Description

The getIntrusionRule operation handles configuration related to IntrusionRule model. 
This API is only supported for Snort 3. This will allow the user to get an intrusion rule.

HTTP request

GET /api/fdm/v6/object/intrusionrules/{objId}

Path Parameters

Parameter Required Type Description
objId True string

Example

curl -X GET \
    --header "Accept: application/json" \
    --header "Authorization: Bearer ${ACCESS_TOKEN}" \
    "https://${HOST}:${PORT}/api/fdm/v6/object/intrusionrules/{objId}"
from bravado.requests_client import RequestsClient
from bravado.client import SwaggerClient


def get_client(host, token):
    http_client = RequestsClient()
    http_client.ssl_verify = False
    http_client.set_api_key(
        host,
        "Bearer {}".format(token),
        param_name="Authorization",
        param_in="header"
    )
    return SwaggerClient.from_url(
        "https://{}/apispec/ngfw.json".format(host),
        http_client=http_client,
        config={
            "validate_responses": False,
            "validate_swagger_spec": False
        }
    )


def get_intrusion_rule(client, obj_id):
    return client.IntrusionPolicy.getIntrusionRule(
        objId=obj_id
    ).response().result


if __name__ == "__main__":
    host = "ftd.example.com"
    token = "access_token"
    client = get_client(host, token)

    obj_id = "string"

    get_intrusion_rule(client, obj_id)