Get Default Action Policy

GET

/

v2.5

/

api

/

microseg

/

default-action-policy

cURL

curl -sk -X GET "https://<controller>/v2.5/api/microseg/default-action-policy" \
  -H "Authorization: cid <CID>"

package main

import (
  "fmt"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("GET", "https://<controller>/v2.5/api/microseg/default-action-policy", nil)
  req.Header.Set("Authorization", "cid <CID>")

  client := &http.Client{}
  resp, err := client.Do(req)
  if err != nil {
    panic(err)
  }
  defer resp.Body.Close()

  fmt.Println(resp.Status)
}

{
  "action": "DENY",
  "logging": true,
  "log_profile": "def000ad-7000-0000-0000-000000000001"
}

{
  "message": "<string>"
}

Headers

Authorization

string

default:cid <CID>

required

Controller ID in the format: cid .

Example:

"cid <CID>"

Response

GET operation response

The configuration for default action policy

action

enum<string>

default:DENY

required

Available options:

PERMIT,

DENY

logging

boolean

required

Example:

true

log_profile

enum<string>

System defined log profiles for the dcf rules

dcf_log_profile_start (def000ad-7000-0000-0000-000000000001): Log at session start
dcf_log_profile_end (def000ad-7000-0000-0000-000000000002): Log at session end
dcf_log_profile_all (def000ad-7000-0000-0000-000000000003): Log at both session start and end
dcf_log_profile_none (""): Will fall back to the dcf_log_profile_start to support backward compatibility for existing rules

Available options:

def000ad-7000-0000-0000-000000000001,

def000ad-7000-0000-0000-000000000002,

def000ad-7000-0000-0000-000000000003,

⌘I

cURL

curl -sk -X GET "https://<controller>/v2.5/api/microseg/default-action-policy" \
  -H "Authorization: cid <CID>"

package main

import (
  "fmt"
  "net/http"
)

func main() {
  req, _ := http.NewRequest("GET", "https://<controller>/v2.5/api/microseg/default-action-policy", nil)
  req.Header.Set("Authorization", "cid <CID>")

  client := &http.Client{}
  resp, err := client.Do(req)
  if err != nil {
    panic(err)
  }
  defer resp.Body.Close()

  fmt.Println(resp.Status)
}

{
  "action": "DENY",
  "logging": true,
  "log_profile": "def000ad-7000-0000-0000-000000000001"
}

{
  "message": "<string>"
}