NSX-T Data Center Global Manager REST API

Associated URIs:

API Description API Path

List all DNS security profiles


List all DNS security profiles 		GET /global-manager/api/v1/global-infra/dns-security-profiles

Delete DNS security profile


Delete DNS security profile 		DELETE /global-manager/api/v1/global-infra/dns-security-profiles/{profile-id}

Read the DNS Forwarder for the given tier-0 instance


Read the DNS Forwarder for the given tier-0 instance 		GET /global-manager/api/v1/global-infra/dns-security-profiles/{profile-id}

Create or update DNS security profile


Create or update DNS security profile 		PATCH /global-manager/api/v1/global-infra/dns-security-profiles/{profile-id}

Create or update DNS security profile


Create or update DNS security profile 		PUT /global-manager/api/v1/global-infra/dns-security-profiles/{profile-id}

List gateway policies


List all gateway policies for specified Domain. 		GET /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies

Delete GatewayPolicy


Delete GatewayPolicy 		DELETE /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}

Read gateway policy


Read gateway policy for a domain.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}

Update gateway policy


Update the gateway policy for a domain. This is a full replace.
All the rules are replaced.
Performance Note: If you want to edit several rules in a gateway policy
use this API. It will perform better than several individual rule APIs.
Just pass all the rules which you wish to edit as embedded rules to it.
PATCH /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}

Revise the positioning of gateway policy


This is used to set a precedence of a gateway policy w.r.t others.
POST /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}?action=revise

Update gateway policy


Update the gateway policy for a domain. This is a full replace.
All the rules are replaced.
Performance Note: If you want to edit several rules in a gateway policy,
use this API. It will perform better than several individual rule APIs.
Just pass all the rules which you wish to edit as embedded rules to it.
PUT /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}

List rules


List rules 		GET /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}/rules

Delete rule


Delete rule 		DELETE /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}/rules/{rule-id}

Read rule


Read rule 		GET /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}/rules/{rule-id}

Update gateway rule


Update the gateway rule.
Create new rule if a rule with the rule-id is not already present.
Performance Note: If you want to edit several rules in a gateway policy,
prefer below mentioned API for optimal performance.
Pass all the rules which you wish to edit as embedded rules to it.
Use this API - PATCH (or PUT)
/infra/domains/<domain-id>/gateway-policies/<gateway-policy-id>

Concurrency Note: Concurrent firewall rule creation is not supported under the same Gateway Policy.
PATCH /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}/rules/{rule-id}

Revise the positioning of gateway rule


This is used to re-order a gateway rule within a gateway policy.
POST /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}/rules/{rule-id}?action=revise

Update gateway rule


Update the gateway rule.
Create new rule if a rule with the rule-id is not already present.
Performance Note: If you want to edit several rules in a gateway policy,
prefer below mentioned API for optimal performance.
Pass all the rules which you wish to edit as embedded rules to it.
Use this API - PATCH (or PUT)
/infra/domains/<domain-id>/gateway-policies/<gateway-policy-id>

Concurrency Note: Concurrent firewall rule creation is not supported under the same Gateway Policy.
PUT /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}/rules/{rule-id}

Get gateway rule statistics


Get statistics of a gateway rule.
- no enforcement point path specified: Stats will be evaluated on each enforcement.
point.
- {enforcement_point_path}: Stats are evaluated only on the given enforcement point.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}/rules/{rule-id}/statistics

Get gateway policy statistics


Get statistics of a gateay policy.
- no enforcement point path specified: Stats will be evaluated on each enforcement.
point.
- {enforcement_point_path}: Stats are evaluated only on the given enforcement point.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/gateway-policies/{gateway-policy-id}/statistics

Get DNS security profile binding map


API will get DNS security profile binding map 		GET /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/dns-security-profile-binding-maps

Delete DNS security profile binding map


API will delete DNS security profile binding map 		DELETE /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/dns-security-profile-binding-maps/{dns-security-profile-binding-map-id}

Get DNS security profile binding map


API will get DNS security profile binding map 		GET /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/dns-security-profile-binding-maps/{dns-security-profile-binding-map-id}

Create or update DNS security profile binding map


API will create or update DNS security profile binding map 		PATCH /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/dns-security-profile-binding-maps/{dns-security-profile-binding-map-id}

Update DNS security profile binding map


API will update DNS security profile binding map 		PUT /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/dns-security-profile-binding-maps/{dns-security-profile-binding-map-id}

List Firewall Flood Protection Profile Binding Maps


API will list all Firewall Flood Protection Profile Binding Maps in current group id.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-flood-protection-profile-binding-maps

Delete Firewall Flood Protection Profile Binding


API will delete Firewall Flood Protection Profile Binding 		DELETE /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-flood-protection-profile-binding-maps/{firewall-flood-protection-profile-binding-map-id}

Get Firewall Flood Protection Profile Binding Map


API will get Firewall Flood Protection Profile Binding Map
GET /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-flood-protection-profile-binding-maps/{firewall-flood-protection-profile-binding-map-id}

Create or update Firewall Flood Protection Profile Binding Map


API will create or update Firewall Flood Protection profile binding map 		PATCH /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-flood-protection-profile-binding-maps/{firewall-flood-protection-profile-binding-map-id}

Update Firewall Flood Protection Profile Binding Map


API will update Firewall Flood Protection Profile Binding Map 		PUT /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-flood-protection-profile-binding-maps/{firewall-flood-protection-profile-binding-map-id}

List Firewall Session Timer Profile Binding Maps


API will list all Firewall Session Timer Profile Binding Maps in current group id.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-session-timer-profile-binding-maps

Delete Firewall Session Timer Profile Binding


API will delete Firewall Session Timer Profile Binding 		DELETE /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-session-timer-profile-binding-maps/{firewall-session-timer-profile-binding-map-id}

Get Firewall Session Timer Profile Binding Map


API will get Firewall Session Timer Profile Binding Map
GET /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-session-timer-profile-binding-maps/{firewall-session-timer-profile-binding-map-id}

Create or update Firewall Session Timer Profile Binding Map


API will create or update Firewall Session Timer profile binding map 		PATCH /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-session-timer-profile-binding-maps/{firewall-session-timer-profile-binding-map-id}

Update Firewall Session Timer Profile Binding Map


API will update Firewall Session Timer Profile Binding Map 		PUT /global-manager/api/v1/global-infra/domains/{domain-id}/groups/{group-id}/firewall-session-timer-profile-binding-maps/{firewall-session-timer-profile-binding-map-id}

List security policies


List all security policies for a domain.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies

Deletes a security policy from this domain


Deletes the security policy along with all the rules
DELETE /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}

Read security policy


Read security policy for a domain.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}

Patch security policy


Patch the security policy for a domain. If a security policy for the given
security-policy-id is not present, the object will get created and if it is
present it will be updated. This is a full replace.
Performance Note: If you want to edit several rules in a security policy
use this API. It will perform better than several individual rule APIs.
Just pass all the rules which you wish to edit as embedded rules to it.
PATCH /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}

Revise the positioning of security policies


This is used to set a precedence of a security policy w.r.t others.
POST /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}?action=revise

Create or Update security policy


Create or Update the security policy for a domain. This is a full replace.
All the rules are replaced.
Performance Note: If you want to edit several rules in a security policy,
use this API. It will perform better than several individual rule APIs.
Just pass all the rules which you wish to edit as embedded rules to it.
PUT /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}

List rules


List rules 		GET /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}/rules

Delete rule


Delete rule 		DELETE /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}/rules/{rule-id}

Read rule


Read rule 		GET /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}/rules/{rule-id}

Patch a rule


Patch the rule. If Rule corresponding to the the given rule-id is
not present, the object will get created and if it is present it will be
updated. This is a full replace.
Performance Note: If you want to edit several rules in a security policy,
prefer below mentioned API for optimal performance.
Pass all the rules which you wish to edit as embedded rules to it.
Use this API - PATCH (or PUT)
/infra/domains/<domain-id>/security-policies/<security-policy-id>
PATCH /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}/rules/{rule-id}

Revise the positioning of rule


This is used to re-order a rule within a security policy.
POST /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}/rules/{rule-id}?action=revise

Create or update a rule


Update the rule. Create new rule if a rule with the rule-id is not already
present.
Performance Note: If you wish to edit several rules in a security policy,
prefer below mentioned API for optimal performance.
Pass all the rules which you wish to edit as embedded rules to it.
Use this API - PATCH (or PUT)
/infra/domains/<domain-id>/security-policies/<security-policy-id>
PUT /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}/rules/{rule-id}

Get rule statistics


Get statistics of a rule.
- no enforcement point path specified: Stats will be evaluated on each enforcement
point.
- {enforcement_point_path}: Stats are evaluated only on the given enforcement point.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}/rules/{rule-id}/statistics

Get security policy statistics


Get statistics of a security policy.
- no enforcement point path specified: Stats will be evaluated on each enforcement
point.
- {enforcement_point_path}: Stats are evaluated only on the given enforcement point.
GET /global-manager/api/v1/global-infra/domains/{domain-id}/security-policies/{security-policy-id}/statistics

List Firewall Flood Protection Profile Binding Maps for all domains


API will list all Firewall Flood Protection Profile Binding Maps across all domains.
This API returns the binding maps order by the sequence number.
GET /global-manager/api/v1/global-infra/domains/firewall-flood-protection-profile-binding-maps

List Firewall Session Timer Profile Binding Maps for all domains


API will list all Firewall Session Timer Profile Binding Maps across all domains.
This API returns the binding maps order by the sequence number.
GET /global-manager/api/v1/global-infra/domains/firewall-session-timer-profile-binding-maps

List policy drafts


List policy drafts. 		GET /global-manager/api/v1/global-infra/drafts

Delete a manual draft


Delete a manual draft. 		DELETE /global-manager/api/v1/global-infra/drafts/{draft-id}

Read draft


Read a draft for a given draft identifier.
GET /global-manager/api/v1/global-infra/drafts/{draft-id}

Patch a manual draft


Create a new manual draft if the specified draft id does not correspond
to an existing draft. Update the manual draft otherwise.
Auto draft can not be updated.
PATCH /global-manager/api/v1/global-infra/drafts/{draft-id}

Publish a draft


Read a draft and publish it by applying changes onto current configuration.
If there are additional changes on top of draft configuration, pass it as a
request body, in form of Infra object. Otherwise, if there are no additional
changes, then pass empty Infra object as a request body.
POST /global-manager/api/v1/global-infra/drafts/{draft-id}?action=publish

Create or update a manual draft


Create a new manual draft if the specified draft id does not correspond
to an existing draft. Update the manual draft otherwise.
Auto draft can not be updated.
PUT /global-manager/api/v1/global-infra/drafts/{draft-id}

Get an aggregated configuration for the draft


Get an aggregated configuration that will get applied onto current
configuration during publish of this draft.
The response is a hierarchical payload containing the aggregated
configuration differences from the latest auto draft till the specified draft.
GET /global-manager/api/v1/global-infra/drafts/{draft-id}/aggregated

Get paginated aggregated configuration for the draft


Get a paginated aggregated configuration of a given draft. This aggregated
configuration is the differnece between the current published firewall
configuration and a firewall configuration stored in a given draft.
For an initial API call, if request_id is present in a response, then this is
a paginated aggregated configuration of a given draft, containing all the
security policies from the aggregated configuration.
Using this request_id, more granular aggregated configuration, at security
policy level, can be fetched from subsequent API calls.
Absence of request_id suggests that whole aggregated configuration has been
returned as a response to initial API call, as the size of aggregated
configuration is not big enough to need pagination.
GET /global-manager/api/v1/global-infra/drafts/{draft-id}/aggregated_with_pagination

Get a preview of a configuration after publish of a draft


Get a preview of a configuration which will be present after publish of
a specified draft. The response essentially is a hierarchical payload
containing the configuration, which will be in active after a specified
draft gets published onto current configuration.
GET /global-manager/api/v1/global-infra/drafts/{draft-id}/complete

Get PolicyFirewallSchedulers


Get all PolicyFirewallSchedulers
GET /global-manager/api/v1/global-infra/firewall-schedulers

Delete Policy Firewall Scheduler


Deletes the specified PolicyFirewallScheduler. If scheduler
is consumed in a security policy, it won't get deleted.
DELETE /global-manager/api/v1/global-infra/firewall-schedulers/{firewall-scheduler-id}

Get PolicyFirewallScheduler


Get a PolicyFirewallScheduler by id
GET /global-manager/api/v1/global-infra/firewall-schedulers/{firewall-scheduler-id}

Create or Update PolicyFirewallScheduler


Creates/Updates a PolicyFirewallScheduler, which can be set at security
policy. Note that at least one property out of "days", "start_date",
"time_interval", "end_date" is required if "recurring" field is true. Also
"start_time" and "end_time" should not be present. And if "recurring"
field is false then "start_date" and "end_date" is mandatory, "start_time"
and "end_time" is optional. Also the fields "days" and "time_interval"
should not be present.
PATCH /global-manager/api/v1/global-infra/firewall-schedulers/{firewall-scheduler-id}

Create or Update PolicyFirewallScheduler


Updates a PolicyFirewallScheduler, which can be set at security policy.
Note that at least one property out of "days", "start_date",
"time_interval", "end_date" is required if "recurring" field is true. Also
"start_time" and "end_time" should not be present. And if "recurring"
field is false then "start_date" and "end_date" is mandatory, "start_time"
and "end_time" is optional. Also the fields "days" and "time_interval"
should not be present.
PUT /global-manager/api/v1/global-infra/firewall-schedulers/{firewall-scheduler-id}

List Firewall Session Timer Profiles


API will list all Firewall Session Timer Profiles 		GET /global-manager/api/v1/global-infra/firewall-session-timer-profiles

Delete Firewall Session Timer Profile


API will delete Firewall Session Timer Profile 		DELETE /global-manager/api/v1/global-infra/firewall-session-timer-profiles/{firewall-session-timer-profile-id}

Get Firewall Session Timer Profile


API will get Firewall Session Timer Profile 		GET /global-manager/api/v1/global-infra/firewall-session-timer-profiles/{firewall-session-timer-profile-id}

Create or update Firewall Session Timer Profile


API will create/update Firewall Session Timer Profile 		PATCH /global-manager/api/v1/global-infra/firewall-session-timer-profiles/{firewall-session-timer-profile-id}

Update Firewall Session Timer Profile


API will update Firewall Session Timer Profile 		PUT /global-manager/api/v1/global-infra/firewall-session-timer-profiles/{firewall-session-timer-profile-id}

Get policies filtered based on the given criteria


Get the list of policies filtered based on the given criteria.
GET /global-manager/api/v1/global-infra/firewall/policies

Get rules filtered based on the given criteria


Get the list of rules of given parent path of policy/section, filtered
based on the given criteria.
Parent path is mandatory.
GET /global-manager/api/v1/global-infra/firewall/rules

List Flood Protection Profiles


API will list all Flood Protection Profiles 		GET /global-manager/api/v1/global-infra/flood-protection-profiles

Delete Flood Protection Profile


API will delete Flood Protection Profile 		DELETE /global-manager/api/v1/global-infra/flood-protection-profiles/{flood-protection-profile-id}

Get Flood Protection Profile


API will get Flood Protection Profile 		GET /global-manager/api/v1/global-infra/flood-protection-profiles/{flood-protection-profile-id}

Create or update Flood Protection Profile


API will create/update Flood Protection Profile 		PATCH /global-manager/api/v1/global-infra/flood-protection-profiles/{flood-protection-profile-id}

Update Firewall Flood Protection Profile


API will update Firewall Flood Protection Profile 		PUT /global-manager/api/v1/global-infra/flood-protection-profiles/{flood-protection-profile-id}

List Flood Protection Profiles


API will list all Flood Protection Profiles bindings. 		GET /global-manager/api/v1/global-infra/flood-protection-profiles/{flood-protection-profile-id}/bindings

Import K8s network policies to DFW Security Policies


This is used to import a set of K8s network policies into DFW security
policies
POST /global-manager/api/v1/global-infra/import-k8s-np-to-dfw

List Session Timer Profiles


API will list all Session Timer Profiles bindings. 		GET /global-manager/api/v1/global-infra/session-timer-profiles/{session-timer-profile-id}/bindings

List Firewall CPU Memory Thresholds Profile Binding Maps


API will list all Firewall CPU Memory Thresholds Profile Binding Maps.
GET /global-manager/api/v1/global-infra/settings/firewall/cpu-mem-thresholds-profile-binding-maps

Delete Firewall CPU Memory Thresholds Profile Binding


API will delete Firewall CPU Memory Thresholds Profile Binding. 		DELETE /global-manager/api/v1/global-infra/settings/firewall/cpu-mem-thresholds-profile-binding-maps/{cpu-mem-thresholds-profile-binding-map-id}

List all CPU and memory thresholds profiles


List all CPU and memory thresholds profiles. 		GET /global-manager/api/v1/global-infra/settings/firewall/cpu-mem-thresholds-profiles

Delete CPU and memory thresholds profile


Delete CPU and memory thresholds profile. 		DELETE /global-manager/api/v1/global-infra/settings/firewall/cpu-mem-thresholds-profiles/{profile-id}

Read the CPU and memory thresholds profile


Read the CPU and memory thresholds profile. 		GET /global-manager/api/v1/global-infra/settings/firewall/cpu-mem-thresholds-profiles/{profile-id}

Create or update CPU and memory thresholds profile


Create or update CPU and memory thresholds profile. 		PATCH /global-manager/api/v1/global-infra/settings/firewall/cpu-mem-thresholds-profiles/{profile-id}

Create or update CPU and memory thresholds profile


Create or update CPU and memory thresholds profile. 		PUT /global-manager/api/v1/global-infra/settings/firewall/cpu-mem-thresholds-profiles/{profile-id}

Get the information of export task


Get the information of the latest export task.
GET /global-manager/api/v1/global-infra/settings/firewall/export

Download exported file


Download the exported file generated from the last export task. The request
should have proper headers set to download the file. Please add the below
two headers, if it is not already present
Accept application/json, text/plain, */*
Accept-Encoding gzip, deflate, br
GET /global-manager/api/v1/global-infra/settings/firewall/export?action=download

Cancel a running export task


This operation cancels an export task. Task needs to be in running state.
POST /global-manager/api/v1/global-infra/settings/firewall/export?action=cancel

Invoke export task


Invoke export task. There can be only one export task run at any point of
time. Hence invocation of another export task will be discarded, when there
exist an already running export task.
Exported configuration will be in a CSV format. This CSV file will be zipped
into a ZIP file, that can be downloaded after the completion of export task.
POST /global-manager/api/v1/global-infra/settings/firewall/export

Get the list of gateway firewall dependent services


Get the list of gateway firewall dependent services
GET /global-manager/api/v1/global-infra/settings/firewall/gateway/dependent-services

Get the information of import task


Get the information of the latest import task.
GET /global-manager/api/v1/global-infra/settings/firewall/import

Invoke import task


Invoke import task. There can be only one import task run at any point of
time. Hence invocation of another import task will be discarded, when there
exist an already running import task.
POST /global-manager/api/v1/global-infra/settings/firewall/import

Cancel a running import task


This operation cancels an import task. Task needs to be in running state.
POST /global-manager/api/v1/global-infra/settings/firewall/import?action=cancel

Get dfw firewall configuration


Get the current dfw firewall configurations. 		GET /global-manager/api/v1/global-infra/settings/firewall/security

Update dfw firewall configuration


Update dfw firewall related configurations.
Turning off distributed services ("enable_firewall": false) will turn off Distributed Firewall, Identity Firewall,
Distributed Intrusion Detection and Prevention Service, Distributed Load Balancer.
PATCH /global-manager/api/v1/global-infra/settings/firewall/security

Update dfw firewall configuration


Update dfw firewall related configurations.
Turning off distributed services ("enable_firewall": false) will turn off Distributed Firewall, Identity Firewall,
Distributed Intrusion Detection and Prevention Service, Distributed Load Balancer.
PUT /global-manager/api/v1/global-infra/settings/firewall/security

Get the list of distributed firewall dependent services


Get the list of distributed firewall dependent services
GET /global-manager/api/v1/global-infra/settings/firewall/security/dependent-services

Read security policy exclude list


Read exclude list for firewall
GET /global-manager/api/v1/global-infra/settings/firewall/security/exclude-list

Read security policy exclude list including system and user excluded members


Read security policy exclude list including system and user excluded members.
GET /global-manager/api/v1/global-infra/settings/firewall/security/exclude-list?system_owned=true

Patch exclusion list for security policy


Patch exclusion list for security policy.
PATCH /global-manager/api/v1/global-infra/settings/firewall/security/exclude-list

Filter the firewall exclude list


Filter the firewall exclude list by the given object, to check whether
the object is a member of this exclude list.
POST /global-manager/api/v1/global-infra/settings/firewall/security/exclude-list?action=filter

Create or update exclusion list for security policy


Update the exclusion list for security policy
PUT /global-manager/api/v1/global-infra/settings/firewall/security/exclude-list

Reset firewall rule statistics


Sets firewall rule statistics counter to zero. This operation is supported
for given category, for example: DFW i.e. for all layer3 firewall
(transport nodes only) rules or EDGE i.e. for all layer3 edge firewall
(edge nodes only) rules.
- no enforcement point path specified:
On global manager, it is mandatory to give an enforcement point path.
On local manager, reset of stats will be executed for each enforcement point.
- {enforcement_point_path}: Reset of stats will be executed only for the given enforcement point.
POST /global-manager/api/v1/global-infra/settings/firewall/stats?action=reset

Get list of gateway policies with rules that belong to the specific Tier-0 logical router.


Get filtered view of gateway rules associated
with the Tier-0. The gateay policies are returned in the
order of category and precedence.
GET /global-manager/api/v1/global-infra/tier-0s/{tier-0-id}/gateway-firewall

Get list of gateway policies with rules that belong to the specific Tier-0 LocalServices.


Get filtered view of Gateway Firewall rules associated
with the Tier-0 Locale Services. The gateway policies are
returned in the order of category and sequence number.
GET /global-manager/api/v1/global-infra/tier-0s/{tier-0-id}/locale-services/{locale-services-id}/gateway-firewall

Delete Flood Protection Profile Binding for Tier-0 Logical Router


API will delete Flood Protection Profile Binding for Tier-0 Logical Router. 		DELETE /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Get Flood Protection Profile Binding Map for Tier-0 Logical Router


API will get Flood Protection Profile Binding Map for Tier-0 Logical Router.
GET /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Create or update Flood Protection Profile Binding Map for Tier-0 Logical Router


API will create or update Flood Protection profile binding map for Tier-0 Logical Router. 		PATCH /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Create or update Flood Protection Profile Binding Map for Tier-0 Logical Router


API will create or update Flood Protection profile binding map for Tier-0 Logical Router. 		PUT /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Delete Flood Protection Profile Binding for Tier-0 Logical Router LocaleServices


API will delete Flood Protection Profile Binding for Tier-0 Logical Router LocaleServices. 		DELETE /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/locale-services/{locale-services-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Get Flood Protection Profile Binding Map for Tier-0 Logical Router LocaleServices


API will get Flood Protection Profile Binding Map for Tier-0 Logical Router LocaleServices.
GET /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/locale-services/{locale-services-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Create or update Flood Protection Profile Binding Map for Tier-0 Logical Router LocaleServices


API will create or update Flood Protection profile binding map for Tier-0 Logical Router LocaleServices. 		PATCH /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/locale-services/{locale-services-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Create or update Flood Protection Profile Binding Map for Tier-0 Logical Router LocaleServices


API will create or update Flood Protection profile binding map for Tier-0 Logical Router LocaleServices. 		PUT /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/locale-services/{locale-services-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Delete Session Timer Profile Binding for Tier-0 Logical Router LocaleServices


API will delete Session Timer Profile Binding for Tier-0 Logical Router LocaleServices. 		DELETE /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/locale-services/{locale-services-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Get Session Timer Profile Binding Map for Tier-0 Logical Router LocaleServices


API will get Session Timer Profile Binding Map for Tier-0 Logical Router LocaleServices.
GET /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/locale-services/{locale-services-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Create or update Session Timer Profile Binding Map for Tier-0 Logical Router LocaleServices


API will create or update Session Timer profile binding map for Tier-0 Logical Router LocaleServices. 		PATCH /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/locale-services/{locale-services-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Create or update Session Timer Profile Binding Map for Tier-0 Logical Router LocaleServices


API will create or update Session Timer profile binding map for Tier-0 Logical Router LocaleServices. 		PUT /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/locale-services/{locale-services-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Delete Session Timer Profile Binding for Tier-0 Logical Router


API will delete Session Timer Profile Binding for Tier-0 Logical Router. 		DELETE /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Get Session Timer Profile Binding Map for Tier-0 Logical Router


API will get Session Timer Profile Binding Map for Tier-0 Logical Router.
GET /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Create or update Session Timer Profile Binding Map for Tier-0 Logical Router


API will create or update Session Timer profile binding map for Tier-0 Logical Router. 		PATCH /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Create or update Session Timer Profile Binding Map for Tier-0 Logical Router


API will create or update Session Timer profile binding map for Tier-0 Logical Router. 		PUT /global-manager/api/v1/global-infra/tier-0s/{tier0-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Get list of gateway policies with rules that belong to the specific Tier-1.


Get filtered view of Gateway Firewall rules associated with the Tier-1.
The gateway policies are returned in the order of category and sequence number.
GET /global-manager/api/v1/global-infra/tier-1s/{tier-1-id}/gateway-firewall

Get list of gateway policies with rules that belong to the specific Tier-1 LocalServices.


Get filtered view of Gateway Firewall rules associated
with the Tier-1 Locale Services. The gateway policies are
returned in the order of category and sequence number.
GET /global-manager/api/v1/global-infra/tier-1s/{tier-1-id}/locale-services/{locale-services-id}/gateway-firewall

Delete Flood Protection Profile Binding for Tier-1 Logical Router


API will delete Flood Protection Profile Binding for Tier-1 Logical Router. 		DELETE /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Get Flood Protection Profile Binding Map for Tier-1 Logical Router


API will get Flood Protection Profile Binding Map for Tier-1 Logical Router.
GET /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Create or update Flood Protection Profile Binding Map for Tier-1 Logical Router


API will create or update Flood Protection profile binding map for Tier-1 Logical Router. 		PATCH /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Create or update Flood Protection Profile Binding Map for Tier-1 Logical Router


API will create or update Flood Protection profile binding map for Tier-1 Logical Router. 		PUT /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Delete Flood Protection Profile Binding for Tier-1 Logical Router LocaleServices


API will delete Flood Protection Profile Binding for Tier-1 Logical Router LocaleServices. 		DELETE /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/locale-services/{locale-services-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Get Flood Protection Profile Binding Map for Tier-1 Logical Router LocaleServices


API will get Flood Protection Profile Binding Map for Tier-1 Logical Router LocaleServices.
GET /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/locale-services/{locale-services-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Create or update Flood Protection Profile Binding Map for Tier-1 Logical Router LocaleServices


API will create or update Flood Protection profile binding map for Tier-1 Logical Router LocaleServices. 		PATCH /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/locale-services/{locale-services-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Create or update Flood Protection Profile Binding Map for Tier-1 Logical Router LocaleServices


API will create or update Flood Protection profile binding map for Tier-1 Logical Router LocaleServices. 		PUT /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/locale-services/{locale-services-id}/flood-protection-profile-bindings/{flood-protection-profile-binding-id}

Delete Session Timer Profile Binding for Tier-1 Logical Router LocaleServices


API will delete Session Timer Profile Binding for Tier-1 Logical Router LocaleServices. 		DELETE /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/locale-services/{locale-services-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Get Session Timer Profile Binding Map for Tier-1 Logical Router LocaleServices


API will get Session Timer Profile Binding Map for Tier-1 Logical Router LocaleServices.
GET /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/locale-services/{locale-services-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Create or update Session Timer Profile Binding Map for Tier-1 Logical Router LocaleServices


API will create or update Session Timer profile binding map for Tier-1 Logical Router LocaleServices. 		PATCH /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/locale-services/{locale-services-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Create or update Session Timer Profile Binding Map for Tier-1 Logical Router LocaleServices


API will create or update Session Timer profile binding map for Tier-1 Logical Router LocaleServices. 		PUT /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/locale-services/{locale-services-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Delete Session Timer Profile Binding for Tier-1 Logical Router


API will delete Session Timer Profile Binding for Tier-1 Logical Router. 		DELETE /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Get Session Timer Profile Binding Map for Tier-1 Logical Router


API will get Session Timer Profile Binding Map for Tier-1 Logical Router.
GET /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Create or update Session Timer Profile Binding Map for Tier-1 Logical Router


API will create or update Session Timer profile binding map for Tier-1 Logical Router. 		PATCH /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}

Create or update Session Timer Profile Binding Map for Tier-1 Logical Router


API will create or update Session Timer profile binding map for Tier-1 Logical Router. 		PUT /global-manager/api/v1/global-infra/tier-1s/{tier1-id}/session-timer-profile-bindings/{session-timer-profile-binding-id}
Additional Links