You can use the API to make configuration changes manually to XML strings.
Introduction
To make configuration changes using the API, do as follows:
Create an administrator profile with read-write permission for the modules you want to update.
Attach the administrator profile to an administrator record.
Allow the following activities:
API configuration.
API access from the IP address of the administrator's endpoint device.
Access to the administrative services of Sophos Firewall from the administrator's zone.
Submit the XML string. In this example, we enter the string in the address bar of a browser.
Create an administrator profile for making configuration changes
You create an administrator profile with read-write permission for objects and network.
Go to Profiles > Device access and create an administrator profile with specific rights.
Click Save.The following image shows an example of how to configure the settings:
Create an administrator
You create a user and add the administrator profile.
When you add a user with the API administrator profile, you can limit the administrator's rights based on the profile. Alternatively, you can use an existing administrator account.
Go to Authentication > Users and click Add.
Set User type to Administrator.
Select the API administrator profile you created.
To allow access for a specific time, select the Access time.
To allow access only from specific IP addresses, select an option for Login restriction for device access.
Click Save.The following image shows an example of how to configure the settings:
Allow API access
You allow API access for the administrator you created.
You turn on API configuration and allow API access from the administrator's IP address. You also allow access to the administrative services of Sophos Firewall.
Specify the API configuration settings:
Go to Backup and firmware > API.
Select API configuration.
For Allowed IP address, enter the IP address from which you'll make the API request and click the add button.
Click Apply.
The following image shows an example of how to configure the settings:
To allow access to administrative services from the zone containing the administrator's IP address, do as follows:
Go to Administration > Device access. Under Admin services, select the administrator's zone for HTTPS and SSH.If you want to allow access from the WAN zone, we recommend that you create an exception rule limiting the access for specific services.
Scroll down to Local service ACL exception rule. Click Add, and create an exception for the zone.
In this example, we specify the following settings:
Setting
Description
Source zone
LAN
Source network/host
API administrator
Destination host
Port2
Services
HTTPS
SSH
Action
Accept
Click Save. The following image shows an example of how to configure the settings:
You can use the API to make configuration changes manually to XML strings.
Introduction
To make configuration changes using the API, do as follows:
Create an administrator profile with read-write permission for the modules you want to update.
Attach the administrator profile to an administrator record.
Allow the following activities:
API configuration.
API access from the IP address of the administrator's endpoint device.
Access to the administrative services of Sophos Firewall from the administrator's zone.
Submit the XML string. In this example, we enter the string in the address bar of a browser.
Create an administrator profile for making configuration changes
You create an administrator profile with read-write permission for objects and network.
Go to Profiles > Device access and create an administrator profile with specific rights.
Click Save.The following image shows an example of how to configure the settings:
Create an administrator
You create a user and add the administrator profile.
When you add a user with the API administrator profile, you can limit the administrator's rights based on the profile. Alternatively, you can use an existing administrator account.
Go to Authentication > Users and click Add.
Set User type to Administrator.
Select the API administrator profile you created.
To allow access for a specific time, select the Access time.
To allow access only from specific IP addresses, select an option for Login restriction for device access.
Click Save.The following image shows an example of how to configure the settings:
Allow API access
You allow API access for the administrator you created.
You turn on API configuration and allow API access from the administrator's IP address. You also allow access to the administrative services of Sophos Firewall.
Specify the API configuration settings:
Go to Backup and firmware > API.
Select API configuration.
For Allowed IP address, enter the IP address from which you'll make the API request and click the add button.
Click Apply.
The following image shows an example of how to configure the settings:
To allow access to administrative services from the zone containing the administrator's IP address, do as follows:
Go to Administration > Device access. Under Admin services, select the administrator's zone for HTTPS and SSH.If you want to allow access from the WAN zone, we recommend that you create an exception rule limiting the access for specific services.
Scroll down to Local service ACL exception rule. Click Add, and create an exception for the zone.
In this example, we specify the following settings:
Setting
Description
Source zone
LAN
Source network/host
API administrator
Destination host
Port2
Services
HTTPS
SSH
Action
Accept
Click Save. The following image shows an example of how to configure the settings:
Unser Webseiten Template mit den darin inkludierten Plugins verwendet Cookies. Sie stimmen der Nutzung von Cookies und unseren Datenschutzbestimmungen zu.
Funktional
Immer aktiv
Die technische Speicherung oder der Zugang ist unbedingt erforderlich für den rechtmäßigen Zweck, die Nutzung eines bestimmten Dienstes zu ermöglichen, der vom Teilnehmer oder Nutzer ausdrücklich gewünscht wird, oder für den alleinigen Zweck, die Übertragung einer Nachricht über ein elektronisches Kommunikationsnetz durchzuführen.
Vorlieben
Die technische Speicherung oder der Zugriff ist für den rechtmäßigen Zweck der Speicherung von Präferenzen erforderlich, die nicht vom Abonnenten oder Benutzer angefordert wurden.
Statistiken
Die technische Speicherung oder der Zugriff, der ausschließlich zu statistischen Zwecken erfolgt.Die technische Speicherung oder der Zugriff, der ausschließlich zu anonymen statistischen Zwecken verwendet wird. Ohne eine Vorladung, die freiwillige Zustimmung deines Internetdienstanbieters oder zusätzliche Aufzeichnungen von Dritten können die zu diesem Zweck gespeicherten oder abgerufenen Informationen allein in der Regel nicht dazu verwendet werden, dich zu identifizieren.
Marketing
Die technische Speicherung oder der Zugriff ist erforderlich, um Nutzerprofile zu erstellen, um Werbung zu versenden oder um den Nutzer auf einer Website oder über mehrere Websites hinweg zu ähnlichen Marketingzwecken zu verfolgen.
