This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ENABLE/DISABLE IPSec (Legacy) with API

hello,

i see in the webinar of sophos firewall acadamy 2022 an nice use-case, that we can enable and disable an ipsec connection for example enable temporary support access of our partners.

After the webinar i contact the mail that was communicated for questions "sales@sophos.de" but i dont get an answer to my 5 mails.

Anyone can tell me the command to enable/disable an ipsec (legacy) connection via api?

In the API documention i only find how to configure a new ipsec or delete a existing ipsec configuration.

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 2 years ago in reply to nils50122 +1 suggested

You need to fetch the current configuration and then update the configuration with status down/up. Which language are you going to use? What is the current blocker for you?

0 Vivek Jagad over 2 years ago

Hello nils50122,

Thank you for reaching out to the community, this are the following options available on the API: https://docs.sophos.com/nsg/sophos-firewall/18.5/API/index.html

Could you elaborate what is your exact requirement ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 nils50122 over 2 years ago in reply to Vivek Jagad

yes, i already checked these documentation.
As i write i dont want to create or delete an ipsec configuration.

I only want to set the state "active" and "not active" of an existing IPSec (legacy) remoteaccess connection. So our partner can connect when it is setted to "active" and he cant connect when its setted to "not active".
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to nils50122

You need to fetch the current configuration and then update the configuration with status down/up. Which language are you going to use? What is the current blocker for you?

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 nils50122 over 2 years ago in reply to LuCar Toni

I use the german language. What do you mean with "current blocker"?

I think in the sophos webinar there was another solution as update the complete currect configuration of these ipsec connection. There was a short command with the connection name in string.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to nils50122

I mean the programming language. In the webinar, they are using a website (hosted by a client) which curls a XML code snipped. This is a way to program this, but you need to code the backend for your setup.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 nils50122 over 2 years ago in reply to LuCar Toni

I want to build a simple html website with a button for enabling / disabling the connection.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to nils50122

You could do this:

curl --request POST \ --url IP:4444/.../APIController \ --header 'Content-Type: multipart/form-data' \ --form 'reqxml=<Request> <Login> <Username>admin</Username> <Password passwordform="plain">***************</Password> </Login> <Set operation="Update"> <VPNIPSecConnection transactionid=""> <DeActive> <Name>Test</Name> </DeActive> </VPNIPSecConnection> </Set></Request>'

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 nils50122 over 2 years ago in reply to LuCar Toni

Thanks! Ur sure these much spaces are right?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to nils50122

No this is just a CURL request. You need to code this into your website.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 nils50122 over 2 years ago in reply to LuCar Toni

Is there a normal HTTP Request like other API commands?

https://<Firewall IP>:<port>/webconsole/APIController?reqxml=<Add the XML request here>
Cancel
Vote Up 0 Vote Down

Cancel