Get Infra Assets Security Info Batch
Returns a paginated list of infrastructure asset groups (segmentation objects) and their associated DFW firewall rules and IDS rules, spanning one or more service categories in a single request. Use this endpoint to build a security coverage dashboard without making one request per category.
When to use:
- Use
service_category_ids(fromGET /intelligence/monitoring/infra/service-categories) to target multiple categories at once instead of calling per-category detail endpoints individually. - Set
global_only: trueto return only the non-hierarchical (global) group per category, reducing payload size when hierarchical breakdown is not needed.
Response structure:
- Each record in
resultsrepresents one infrastructure asset group and includes its linked DFW traffic/lockdown rules and IDS rules. infra_section_pathslists all infrastructure security policy paths relevant to the queried categories - useful for navigating directly to policies in NSX.
Notes:
- When
service_category_idsis omitted, behavior depends on the caller context. Provide explicit IDs for predictable, scoped results. - Invalid or unrecognized IDs in
service_category_idsare silently ignored; only matching categories are returned. - Returns
500if none of the specified category IDs exist (e.g., all IDs are invalid).
Request parameters including service category IDs and pagination
{
"site_id": "0c7d7379-3ac5-41e0-9a97-5daf80ccde17",
"global_only": true,
"service_category_ids": [
"23745f49-fbb0-44ad-9d92-410f6370f36d"
],
"offset": 0,
"page_size": 1000,
"sort_ascending": false
}
Infrastructure asset group policy info list returned successfully
{
"results": [
{
"service_category_id": "23745f49-fbb0-44ad-9d92-410f6370f36d",
"service_entity_id": "190530fd-42ec-4f8b-9d5f-fc9488fad906",
"segmentation_object": {
"segmentation_type": "INFRASTRUCTURE_ASSET",
"id": "84019131-36a0-4d7d-838f-8ba441cc3f23",
"display_name": "SSP_Infra_DHCP_Group",
"site_ids": [],
"hierarchy": [],
"realization_groups": [
{
"display_name": "SSP_Infra_DHCP_Group",
"site_id": "0c7d7379-3ac5-41e0-9a97-5daf80ccde17",
"realization_id": "2ad736b6-f24f-4a7c-a4a1-98e91eb0a2b5",
"status": "SUCCESS",
"policy_path": "/infra/domains/default/groups/d12503fa-5abf-38cc-8f30-c434e5f3785f",
"tags": [
{
"scope": "ssp_infra.service",
"tag": "DHCP"
}
]
}
],
"status": "SUCCESS",
"infrastructure_asset_alerts": [],
"unordered_tags": [
{
"scope": "ssp_infra.service",
"tag": "DHCP"
}
]
},
"security_policy_info": {
"dfw_rules": {
"dfw_policy_path": "/infra/domains/default/security-policies/SSP_Infra_Policy",
"traffic_rules": [
{
"_links": [],
"display_name": "SSP_DHCP_Rule",
"tags": [],
"path": "/infra/domains/default/security-policies/SSP_Infra_Policy/rules/SSP_Infra_DHCP-Client_Rule",
"children": [],
"marked_for_delete": false,
"overridden": false,
"destination_groups": [],
"destinations_excluded": false,
"direction": "IN_OUT",
"disabled": false,
"logged": false,
"profiles": [],
"scope": [],
"service_entries": [],
"services": [],
"source_groups": [],
"sources_excluded": false,
"action": "ALLOW"
},
{
"_links": [],
"display_name": "SSP_DHCP_Rule",
"tags": [],
"path": "/infra/domains/default/security-policies/SSP_Infra_Policy/rules/SSP_Infra_DHCP_Rule",
"children": [],
"marked_for_delete": false,
"overridden": false,
"destination_groups": [],
"destinations_excluded": false,
"direction": "IN_OUT",
"disabled": false,
"logged": false,
"profiles": [],
"scope": [],
"service_entries": [],
"services": [],
"source_groups": [],
"sources_excluded": false,
"action": "ALLOW"
}
],
"lockdown_rules": [
{
"_links": [],
"display_name": "SSP_DHCP_Lockdown_Rule",
"tags": [],
"path": "/infra/domains/default/security-policies/SSP_Infra_Policy/rules/SSP_Infra_DHCP-Client_Lockdown_Rule",
"children": [],
"marked_for_delete": false,
"overridden": false,
"destination_groups": [],
"destinations_excluded": false,
"direction": "IN_OUT",
"disabled": false,
"logged": false,
"profiles": [],
"scope": [],
"service_entries": [],
"services": [],
"source_groups": [],
"sources_excluded": false,
"action": "DROP"
}
]
},
"ids_rules": {
"ids_policy_path": "/infra/domains/default/intrusion-service-policies/SSP_Infra_IDPS_Policy",
"rules": [
{
"_links": [],
"display_name": "SSP_DHCP-Client IDS_Rule",
"tags": [],
"path": "/infra/domains/default/intrusion-service-policies/SSP_Infra_IDPS_Policy/rules/2f5cf1f8bc8dc011fbce7c755b791357130c8b549ef214259a6223442bcbfe25",
"children": [],
"marked_for_delete": false,
"overridden": false,
"destination_groups": [],
"destinations_excluded": false,
"direction": "IN_OUT",
"disabled": false,
"logged": false,
"profiles": [],
"scope": [],
"service_entries": [],
"services": [],
"source_groups": [],
"sources_excluded": false,
"action": "DETECT",
"ids_profiles": [],
"oversubscription": "INHERIT_GLOBAL"
},
{
"_links": [],
"display_name": "SSP_DHCP IDS_Rule",
"tags": [],
"path": "/infra/domains/default/intrusion-service-policies/SSP_Infra_IDPS_Policy/rules/8ec1d3cc190ecc721bffd3d1c29b7635d1dac510b079499cc2c4587d9293149e",
"children": [],
"marked_for_delete": false,
"overridden": false,
"destination_groups": [],
"destinations_excluded": false,
"direction": "IN_OUT",
"disabled": false,
"logged": false,
"profiles": [],
"scope": [],
"service_entries": [],
"services": [],
"source_groups": [],
"sources_excluded": false,
"action": "DETECT",
"ids_profiles": [],
"oversubscription": "INHERIT_GLOBAL"
}
]
}
},
"site_id": "0c7d7379-3ac5-41e0-9a97-5daf80ccde17"
}
],
"infra_section_paths": [
"/infra/domains/default/security-policies/SSP_Infra_Policy"
]
}
Bad Request
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Unauthorized
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Forbidden
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Failed
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Precondition Required
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Too Many Requests
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
Unexpected error
{
"error_code": 0,
"module_name": "string",
"error_message": "string"
}
HTTP Status or Application error code.
Module where the error happened.
Message describing the error.
curl -X POST -H 'Authorization: <value>' -H 'Content-Type: application/json' -d '{"site_id":"string"}' https://{api_host}/intelligence/monitoring/infra/assets-security-info