Skip to content

Commit

Permalink
deploy: cf40717
Browse files Browse the repository at this point in the history
  • Loading branch information
@mamullen13316
mamullen13316 committed Nov 29, 2023
0 parents commit 2cb834b
Show file tree
Hide file tree
Showing 60 changed files with 8,828 additions and 0 deletions.
4 changes: 4 additions & 0 deletions .buildinfo
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
# Sphinx build info version 1
# This file hashes the configuration used when building these files. When it is not found, a full rebuild will be done.
config: f999d51fde225168fc2d644aa36315ba
tags: 645f666f9bcd5a90fca523b33c5a78b7
Binary file added .doctrees/environment.pickle
Binary file not shown.
Binary file added .doctrees/examples.doctree
Binary file not shown.
Binary file added .doctrees/firewallapi.doctree
Binary file not shown.
Binary file added .doctrees/index.doctree
Binary file not shown.
Binary file added .doctrees/modules.doctree
Binary file not shown.
Binary file added .doctrees/usage.doctree
Binary file not shown.
Empty file added .nojekyll
Empty file.
1,167 changes: 1,167 additions & 0 deletions _modules/firewallapi.html

Large diffs are not rendered by default.

105 changes: 105 additions & 0 deletions _modules/index.html
Original file line number Diff line number Diff line change
@@ -0,0 +1,105 @@
<!DOCTYPE html>
<html class="writer-html5" lang="en" data-content_root="../">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>Overview: module code &mdash; sophosfirewall-python 0.0.1 documentation</title>
<link rel="stylesheet" type="text/css" href="../_static/pygments.css?v=fa44fd50" />
<link rel="stylesheet" type="text/css" href="../_static/css/theme.css?v=19f00094" />


<!--[if lt IE 9]>
<script src="../_static/js/html5shiv.min.js"></script>
<![endif]-->

<script src="../_static/jquery.js?v=5d32c60e"></script>
<script src="../_static/_sphinx_javascript_frameworks_compat.js?v=2cd50e6c"></script>
<script src="../_static/documentation_options.js?v=d45e8c67"></script>
<script src="../_static/doctools.js?v=888ff710"></script>
<script src="../_static/sphinx_highlight.js?v=dc90522c"></script>
<script src="../_static/js/theme.js"></script>
<link rel="index" title="Index" href="../genindex.html" />
<link rel="search" title="Search" href="../search.html" />
</head>

<body class="wy-body-for-nav">
<div class="wy-grid-for-nav">
<nav data-toggle="wy-nav-shift" class="wy-nav-side">
<div class="wy-side-scroll">
<div class="wy-side-nav-search" >



<a href="../index.html" class="icon icon-home">
sophosfirewall-python
</a>
<div role="search">
<form id="rtd-search-form" class="wy-form" action="../search.html" method="get">
<input type="text" name="q" placeholder="Search docs" aria-label="Search docs" />
<input type="hidden" name="check_keywords" value="yes" />
<input type="hidden" name="area" value="default" />
</form>
</div>
</div><div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
<p class="caption" role="heading"><span class="caption-text">Contents:</span></p>
<ul>
<li class="toctree-l1"><a class="reference internal" href="../usage.html">Usage</a></li>
<li class="toctree-l1"><a class="reference internal" href="../examples.html">Examples</a></li>
<li class="toctree-l1"><a class="reference internal" href="../modules.html">sophosfirewall_python</a></li>
</ul>

</div>
</div>
</nav>

<section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"><nav class="wy-nav-top" aria-label="Mobile navigation menu" >
<i data-toggle="wy-nav-top" class="fa fa-bars"></i>
<a href="../index.html">sophosfirewall-python</a>
</nav>

<div class="wy-nav-content">
<div class="rst-content">
<div role="navigation" aria-label="Page navigation">
<ul class="wy-breadcrumbs">
<li><a href="../index.html" class="icon icon-home" aria-label="Home"></a></li>
<li class="breadcrumb-item active">Overview: module code</li>
<li class="wy-breadcrumbs-aside">
</li>
</ul>
<hr/>
</div>
<div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
<div itemprop="articleBody">

<h1>All modules for which code is available</h1>
<ul><li><a href="firewallapi.html">firewallapi</a></li>
</ul>

</div>
</div>
<footer>

<hr/>

<div role="contentinfo">
<p>&#169; Copyright 2023, Sophos Ltd. All Rights Reserved..</p>
</div>

Built with <a href="https://www.sphinx-doc.org/">Sphinx</a> using a
<a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a>
provided by <a href="https://readthedocs.org">Read the Docs</a>.


</footer>
</div>
</div>
</section>
</div>
<script>
jQuery(function () {
SphinxRtdTheme.Navigation.enable(true);
});
</script>

</body>
</html>
274 changes: 274 additions & 0 deletions _sources/examples.rst.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,274 @@
Examples
========

Get Functions
-------------
Request and return data from the API formatted as a Python dict object.

.. note::
Get methods will return all of the objects configured on the firewall if no filtering parameters are specified.

Get all IP Hosts
^^^^^^^^^^^^^^^^

.. code-block:: python
fw.get_ip_host()
Get IP Host by Name
^^^^^^^^^^^^^^^^^^^

.. code-block:: python
fw.get_ip_host(name="example_host")
{'Response': {'@APIVersion': '1905.1',
'@IPS_CAT_VER': '1',
'Login': {'status': 'Authentication Successful'},
'IPHost': {'@transactionid': '',
'Name': 'example_host',
'IPFamily': 'IPv4',
'HostType': 'IP',
'IPAddress': '10.0.0.1'}}}
Get IP Host by IP Address
^^^^^^^^^^^^^^^^^^^^^^^^^

.. code-block:: python
fw.get_ip_host(ip_address="10.0.0.1")
{'Response': {'@APIVersion': '1905.1',
'@IPS_CAT_VER': '1',
'Login': {'status': 'Authentication Successful'},
'IPHost': {'@transactionid': '',
'Name': 'example_host',
'IPFamily': 'IPv4',
'HostType': 'IP',
'IPAddress': '10.0.0.1'}}}
Generic Get Functions
^^^^^^^^^^^^^^^^^^^^^
Although this module contains several convenience methods for commonly used operations, it does not include every possible firewall configuration.
However, the information can be retrieved by looking up the associated XML tag in the `API documentation <https://docs.sophos.com/nsg/sophos-firewall/18.5/API/index.html>`_
and using the XML tag with the **get_tag()** and **get_tag_with_filter()** methods.

The **get_tag()** method returns all objects for the provided XML tag. It is not necessary to include the angle brackets around the tag.

To get all interfaces using the XML tag `<Interface>`:

.. code-block:: python
fw.get_tag("Interface")
To get a specific interface, the **get_tag_with_filter()** method can be used which allows for specification of query parameters.

.. code-block:: python
fw.get_tag_with_filter("Interface", key="Name", operator="=", value="Port1")
{
"Response": {
"@APIVersion": "1905.1",
"@IPS_CAT_VER": "1",
"Login": {
"status": "Authentication Successful"
},
"Interface": {
"@transactionid": "",
"IPv4Configuration": "Enable",
"IPv6Configuration": "Disable",
"Hardware": "Port1",
"Name": "Port1",
"NetworkZone": "LAN",
"IPv4Assignment": "Static",
"IPv6Assignment": null,
"DHCPRapidCommit": "Disable",
"InterfaceSpeed": "Auto Negotiate",
"AutoNegotiation": "Enable",
"FEC": "Off",
"BreakoutMembers": "0",
"BreakoutSource": null,
"MTU": "1500",
"MSS": {
"OverrideMSS": "Disable",
"MSSValue": "1460"
},
"Status": "Connected, 1000 Mbps - Full Duplex, FEC off",
"MACAddress": "Default",
"IPAddress": "10.104.10.155",
"Netmask": "255.255.255.0"
}
}
}
.. note::
Valid operators for the `operator` parameter are "=", "!=", or "like".


Create Functions
----------------
Submit an XML payload to create objects on the firewall.

Create IP Host
^^^^^^^^^^^^^^

.. code-block:: python
response = fw.create_ip_host(name="test-host", ip_address="10.0.0.1")
{
"Response": {
"@APIVersion": "1905.1",
"@IPS_CAT_VER": "1",
"Login": {
"status": "Authentication Successful"
},
"IPHost": {
"@transactionid": "",
"Status": {
"@code": "200",
"#text": "Configuration applied successfully."
}
}
}
}
.. note::
The module parses the status code in the response. If the status code in the response payload is not in the 2XX range, a `SophosFirewallAPIError` will be raised indicating the failure reason.
Below is an example error response if attempting to create an IP Host that already exists:

sophosfirewall_python.firewallapi.SophosFirewallAPIError: {'@transactionid': '', 'Status': {'@code': '502', '#text': 'Operation failed. Entity having same name already exists.'}}

Create Firewall Rule
^^^^^^^^^^^^^^^^^^^^
When creating a firewall rule, first create a Python dict object storing the rule parameters. Then pass the parameters to the **create_rule** method.

.. code-block:: python
rule_params = rule_params = dict(
rulename="Test from Python",
after_rulename="Security Data Platform – FluentD",
description="Test change automation",
action="Accept",
log="Enable",
src_zones=["LAN"],
dst_zones=["WAN"],
src_networks=["ABN 10.151.210.0"],
dst_networks=["Internet IPv4 group"],
service_list=["162 SNMP Trap"]
)
response = fw.create_rule(rule_params=rule_params)
{
"Response": {
"@APIVersion": "1905.1",
"@IPS_CAT_VER": "1",
"Login": {
"status": "Authentication Successful"
},
"FirewallRule": {
"@transactionid": "",
"Status": {
"@code": "200",
"#text": "Configuration applied successfully."
}
}
}
}
.. note::
Not every possible rule parameter that is configurable in the firewall UI is available to be configured with the **create_rule()** method.
If additional parameters are needed, a template for the XML payload would need to be built to accept the additional parameters and
can be submitted using the **submit_template()** method as described in the next section.

Create Using Template
^^^^^^^^^^^^^^^^^^^^^
As not every object that can be configured on the firewall has a convenience method available in this module, the **submit_template()** method can be used
to post a Jinja2 template containing the required XML payload. The XML payload can be determined by looking at the `API documentation <https://docs.sophos.com/nsg/sophos-firewall/18.5/API/index.html>`_.
Place the XML payload into a separate file, and then replace any values in the XML file with variables that will be passed in by your program.
Variables should be surrounded by double brackets. For example: {{ my_var }}

Below is an example XML payload to create a URL Group on the firewall.

.. code-block:: XML
<Request>
<Login>
<Username>username</Username>
<Password >password</Password>
</Login>
<Set operation="add">
<WebFilterURLGroup>
<Name>Name</Name>
<URLlist>
<URL>URLs</URL>
<URL>URLs</URL>
</URLlist>
<Description>Text</Description>
<IsDefault>Yes/No</IsDefault>
</WebFilterURLGroup>
</Set>
</Request>
Here is the XML payload using Jinja2 variable substitution. There is also a for loop which allows for multiple URLs to be configured
at the same time if desired.

.. code-block:: XML
<Request>
<Login>
<Username>{{username}}</Username>
<Password >{{password}}</Password>
</Login>
<Set operation="add">
<WebFilterURLGroup>
<Name>{{ name }} </Name>
<URLlist>
{% for url in url_list %}
<URL>{{ url }}</URL>
{% endfor %}
</URLlist>
<Description>{{ description }}</Description>
<IsDefault>{{ isdefault }}</IsDefault>
</WebFilterURLGroup>
</Set>
</Request>
Next, create a Python dict to store the variables to be injected into the template, and use the **submit_template** method to
send the payload to the firewall.

.. code-block:: python
template_vars = dict(
name="Test URL group",
url_list=["testdomain1.com", "testdomain2.com"],
description="Test URL group created by Python",
isdefault="No"
)
response = fw.submit_template(filename="urlgroup_example.j2", template_vars=template_vars, template_dir=".")
{
"Response": {
"@APIVersion": "1905.1",
"@IPS_CAT_VER": "1",
"Login": {
"status": "Authentication Successful"
},
"WebFilterURLGroup": {
"@transactionid": "",
"Status": {
"@code": "200",
"#text": "Configuration applied successfully."
}
}
}
}
.. note::
Create methods have an optional **debug** argument that can be used to print out the XML payload for troubleshooting purposes.
Ex. fw.create_ip_host(name="test-host", ip_address="10.0.0.1", debug=True)

7 changes: 7 additions & 0 deletions _sources/firewallapi.rst.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
firewallapi module
==================

.. automodule:: firewallapi
:members:
:undoc-members:
:show-inheritance:
Loading

0 comments on commit 2cb834b

Please sign in to comment.