Use XPath to Get Active Configuration

Use
action=show
with no additional parameters to retrieve the entire active configuration.
  1. Use the
    xpath
    parameter to target a specific portion of the configuration. For example, to retrieve just the security rulebase:
    xpath=/config/devices/entry/vsys/entry/rulebase/security
    :
    https://
    <firewall>
    /api/?type=config&action=show&key=apikey&xpath=/config/devices/entry/vsys/entry/rulebase/security
    There is no trailing backslash character at the end of the XPath.
  2. Confirm that the XML response for the query looks similar to the following (truncated):
    <response status="success"> <result> <security> <rules> <entry name="IT DNS Services"> <profile-setting> <group> <member>best-practice</member> </group> </profile-setting> <to> <member>untrust</member> </to> <from> <member>trust</member> </from> <source> <member>any</member> </source> <destination> <member>Data Center</member> </destination> <source-user> <member>any</member> </source-user> <category> <member>any</member> </category> <application> <member>dns</member> </application> <service> <member>application-default</member> </service> <hip-profiles> <member>any</member> </hip-profiles> <action>allow</action> <tag> <member>Best Practice</member> </tag> <log-start>no</log-start> <log-setting>default</log-setting> </entry> ...             </rules> </security> </result> </response>

Recommended For You