VMware VSHIELD APP 1.0.0 UPDATE 1 - API Programming Manual page 55

View a List of Timestamps Identifying App Firewall Rule Set Changes
You can view a list of timestamps marking firewall rule set changes for a specific container. To view the rule
set according to a specific timestamp, see
Example 6-6. View a List of Firewall Rule Sets by Timestamps
Request:
GET <vshield_manager-uri>/api/1.0/zones/<container-moref-id>/firewall/snapshots
Example:
GET /api/1.0/zones/datacenter-4361/firewall/snapshots HTTP/1.1
Host: localhost
Authorization: Basic YWRtaW46ZGVmYXVsdA==
View a Previous Firewall Rule Set by Timestamp
You can view a historical rule set by its timestamp. To view the list of timestamps, see
Timestamps Identifying App Firewall Rule Set Changes"
Example 6-7. View a Firewall Rule Set by Timestamp
Request:
GET <vshield_manager-uri>/api/1.0/zones/<container-moref-id>/firewall/
Example:
GET /api/1.0/zones/datacenter-4361/firewall/snapshot/1274872770000 HTTP/1.1
Host: localhost
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Revert to a Previous Firewall Rule Set
You can revert to a previous firewall rule set by specifying the appropriate container and timestamp.
Example 6-8. Revert to a Previous Firewall Rule Set
Request:
PUT <vshield_manager-uri>/api/1.0/zones/<container-moref-id>/firewall/snapshot/<timestamp>
Example:
PUT /api/1.0/zones/datacenter-4361/firewall/snapshot/1274872770000 HTTP/1.1
Host: localhost
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Delete All Firewall Rules under a Container
You can delete the entire rule set for a datacenter, cluster, or port group container. When you delete the firewall
rule set at the datacenter or cluster level, the system reverts to the default rules for that container and all child
containers. If you delete rules at the cluster or port group level, any rules set at the datacenter remain enforced.
Example 6-9. Delete a Firewall Rule Set for a Container
Request:
DELETE <vshield_manager-uri>/api/1.0/zones/<container-moref-id>/firewall/rules
VMware, Inc.
"View a Previous Firewall Rule Set by Timestamp"
snapshot/<snapshot-timestamp>
Chapter 6 vShield App Management
on page 55.
on page 55.
"View a List of
55