArray: true name: applications - description: Characteristics to add to the rule. isArray: true name: characteristics - description: Technologies to add to the rule. isArray: true name: technologies - description: Classifications to add to the rule. isArray: true name: classifications - auto: PREDEFINED description: 'Action for the rule. Possible values: "Allow" and "Deny".' name: action predefined: - Allow - Deny - auto: PREDEFINED description: 'The schedule for the rule. Possible values: "All the time", "Work hours (5 Day week)", "Work hours (6 Day week)", "All Time on Weekdays", "All Time on Weekends", "All Time on Sunday", "All Days 10:00 to 19:00". IMPORTANT: Creating a new schedule is available in the web console.' name: schedule predefined: - All the time - Work hours (5 Day week) - Work hours (6 Day week) - All Time on Weekdays - All Time on Weekends - All Time on Sunday - All Days 10:00 to 19:00 description: Updates an existing app policy. name: sophos-firewall-app-policy-update outputs: - contextPath: SophosFirewall.ApplicationFilterPolicy.Name description: Name of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.Description description: Description of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.MicroAppSupport description: Whether the policy supports microapps. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.DefaultAction description: Default action the policy executes. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.RuleList.Rule description: Details of the rule. type: String - arguments: - description: Name of the policy. name: name required: true description: Deletes an existing app policy. name: sophos-firewall-app-policy-delete outputs: - contextPath: SophosFirewall.ApplicationFilterPolicy.Name description: Name of the firewall app policy. type: String - contextPath: SophosFirewall.ApplicationFilterPolicy.IsDeleted description: Whether the firewall app policy is deleted. type: Bool - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all app filter categories. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-app-category-list outputs: - contextPath: SophosFirewall.ApplicationFilterCategory.Name description: Name of the app category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.Description description: Description of the app category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.QoSPolicy description: QoS policy of the category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.BandwidthUsageType description: Bandwidth usage type of the category. type: String - arguments: - description: Name of the app category. name: name required: true description: Gets a single app filter category by name. name: sophos-firewall-app-category-get outputs: - contextPath: SophosFirewall.ApplicationFilterCategory.Name description: Name of the app category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.Description description: Description of the app category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.QoSPolicy description: QoS policy of the category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.BandwidthUsageType description: Bandwidth usage type of the category. type: String - arguments: - description: Name of the app category. name: name required: true - description: The description of the category. name: description - description: QoS policy of the category. name: qos_policy description: Updates an existing app filter category. name: sophos-firewall-app-category-update outputs: - contextPath: SophosFirewall.ApplicationFilterCategory.Name description: Name of the app category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.Description description: Description of the app category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.QoSPolicy description: QoS policy of the category. type: String - contextPath: SophosFirewall.ApplicationFilterCategory.BandwidthUsageType description: Bandwidth usage type of the category. type: String - arguments: - defaultValue: '0' description: 'The start index for the rules to list, e.g: 5. Default is "0".' name: start - defaultValue: '50' description: 'The end index for the rules to list, e.g: 20. Default is "50".' name: end description: 'Lists all web filter policies. IMPORTANT: The list starts at 0 (not 1)!' name: sophos-firewall-web-filter-list outputs: - contextPath: SophosFirewall.WebFilterPolicy.Name description: Name of the policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.DefaultAction description: Default action for the web filter policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.Description description: Description of the rule. type: String - contextPath: SophosFirewall.WebFilterPolicy.EnableReporting description: Whether the policy reports events. type: String - contextPath: SophosFirewall.WebFilterPolicy.DownloadFileSizeRestriction description: Maximum file size that can be downloaded. type: Number - contextPath: SophosFirewall.WebFilterPolicy.DownloadFileSizeRestrictionEnabled description: Whether the file size restriction is active. type: String - contextPath: SophosFirewall.WebFilterPolicy.RuleList.Rule description: Rule list information. type: String - arguments: - description: Name of the policy. name: name required: true description: Gets a single web filter policy by name. name: sophos-firewall-web-filter-get outputs: - contextPath: SophosFirewall.WebFilterPolicy.Name description: Name of the policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.DefaultAction description: Default action for the web filter policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.Description description: Description of the rule. type: String - contextPath: SophosFirewall.WebFilterPolicy.EnableReporting description: Whether the policy reports events. type: String - contextPath: SophosFirewall.WebFilterPolicy.DownloadFileSizeRestriction description: Maximum file size that can be downloaded. type: Number - contextPath: SophosFirewall.WebFilterPolicy.DownloadFileSizeRestrictionEnabled description: Whether the file size restriction is active. type: String - contextPath: SophosFirewall.WebFilterPolicy.RuleList.Rule description: Rule list information. type: String - arguments: - description: Name of the policy. name: name required: true - description: Description of the policy. name: description - auto: PREDEFINED description: 'Default action for the policy. Possible values: "Allow" and "Deny".' name: default_action predefined: - Allow - Deny required: true - auto: PREDEFINED description: 'Whether the max download file size is enabled. Possible values: "0" and "1".' name: download_file_size_restriction_enabled predefined: - '0' - '1' - description: Maximum file size to enable downloading in MB. name: download_file_size_restriction - auto: PREDEFINED description: 'Enable to specify domains allowed to access the Google service. Possible values: "0" and "1".' name: goog_app_domain_list_enabled predefined: - '0' - '1' - description: The domains allowed to access the Google service. name: goog_app_domain_list - auto: PREDEFINED description: 'Whether to enable YouTube Restricted Mode to restrict the content that is accessible. Possible values: "0" and "1".' name: youtube_filter_enabled predefined: - '0' - '1' - auto: PREDEFINED description: 'Whether to adjust the policy used for YouTube Restricted Mode. Possible values: "0" and "1".' name: youtube_filter_is_strict predefined: - '0' - '1' - auto: PREDEFINED description: 'Enable to block websites containing pornography and explicit sexual content from appearing in the search results of Google, Yahoo, and Bing search results. Possible values: "0" and "1".' name: enforce_safe_search predefined: - '0' - '1' - auto: PREDEFINED description: 'Whether to further limit inappropriate content by enforcing search engine filters for Creative Commons licensed images. Possible values: "0" and "1".' name: enforce_image_licensing predefined: - '0' - '1' - description: Comma-separted list of URL groups to block, allow, warn, or log. name: url_group_names - auto: PREDEFINED description: 'The HTTP action. Possible values: "Deny", "Allow", "Warn", and "Log".' name: http_action predefined: - Deny - Allow - Warn - Log - auto: PREDEFINED description: 'The HTTPs action. Possible values: "Deny", "Allow", "Warn", and "Log".' name: https_action predefined: - Deny - Allow - Warn - Log - auto: PREDEFINED description: 'The schedule for the rule. Possible values: "All the time", "Work hours (5 Day week)", "Work hours (6 Day week)", "All Time on Weekdays", "All Time on Weekends", "All Time on Sunday", "All Days 10:00 to 19:00". IMPORTANT: Creating a new schedule is available in the web console.' name: schedule predefined: - All the time - Work hours (5 Day week) - Work hours (6 Day week) - All Time on Weekdays - All Time on Weekends - All Time on Sunday - All Days 10:00 to 19:00 - auto: PREDEFINED description: 'Whether to enable the policy rule. Possible values: "1" and "0".' name: policy_rule_enabled predefined: - '1' - '0' - description: A comma-separated list of users who this rule will apply to. name: user_names - description: 'A comma-separated list of CCL names. This argument is required When ccl_rule_enabled is ON.' name: ccl_names - auto: PREDEFINED description: 'Whether to enable the CCL rule. Possible values: "0" and "1". If enabled, ccl_name is required.' name: ccl_rule_enabled predefined: - '1' - '0' - auto: PREDEFINED description: 'Whether to enable the HTTP action. Possible values: "0" and "1".' name: follow_http_action predefined: - '1' - '0' - auto: PREDEFINED defaultValue: Enable description: 'Whether to enable reporting of the policy. Possible values: "Enable" and "Disable". Default is "Enable".' name: enable_reporting predefined: - Enable - Disable description: Adds a new web filter policy. name: sophos-firewall-web-filter-add outputs: - contextPath: SophosFirewall.WebFilterPolicy.Name description: Name of the policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.DefaultAction description: Default action for the web filter policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.Description description: Description of the rule. type: String - contextPath: SophosFirewall.WebFilterPolicy.EnableReporting description: Whether the policy reports events. type: String - contextPath: SophosFirewall.WebFilterPolicy.DownloadFileSizeRestriction description: Maximum file size that can be downloaded. type: Number - contextPath: SophosFirewall.WebFilterPolicy.DownloadFileSizeRestrictionEnabled description: Whether the file size restriction is active. type: String - contextPath: SophosFirewall.WebFilterPolicy.RuleList.Rule description: Rule list information. type: String - arguments: - description: Name of the policy. name: name required: true - description: Description of the policy. name: description - auto: PREDEFINED description: 'Default action for the policy. Possible values: "Allow" and "Deny".' name: default_action predefined: - Allow - Deny required: true - auto: PREDEFINED description: 'Whether the maximum download file size is enabled. Possible values: "0" and "1".' name: download_file_size_restriction_enabled predefined: - '0' - '1' - description: The maximum file size to enable downloading in MB. name: download_file_size_restriction - auto: PREDEFINED description: 'Whether to enable specifying domains allowed to access the Google service. Possible values: "0" and "1".' name: goog_app_domain_list_enabled predefined: - '0' - '1' - description: Comma-separated list of domains allowed to access the Google service. name: goog_app_domain_list - auto: PREDEFINED description: 'Whether to enable YouTube Restricted Mode to restrict the content that is accessible. Possible values: "0" and "1".' name: youtube_filter_enabled predefined: - '0' - '1' - auto: PREDEFINED description: 'Whether to adjust the policy used for YouTube Restricted Mode. Possible values: "0" and "1".' name: youtube_filter_is_strict predefined: - '0' - '1' - auto: PREDEFINED description: 'Whether to enable blocking websites containing pornography and explicit sexual content from appearing in the search results of Google, Yahoo, and Bing search results. Possible values: "0" and "1".' name: enforce_safe_search predefined: - '0' - '1' - auto: PREDEFINED description: 'Whether to further limit inappropriate content by enforcing search engine filters for Creative Commons licensed images. Possible values: "0" and "1".' name: enforce_image_licensing predefined: - '0' - '1' - description: Comma-separated list of URL groups to block, allow, warn, or log. name: url_group_names - auto: PREDEFINED description: 'The HTTP action. Possible values: "Deny", "Allow", "Warn", and "Log".' name: http_action predefined: - Deny - Allow - Warn - Log - auto: PREDEFINED description: 'The HTTPs action. Possible values: "Deny", "Allow", "Warn", and "Log".' name: https_action predefined: - Deny - Allow - Warn - Log - auto: PREDEFINED description: 'The schedule for the rule. Possible values: "All the time", "Work hours (5 Day week)", "Work hours (6 Day week)", "All Time on Weekdays", "All Time on Weekends", "All Time on Sunday", "All Days 10:00 to 19:00". IMPORTANT: Creating a new schedule is available in the web console.' name: schedule predefined: - All the time - Work hours (5 Day week) - Work hours (6 Day week) - All Time on Weekdays - All Time on Weekends - All Time on Sunday - All Days 10:00 to 19:00 - auto: PREDEFINED description: 'Whether to enable the policy rule. Possible values: "1" and "0".' name: policy_rule_enabled predefined: - '1' - '0' - description: A comma-separated list of users who this rule will apply to. name: user_names - description: 'A comma-separated list of CCL names. REQUIRED: when ccl_rule_enabled is ON.' name: ccl_names - auto: PREDEFINED description: 'Whether to enable the CCL rule. Possible values: "0" and "1". IMPORTANT: If enabled, ccl_name is required.' name: ccl_rule_enabled predefined: - '1' - '0' - auto: PREDEFINED description: 'Whether to enable the HTTP action. Possible values: "0" and "1".' name: follow_http_action predefined: - '1' - '0' - auto: PREDEFINED defaultValue: Enable description: 'Whether to enable reporting of the policy. Possible values: "Enable" and "Disable". Default is "Enable".' name: enable_reporting predefined: - Enable - Disable description: Updates an existing web filter policy. name: sophos-firewall-web-filter-update outputs: - contextPath: SophosFirewall.WebFilterPolicy.Name description: Name of the policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.DefaultAction description: Default action for the web filter policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.Description description: Description of the rule. type: String - contextPath: SophosFirewall.WebFilterPolicy.EnableReporting description: Whether the policy reports events. type: String - contextPath: SophosFirewall.WebFilterPolicy.DownloadFileSizeRestriction description: Maximum file size that can be downloaded. type: Number - contextPath: SophosFirewall.WebFilterPolicy.DownloadFileSizeRestrictionEnabled description: Whether the file size restriction is active. type: String - contextPath: SophosFirewall.WebFilterPolicy.RuleList.Rule description: Rule list information. type: String - arguments: - description: Name of the policy. name: name required: true description: Deletes an existing web filter policy. name: sophos-firewall-web-filter-delete outputs: - contextPath: SophosFirewall.WebFilterPolicy.Name description: Name of the policy. type: String - contextPath: SophosFirewall.WebFilterPolicy.IsDeleted description: Whether the policy is deleted. type: Bool dockerimage: demisto/python3:3.12.13.10116658 runonce: false script: '-' subtype: python3 type: python tests: - No tests fromversion: 5.0.0