Get Infra Assets Security Info Batch

Get Infra Assets Security Info Batch
Batch retrieve infrastructure asset groups and their associated NSX firewall and IDS rules across multiple categories

Returns a paginated list of infrastructure asset groups (segmentation objects) and their associated DFW firewall rules and IDS rules, spanning one or more service categories in a single request. Use this endpoint to build a security coverage dashboard without making one request per category.

When to use:

  • Use service_category_ids (from GET /intelligence/monitoring/infra/service-categories) to target multiple categories at once instead of calling per-category detail endpoints individually.
  • Set global_only: true to return only the non-hierarchical (global) group per category, reducing payload size when hierarchical breakdown is not needed.

Response structure:

  • Each record in results represents one infrastructure asset group and includes its linked DFW traffic/lockdown rules and IDS rules.
  • infra_section_paths lists all infrastructure security policy paths relevant to the queried categories - useful for navigating directly to policies in NSX.

Notes:

  • When service_category_ids is omitted, behavior depends on the caller context. Provide explicit IDs for predictable, scoped results.
  • Invalid or unrecognized IDs in service_category_ids are silently ignored; only matching categories are returned.
  • Returns 500 if none of the specified category IDs exist (e.g., all IDs are invalid).
Request
URI
POST
https://{api_host}/intelligence/monitoring/infra/assets-security-info
COPY
Request Body

Request parameters including service category IDs and pagination

InfraAssetsSecurityInfoRequest of type(s) application/json
Required  
This request body class requires all of the following: ListRequestParameters , InlineInfraAssetsSecurityInfoRequest1
{
    "site_id": "0c7d7379-3ac5-41e0-9a97-5daf80ccde17",
    "global_only": true,
    "service_category_ids": [
        "23745f49-fbb0-44ad-9d92-410f6370f36d"
    ],
    "offset": 0,
    "page_size": 1000,
    "sort_ascending": false
}
Authentication
This operation uses the following authentication methods.
Responses
200

Infrastructure asset group policy info list returned successfully

Returns InfraAssetsSecurityInfoListResponse of type(s) application/json
This response body class contains all of the following: ListResult , InlineInfraAssetsSecurityInfoListResponse1
{
    "results": [
        {
            "service_category_id": "23745f49-fbb0-44ad-9d92-410f6370f36d",
            "service_entity_id": "190530fd-42ec-4f8b-9d5f-fc9488fad906",
            "segmentation_object": {
                "segmentation_type": "INFRASTRUCTURE_ASSET",
                "id": "84019131-36a0-4d7d-838f-8ba441cc3f23",
                "display_name": "SSP_Infra_DHCP_Group",
                "site_ids": [],
                "hierarchy": [],
                "realization_groups": [
                    {
                        "display_name": "SSP_Infra_DHCP_Group",
                        "site_id": "0c7d7379-3ac5-41e0-9a97-5daf80ccde17",
                        "realization_id": "2ad736b6-f24f-4a7c-a4a1-98e91eb0a2b5",
                        "status": "SUCCESS",
                        "policy_path": "/infra/domains/default/groups/d12503fa-5abf-38cc-8f30-c434e5f3785f",
                        "tags": [
                            {
                                "scope": "ssp_infra.service",
                                "tag": "DHCP"
                            }
                        ]
                    }
                ],
                "status": "SUCCESS",
                "infrastructure_asset_alerts": [],
                "unordered_tags": [
                    {
                        "scope": "ssp_infra.service",
                        "tag": "DHCP"
                    }
                ]
            },
            "security_policy_info": {
                "dfw_rules": {
                    "dfw_policy_path": "/infra/domains/default/security-policies/SSP_Infra_Policy",
                    "traffic_rules": [
                        {
                            "_links": [],
                            "display_name": "SSP_DHCP_Rule",
                            "tags": [],
                            "path": "/infra/domains/default/security-policies/SSP_Infra_Policy/rules/SSP_Infra_DHCP-Client_Rule",
                            "children": [],
                            "marked_for_delete": false,
                            "overridden": false,
                            "destination_groups": [],
                            "destinations_excluded": false,
                            "direction": "IN_OUT",
                            "disabled": false,
                            "logged": false,
                            "profiles": [],
                            "scope": [],
                            "service_entries": [],
                            "services": [],
                            "source_groups": [],
                            "sources_excluded": false,
                            "action": "ALLOW"
                        },
                        {
                            "_links": [],
                            "display_name": "SSP_DHCP_Rule",
                            "tags": [],
                            "path": "/infra/domains/default/security-policies/SSP_Infra_Policy/rules/SSP_Infra_DHCP_Rule",
                            "children": [],
                            "marked_for_delete": false,
                            "overridden": false,
                            "destination_groups": [],
                            "destinations_excluded": false,
                            "direction": "IN_OUT",
                            "disabled": false,
                            "logged": false,
                            "profiles": [],
                            "scope": [],
                            "service_entries": [],
                            "services": [],
                            "source_groups": [],
                            "sources_excluded": false,
                            "action": "ALLOW"
                        }
                    ],
                    "lockdown_rules": [
                        {
                            "_links": [],
                            "display_name": "SSP_DHCP_Lockdown_Rule",
                            "tags": [],
                            "path": "/infra/domains/default/security-policies/SSP_Infra_Policy/rules/SSP_Infra_DHCP-Client_Lockdown_Rule",
                            "children": [],
                            "marked_for_delete": false,
                            "overridden": false,
                            "destination_groups": [],
                            "destinations_excluded": false,
                            "direction": "IN_OUT",
                            "disabled": false,
                            "logged": false,
                            "profiles": [],
                            "scope": [],
                            "service_entries": [],
                            "services": [],
                            "source_groups": [],
                            "sources_excluded": false,
                            "action": "DROP"
                        }
                    ]
                },
                "ids_rules": {
                    "ids_policy_path": "/infra/domains/default/intrusion-service-policies/SSP_Infra_IDPS_Policy",
                    "rules": [
                        {
                            "_links": [],
                            "display_name": "SSP_DHCP-Client IDS_Rule",
                            "tags": [],
                            "path": "/infra/domains/default/intrusion-service-policies/SSP_Infra_IDPS_Policy/rules/2f5cf1f8bc8dc011fbce7c755b791357130c8b549ef214259a6223442bcbfe25",
                            "children": [],
                            "marked_for_delete": false,
                            "overridden": false,
                            "destination_groups": [],
                            "destinations_excluded": false,
                            "direction": "IN_OUT",
                            "disabled": false,
                            "logged": false,
                            "profiles": [],
                            "scope": [],
                            "service_entries": [],
                            "services": [],
                            "source_groups": [],
                            "sources_excluded": false,
                            "action": "DETECT",
                            "ids_profiles": [],
                            "oversubscription": "INHERIT_GLOBAL"
                        },
                        {
                            "_links": [],
                            "display_name": "SSP_DHCP IDS_Rule",
                            "tags": [],
                            "path": "/infra/domains/default/intrusion-service-policies/SSP_Infra_IDPS_Policy/rules/8ec1d3cc190ecc721bffd3d1c29b7635d1dac510b079499cc2c4587d9293149e",
                            "children": [],
                            "marked_for_delete": false,
                            "overridden": false,
                            "destination_groups": [],
                            "destinations_excluded": false,
                            "direction": "IN_OUT",
                            "disabled": false,
                            "logged": false,
                            "profiles": [],
                            "scope": [],
                            "service_entries": [],
                            "services": [],
                            "source_groups": [],
                            "sources_excluded": false,
                            "action": "DETECT",
                            "ids_profiles": [],
                            "oversubscription": "INHERIT_GLOBAL"
                        }
                    ]
                }
            },
            "site_id": "0c7d7379-3ac5-41e0-9a97-5daf80ccde17"
        }
    ],
    "infra_section_paths": [
        "/infra/domains/default/security-policies/SSP_Infra_Policy"
    ]
}

400

Bad Request

Returns BadRequest of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


401

Unauthorized

Returns Unauthorized of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


403

Forbidden

Returns Forbidden of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


412

Precondition Failed

Returns PreconditionFailed of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


428

Precondition Required

Returns PreconditionRequired of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


429

Too Many Requests

Returns TooManyRequests of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


default

Unexpected error

Returns Error of type(s) application/json
{
    "error_code": 0,
    "module_name": "string",
    "error_message": "string"
}
integer
error_code
Required  

HTTP Status or Application error code.

string
module_name
Optional

Module where the error happened.

string
error_message
Required  

Message describing the error.


Code Samples
COPY
                    curl -X POST -H 'Authorization: <value>' -H 'Content-Type: application/json' -d '{"site_id":"string"}' https://{api_host}/intelligence/monitoring/infra/assets-security-info