
VMware, Inc. 55
Chapter 6 vShield App Management
View a List of Timestamps Identifying App Firewall Rule Set Changes
Youcanviewalistoftimestampsmarkingfirewallrulesetchangesforaspecificcontainer.Toviewtherule
setaccordingtoaspecifictimestamp,see“ViewaPreviousFirew allRuleSetbyTimestamp”onpage 55.
Example 6-6. View a List of Firewall Rule Sets by Timestamps
Request:
GET <vshield_manager-uri>/api/1.0/zones/<container-moref-id>/firewall/snapshots
Example:
GET /api/1.0/zones/datacenter-4361/firewall/snapshots HTTP/1.1
Host: localhost
Authorization: Basic YWRtaW46ZGVmYXVsdA==
View a Previous Firewall Rule Set by Timestamp
Youcanviewahistoricalrulesetbyitstimestamp.Toviewthelistoftimestamps,see“ViewaListof
TimestampsIdentifyingAppFirewallRuleSetChanges”onpage 55.
Example 6-7. View a Firewall Rule Set by Timestamp
Request:
GET <vshield_manager-uri>/api/1.0/zones/<container-moref-id>/firewall/
snapshot/<snapshot-timestamp>
Example:
GET /api/1.0/zones/datacenter-4361/firewall/snapshot/1274872770000 HTTP/1.1
Host: localhost
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Revert to a Previous Firewall Rule Set
Youcanreverttoapreviousfirewallrulesetbyspecifyingtheappropriatecontainerandtimestamp.
Example 6-8. Revert to a Previous Firewall Rule Set
Request:
PUT <vshield_manager-uri>/api/1.0/zones/<container-moref-id>/firewall/snapshot/<timestamp>
Example:
PUT /api/1.0/zones/datacenter-4361/firewall/snapshot/1274872770000 HTTP/1.1
Host: localhost
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Delete All Firewall Rules under a Container
Youcandeletetheentirerulesetforadatacenter,cluster,orportgroupcontainer.Whenyoudeletethefirewall
rulesetatthedatacenterorclusterlevel,thesystemrevertstothe defaultrulesforthatcontainerandallchild
containers.Ifyoudeleterulesattheclusterorport
grouplevel,anyrulessetatthedatacenterremainenforced.
Example 6-9. Delete a Firewall Rule Set for a Container
Request:
DELETE <vshield_manager-uri>/api/1.0/zones/<container-moref-id>/firewall/rules
Comentarios a estos manuales