Configuring The Vshield Edge Firewall; Get The Firewall Rule Set For A Vshield Edge - VMware VSHIELD APP 1.0.0 UPDATE 1 - API Programming Manual

Get Timestamps of Last 10 DNAT Rule Configurations for a vShield Edge
Example 5-21. Get Last 10 DNAT Rule Set Snapshots
Request:
GET <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/dnat/snapshots
Get DNAT Configuration by Snapshot Timestamp
Example 5-22. Get DNAT Configuration by Snapshot Timestamp
Request:
GET <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/
Revert to an DNAT Configuration by Snapshot Timestamp
Example 5-23. Revert to an DNAT Configuration by Snapshot Timestamp
Request:
PUT <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/
Delete All DNAT Rules
Example 5-24. Delete All DNAT Rules on a vShield Edge
Request:
DELETE <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/dnat/rules
Example:
DELETE /api/1.0/network/network-244/dnat/rules HTTP/1.1
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host:localhost

Configuring the vShield Edge Firewall

The vShield Edge provides firewall protection for incoming and outgoing sessions. The default firewall policy
allows all traffic to pass. In addition to the default firewall policy, you can configure a set of rules to allow or
deny traffic sessions to and from specific sources and destinations. You manage the default firewall policy and
firewall rule set separately for each vShield Edge agent.
All firewall rules for a vShield Edge configured by using REST requests appear under the vShield Edge >
Firewall tab for the appropriate vShield Edge in the vShield Manager user interface and vSphere Client plug-in.
For the vShield Edge firewall schema, see

Get the Firewall Rule Set for a vShield Edge

Example 5-25. Get the Entire Firewall Rule Set on a vShield Edge
Request:
GET <vShield_Manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/firewall/rules
VMware, Inc.
dnat/snapshot/<snapshot-timestamp>
dnat/snapshot/<snapshot-timestamp>
"vShield Edge Firewall Schema"
Chapter 5 vShield Edge Management
on page 74.
33