Use
action=show
with no additional parameters to retrieve the entire active configuration.
Use XPath to Get Active Configuration
Use the
xpath
parameter to target a specific portion of the configuration. For example, to retrieve just the security rulebase:
xpath=/config/devices/entry/vsys/entry/rulebase/security
:
https://firewall/api/?type=config&action=show&key=apikey&xpath=/config/devices/entry/vsys/entry/rulebase/security
There is no trailing backslash character at the end of the XPath.
Confirm that the XML response for the query looks similar to the following (truncated):
<response status="success">
<result>
<security>
<rules>
<entry name="IT DNS Services">
<profile-setting>
<group>
<member>best-practice</member>
</group>
</profile-setting>
<to>
<member>untrust</member>
</to>
<from>
<member>trust</member>
</from>
<source>
<member>any</member>
</source>
<destination>
<member>Data Center</member>
</destination>
<source-user>
<member>any</member>
</source-user>
<category>
<member>any</member>
</category>
<application>
<member>dns</member>
</application>
<service>
<member>application-default</member>
</service>
<hip-profiles>
<member>any</member>
</hip-profiles>
<action>allow</action>
<tag>
<member>Best Practice</member>
</tag>
<log-start>no</log-start>
<log-setting>default</log-setting>
</entry>...
</rules>
</security>
</result>
</response>
Use XPath to Get ARP Information
Use XPath to Get ARP Information
Use the following request to retrieve ARP information:
https://firewall//api/?type=op&command=<show><arp><entry name='all'/></arp></show>
Confirm that the XML response for the query looks like the following (truncated):
<response status="success">
<result>
<max>3000</max>
<total>16</total>
<timeout>1800</timeout>
<dp>dp0</dp>
<entries>
<entry>
<status>c</status>
<ip>10.47.0.1</ip>
<mac>00:1b:17:00:2f:13</mac>
<ttl>1743</ttl>
<interface>ethernet1/1</interface>
<port>ethernet1/1</port>
</entry>
<entry>
<status>c</status>
<ip>10.47.0.10</ip>
<mac>00:50:56:93:68:6f</mac>
<ttl>386</ttl>
<interface>ethernet1/1</interface>
<port>ethernet1/1</port>
</entry>
<!-- truncated -->
</result>
</response>
