From 708b9ebe823bba60339ce3aed9b6e508edac1960 Mon Sep 17 00:00:00 2001 From: Nick Fabricius Date: Tue, 2 Feb 2021 08:08:01 +0100 Subject: [PATCH] Created Postman Format v2 and restructured directory layout --- .../securechangeworkflow_R19-3-GA.json | 1 + .../securetrack_R19-3-GA.json | 1 + .../tufin.postman_environment | 1 + .../securechangeworkflow_R20-1-GA.json | 1 + .../securetrack_R20-1-GA.json | 1 + .../tufin.postman_environment | 1 + .../securechangeworkflow_R20-2-HF2.json | 1 + .../securetrack_R20-2-HF2.json | 1 + .../tufin.postman_environment | 1 + .../securechangeworkflow_R21-1-RC1.json | 1 + .../securetrack_R21-1-RC1.json | 1 + .../tufin.postman_environment | 1 + .../securechangeworkflow_R19-3-GA-v2.json | 1 + .../securetrack_R19-3-GA-v2.json | 1 + .../tufin.postman_environment | 1 + .../securechangeworkflow_R20-1-GA-v2.json | 1 + .../securetrack_R20-1-GA-v2.json | 1 + .../tufin.postman_environment | 1 + .../securechangeworkflow_R20-2-HF2-v2.json | 1 + .../securetrack_R20-2-HF2-v2.json | 1 + .../tufin.postman_environment | 1 + .../securechangeworkflow_R21-1-RC1-v2.json | 1 + .../securetrack_R21-1-RC1-v2.json | 1 + .../tufin.postman_environment | 1 + R19-3 postman collection.zip | Bin 129410 -> 0 bytes R20-1 postman collection.zip | Bin 119493 -> 0 bytes R20-2 postman collection.zip | Bin 124346 -> 0 bytes R21-1 postman collection.zip | Bin 126550 -> 0 bytes 28 files changed, 24 insertions(+) create mode 100644 Postman Format v1/R19-3 postman collection/securechangeworkflow_R19-3-GA.json create mode 100644 Postman Format v1/R19-3 postman collection/securetrack_R19-3-GA.json create mode 100644 Postman Format v1/R19-3 postman collection/tufin.postman_environment create mode 100644 Postman Format v1/R20-1 postman collection/securechangeworkflow_R20-1-GA.json create mode 100644 Postman Format v1/R20-1 postman collection/securetrack_R20-1-GA.json create mode 100644 Postman Format v1/R20-1 postman collection/tufin.postman_environment create mode 100644 Postman Format v1/R20-2 postman collection/securechangeworkflow_R20-2-HF2.json create mode 100644 Postman Format v1/R20-2 postman collection/securetrack_R20-2-HF2.json create mode 100644 Postman Format v1/R20-2 postman collection/tufin.postman_environment create mode 100644 Postman Format v1/R21-1 postman collection/securechangeworkflow_R21-1-RC1.json create mode 100644 Postman Format v1/R21-1 postman collection/securetrack_R21-1-RC1.json create mode 100644 Postman Format v1/R21-1 postman collection/tufin.postman_environment create mode 100644 Postman Format v2/R19-3 postman collection/securechangeworkflow_R19-3-GA-v2.json create mode 100644 Postman Format v2/R19-3 postman collection/securetrack_R19-3-GA-v2.json create mode 100644 Postman Format v2/R19-3 postman collection/tufin.postman_environment create mode 100644 Postman Format v2/R20-1 postman collection/securechangeworkflow_R20-1-GA-v2.json create mode 100644 Postman Format v2/R20-1 postman collection/securetrack_R20-1-GA-v2.json create mode 100644 Postman Format v2/R20-1 postman collection/tufin.postman_environment create mode 100644 Postman Format v2/R20-2 postman collection/securechangeworkflow_R20-2-HF2-v2.json create mode 100644 Postman Format v2/R20-2 postman collection/securetrack_R20-2-HF2-v2.json create mode 100644 Postman Format v2/R20-2 postman collection/tufin.postman_environment create mode 100644 Postman Format v2/R21-1 postman collection/securechangeworkflow_R21-1-RC1-v2.json create mode 100644 Postman Format v2/R21-1 postman collection/securetrack_R21-1-RC1-v2.json create mode 100644 Postman Format v2/R21-1 postman collection/tufin.postman_environment delete mode 100644 R19-3 postman collection.zip delete mode 100644 R20-1 postman collection.zip delete mode 100644 R20-2 postman collection.zip delete mode 100644 R21-1 postman collection.zip diff --git a/Postman Format v1/R19-3 postman collection/securechangeworkflow_R19-3-GA.json b/Postman Format v1/R19-3 postman collection/securechangeworkflow_R19-3-GA.json new file mode 100644 index 0000000..8d31b93 --- /dev/null +++ b/Postman Format v1/R19-3 postman collection/securechangeworkflow_R19-3-GA.json @@ -0,0 +1 @@ +{"folders":[{"order":["2-1-1","2-1-2","2-1-3","2-1-4","2-1-5"],"collectionId":"2","name":"Access Portal","hasRequests":true,"id":"2-1"},{"order":["2-2-6","2-2-7","2-2-8","2-2-9","2-2-10","2-2-11","2-2-12","2-2-13"],"collectionId":"2","name":"Application Connections","hasRequests":true,"id":"2-2"},{"order":["2-3-14"],"collectionId":"2","name":"Application Identities","hasRequests":true,"id":"2-3"},{"order":["2-4-15","2-4-16","2-4-17","2-4-18","2-4-19","2-4-20","2-4-21","2-4-22","2-4-23","2-4-24","2-4-25","2-4-26","2-4-27","2-4-28","2-4-29"],"collectionId":"2","name":"Application Interfaces","hasRequests":true,"id":"2-4"},{"order":["2-5-30","2-5-31","2-5-32","2-5-33","2-5-34"],"collectionId":"2","name":"Application Migration","hasRequests":true,"id":"2-5"},{"order":["2-6-35","2-6-36","2-6-37","2-6-38","2-6-39","2-6-40","2-6-41","2-6-42","2-6-43","2-6-44","2-6-45","2-6-46","2-6-47","2-6-48","2-6-49","2-6-50","2-6-51","2-6-52"],"collectionId":"2","name":"Application Packs","hasRequests":true,"id":"2-6"},{"order":["2-7-53"],"collectionId":"2","name":"Application Pending Changes","hasRequests":true,"id":"2-7"},{"order":["2-8-54","2-8-55"],"collectionId":"2","name":"Application Servers (across all applications)","hasRequests":true,"id":"2-8"},{"order":["2-9-56","2-9-57","2-9-58","2-9-59","2-9-60","2-9-61","2-9-62","2-9-63"],"collectionId":"2","name":"Application Servers (by application)","hasRequests":true,"id":"2-9"},{"order":["2-10-64","2-10-65","2-10-66","2-10-67","2-10-68","2-10-69"],"collectionId":"2","name":"Application Services (global)","hasRequests":true,"id":"2-10"},{"order":["2-11-70","2-11-71","2-11-72","2-11-73","2-11-74"],"collectionId":"2","name":"Application Services (local)","hasRequests":true,"id":"2-11"},{"order":["2-12-75","2-12-76","2-12-77","2-12-78"],"collectionId":"2","name":"Application Users","hasRequests":true,"id":"2-12"},{"order":["2-13-79","2-13-80","2-13-81","2-13-82","2-13-83","2-13-84","2-13-85","2-13-86","2-13-87","2-13-88","2-13-89"],"collectionId":"2","name":"Applications","hasRequests":true,"id":"2-13"},{"order":["2-14-90","2-14-91","2-14-92"],"collectionId":"2","name":"Cloud Console","hasRequests":true,"id":"2-14"},{"order":["2-15-93","2-15-94","2-15-95","2-15-96","2-15-97","2-15-98","2-15-99"],"collectionId":"2","name":"Customers","hasRequests":true,"id":"2-15"},{"order":["2-16-100","2-16-101","2-16-102"],"collectionId":"2","name":"Domains","hasRequests":true,"id":"2-16"},{"order":["2-17-103"],"collectionId":"2","name":"Load Balancers","hasRequests":true,"id":"2-17"},{"order":["2-18-104","2-18-105","2-18-106","2-18-107"],"collectionId":"2","name":"SecureChange Devices","hasRequests":true,"id":"2-18"},{"order":["2-19-108","2-19-109","2-19-110","2-19-111","2-19-112","2-19-113"],"collectionId":"2","name":"Server Decommissioning","hasRequests":true,"id":"2-19"},{"order":["2-20-114","2-20-115"],"collectionId":"2","name":"System Configuration","hasRequests":true,"id":"2-20"},{"order":["2-21-116","2-21-117","2-21-118"],"collectionId":"2","name":"System Users","hasRequests":true,"id":"2-21"},{"order":["2-22-119","2-22-120","2-22-121","2-22-122","2-22-123","2-22-124","2-22-125","2-22-126"],"collectionId":"2","name":"Ticket Lifecycle","hasRequests":true,"id":"2-22"},{"order":["2-23-127","2-23-128","2-23-129","2-23-130","2-23-131","2-23-132","2-23-133","2-23-134","2-23-135","2-23-136","2-23-137","2-23-138","2-23-139","2-23-140","2-23-141","2-23-142","2-23-143","2-23-144","2-23-145","2-23-146","2-23-147","2-23-148","2-23-149","2-23-150","2-23-151","2-23-152"],"collectionId":"2","name":"Tickets","hasRequests":true,"id":"2-23"}],"requests":[{"headers":"Accept: application/json\n","name":"Retrieve an existing application access request by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"requestId"}],"description":"Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Access request with id ID was not found in application with id ID","dataMode":"params","folder":"2-1","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","collectionId":"2","id":"2-1-1","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update an application access request","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"requestId"}],"dataMode":"raw","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1
BODY<application_access_request>
    <action>APPROVE</action>
</application_access_request>


Response Messages:
200: Application access request was updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-1","rawModeData":"\n\tAPPROVE\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","collectionId":"2","id":"2-1-2","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing application access requests","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-1","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-3","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update application access requests","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
body: application access requests

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_requests>
    <application_access_request>
        <id>1</id>
        <action>APPROVE</action>
    </application_access_request>
    <application_access_request>
        <id>2</id>
        <action>REJECT</action>
    </application_access_request>
</application_access_requests>


Response Messages:
200: Application access requests were updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-1","rawModeData":"\n\t\n\t\t1\n\t\tAPPROVE\n\t\n\t\n\t\t2\n\t\tREJECT\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-4","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create application access request","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_request>
    <server_group_id>1</server_group_id>
    <server_ip>1.1.1.1</server_ip>
    <comment>Request to join the WebServers server group</comment>
</application_access_request>


Response Messages:
201: Application access request was submitted.
400: The application was already deleted.
400: Server id cannot be empty.
400: Hostname or IP cannot be empty.
400: The provided server does not exist in application.
400: The provided server is not allowed to access.
400: Request already created
400: Requester cannot be null
400: Group cannot be empty
400: Invalid ip
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-1","rawModeData":"\n\t1\n\t1.1.1.1\n\tRequest to join the WebServers server group\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-5","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections, with extended resources information","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]
start: Return results starting only from the specified index; 0-based index; default value = 0 [optional]
count: Return the specified number of results. Returns all results if no value specified [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name&start=50&count=100

Response Messages:
400: Start value cannot be a negative number.
400: Count value must be greater than 0.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied.
404: There is no application with the specified ID.
404: There are no connections with the name NAME.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_extended","collectionId":"2","id":"2-2-6","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create a ticket to repair a connection","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_id"}],"description":"Parameters:
application_id: The application ID
connection_id: The connection ID
body: Ticket

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/2/repair
BODY<ticket>
    <subject>Repair connection 2</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <workflow>
        <name>Workflow with topology</name>
    </workflow>
    <steps>
        <step>
            <name>Open request</name>
            <tasks>
                <task>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                            <name>Business Justification</name>
                            <text>I need access to ftp </text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                            <name>Project Number</name>
                            <text>CR124560</text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                            <name>Hyperlink</name>
                            <url>http://192.168.1.1/ticket</url>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                            <name>Change Window</name>
                            <selection>Monday</selection>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                            <name>manager email</name>
                            <text>manager@tufin.com</text>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Response Messages:
201: Ticket was created.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set.
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: Expiration field is required.
400: Submit ticket enabled only with the first step.
400: First step can be only with one task.
400: The specified workflow does not contain an access request field in the first step.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
401: Logged in user: NAME do not have permission to perform on behalf actions.
401: You are not a participant in the first step of this workflow.
401: Access is denied.
401: To create a ticket you must purchase a valid SecureChange license.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: Cannot create a ticket to repair this connection because the connection status is not disconnected.
403: Cannot create a ticket to repair this connection because the connection was edited but a ticket has not been created yet.
403: Cannot create a ticket to repair this connection because there are other open tickets for an application that includes this connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\tRepair connection 2\n\tu1\n\tNormal\n\t\n\t\tWorkflow with topology\n\t\n\t\n\t\t\n\t\t\tOpen request\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBusiness Justification\n\t\t\t\t\t\t\tI need access to ftp \n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tProject Number\n\t\t\t\t\t\t\tCR124560\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tHyperlink\n\t\t\t\t\t\t\thttp://192.168.1.1/ticket\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tChange Window\n\t\t\t\t\t\t\tMonday\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tmanager email\n\t\t\t\t\t\t\tmanager@tufin.com\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connections/{{connection_id}}/repair","collectionId":"2","id":"2-2-7","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections?name=Connection Name

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no connections with the name NAME.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-8","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: The list of the connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <name>Connection B</name>
     </connection>
     <connection>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were created.
201: Connection was created.
400: There are no items to add.
400: You cannot add to application NAME because it was decommissioned.
400: Connection name already exists.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\t \n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t Connection B\n\t \n\t \n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-9","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Update connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <id>1</id>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <id>2</id>
         <name>Connection B</name>
     </connection>
     <connection>
         <id>3</id>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application that contains the server ID
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\t \n\t\t 1\n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t 2\n\t\t Connection B\n\t \n\t \n\t\t 3\n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-10","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-11","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update a connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection
body: Connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections/1
BODY <connection>
     <name>Connection A</name>
     <comment>Connection A comment</comment>
     <sources>
         <source>
             <id>2</id>
         </source>
         <source>
             <id>3</id>
         </source>
     </sources>
     <services>
         <service>
             <id>1</id>
         </service>
     </services>
     <destinations>
         <destination>
             <id>1</id>
         </destination>
     </destinations>
</connection>


Response Messages:
200: Connection was modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application that contains the server ID
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":" \n\t Connection A\n\t Connection A comment\n\t \n\t\t \n\t\t\t 2\n\t\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n ","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-12","method":"PUT"},{"name":"Delete connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
200: Connection was deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-13","method":"DELETE"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/application_identities","name":"Fetches application identities","method":"GET","id":"2-3-14","description":"Fetches the list of pre-defined application identities (like facebook) that can be used in a connection.

Parameters:
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities?name=facebook

Response Messages:
404: There are no application identities with the name NAME.
401: Access is denied.","folder":"2-3"},{"headers":"Accept: application/json\n","name":"Retrieve existing interface connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
name: The name of the interface connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections?name=Connection 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no connection interfaces with the name NAME.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","collectionId":"2","id":"2-4-15","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create interface connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
body: The interface connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections
BODY<interface_connections>
    <interface_connection>
        <name>Connection 1</name>
        <sources>
            <source>
                <id>3</id>
            </source>
        </sources>
        <services>
            <service>
                <id>3</id>
            </service>
            <service>
                <id>Facebook</id>
            </service>
        </services>
        <comment>New connection</comment>
    </interface_connection>
</interface_connections>


Response Messages:
200: Interface connections were created.
201: Interface connection was created.
400: There are no items to add.
400: Cannot create interface connection without a name.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
401: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\t\n\t\tConnection 1\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\t\n\t\t\t\tFacebook\n\t\t\t\n\t\t\n\t\tNew connection\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","collectionId":"2","id":"2-4-16","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve an existing interface connection by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-17","method":"GET"},{"name":"Delete interface connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
200: Interface connection was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-18","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update an interface connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection
body: The interface connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1
BODY<interface_connection>
    <name>Updated name</name>
    <sources>
        <source>
            <id>19</id>
        </source>
    </sources>
    <services>
        <service>
            <id>9</id>
        </service>
    </services>
    <comment>Updated connection</comment>
</interface_connection>


Response Messages:
200: Interface connection was modified.
400: Interface connection name cannot be empty.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
401: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tUpdated name\n\t\n\t\t\n\t\t\t19\n\t\t\n\t\n\t\n\t\t\n\t\t\t9\n\t\t\n\t\n\tUpdated connection\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-19","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Update a connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1
BODY<connection_to_application>
    <name>Updated name</name>
    <comment>Updated connection to application</comment>
    <servers>
        <server>
            <id>4</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
200: Connection to application was modified.
400: Name cannot be empty.
400: Name already exists.
400: Reference to source/destination with ID is invalid.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tUpdated name\n\tUpdated connection to application\n\t\n\t\t\n\t\t\t4\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-20","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection to application by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-21","method":"GET"},{"name":"Delete connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
200: Connection to application was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-22","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Create application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces
BODY<application_interface>
    <name>Interface to Application 1</name>
    <comment>New application interface</comment>
</application_interface>


Response Messages:
201: Application interface was created.
400: You cannot add to application NAME because it was decommissioned.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tInterface to Application 1\n\tNew application interface\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","collectionId":"2","id":"2-4-23","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing application interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"params","description":"To improve response time, set 'calculateIsPublished = false' to avoid calculating 'is_published'.

Parameters:
applicationId: The unique identifier of the application
name: The name of the application interface [optional]
calculateIsPublished: Should calculate is_published value [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces?name=Interface to Application 1

Response Messages:
400: There is no application with the specified ID.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no application interfaces with the name NAME.","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","collectionId":"2","id":"2-4-24","method":"GET"},{"name":"Delete application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
200: Application interface was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-25","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update an application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"dataMode":"raw","description":"Update the application interface properties. If is_published is set to true, the application interface is published for use by other users.

Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of The application interface
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1
BODY<application_interface>
    <name>updated name</name>
    <comment>Updated application interface</comment>
    <is_published>true</is_published>
</application_interface>


Response Messages:
200: Application interface was modified.
400: Application interface is not complete for publish.
400: Name cannot be empty.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","folder":"2-4","rawModeData":"\n\tupdated name\n\tUpdated application interface\n\ttrue\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-26","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application interface by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-27","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection to application [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications?name=Connection to Application 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","collectionId":"2","id":"2-4-28","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"Create a connection from this application to an application interface.

Parameters:
applicationId: The unique identifier of the application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications
BODY<connection_to_application>
    <name>Connection to Application 1</name>
    <comment>New connection to application</comment>
    <application_interface_id>1</application_interface_id>
    <servers>
        <server>
            <id>3</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
201: Connection to application was created.
400: You cannot add to application NAME because it was decommissioned.
400: The selected interface cannot be used more than once in the application.
400: Name cannot be empty.
400: Cannot create from local interface.
400: ApplicationInterface didn't got published.
400: Name already exists.
400: Cannot create connection to application without servers, there should be at least one server.
400: Reference to source/destination with ID is invalid.
400: You can use only interface from the same customer.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found.","folder":"2-4","rawModeData":"\n\tConnection to Application 1\n\tNew connection to application\n\t1\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","collectionId":"2","id":"2-4-29","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Update connection to application mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"raw","description":"Use id=-1 for target_application_interface if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The interface instance mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping
BODY<connections_to_applications_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>1</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>4</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>2</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>-1</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>3</id>
        </source_connection_to_application>
    </connection_to_application_mapping>
</connections_to_applications_mapping>


Response Messages:
200: Connection to application mappings were modified.
400: Source interface instance cannot be empty.
400: Source interface instance object is not valid
400: Target application interface is not valid
400: Connection to application with ID: ID was not found.
400: Interface with ID: ID was not found.
400: Cannot remove mapping of instance with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map instance to interface with ID ID because the interface exists in target application.
400: Cannot map to duplicate application interfaces
400: Application interface didn't got published
400: Connection to application with id: ID must used by source application
400: You cannot map connection to application ID, because it is contained in a connection to application pack.
400: Application interface ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-5","rawModeData":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","collectionId":"2","id":"2-5-30","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve connection to application mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping

Response Messages:
400: Cannot get mappings between application to itself.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","collectionId":"2","id":"2-5-31","method":"GET"},{"name":"Copy application servers and connections to another application.","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"params","description":"This API can be used to:
1. Create applications based on a blueprint (template).
2. Copy applications between environments (dev, test, prod).
3. Migrate applications between data-centers.

Before migrating make sure to map servers and connections to applications (if any exist).\nThis migration uses the configuration specified in the other API calls.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2

Response Messages:
200: Application was migrated.
400: Cannot migrate a decommissioned application.
400: Cannot migrate to a decommissioned application.
400: Cannot migrate an application to itself.
400: Cannot edit target DEVICE application.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
400: The source application has no connections to migrate.
409: You cannot migrate the application because not all servers are mapped.
409: You cannot migrate the application because not all connections to application are mapped.
409: You cannot migrate the application because one of the interfaces in the original application has been changed and has not been published.","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}","collectionId":"2","id":"2-5-32","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Update server mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"raw","description":"Use id=-1 for target_network_object if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The server mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping
BODY<servers_mapping>
    <server_mapping>
        <source_network_object>
            <id>3</id>
        </source_network_object>
        <target_network_object>
            <id>4</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>5</id>
        </source_network_object>
        <target_network_object>
            <id>-1</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>6</id>
        </source_network_object>
    </server_mapping>
</servers_mapping>


Response Messages:
200: Server mappings were modified.
400: Source network object cannot be empty.
400: Source network object is not valid
400: Target network object is not valid
400: Source and target network objects must be internal or external both.
400: Cannot use DEVICE application resources as external network objects.
400: Source network object with ID must be used by any connection.
400: Cannot remove mapping of network object with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map to ANY network object.
400: Cannot map Internet network object.
400: Cannot map to Internet network object.
400: Target network object ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found.","folder":"2-5","rawModeData":"\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t6\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","collectionId":"2","id":"2-5-33","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve server mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
search_servers_type: Search server type [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping?search_servers_type=EXTERNAL

Response Messages:
400: Search migrated servers type parameter must be either internal, external or both.
400: Cannot get mappings between application to itself.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application with ID
401: You do not have permissions to edit this application.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","collectionId":"2","id":"2-5-34","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"dataMode":"raw","description":"Update the application pack properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1
BODY<application_pack>
    <name>Updated name</name>
    <comment>Updated application pack</comment>
    <owner>
        <id>4</id>
    </owner>
    <editors>
        <editor>
            <id>3</id>
        </editor>
    </editors>
    <viewers>
        <viewer>
            <id>5</id>
        </viewer>
    </viewers>
    <is_published>true</is_published>
</application_pack>


Response Messages:
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
401: Access is denied
401: You do not have permission to access application that contains the interface ID
401: You do not have permissions to edit this application pack.
401: You do not have permissions to change the owner of application pack ID.
401: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID.","folder":"2-6","rawModeData":"\n\tUpdated name\n\tUpdated application pack\n\t\n\t\t4\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\n\ttrue\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-35","method":"PUT"},{"name":"Delete application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
200: Application pack wes deleted.
401: You do not have permissions to delete this application pack.
400: There is no application pack with the specified ID.
400: Customer with ID doesn't own an application pack with ID.
400: Application Pack ID cannot be deleted. It is in use by applications IDs.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-36","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application pack by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
401: Access is denied
401: You do not have permission to access application pack with ID
404: Application pack with ID was not found for customer with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-37","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update application interfaces and tag mapping","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"dataMode":"raw","description":"Add application interfaces to application pack, and map a tag to the application interface. If a tag is not specified for the interface, the tag will be set to “No Tag”.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: List of interface tag mapping to be added or modified

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces
BODY<application_interface_tags>
    <application_interface_tag>
        <application_interface>
            <id>1</id>
        </application_interface>
        <tag>
            <id>3</id>
        </tag>
    </application_interface_tag>
    <application_interface_tag>
        <application_interface>
            <id>2</id>
        </application_interface>
    </application_interface_tag>
</application_interface_tags>


Response Messages:
401: Access is denied
404: There are no application packs with the NAME in customer with ID.
401: You do not have permissions to edit this application pack.
401: You do not have permission to access application that contains the interface ID
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Application Interface can't be null.
400: Empty interface ID is not valid.","folder":"2-6","rawModeData":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","collectionId":"2","id":"2-6-38","method":"PUT"},{"name":"Remove application interfaces from application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"application_interface_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
application_interface_id: IDs of application interfaces to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces?application_interface_id=1&application_interface_id=2

Response Messages:
200: Application Interface was deleted.
401: Access is denied
401: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Application interface ID was not found in application pack ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","collectionId":"2","id":"2-6-39","method":"DELETE"},{"headers":"Accept: application/json\n","name":"List all application pack tags","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags

Response Messages:
401: Access is denied
404: There is no application pack with the ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-40","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Modify tags of an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Tags to modify

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <id>1</id>
        <name>Tag 1</name>
    </tag>
    <tag>
        <id>2</id>    
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
401: Access is denied
401: You do not have permissions to edit this application pack.
404: Customer with ID was not found.
404: There is no application pack with the ID in customer with ID.
400: Tag with NAME already exists in application pack ID.
400: Updated tag ID can't be empty
400: Updated Tag ID doesn't exist on application pack ID.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\t1\n\t\tTag 1\n\t\n\t\n\t\t2\t\n\t\tTag 2\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-41","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Create new Tag under an application pack ","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
body: List of tags

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <name>Tag 1</name>
    </tag>
    <tag>
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
401: Access is denied
404: There is no application pack with the ID in customer with ID.
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Tag name must contain at least 2 and no more than 160 characters.
400: Tag with NAME already exists in application pack ID.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tTag 1\n\t\n\t\n\t\tTag 2\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-42","method":"POST"},{"name":"Delete tags from application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"tag_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
tag_id: IDs of tags to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/21/tags?tag_id=1&tag_id=2

Response Messages:
200: Tags were deleted.
401: Access is denied
401: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Tag ID was not found in application pack ID.
404: Tag ID is in use so can't be deleted.
404: Removed tag ID can't be empty.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-43","method":"DELETE"},{"name":"Delete a connection to application pack","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
400: Connection to application pack with ID was not found for application with ID.
400: The connection to application pack was already deleted.
401: Access is denied.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-44","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection to application pack by ID.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
404: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-45","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to update
body: Connection to application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1
BODY<connection_to_application_pack>
    <name>Updated name</name>
    <comment>Updated Connection to application pack</comment>
    <tags_servers>
        <tag_servers>
            <tag>
                <id>1</id>
            </tag>
            <servers>
                <server>
                    <id>3</id>
                </server>
            </servers>
        </tag_servers>
        <tag_servers>
            <tag>
                <name>Tag 1</name>
            </tag>
            <servers>
            </servers>
        </tag_servers>
    </tags_servers>
</connection_to_application_pack>


Response Messages:
400: There is no application with the specified ID.
400: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is required.
400: Tag with Name was not found.
400: Server ID cannot be empty.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
401: Access is denied.
401: You do not have permission to access application that contains the server ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.","dataMode":"raw","folder":"2-6","rawModeData":"\n\tUpdated name\n\tUpdated Connection to application pack\n\t\n\t\t\n\t\t\t\n\t\t\t\t1\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTag 1\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-46","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Update application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"dataMode":"raw","description":"Update the application packs properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <id>1</id>
        <name>Updated name</name>
        <comment>Updated application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <is_published>false</is_published>
    </application_pack>
</application_packs>


Response Messages:
400: There are no application packs to edit.
400: Application pack ID cannot be empty.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
401: Access is denied
401: You do not have permission to access application that contains the interface ID
401: You do not have permissions to edit this application pack.
401: You do not have permissions to change the owner of application pack ID.
401: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID.","folder":"2-6","rawModeData":"\n\t\n\t\t1\n\t\tUpdated name\n\t\tUpdated application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\tfalse\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-47","method":"PUT"},{"headers":"Accept: application/json\n","name":"List all application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
name: The name of the application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs?name=Application pack 1

Response Messages:
401: Access is denied
404: There are no application packs with the NAME in customer with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-48","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create new application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <name>Application pack 1</name>
        <comment>New application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <viewers>
            <viewer>
                <id>5</id>
            </viewer>
        </viewers>
    </application_pack>
</application_packs>


Response Messages:
401: Access is denied
401: You do not have permission to access application that contains the interface ID
400: There are no application packs to add.
400: Application pack can be created only in meshed domain mode.
404: Customer with ID was not found.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: The owner NAME does not have permission to access applications.
400: Application pack was already saved.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tApplication pack 1\n\t\tNew application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t5\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-49","method":"POST"},{"headers":"Accept: application/json\n","name":"Get tag by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"tag_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
tag_id: The unique identifier of a tag

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags/1

Response Messages:
401: Access is denied
404: There is no tag with ID.
404: Customer with ID doesn't own a tag with ID.
404: Application Pack with ID doesn't own a tag with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags/{{tag_id}}","collectionId":"2","id":"2-6-50","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create new connection to application packs","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of application
body: List of connection to application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs
BODY<connection_to_application_packs>
    <connection_to_application_pack>
        <name>Connection to application pack 1</name>
        <comment>New Connection to application pack</comment>
        <application_pack>
            <id>1</id>
        </application_pack>
        <tags_servers>
            <tag_servers>
                <tag>
                    <id>1</id>
                </tag>
                <servers>
                    <server>
                        <id>3</id>
                    </server>
                </servers>
            </tag_servers>
            <tag_servers>
                <tag>
                    <name>Tag 1</name>
                </tag>
                <servers>
                    <server>
                        <id>4</id>
                    </server>
                </servers>
            </tag_servers>
        </tags_servers>
    </connection_to_application_pack>
</connection_to_application_packs>


Response Messages:
400: There are no connection to application packs to add.
400: Application pack ID cannot be empty.
400: Application with ID was not found.
400: There is no application with the specified ID.
400: There is no application pack with the specified ID.
400: Application pack with ID was decommissioned.
400: Application pack with ID was not published.
400: Connection to application pack cannot be created in the domain of the application pack.
400: The application pack cannot be used more than once in the application.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is missing.
400: Tag ID does not exist.
400: Server ID does not exist.
400: Tag ID is not in use in connection to application pack ID, so it cannot be updated.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
401: Access is denied.
401: You do not have permission to access application that contains the server ID
401: You do not have permission to access application pack with ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Tag with NAME was not found.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tConnection to application pack 1\n\t\tNew Connection to application pack\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t3\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tTag 1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","collectionId":"2","id":"2-6-51","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve a list of all connection to application pack by application ID.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of application
name: The name of the connection to application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs?name=Connection to application pack 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
404: There are no connection to application pack with the NAME in application with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","collectionId":"2","id":"2-6-52","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing access rules","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/87/access_requests

Response Messages:
400: The application was already deleted.
400: There are no changed connections that are ready for creating a ticket.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
400: Application with ID ID was not found.","dataMode":"params","folder":"2-7","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/access_requests","collectionId":"2","id":"2-7-53","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects","name":"Fetches servers","method":"GET","id":"2-8-54","description":"Parameters:
name: The name of the servers [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?name=server1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: Server with name NAME was not found.
400: Parameter typeOnDevice is not valid.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no servers with the name NAME
404: There are no servers with the typeOnDevice TYPEONDEVICE ","folder":"2-8"},{"headers":"Accept: application/json\n","name":"Fetches server by ID","data":[{"value":null,"type":"text","enabled":true,"key":"serverId"}],"description":"Parameters:
serverId: The ID of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects/87

Response Messages:
400: Server with id ID was not found.
400: Application with ID ID was not found.
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.","dataMode":"params","folder":"2-8","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects/{{serverId}}","collectionId":"2","id":"2-8-55","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the server [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?name=ServerName

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: The application was already deleted.
400: Parameter typeOnDevice is not valid.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no servers with the name NAME.
404: There are no servers with the typeOnDevice TYPEONDEVICE ","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-56","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <id>1</id>
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
         <type>host</type>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <id>2</id>
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
         <type>range</type>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <id>3</id>
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
         <type>subnet</type>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <id>4</id>
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
         <type>virtual-server</type>
     </network_object>
     <network_object xsi:type=\"vmInstanceDTO\">
         <id>5</id>
         <name>vm1</name>
         <comment>vm instance comment</comment>
         <type>vm_instance</type>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <id>6</id>
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <type>group</type>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: The application was already deleted.
400: You cannot update a predefined object.
400: Invalid type in server with id ID.
400: Invalid member with id ID
400: Invalid ID
400: Invalid uid
400: Invalid network object type NAME
400: Cannot update user
400: Network object is new
400: Name cannot be empty
400: Server is in discovery
400: Ip is missing
400: Mask is missing
400: Invalid ip
400: Invalid mask
400: Max ip is missing
400: Min ip is missing
400: Invalid min ip
400: Invalid max ip
400: Min ip cannot be larger than max ip
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Server with NAME already exists.
400: Invalid device ID
400: The type_on_device value is not valid
400: An EDL group can not be modified to a regular group
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: DTO type used for server id ID is incompatible with this vendor.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Virtual server was not found in ST.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
503: Not connected to SecureTrack.","dataMode":"raw","folder":"2-9","rawModeData":"\n\t \n\t\t 1\n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t\t host\n\t \n\t \n\t\t 2\n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n\t\t 2.2.2.22\n\t\t range\n\t \n\t \n\t\t 3\n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t\t subnet\n\t \n\t \n\t\t 4\n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t\t virtual-server\n\t \n\t \n\t\t 5\n\t\t vm1\n\t\t vm instance comment\n\t\t vm_instance\n\t \n\t \n\t\t 6\n\t\t group comment\n\t\t group1\n\t\t true\n\t\t group\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-57","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: There are no items to add.
400: The application was already deleted.
400: You cannot add to application NAME because it was decommissioned.
400: Network object was already saved
400: Name cannot be empty
400: Server with NAME already exists.
400: IP is missing
400: Mask is missing
400: Invalid IP
400: Invalid mask
400: Max IP is missing
400: Min IP is missing
400: Invalid min IP
400: Invalid max IP
400: Min IP cannot be larger than max IP
400: Invalid network object type CLASS_NAME.
400: Invalid uid
400: Invalid device ID
400: Virtual server does not exist in SecureTrack
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Cannot save the server because the virtual server does not exist.
400: Cannot save the server because an error occurred
400: The type_on_device value is not valid
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
404: Virtual server was not found in SecureTrack.
503: Not connected to SecureTrack.","dataMode":"raw","folder":"2-9","rawModeData":"\n\t \n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t \n\t \n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n \t\t 2.2.2.22\n\t \n\t \n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t \n\t \n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t \n\t \n\t\t group comment\n\t\t group1\n\t\t true\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-58","method":"POST"},{"name":"Delete server","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serverId"}],"dataMode":"params","description":"To decommission a serer use force=true.

Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4?force=true

Response Messages:
400: The application was already deleted.
400: You cannot delete a predefined object.
400: Cannot delete an object that is being referenced by other objects
400: Cannot delete a predefined object.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","collectionId":"2","id":"2-9-59","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing server by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serverId"}],"description":"Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/3

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","collectionId":"2","id":"2-9-60","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/members","name":"If the identified server is a group, return a list of its members. When the media type is 'text/plain' (default), print each member on a separate line.","method":"GET","id":"2-9-61","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/members

Response Messages:
400: Server with ID is not of type group
401: Access is denied
401: You do not have permissions to view this application
403: No available licenses. Ask your SecureApp administrator for assistance
404: There is no application with the specified ID
404: Server with ID was not found","folder":"2-9"},{"name":"Move server","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"server_id"},{"value":null,"type":"text","enabled":true,"key":"target_application_id"}],"description":"Parameters:
application_id: The unique identifier of the application
server_id: The unique identifier of the server
target_application_id: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/move_server?server_id=5&target_application_id=3

Response Messages:
400: Server ID is missing.
400: Target application ID is missing.
400: You cannot move a predefined object.
400: Server with ID is already associated to application with ID.
400: Cannot move server to a different customer.
400: The application was already deleted.
400: You cannot add to application APPLICATION_NAME because it was decommissioned.
400: Group/Server cannot be moved because there is no other application to move it to.
400: Group/Server cannot be moved because it or at least one of its group members is part of these groups: GROUPS_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is locked for discovery.
400: Group/Server cannot be moved because it or at least one of its group members is used in these application interfaces: APPLICATION_INTERFACE_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is used in these connections with another external resource: CONNECTION_NAME
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/move_server","collectionId":"2","id":"2-9-62","method":"POST"},{"collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/impact_analysis_csv","name":"Export Server Impact Analysis to a CSV file.","method":"GET","id":"2-9-63","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/impact_analysis_csv

Response Messages:
400: Server with ID was not found.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
404: There is no application with the specified ID.","folder":"2-9"},{"headers":"Content-Type: application/xml\n","name":"Modify unused and non predefined global services","dataMode":"raw","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Service is new.
400: You cannot update a predefined object.
400: Name <span style=\"font-style: italic\">NAME</span> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot update a global service that is being referenced by other objects.
400: Cannot update an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Group cannot contain itself as a member.
400: Application identity cannot be a member of a group.
401: Access is denied.","folder":"2-10","rawModeData":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/","collectionId":"2","id":"2-10-64","method":"PUT"},{"name":"Delete unused and non predefined global service by name","data":[{"value":null,"type":"text","enabled":true,"key":"name"}],"description":"Parameters:
name: The name of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=Global service

Response Messages:
200: Service was deleted.
404: Service name has not been provided.
404: There are no services with the name NAME.
400: Cannot delete ANY.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
401: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-65","method":"DELETE"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","name":"Fetches services","method":"GET","id":"2-10-66","description":"Parameters:
globals_only: get only globals [optional]
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=AH

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true&name=AH

Response Messages:
404: There are no services with the name NAME.
401: Access is denied.","folder":"2-10"},{"headers":"Content-Type: application/xml\n","name":"Create global services","dataMode":"raw","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.
400: Invalid service type <span style=\"font-style: italic\">TYPE</span>
400: Name <span style=\"font-style: italic\">NAME</span> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Application identity cannot be a member of a group.
401: Access is denied.","folder":"2-10","rawModeData":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-67","method":"POST"},{"headers":"Accept: application/json\n","name":"Fetches service by ID","data":[{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/2

Response Messages:
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.
401: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","collectionId":"2","id":"2-10-68","method":"GET"},{"name":"Delete unused and non predefined global service","data":[{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/260

Response Messages:
200: Service was deleted.
404: Global Service with ID was not found.
400: Cannot delete an object that is being referenced by other objects.
400: You cannot delete a predefined object.
401: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","collectionId":"2","id":"2-10-69","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve existing services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services?name=Local service

Response Messages:
400: The application was already deleted.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no services with the name NAME.","dataMode":"params","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-70","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
400: Invalid service type <span style=\"font-style: italic\">TYPE</span>
400: Name <span style=\"font-style: italic\">NAME</span> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Cannot have members from different applications.
400: Can not have application identity in group
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-11","rawModeData":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-71","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>255</id>
        <name>Service Group 2 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Local service must be associated with an application.
400: Service is locked for discovery.
400: Service is new.
400: Name <span style=\"font-style: italic\">NAME</span> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Application identity cannot be a member of a group.
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.","dataMode":"raw","folder":"2-11","rawModeData":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t255\n\t\tService Group 2 updated\n\t\tUpdated comment\n\t\tgroup\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-72","method":"PUT"},{"name":"Delete service","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"dataMode":"params","description":"Use force=true to delete a service with decommission.

Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250?force=true

Response Messages:
400: The application was already deleted.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Service with ID <span style=\"font-style: italic\">SERVICE_ID</span> was not found in application with id <span style=\"font-style: italic\">APPLICATION_ID</span>","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","collectionId":"2","id":"2-11-73","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing service by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Response Messages:
400: The application was already deleted.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Service with ID was not found.","dataMode":"params","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","collectionId":"2","id":"2-11-74","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","name":"Fetches users","method":"GET","id":"2-12-75","description":"Parameters:
name: The name of the user [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users?name=Local user 1

Response Messages:
404: There are no users with the name NAME.
401: Access is denied.","folder":"2-12"},{"headers":"Content-Type: application/xml\n","name":"Create users","dataMode":"raw","description":"Parameters:
body: List of users

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/users
BODY<users>
    <user>
        <name>Local user 1</name>
        <comment>New local user</comment>
        <ip>8.8.8.8</ip>
    </user>
    <user>
        <name>Ldap user 1</name>
        <comment>New ldap user</comment>
    </user>
    <user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"userObjectGroupDTO\">
        <name>User group 1</name>
        <comment>New user group</comment>
        <member>
            <id>14</id>
        </member>
        <member>
            <id>15</id>
        </member>
    </user>
</users>


Response Messages:
201: User was created.
200: Users were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: User with id <span style=\"font-style: italic\">ID</span> was not found.
400: Invalid user type <span style=\"font-style: italic\">TYPE</span>
400: Name cannot be empty.
400: User with name <span style=\"font-style: italic\">NAME</span> already exists.
400: Invalid ip
401: Access is denied.","folder":"2-12","rawModeData":"\n\t\n\t\tLocal user 1\n\t\tNew local user\n\t\t8.8.8.8\n\t\n\t\n\t\tLdap user 1\n\t\tNew ldap user\n\t\n\t\n\t\tUser group 1\n\t\tNew user group\n\t\t\n\t\t\t14\n\t\t\n\t\t\n\t\t\t15\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","collectionId":"2","id":"2-12-76","method":"POST"},{"headers":"Accept: application/json\n","name":"Fetches user by ID","data":[{"value":null,"type":"text","enabled":true,"key":"userId"}],"description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
404: User with ID <span style=\"font-style: italic\">ID</span> was not found.
401: Access is denied.","dataMode":"params","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","collectionId":"2","id":"2-12-77","method":"GET"},{"name":"Delete unused user","data":[{"value":null,"type":"text","enabled":true,"key":"userId"}],"description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
200: User was deleted.
404: User with ID <span style=\"font-style: italic\">ID</span> was not found.
400: Cannot delete an object that is being referenced by other objects.
401: Access is denied.","dataMode":"params","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","collectionId":"2","id":"2-12-78","method":"DELETE"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/compliance_violations","name":"Retrieve security policy violations from SecureTrack","method":"GET","id":"2-13-79","description":"Parameters:
applicationId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/compliance_violations

Response Messages:
400: No valid connections found in APPLICATION.
400: Security policy compliance check is not available because a security policy has not been defined.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
503: Cannot connect to SecureTrack.
503: Timeout occurred while waiting for response from SecureTrack.
500: An error occurred in SecureTrack when running the security compliance check.","folder":"2-13"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","name":"List all applications","method":"GET","id":"2-13-80","description":"Parameters:
userId: Applications by user ID, if not given the default is logged in user id [optional]
name: The name of the application [optional]
app_permissions: Filter applications by the given permissions (separated with commas):\napp_owner - returns applications where the user is the owner\napp_editor - returns applications where the user has been explicitly added as an editor\napp_viewer - returns applications where the user has been explicitly added as a viewer\napp_adminonly - returns applications where the user only has editor access because user has “edit all applications” permission [note: documentation needs to explain that this list does NOT include apps listed in app_editor] [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?userId=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?app_permissions=app_owner,app_editor,app_viewer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App&app_permissions=app_adminonly

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications

Response Messages:
400: Invalid app_permissions value: 'appPermissions'.
401: Access is denied
401: You can't use the parameter 'userId' because you don't have 'View all applications' permission.
404: There are no applications matching your filter.
404: User with ID 'userId' was not found.","folder":"2-13"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create new applications","dataMode":"raw","description":"Parameters:
body: List all applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <name>AppName</name>
         <comment>Comment</comment>
         <owner>
             <id>3</id>
         </owner>
         <editors>
             <editor>
                 <id>4</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
         <customer>
             <id>24</id>
         </customer>
     </application>
</applications>


Response Messages:
400: There are no items to add.
400: Application was already saved.
400: Application name must contain at least 2 and no more than 160 characters.
400: Owner cannot be empty.
400: The specified owner does not exist.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
400: Application with NAME already exists.
400: Application owner is missing.
400: Reference to owner ID is invalid.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to customer ID is invalid.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: The specified customer does not exist.
400: There is an editor without an ID or name.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no editor with the name NAME.","folder":"2-13","rawModeData":"\n\t \n\t\t AppName\n\t\t Comment\n\t\t \n\t\t\t 3\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 4\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t\t \n\t\t\t 24\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-81","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update applications","dataMode":"raw","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
body: List of applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <id>140</id>
         <name>App1</name>
         <decommissioned>true</decommissioned>
         <owner>
             <id>4</id>
         </owner>
     </application>
     <application>
         <id>139</id>
         <name>UpdatedAppName</name>
         <comment>Updated Comment</comment>
         <owner>
             <id>4</id>
         </owner>
         <editors>
             <editor>
                 <id>3</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
     </application>
</applications>


Response Messages:
400: Application ID is missing.
400: Application ID is invalid
400: The application was already deleted.
400: You must include the owner field.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
401: Access is denied
401: You do not have permissions to change the owner of application ID.
401: You do not have permissions to change the editors and a viewer of application ID.
401: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t \n\t\t 140\n\t\t App1\n\t\t true\n\t\t \n\t\t\t 4\n\t\t \n\t \n\t \n\t\t 139\n\t\t UpdatedAppName\n\t\t Updated Comment\n\t\t \n\t\t\t 4\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-82","method":"PUT"},{"name":"Delete an application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
400: The resources of application NAME are used in connections for other applications.
400: You cannot delete application NAME because its application interfaces are used in other applications.
400: You cannot delete application NAME because its application interfaces are used in other application packs.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
400: Application with ID ID was not found.
400: You cannot delete application NAME because there are connection changes pending a ticket in other application.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-83","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of an application to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-84","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Change an application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
applicationId: The unique identifier of an application to change
body: Application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/139
BODY<application>
     <id>139</id>
     <name>UpdatedAppName</name>
     <comment>UpdatedComment</comment>
     <decommissioned>false</decommissioned>
     <owner>
         <id>4</id>
     </owner>
     <editors>
         <editor>
             <id>3</id>
         </editor>
     </editors>
     <viewers>
         <viewer>
             <id>5</id>
         </viewer>
     </viewers>
</application>


Response Messages:
400: The application was already deleted.
400: Application owner is missing.
400: Owner cannot be empty.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
401: Access is denied
401: You do not have permissions to change the owner of application ID.
401: You do not have permissions to change the editors and a viewer of application ID.
401: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t 139\n\t UpdatedAppName\n\t UpdatedComment\n\t false\n\t \n\t\t 4\n\t \n\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 5\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-85","method":"PUT"},{"name":"Export application history to PDF","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History max rows [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&count=2

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?count=2

Response Messages:
401: Access is denied.
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/history/export_pdf","collectionId":"2","id":"2-13-86","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Move applications to another customer","dataMode":"raw","description":"Parameters:
body: List of applications and customers [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/move_applications
BODY<move_applications>
     <move_application>
         <application>
            <id>1</id>
         </application>
         <customer>
             <id>2</id>
         </customer>
     </move_application>
     <move_application>
         <application>
            <id>2</id>
         </application>
         <customer>
            <name>Default</name>
         </customer>
     </move_application>
</move_applications>


Response Messages:
200: Applications were moved successfully.
400: Multi-Customer mode is not enabled.
400: You cannot move an application pack to a different customer.
400: Reference to application is invalid.
400: APPLICATION already exists in CUSTOMER.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: Reference to CUSTOMER is invalid.
400: CUSTOMER is not imported to SecureApp.
400: CUSTOMER was decommissioned.
400: You must delete virtual servers from CUSTOMER before you move APPLICATION to another customer.
400: You must remove virtual servers from the INTERFACE and publish it before you move APPLICATION to another customer.
400: You cannot move APPLICATION to CUSTOMER because the connection to application pack and the application pack cannot be in the same customer.
400: You cannot move APPLICATION to a different customer because the application interface and the application pack must be in the same customer.
400: You must remove INTERFACE from APPLICATION PACK and publish it before you can move APPLICATION to another customer.
400: CONNECTION TO APPLICATION from APPLICATION must use interface from CUSTOMER.
400: Sources in CONNECTION from APPLICATION must all be from applications in the same customer.
400: Destinations in CONNECTION in APPLICATION must all be from applications in the same customer.
400: Servers in CONNECTION from APPLICATION must all be from CUSTOMER.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from applications in the same customer.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from CUSTOMER.
400: Application or application pack with NAME already exists in CUSTOMER.
400: There are no applications to move.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t \n\t\t \n\t\t\t1\n\t\t \n\t\t \n\t\t\t 2\n\t\t \n\t \n\t \n\t\t \n\t\t\t2\n\t\t \n\t\t \n\t\t\tDefault\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/move_applications","collectionId":"2","id":"2-13-87","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve application history","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History list length [optional]
start: Offset the count starting point [optional]
type: States the history type to fetch [optional]
user: The username of the user made the changes [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start=0&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?type=SERVER

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?user=Jack

Response Messages:
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date
400: Count parameter must be a number
400: Start parameter must be a number
400: Start parameter must be less than total
400: Type parameter must be either server, server_group, connection, application, application_interface, connection_interface or connection_to_application
400: User not found
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/history","collectionId":"2","id":"2-13-88","method":"GET"},{"name":"Export Impact Analysis to a CSV file.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"dataMode":"params","description":"To prevent a CSV injection attack when exporting Impact Analysis to a CSV file, if a special character ( = - + @ ) appears at the beginning of any field, a single quote (') is added before the character.

Parameters:
application_id: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/impact_analysis_csv

Response Messages:
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
404: There is no application with the specified ID.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/impact_analysis_csv","collectionId":"2","id":"2-13-89","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Auto associate cloud servers from SecureTrack with an application","dataMode":"raw","description":"When auto-associate is enabled, user must enter key value

Parameters:
body: Auto association rule

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule
BODY<auto_association_rule>
    <key>Application</key>
    <enabled>true</enabled>
</auto_association_rule>


Response Messages:
200: Auto association rule is saved.
400: Enabled rule requires key value.
401: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.","folder":"2-14","rawModeData":"\n\tApplication\n\ttrue\n\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule","collectionId":"2","id":"2-14-90","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve cloud server listing from SecureTrack","data":[{"value":null,"type":"text","enabled":true,"key":"vendor"},{"value":null,"type":"text","enabled":true,"key":"search_string"}],"description":"Parameters:
customer_id: Customer ID to be filtered by. [optional]
vendor: Vendor to be filtered by.
search_string: Search text.
start: Returning matching result starting from this element in the array (0-based). [optional]
count: Total number of matching servers to return. [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=WebServe

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=\"WebServer1\"

Response Messages:
401: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.
400: Illegal search string.
400: Start is bigger then possible result count.
400: Start and count cannot hold negative values.
400: Vendor query param is required.
400: Vendor should be one of the following: Amazon.
400: Search string query param is required.
400: Customer with ID does not exist in SecureApp
400: Customer with ID was decommissioned.","dataMode":"params","folder":"2-14","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","collectionId":"2","id":"2-14-91","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Associate cloud servers from SecureTrack with an application","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The ID of the application
body: List of device IDs and cloud server UIDs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?application_id=87
BODY<devices_to_uids>
    <device_to_uids>
        <device_id>9</device_id>
        <uids>
            <uid>{b503916e-4468-4dc8-981b-2ec534587352}</uid>
            <uid>{0cc947a5-276f-4a4a-9d12-df5284fce609}</uid>
        </uids>
    </device_to_uids>
</devices_to_uids>


Response Messages:
201: Servers were imported to SecureApp.
401: Access is denied
400: There is no application with the specified ID.
401: No available licenses. Ask your SecureApp administrator for assistance.
400: You do not have permissions to edit this application.
400: You cannot associate servers with this application, because the application has been decommissioned.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to add cloud servers.
403: UID does not exist in device ID.
403: Device with ID does not exist.
403: Device with ID does not exist in DOMAIN.
403: The AWS instance with UID and device ID has already been imported to application NAME. You cannot import the same instance multiple times.","dataMode":"raw","folder":"2-14","rawModeData":"\n\t\n\t\t9\n\t\t\n\t\t\t{b503916e-4468-4dc8-981b-2ec534587352}\n\t\t\t{0cc947a5-276f-4a4a-9d12-df5284fce609}\n\t\t\n\t\n\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","collectionId":"2","id":"2-14-92","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"import customers","dataMode":"raw","description":"Parameters:
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/import
BODY<customers>
    <customer>
        <id>2</id>
    </customer>
    <customer>
        <id>3</id>
    </customer>
</customers>


Response Messages:
400: Not available in single-customer mode.
400: ID can not be empty.
400: There are some id's that doesn't exist.
401: Access is denied
503: Not connected to SecureTrack.","folder":"2-15","rawModeData":"\n\t\n\t\t2\n\t\n\t\n\t\t3\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/import","collectionId":"2","id":"2-15-93","method":"PUT"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/","name":"List all customers","method":"GET","id":"2-15-94","description":"Parameters:
name: The name of the customer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers?name=Customer 1

Response Messages:
400: Not available in single-customer mode.
404: There are no customers with the name NAME.","folder":"2-15"},{"headers":"Accept: application/json\n","name":"Retrieve existing applications for specific domain","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/2/applications

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
401: Access is denied","dataMode":"params","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}/applications","collectionId":"2","id":"2-15-95","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/imported","name":"List all imported customers","method":"GET","id":"2-15-96","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/imported

Response Messages:
400: Not available in single-customer mode.","folder":"2-15"},{"headers":"Accept: application/json\n","name":"Fetches customer by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/1

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.","dataMode":"params","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","collectionId":"2","id":"2-15-97","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update a customer","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/2
BODY<customer>
    <usage_mode>NOT_IMPORTED</usage_mode>
</customer>


Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
400: Can not update Default customer.
400: This customer is already not imported.
400: USAGE_MODE is not a valid state. The valid values are: USAGE_MODES
401: Access is denied
500: This customer is not imported.
400: You cannot delete this customer because there are connection changes pending a ticket in another customer.You must decommission this customer first, and then delete it.","dataMode":"raw","folder":"2-15","rawModeData":"\n\tNOT_IMPORTED\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","collectionId":"2","id":"2-15-98","method":"PUT"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/not_imported","name":"List all non-imported customers","method":"GET","id":"2-15-99","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/not_imported

Response Messages:
400: Not available in single-customer mode.
503: Not connected to SecureTrack.","folder":"2-15"},{"collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/synchronize","name":"synchronize domains","method":"PUT","id":"2-16-100","description":"Retrieves all the domains lists in ST , for use by SC. If a domain was deleted in ST, then it will be removed from SC



Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/domains/synchronize

Response Messages:
500: Multi-Domain mode is disabled in SecureChange. Unable to synchronize with SecureTrack domains","folder":"2-16"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/","name":"List all domains","method":"GET","id":"2-16-101","description":"Parameters:
name: The name of the domain [optional]

Usage Example


Response Messages:
404: There are no domains with the name NAME.","folder":"2-16"},{"headers":"Accept: application/json\n","name":"Fetches domain by ID","data":[{"value":null,"type":"text","enabled":true,"key":"domainId"}],"description":"Parameters:
domainId: The ID of the domain

Usage Example


Response Messages:
400: Domain with id ID was not found.","dataMode":"params","folder":"2-16","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/{{domainId}}","collectionId":"2","id":"2-16-102","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches virtual servers from SecureTrack","data":[{"value":null,"type":"text","enabled":true,"key":"ip"}],"dataMode":"params","description":"Find virtual servers matching a given IP address.
You can search for the virtual server itself of any of its members.

Parameters:
ip: ip
domainId: The unique identifier of a domain [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers?ip=2.2.2.2

Response Messages:
400: Invalid IP
400: Invalid Subnet
400: There is no domain with the specified ID.
401: Access is denied
503: Not connected to SecureTrack.","folder":"2-17","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers","collectionId":"2","id":"2-17-103","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/","name":"Returns the details of the devices that you can select as a target in SecureChange","method":"GET","id":"2-18-104","description":"Parameters:
name: device name or part of a name [optional]
show_targets: show devices as targets [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/devices?name=asa&show_targets=true

Response Messages:
404: Devices not found","folder":"2-18"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get suggested targets for a given access request","data":[{"value":null,"type":"text","enabled":true,"key":"domain_name"},{"value":null,"type":"text","enabled":true,"key":"workflow_name"}],"dataMode":"raw","description":"Returns a list of suggested targets for a given access request, based on topology calculations.

Parameters:
body [optional]
domain_name: Domain Name
workflow_name: Workflow Name

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/suggest_target?domain_name=Default&workflow_name=AR
BODY{
    \"access_request\":{
        \"users\":{
            \"user\":[
                \"Any\"
            ]
        },
        \"sources\":{
            \"source\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.1.1\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"destinations\":{
            \"destination\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.20.2\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"services\":{
            \"service\":[
                {
                    \"@type\":\"ANY\",
                }
            ]
        },
        \"action\":\"Accept\",
    }
}
OUTPUT{
    \"multi_target\": {
        \"target\": {
            \"@type\": \"Object\",
            \"object_name\": \"Device-1\",
            \"object_type\": \"firewall\",
            \"object_details\": \"10.100.40.1\",
            \"management_id\": 250,
            \"management_name\": \"Panorama/Domain1\"
        }
    }
}


Response Messages:
200: Targets returned successfully
400: User does not have permissions to domain or domain does not exist
401: Access is denied","folder":"2-18","rawModeData":"{\n\t\"access_request\":{\n\t\t\"users\":{\n\t\t\t\"user\":[\n\t\t\t\t\"Any\"\n\t\t\t]\n\t\t},\n\t\t\"sources\":{\n\t\t\t\"source\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.1.1\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"destinations\":{\n\t\t\t\"destination\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.20.2\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"services\":{\n\t\t\t\"service\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"ANY\",\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"action\":\"Accept\",\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/suggest_target","collectionId":"2","id":"2-18-105","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update the whole list of excluded devices in SecureChange","dataMode":"raw","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
BODY<device_ids>
    <id>1</id>
    <id>12</id>
</device_ids>

","folder":"2-18","rawModeData":"\n\t1\n\t12\n\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","collectionId":"2","id":"2-18-106","method":"PUT"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","name":"Returns IDs for specified list of excluded parent management devices and child firewalls in SecureChange","method":"GET","id":"2-18-107","description":"For example on this Panorama hierarchy:
DG1 - Excluded
  DG1.1
    FW1
    FW2
    FW3

Calling this API with false value will return only DG1’s id.
Calling this API with true value will return DG1, FW1, FW2, FW3 id’s.


Parameters:
show_all: When set to true - Displays the specified devices and all their child firewalls in the hierarchy, which will be excluded implicitly.
When set to false - Displays only the devices which were explicitly excluded.
Default value is false.
[optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=false
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=true
OUTPUT<device_ids>
    <id>33</id>
    <id>10</id>
    <id>11</id>
    <id>35</id>
    <id>29</id>
    <id>31</id>
</device_ids>

","folder":"2-18"},{"name":"Run server decommission designer for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/designer

Response Messages:
400: Server decommission designer is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/designer","collectionId":"2","id":"2-19-108","method":"PUT"},{"name":"Run Impact Analysis for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/impact_analysis

Response Messages:
400: Impact analysis is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/impact_analysis","collectionId":"2","id":"2-19-109","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get impact analysis results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/impact_analysis

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/impact_analysis","collectionId":"2","id":"2-19-110","method":"GET"},{"name":"Run Verifier for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/verifier

Response Messages:
400: Verifier is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/verifier","collectionId":"2","id":"2-19-111","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/verifier","collectionId":"2","id":"2-19-112","method":"GET"},{"headers":"Accept: application/json\n","name":"Get server decommission designer results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve designer results generated in R17-1 and earlier.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/designer","collectionId":"2","id":"2-19-113","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Modify the SecureTrack connection settings and test the connection status","dataMode":"raw","description":"Parameters:
testOnly: Test the connection status using the specified settings. The new settings are not saved. The default value is false [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"remoteHost\">
            <IP_or_hostname>192.168.11.1</IP_or_hostname>
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
        <internal_IP_of_secureChange_server>192.168.2.2</internal_IP_of_secureChange_server>
    </secureTrack_settings>


Response Messages:
400: Invalid host name or IP address.
400: show_link_to_secureTrack is invalid. It must be 'true', 'false' or empty.","folder":"2-20","rawModeData":"\t\n\t\t \n\t\t\t192.168.11.1\n\t\t\tadmin\n\t\t\n\t\tfalse\n\t\t30\n\t\t192.168.2.2\n\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","collectionId":"2","id":"2-20-114","method":"PUT"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","name":"Retrieve the SecureTrack connection settings and status","method":"GET","id":"2-20-115","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack?testOnly=false
","folder":"2-20"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Import user from LDAP","dataMode":"raw","description":"Parameters:
body: partyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users
BODY<user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"user\">
    <name>x</name>
    <origin_type>LDAP</origin_type>
        <ldap_configuration>
            <id>1</id>
        </ldap_configuration>
</user>


Response Messages:
401: Access is denied.
400: Name is missing.
400: Origin is missing.
400: User {login_name} already exists, with ID (id} and name {name}.
400: User {login_name} not found in LDAP.
400: Creating a user via REST API is available only if origin is LDAP.
400: Creating a user via REST API is available only if type is User.
400: Ldap configuration with ID {id} not found.","folder":"2-21","rawModeData":"\n\tx\n\tLDAP\n\t\t\n\t\t\t1\n\t\t\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","collectionId":"2","id":"2-21-116","method":"POST"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","name":"Return the list of users","method":"GET","id":"2-21-117","description":"user_name: case insensitive, search mode: contains text
exact_name: when set to true, user_name search mode is case sensitive and exact text
email: case insentitive, search mode: exact match
Logical OR between user_name and email.

Parameters:
showIndirectRelation: Members that belong to the selected group only indirectly [optional]
user_name: The user's login name [optional]
email: The user's email [optional]
exact_name: Search user_name as exact match [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users?email=bob@tufin.com&user_name=bob&exact_name=true
","folder":"2-21"},{"headers":"Accept: application/json\n","name":"Return the specified user","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The user's ID
showIndirectRelation: Members that belong to the selected group only indirectly [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User or group was not found.","dataMode":"params","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","collectionId":"2","id":"2-21-118","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Reject a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: The user id, when logged in user is rejecting on behalf [optional]
body: Reject comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/reject?handler_id=5
BODY<reject_comment>
    <comment>rejected</comment>
</reject_comment>


Response Messages:
400: Ticket status <STATUS> is incorrect to perform this action
400: User <NAME> has no permissions to perform this action
400: Comment cannot be empty
401: User is not permitted to reject this ticket on behalf another user
401: You do not have permission to access ticket <ID>
401: On behalf user do not have permission to access ticket <ID>
401: Access is denied.
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.","dataMode":"raw","folder":"2-22","rawModeData":"\n\trejected\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/reject","collectionId":"2","id":"2-22-119","method":"PUT"},{"name":"Map rules to ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Maps the rules from the ticket to the relevant rules in SecureTrack.
Adds record set entries to the relevant rules metadata.
Link to history is found in the returned location header.
Applicable only for closed tickets in the following workflows: Access Request, Access Request and Modify Group, and Clone Server Policy.
Use handler_id for running on behalf of another user.
To get handler_id, use the System Users API.

Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: Run API on behalf of defined user id [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules?handler_id=5

Response Messages:
201: Started asynchronous mapping of rules to ticket ID <ID>. Mapping status is displayed in ticket history.
400: Ticket's workflow type does not support this operation
401: Access is denied.
401: You do not have permission to access ticket <ID>
401: On behalf user do not have permission to access ticket <ID>
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.
412: Ticket is not in closed status","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/map_rules","collectionId":"2","id":"2-22-120","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Reassigns the specified ticket task to the specified user.","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"assigneeId"}],"dataMode":"raw","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
assigneeId: The assignee ID
body: ReassignTaskCommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/reassign/4
BODY<reassign_task_comment>
    <comment>Please complete the AR</comment>
</reassign_task_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
404: There is no ticket with ID.
404: No entity found for query","folder":"2-22","rawModeData":"\n\tPlease complete the AR\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/reassign/{{assigneeId}}","collectionId":"2","id":"2-22-121","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Confirm the request","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Ticket ID
requester_id: The user of the ticket's requester, when logged in user is confirm on behalf [optional]
body: Confirm comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/confirm?requester_id=5
BODY<confirm_comment>
    <comment>confirmed</comment>
</confirm_comment>


Response Messages:
400: User is trying to confirm a ticket that belongs to another user
400: User is not permitted to confirm this ticket on behalf another user
400: The user can not confirm the ticket, because he is not in the domain of the ticket
401: Access is denied.
404: There is no ticket with ID .","dataMode":"raw","folder":"2-22","rawModeData":"\n\tconfirmed\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/confirm","collectionId":"2","id":"2-22-122","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change the requester of the specified ticket task to the specified user.","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"assigneeId"}],"description":"Parameters:
id: Ticket ID
assigneeId: The assignee ID
body: CommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/change_requester/4
BODY<comment>
    <comment>user was deleted moving tickets to Bob</comment>
</comment>


Response Messages:
400: The change requester comment must be set in order to change the requester the ticket.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
404: There is no ticket with ID.
404: There is no requester (User) with ID.","dataMode":"raw","folder":"2-22","rawModeData":"\n\tuser was deleted moving tickets to Bob\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/change_requester/{{assigneeId}}","collectionId":"2","id":"2-22-123","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Returns the specified ticket to the specified step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"toStepId"}],"dataMode":"raw","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
toStepId: To which step we the ticket will return
body: RedoCommentDto

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/redo/1
BODY<redo_step_comment>
    <comment>please fix source </comment>
</redo_step_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
401: User has no permissions to redo ticket steps.
404: There is no ticket with ID.
404: No entity found for query","folder":"2-22","rawModeData":"\n\tplease fix source \n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/redo/{{toStepId}}","collectionId":"2","id":"2-22-124","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the history of the specified ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Ticket ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/history

Response Messages:
401: User has no permissions to view ticket history
404: You do not have permission to view this task. Contact your administrator for assistance.
404: There is no ticket with ID.","dataMode":"params","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/history","collectionId":"2","id":"2-22-125","method":"GET"},{"headers":"Accept: application/json\n","name":"Cancel a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The ID of the ticket as shown in SecureChange
requester_id: The user of the ticket's requester, when logged in user is canceling on behalf [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/cancel?requester_id=5

Response Messages:
401: Access is denied.
404: Ticket is already closed
404: Ticket ID was not found","dataMode":"params","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/cancel","collectionId":"2","id":"2-22-126","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a the fields","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","collectionId":"2","id":"2-23-127","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change multiple fields within a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_network_object\">
         <id>7885</id>
         <name>n_obj</name>
         <network_object type=\"Object\">
             <object_name>Host_10.1.1.1</object_name>
             <management_name>cp239</management_name>
         </network_object>
         <network_object type=\"Object\">
             <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
             <management_id>2</management_id>
         </network_object>
         <network_object type=\"DNS\">
             <host_name>tufin.com</host_name>
         </network_object>
     <field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_service\">
         <id>7887</id>
         <name>service</name>
         <service type=\"PROTOCOL\">
             <protocol>TCP</protocol>
             <port>80</port>
         </service>
         <service type=\"Object\">
             <object_name>AOL</object_name>
             <management_name>cp239</management_name>
         </service>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
    \"fields\": {
        \"field\": {
            \"@xsi.type\": \"rule_modification_field\",
            \"id\": 71,
            \"name\": \"Fire Wall Rule\",
            \"read_only\": false,
            \"devices\": {
                \"device\": {
                    \"revision_id\": 4,
                    \"management_name\": \"Panorama/DG_1\",
                    \"management_id\": 4,
                    \"management_ip\": \"10.100.111.120\",
                    \"revision_number\": 1,
                    \"number_of_rules\": 1,
                    \"bindings\": {
                        \"binding\": {
                            \"binding_uid\": \"{00-FACED0-00}\",
                            \"binding\": {
                                \"@xsi.type\": \"policy__binding\",
                                \"policy_name\": \"Standard\"
                            },
                            \"rules\": {
                                \"rule\": {
                                    \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                    \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                    \"name\": \"Application test\",
                                    \"is_disabled\": false,
                                    \"ruleNumber\": 13,
                                    \"from_zone\": \"any\",
                                    \"to_zone\": \"any\",
                                    \"sourceNetworks\": {
                                        \"@xsi.type\": \"host_network_object\",
                                        \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                        \"name\": \"H_5.3.2.5\",
                                        \"display_name\": \"H_5.3.2.5\",
                                        \"class_name\": \"host_plain\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"comment\",
                                        \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                        \"version_id\": 4,
                                        \"device_type\": \"PaloAltoNetworks\",
                                        \"ip_type\": \"IPV4\",
                                        \"referenced\": \"UNKNOWN\",
                                        \"installable_target\": false,
                                        \"ip\": \"5.3.2.5\",
                                        \"subnet_mask\": \"255.255.255.255\"
                                    },
                                    \"destinationNetworks\": {
                                        \"@xsi.type\": \"host_network_object\",
                                        \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                        \"name\": \"22.22.2.2\",
                                        \"display_name\": \"22.22.2.2\",
                                        \"class_name\": \"host_plain\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"\",
                                        \"id\": \"5df1f2a5e9023c311ae4a016\",
                                        \"version_id\": 4,
                                        \"device_type\": \"PaloAltoNetworks\",
                                        \"ip_type\": \"IPV4\",
                                        \"referenced\": \"UNKNOWN\",
                                        \"installable_target\": false,
                                        \"ip\": \"22.22.2.2\",
                                        \"subnet_mask\": \"255.255.255.255\"
                                    },
                                    \"destinationServices\": {
                                        \"@xsi.type\": \"transport_service\",
                                        \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                        \"name\": \"TCP82\",
                                        \"display_name\": \"TCP82\",
                                        \"class_name\": \"tcp_service\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"TCP82\",
                                        \"id\": \"5df1f2a5e9023c311ae4a018\",
                                        \"version_id\": 4,
                                        \"referenced\": \"UNKNOWN\",
                                        \"type_on_device\": \"\",
                                        \"negate\": false,
                                        \"match_for_any\": false,
                                        \"timeout\": 0,
                                        \"protocol\": 6,
                                        \"min_port\": 82,
                                        \"max_port\": 82
                                    },
                                    \"applications\": {
                                        \"@xsi.type\": \"single_application\",
                                        \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                        \"name\": \"web-browsing\",
                                        \"display_name\": \"web-browsing\",
                                        \"class_name\": \"application_object\",
                                        \"origin\": \"DEVICE_PREDEFINED\",
                                        \"global\": true,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"\",
                                        \"service\": [
                                            {
                                                \"@xsi.type\": \"transport_service\",
                                                \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                                \"name\": \"st_implicit_app_web-browsing\",
                                                \"display_name\": \"st_implicit_app_web-browsing\",
                                                \"class_name\": \"tcp_service\",
                                                \"origin\": \"DEVICE\",
                                                \"global\": false,
                                                \"implicit\": true,
                                                \"shared\": false,
                                                \"comment\": \"\",
                                                \"id\": \"5df1f2a5e9023c311ae4a014\",
                                                \"version_id\": 4,
                                                \"referenced\": \"UNKNOWN\",
                                                \"type_on_device\": \"\",
                                                \"negate\": false,
                                                \"match_for_any\": false,
                                                \"timeout\": 0,
                                                \"protocol\": 6,
                                                \"min_port\": 80,
                                                \"max_port\": 80
                                            }
                                        ]
                                    },
                                    \"action\": \"ACCEPT\",
                                    \"additional_parameters\": \"\",
                                    \"options\": {
                                        \"option\": \"LOG_SESSION\"
                                    },
                                    \"rule_location\": \"DG_1\",
                                    \"users\": {
                                        \"user\": [
                                            {
                                                \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                                \"name\": \"Any\",
                                                \"class_name\": \"any_object\",
                                                \"displayName\": \"Any\"
                                            }
                                        ]
                                    },
                                    \"track\": {
                                        \"track_level\": \"LOG\"
                                    },
                                    \"install_ons\": \"\",
                                    \"communities\": \"\",
                                    \"times\": \"\",
                                    \"rule_metadata\": {
                                        \"permissiveness_level\": \"LOW\",
                                        \"violations\": \"\",
                                        \"last_hit\": \"No hits\",
                                        \"shadowed_status\": \"FALSE\",
                                        \"ticket_ids\": \"\",
                                        \"business_owners\": \"\",
                                        \"expirations\": \"\",
                                        \"applications\": \"\",
                                        \"last_modified\": \"Today\"
                                    }
                                }
                            }
                        }
                    }
                }
            },
            \"rule_modifications\": {
                \"rule_modification\": {
                    \"@xsi.type\": \"modify_rule_modification\",
                    \"id\": 10,
                    \"rule_key\": {
                        \"device_id\": 4,
                        \"binding_uid\": \"{00-FACED0-00}\",
                        \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                    },
                    \"source_modifications\": {
                        \"id\": 20,
                        \"network_object_cell_modifications\": {
                            \"network_object_cell_modification\": [
                                {
                                    \"id\": 69,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 65,
                                        \"uid\": \"9b9062a0-228a-4543-bbd4-9fda5c76573b\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 65,
                                                \"name\": \"My New Host\",
                                                \"comment\": \"some comment\",
                                                \"ip\": \"192.168.0.10\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 68,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 64,
                                        \"uid\": \"986c68ab-b5b5-478d-9300-bc0cacc06dfe\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                \"id\": 64,
                                                \"name\": \"My New Address Ragne\",
                                                \"comment\": \"some comment\",
                                                \"min_ip\": \"192.168.0.1\",
                                                \"max_ip\": \"192.168.0.254\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 70,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 68,
                                        \"uid\": \"1073dad5-4dc9-4392-8b42-f32de2937657\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                \"id\": 68,
                                                \"name\": \"My New Network\",
                                                \"comment\": \"some comment\",
                                                \"ip\": \"192.168.0.0\",
                                                \"netmask\": \"255.255.255.0\"
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    },
                    \"destination_modifications\": {
                        \"id\": 19,
                        \"network_object_cell_modifications\": {
                            \"network_object_cell_modification\": [
                                {
                                    \"id\": 66,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 67,
                                        \"uid\": \"e52c07fc-dffb-4c77-a656-40d1b1322e77\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                \"id\": 67,
                                                \"name\": \"Range-Test\",
                                                \"comment\": \"\",
                                                \"min_ip\": \"1.1.2.0\",
                                                \"max_ip\": \"1.1.2.55\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 67,
                                    \"action\": \"REMOVE\",
                                    \"device_network_object\": {
                                        \"id\": 66,
                                        \"uid\": \"fa681c9b-8c4f-449d-9b31-108a399902f5\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 66,
                                                \"name\": \"22.22.2.2\",
                                                \"comment\": \"\",
                                                \"ip\": \"22.22.2.2\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 65,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 70,
                                        \"uid\": \"2b8eaa1a-f4ea-4c39-b89e-361af89a308e\",
                                        \"device_id\": 2,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                \"id\": 70,
                                                \"name\": \"Net_10.108.151.0\",
                                                \"comment\": \"\",
                                                \"ip\": \"10.108.151.0\",
                                                \"netmask\": \"255.255.255.0\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 64,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 69,
                                        \"uid\": \"88efeaad-cfb4-41c4-b14c-fff104c24e52\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 69,
                                                \"name\": \"Host_10.10.10.10\",
                                                \"comment\": \"\",
                                                \"ip\": \"10.10.10.10\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    }
                }
            },
            \"designer_result\": {
                \"status\": \"not run\"
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object","folder":"2-23","rawModeData":"{\n\t\"fields\": {\n\t\t\"field\": {\n\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\"id\": 71,\n\t\t\t\"name\": \"Fire Wall Rule\",\n\t\t\t\"read_only\": false,\n\t\t\t\"devices\": {\n\t\t\t\t\"device\": {\n\t\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\t\"management_id\": 4,\n\t\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"rule_modifications\": {\n\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\"id\": 10,\n\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t\t},\n\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\"id\": 20,\n\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"9b9062a0-228a-4543-bbd4-9fda5c76573b\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"986c68ab-b5b5-478d-9300-bc0cacc06dfe\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"1073dad5-4dc9-4392-8b42-f32de2937657\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\"id\": 19,\n\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"e52c07fc-dffb-4c77-a656-40d1b1322e77\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"fa681c9b-8c4f-449d-9b31-108a399902f5\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"2b8eaa1a-f4ea-4c39-b89e-361af89a308e\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"88efeaad-cfb4-41c4-b14c-fff104c24e52\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"designer_result\": {\n\t\t\t\t\"status\": \"not run\"\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","collectionId":"2","id":"2-23-128","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get commands for device from designer results of a specific field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
deviceId: Device ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/device/136/commands

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the access request.
404: Device with ID <ID> was not found in Designer result.
404: Device with ID <ID> does not support Commands feature.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/device/{{deviceId}}/commands","collectionId":"2","id":"2-23-129","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change the ticket properties","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Change the ticket properties listed in the TicketPropertiesDTO.
When specifying the notification_group property you must use the ID of the group or leave the ID empty to remove the group.

Parameters:
body: ticketPropertiesDTO
id: The ID number of the ticket as shown in SecureChange

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id>10</id>
    </notification_group>
</ticket_properties>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id/>
    </notification_group>
</ticket_properties>


Response Messages:
400: Notification Group <ID> is a user and not a user group
400: Notification Group <ID> exceeds the configured maximum allowed number of users for notifications
400: <ID> (“Any User”) is not allowed as a Notification Group
400: Notification Group <ID> does not have permission of 'Group members can perform actions on requests submitted by other members'
400: Notification Group <ID> is not a member in the first step of the workflow
400: Notification Group is not enabled in this workflow
401: You do not have permission to change the Notification Group
404: There is no group with ID <ID>.
404: There is no ticket with ID <ID>.","folder":"2-23","rawModeData":"\n\t\n\t\t\n\t\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/ticket_properties","collectionId":"2","id":"2-23-130","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change a task of a ticket at the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY<task>
    <status>DONE</status>
    <fields/>
</task>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/
BODY{
    \"task\": {
        \"id\": 4,
        \"assignee_id\": 4,
        \"assignee\": \"a\",
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 71,
                \"name\": \"Fire Wall Rule\",
                \"read_only\": false,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 4,
                        \"management_name\": \"Panorama/DG_1\",
                        \"management_id\": 4,
                        \"management_ip\": \"10.100.111.120\",
                        \"revision_number\": 1,
                        \"number_of_rules\": 1,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{00-FACED0-00}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"Standard\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                        \"name\": \"Application test\",
                                        \"is_disabled\": false,
                                        \"ruleNumber\": 13,
                                        \"from_zone\": \"any\",
                                        \"to_zone\": \"any\",
                                        \"sourceNetworks\": {
                                            \"@xsi.type\": \"host_network_object\",
                                            \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                            \"name\": \"H_5.3.2.5\",
                                            \"display_name\": \"H_5.3.2.5\",
                                            \"class_name\": \"host_plain\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"comment\",
                                            \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                            \"version_id\": 4,
                                            \"device_type\": \"PaloAltoNetworks\",
                                            \"ip_type\": \"IPV4\",
                                            \"referenced\": \"UNKNOWN\",
                                            \"installable_target\": false,
                                            \"ip\": \"5.3.2.5\",
                                            \"subnet_mask\": \"255.255.255.255\"
                                        },
                                        \"destinationNetworks\": {
                                            \"@xsi.type\": \"host_network_object\",
                                            \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                            \"name\": \"22.22.2.2\",
                                            \"display_name\": \"22.22.2.2\",
                                            \"class_name\": \"host_plain\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"id\": \"5df1f2a5e9023c311ae4a016\",
                                            \"version_id\": 4,
                                            \"device_type\": \"PaloAltoNetworks\",
                                            \"ip_type\": \"IPV4\",
                                            \"referenced\": \"UNKNOWN\",
                                            \"installable_target\": false,
                                            \"ip\": \"22.22.2.2\",
                                            \"subnet_mask\": \"255.255.255.255\"
                                        },
                                        \"destinationServices\": {
                                            \"@xsi.type\": \"transport_service\",
                                            \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                            \"name\": \"TCP82\",
                                            \"display_name\": \"TCP82\",
                                            \"class_name\": \"tcp_service\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"TCP82\",
                                            \"id\": \"5df1f2a5e9023c311ae4a018\",
                                            \"version_id\": 4,
                                            \"referenced\": \"UNKNOWN\",
                                            \"type_on_device\": \"\",
                                            \"negate\": false,
                                            \"match_for_any\": false,
                                            \"timeout\": 0,
                                            \"protocol\": 6,
                                            \"min_port\": 82,
                                            \"max_port\": 82
                                        },
                                        \"applications\": {
                                            \"@xsi.type\": \"single_application\",
                                            \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                            \"name\": \"web-browsing\",
                                            \"display_name\": \"web-browsing\",
                                            \"class_name\": \"application_object\",
                                            \"origin\": \"DEVICE_PREDEFINED\",
                                            \"global\": true,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"service\": [
                                                {
                                                    \"@xsi.type\": \"transport_service\",
                                                    \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                                    \"name\": \"st_implicit_app_web-browsing\",
                                                    \"display_name\": \"st_implicit_app_web-browsing\",
                                                    \"class_name\": \"tcp_service\",
                                                    \"origin\": \"DEVICE\",
                                                    \"global\": false,
                                                    \"implicit\": true,
                                                    \"shared\": false,
                                                    \"comment\": \"\",
                                                    \"id\": \"5df1f2a5e9023c311ae4a014\",
                                                    \"version_id\": 4,
                                                    \"referenced\": \"UNKNOWN\",
                                                    \"type_on_device\": \"\",
                                                    \"negate\": false,
                                                    \"match_for_any\": false,
                                                    \"timeout\": 0,
                                                    \"protocol\": 6,
                                                    \"min_port\": 80,
                                                    \"max_port\": 80
                                                }
                                            ]
                                        },
                                        \"action\": \"ACCEPT\",
                                        \"additional_parameters\": \"\",
                                        \"options\": {
                                            \"option\": \"LOG_SESSION\"
                                        },
                                        \"rule_location\": \"DG_1\",
                                        \"users\": {
                                            \"user\": [
                                                {
                                                    \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                                    \"name\": \"Any\",
                                                    \"class_name\": \"any_object\",
                                                    \"displayName\": \"Any\"
                                                }
                                            ]
                                        },
                                        \"track\": {
                                            \"track_level\": \"LOG\"
                                        },
                                        \"install_ons\": \"\",
                                        \"communities\": \"\",
                                        \"times\": \"\",
                                        \"rule_metadata\": {
                                            \"permissiveness_level\": \"LOW\",
                                            \"violations\": \"\",
                                            \"last_hit\": \"No hits\",
                                            \"shadowed_status\": \"FALSE\",
                                            \"ticket_ids\": \"\",
                                            \"business_owners\": \"\",
                                            \"expirations\": \"\",
                                            \"applications\": \"\",
                                            \"last_modified\": \"Today\"
                                        }
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"id\": 13,
                        \"rule_key\": {
                            \"device_id\": 4,
                            \"binding_uid\": \"{00-FACED0-00}\",
                            \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                        },
                        \"source_modifications\": {
                            \"id\": 26,
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"id\": 89,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 88,
                                            \"uid\": \"e7e4ac52-2fe4-49f7-8071-9638817a7434\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 88,
                                                    \"name\": \"My New Host\",
                                                    \"comment\": \"some comment\",
                                                    \"ip\": \"192.168.0.10\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 91,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 89,
                                            \"uid\": \"13556e3e-1f93-4f95-939c-428a58001615\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"id\": 89,
                                                    \"name\": \"My New Address Ragne\",
                                                    \"comment\": \"some comment\",
                                                    \"min_ip\": \"192.168.0.1\",
                                                    \"max_ip\": \"192.168.0.254\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 90,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 87,
                                            \"uid\": \"1ecb9679-4da4-4fc5-9382-00f5fa455295\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"id\": 87,
                                                    \"name\": \"My New Network\",
                                                    \"comment\": \"some comment\",
                                                    \"ip\": \"192.168.0.0\",
                                                    \"netmask\": \"255.255.255.0\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"id\": 25,
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"id\": 88,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 91,
                                            \"uid\": \"50f35caf-3f13-4961-9ccd-055e1703592a\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 91,
                                                    \"name\": \"Host_10.10.10.10\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"10.10.10.10\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 85,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 90,
                                            \"uid\": \"21342c9a-3974-4bd3-b74b-b142e43ed39a\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"id\": 90,
                                                    \"name\": \"Range-Test\",
                                                    \"comment\": \"\",
                                                    \"min_ip\": \"1.1.2.0\",
                                                    \"max_ip\": \"1.1.2.55\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 86,
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"id\": 86,
                                            \"uid\": \"8fff4c36-da34-4945-be33-ffd5d4d444e2\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 86,
                                                    \"name\": \"22.22.2.2\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"22.22.2.2\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 87,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 85,
                                            \"uid\": \"35ec73ed-e0fa-4690-9570-00b417b63ae6\",
                                            \"device_id\": 2,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"id\": 85,
                                                    \"name\": \"Net_10.108.151.0\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"10.108.151.0\",
                                                    \"netmask\": \"255.255.255.0\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        }
                    }
                },
                \"designer_result\": {
                    \"status\": \"not run\"
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object","folder":"2-23","rawModeData":"{\n\t\"task\": {\n\t\t\"id\": 4,\n\t\t\"assignee_id\": 4,\n\t\t\"assignee\": \"a\",\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 71,\n\t\t\t\t\"name\": \"Fire Wall Rule\",\n\t\t\t\t\"read_only\": false,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\t\t\"management_id\": 4,\n\t\t\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"id\": 13,\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"id\": 26,\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"e7e4ac52-2fe4-49f7-8071-9638817a7434\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"13556e3e-1f93-4f95-939c-428a58001615\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"1ecb9679-4da4-4fc5-9382-00f5fa455295\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"id\": 25,\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"50f35caf-3f13-4961-9ccd-055e1703592a\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"21342c9a-3974-4bd3-b74b-b142e43ed39a\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"8fff4c36-da34-4945-be33-ffd5d4d444e2\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"35ec73ed-e0fa-4690-9570-00b417b63ae6\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"designer_result\": {\n\t\t\t\t\t\"status\": \"not run\"\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}","collectionId":"2","id":"2-23-131","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified field","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
fieldId: The ID number of the field as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/229

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .
404: Field ID was not found in Task ID in Stage ID in ticket ID .","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-23-132","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a field within a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields/7742
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multiple_selection\">
     <id>7742</id>
     <name>filter type</name>
     <selected_options>
         <selected_option>
             <value>FTP</value>
         </selected_option>
     </selected_options>
</field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"id\": 71,
        \"name\": \"Fire Wall Rule\",
        \"devices\": {
            \"device\": {
                \"revision_id\": 4,
                \"management_name\": \"Panorama/DG_1\",
                \"management_id\": 4,
                \"management_ip\": \"10.100.111.120\",
                \"revision_number\": 1,
                \"number_of_rules\": 1,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{00-FACED0-00}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"Standard\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                \"name\": \"Application test\",
                                \"is_disabled\": false,
                                \"ruleNumber\": 13,
                                \"from_zone\": \"any\",
                                \"to_zone\": \"any\",
                                \"sourceNetworks\": {
                                    \"@xsi.type\": \"host_network_object\",
                                    \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                    \"name\": \"H_5.3.2.5\",
                                    \"display_name\": \"H_5.3.2.5\",
                                    \"class_name\": \"host_plain\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"comment\",
                                    \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                    \"version_id\": 4,
                                    \"device_type\": \"PaloAltoNetworks\",
                                    \"ip_type\": \"IPV4\",
                                    \"referenced\": \"UNKNOWN\",
                                    \"installable_target\": false,
                                    \"ip\": \"5.3.2.5\",
                                    \"subnet_mask\": \"255.255.255.255\"
                                },
                                \"destinationNetworks\": {
                                    \"@xsi.type\": \"host_network_object\",
                                    \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                    \"name\": \"22.22.2.2\",
                                    \"display_name\": \"22.22.2.2\",
                                    \"class_name\": \"host_plain\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"\",
                                    \"id\": \"5df1f2a5e9023c311ae4a016\",
                                    \"version_id\": 4,
                                    \"device_type\": \"PaloAltoNetworks\",
                                    \"ip_type\": \"IPV4\",
                                    \"referenced\": \"UNKNOWN\",
                                    \"installable_target\": false,
                                    \"ip\": \"22.22.2.2\",
                                    \"subnet_mask\": \"255.255.255.255\"
                                },
                                \"destinationServices\": {
                                    \"@xsi.type\": \"transport_service\",
                                    \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                    \"name\": \"TCP82\",
                                    \"display_name\": \"TCP82\",
                                    \"class_name\": \"tcp_service\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"TCP82\",
                                    \"id\": \"5df1f2a5e9023c311ae4a018\",
                                    \"version_id\": 4,
                                    \"referenced\": \"UNKNOWN\",
                                    \"type_on_device\": \"\",
                                    \"negate\": false,
                                    \"match_for_any\": false,
                                    \"timeout\": 0,
                                    \"protocol\": 6,
                                    \"min_port\": 82,
                                    \"max_port\": 82
                                },
                                \"applications\": {
                                    \"@xsi.type\": \"single_application\",
                                    \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                    \"name\": \"web-browsing\",
                                    \"display_name\": \"web-browsing\",
                                    \"class_name\": \"application_object\",
                                    \"origin\": \"DEVICE_PREDEFINED\",
                                    \"global\": true,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"\",
                                    \"service\": [
                                        {
                                            \"@xsi.type\": \"transport_service\",
                                            \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                            \"name\": \"st_implicit_app_web-browsing\",
                                            \"display_name\": \"st_implicit_app_web-browsing\",
                                            \"class_name\": \"tcp_service\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": true,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"id\": \"5df1f2a5e9023c311ae4a014\",
                                            \"version_id\": 4,
                                            \"referenced\": \"UNKNOWN\",
                                            \"type_on_device\": \"\",
                                            \"negate\": false,
                                            \"match_for_any\": false,
                                            \"timeout\": 0,
                                            \"protocol\": 6,
                                            \"min_port\": 80,
                                            \"max_port\": 80
                                        }
                                    ]
                                },
                                \"action\": \"ACCEPT\",
                                \"additional_parameters\": \"\",
                                \"options\": {
                                    \"option\": \"LOG_SESSION\"
                                },
                                \"rule_location\": \"DG_1\",
                                \"users\": {
                                    \"user\": [
                                        {
                                            \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                            \"name\": \"Any\",
                                            \"class_name\": \"any_object\",
                                            \"displayName\": \"Any\"
                                        }
                                    ]
                                },
                                \"track\": {
                                    \"track_level\": \"LOG\"
                                },
                                \"install_ons\": \"\",
                                \"communities\": \"\",
                                \"times\": \"\",
                                \"rule_metadata\": {
                                    \"permissiveness_level\": \"LOW\",
                                    \"violations\": \"\",
                                    \"last_hit\": \"No hits\",
                                    \"shadowed_status\": \"FALSE\",
                                    \"ticket_ids\": \"\",
                                    \"business_owners\": \"\",
                                    \"expirations\": \"\",
                                    \"applications\": \"\",
                                    \"last_modified\": \"Today\"
                                }
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"id\": 12,
                \"rule_key\": {
                    \"device_id\": 4,
                    \"binding_uid\": \"{00-FACED0-00}\",
                    \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                },
                \"source_modifications\": {
                    \"id\": 24,
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"id\": 84,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 81,
                                    \"uid\": \"cd555580-3dd2-4830-86c6-260f9783569c\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"id\": 81,
                                            \"name\": \"My New Address Ragne\",
                                            \"comment\": \"some comment\",
                                            \"min_ip\": \"192.168.0.1\",
                                            \"max_ip\": \"192.168.0.254\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 83,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 80,
                                    \"uid\": \"fb534919-e43f-42c9-a7e3-cb00f6b9aaac\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"id\": 80,
                                            \"name\": \"My New Network\",
                                            \"comment\": \"some comment\",
                                            \"ip\": \"192.168.0.0\",
                                            \"netmask\": \"255.255.255.0\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 82,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 79,
                                    \"uid\": \"b76a4265-dc2d-43c7-a3f2-dfe434f6a034\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 79,
                                            \"name\": \"My New Host\",
                                            \"comment\": \"some comment\",
                                            \"ip\": \"192.168.0.10\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"id\": 23,
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"id\": 80,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 82,
                                    \"uid\": \"314933de-5b19-4d70-8712-576a0919285e\",
                                    \"device_id\": 2,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"id\": 82,
                                            \"name\": \"Net_10.108.151.0\",
                                            \"comment\": \"\",
                                            \"ip\": \"10.108.151.0\",
                                            \"netmask\": \"255.255.255.0\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 81,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 78,
                                    \"uid\": \"de5a9ef7-a1f0-463c-bf64-9acacbfdb119\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 78,
                                            \"name\": \"Host_10.10.10.10\",
                                            \"comment\": \"\",
                                            \"ip\": \"10.10.10.10\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 79,
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"id\": 83,
                                    \"uid\": \"822004d2-05bc-492b-96d5-6180b998fbc5\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 83,
                                            \"name\": \"22.22.2.2\",
                                            \"comment\": \"\",
                                            \"ip\": \"22.22.2.2\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 78,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 84,
                                    \"uid\": \"714dd5f3-976d-4880-b3cb-e45382ddb8ae\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"id\": 84,
                                            \"name\": \"Range-Test\",
                                            \"comment\": \"\",
                                            \"min_ip\": \"1.1.2.0\",
                                            \"max_ip\": \"1.1.2.55\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            }
        },
        \"designer_result\": {
            \"status\": \"not run\"
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Deleting rule recertification info is not allowed
400: Application Change field cannot be managed via this REST API
400: Rule associated with successfully updated recertification info cannot be removed
400: Rule was already updated
400: Rule does not exist
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object","folder":"2-23","rawModeData":"{\n\t\"rule_modification_field\": {\n\t\t\"id\": 71,\n\t\t\"name\": \"Fire Wall Rule\",\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\"management_id\": 4,\n\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"id\": 12,\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"id\": 24,\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\t\"uid\": \"cd555580-3dd2-4830-86c6-260f9783569c\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\t\"uid\": \"fb534919-e43f-42c9-a7e3-cb00f6b9aaac\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\t\"uid\": \"b76a4265-dc2d-43c7-a3f2-dfe434f6a034\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"id\": 23,\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\t\"uid\": \"314933de-5b19-4d70-8712-576a0919285e\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\t\"uid\": \"de5a9ef7-a1f0-463c-bf64-9acacbfdb119\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\t\"uid\": \"822004d2-05bc-492b-96d5-6180b998fbc5\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\t\"uid\": \"714dd5f3-976d-4880-b3cb-e45382ddb8ae\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"designer_result\": {\n\t\t\t\"status\": \"not run\"\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-23-133","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get rule decommision verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/rule_decommission/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type <TYPE>.
404: Verifier results were not found in the request.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/rule_decommission/verifier","collectionId":"2","id":"2-23-134","method":"GET"},{"headers":"Accept: application/json\n","name":"Get designer results according to field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve designer results generated in R17-2 and later.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request.","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer","collectionId":"2","id":"2-23-135","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the results of the Commit action","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"},{"value":null,"type":"text","enabled":true,"key":"managementId"}],"dataMode":"params","description":"GENERAL USE
The report returns the Commit results for the device with the specified management ID and for the devices suggested in the Designer results. The report also includes results for devices that are in the related hierarchy of these devices.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID
managementId: Management ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/commit_report/3
OUTPUT{
    \"commit_report\": {
        \"ticketId\": 27,
        \"statTime\": \"24-Oct-2018 08:55 AM\",
        \"endTime\": \"24-Oct-2018 08:56 AM\",
        \"duration\": \"00:00:30\",
        \"vendorName\": \"PALO ALTO NETWORKS\",
        \"managmentName\": \"pano211\",
        \"devices\": {
            \"device\": [
                {
                    \"name\": \"DG1.1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                },
                {
                    \"name\": \"DG1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                }
            ]
        }
    }
}


Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request.","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/commit_report/{{managementId}}","collectionId":"2","id":"2-23-136","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket stages","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps","collectionId":"2","id":"2-23-137","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a field within a task of a ticket at the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/7642
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"approve_reject\">
         <id>7661</id>
         <name>approve access</name>
         <approved>true</approved>
         <reason>Request approved</reason>
    </field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"id\": 71,
        \"name\": \"Fire Wall Rule\",
        \"devices\": {
            \"device\": {
                \"revision_id\": 4,
                \"management_name\": \"Panorama/DG_1\",
                \"management_id\": 4,
                \"management_ip\": \"10.100.111.120\",
                \"revision_number\": 1,
                \"number_of_rules\": 1,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{00-FACED0-00}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"Standard\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                \"name\": \"Application test\",
                                \"is_disabled\": false,
                                \"ruleNumber\": 13,
                                \"from_zone\": \"any\",
                                \"to_zone\": \"any\",
                                \"sourceNetworks\": {
                                    \"@xsi.type\": \"host_network_object\",
                                    \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                    \"name\": \"H_5.3.2.5\",
                                    \"display_name\": \"H_5.3.2.5\",
                                    \"class_name\": \"host_plain\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"comment\",
                                    \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                    \"version_id\": 4,
                                    \"device_type\": \"PaloAltoNetworks\",
                                    \"ip_type\": \"IPV4\",
                                    \"referenced\": \"UNKNOWN\",
                                    \"installable_target\": false,
                                    \"ip\": \"5.3.2.5\",
                                    \"subnet_mask\": \"255.255.255.255\"
                                },
                                \"destinationNetworks\": {
                                    \"@xsi.type\": \"host_network_object\",
                                    \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                    \"name\": \"22.22.2.2\",
                                    \"display_name\": \"22.22.2.2\",
                                    \"class_name\": \"host_plain\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"\",
                                    \"id\": \"5df1f2a5e9023c311ae4a016\",
                                    \"version_id\": 4,
                                    \"device_type\": \"PaloAltoNetworks\",
                                    \"ip_type\": \"IPV4\",
                                    \"referenced\": \"UNKNOWN\",
                                    \"installable_target\": false,
                                    \"ip\": \"22.22.2.2\",
                                    \"subnet_mask\": \"255.255.255.255\"
                                },
                                \"destinationServices\": {
                                    \"@xsi.type\": \"transport_service\",
                                    \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                    \"name\": \"TCP82\",
                                    \"display_name\": \"TCP82\",
                                    \"class_name\": \"tcp_service\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"TCP82\",
                                    \"id\": \"5df1f2a5e9023c311ae4a018\",
                                    \"version_id\": 4,
                                    \"referenced\": \"UNKNOWN\",
                                    \"type_on_device\": \"\",
                                    \"negate\": false,
                                    \"match_for_any\": false,
                                    \"timeout\": 0,
                                    \"protocol\": 6,
                                    \"min_port\": 82,
                                    \"max_port\": 82
                                },
                                \"applications\": {
                                    \"@xsi.type\": \"single_application\",
                                    \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                    \"name\": \"web-browsing\",
                                    \"display_name\": \"web-browsing\",
                                    \"class_name\": \"application_object\",
                                    \"origin\": \"DEVICE_PREDEFINED\",
                                    \"global\": true,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"\",
                                    \"service\": [
                                        {
                                            \"@xsi.type\": \"transport_service\",
                                            \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                            \"name\": \"st_implicit_app_web-browsing\",
                                            \"display_name\": \"st_implicit_app_web-browsing\",
                                            \"class_name\": \"tcp_service\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": true,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"id\": \"5df1f2a5e9023c311ae4a014\",
                                            \"version_id\": 4,
                                            \"referenced\": \"UNKNOWN\",
                                            \"type_on_device\": \"\",
                                            \"negate\": false,
                                            \"match_for_any\": false,
                                            \"timeout\": 0,
                                            \"protocol\": 6,
                                            \"min_port\": 80,
                                            \"max_port\": 80
                                        }
                                    ]
                                },
                                \"action\": \"ACCEPT\",
                                \"additional_parameters\": \"\",
                                \"options\": {
                                    \"option\": \"LOG_SESSION\"
                                },
                                \"rule_location\": \"DG_1\",
                                \"users\": {
                                    \"user\": [
                                        {
                                            \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                            \"name\": \"Any\",
                                            \"class_name\": \"any_object\",
                                            \"displayName\": \"Any\"
                                        }
                                    ]
                                },
                                \"track\": {
                                    \"track_level\": \"LOG\"
                                },
                                \"install_ons\": \"\",
                                \"communities\": \"\",
                                \"times\": \"\",
                                \"rule_metadata\": {
                                    \"permissiveness_level\": \"LOW\",
                                    \"violations\": \"\",
                                    \"last_hit\": \"No hits\",
                                    \"shadowed_status\": \"FALSE\",
                                    \"ticket_ids\": \"\",
                                    \"business_owners\": \"\",
                                    \"expirations\": \"\",
                                    \"applications\": \"\",
                                    \"last_modified\": \"Today\"
                                }
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"id\": 12,
                \"rule_key\": {
                    \"device_id\": 4,
                    \"binding_uid\": \"{00-FACED0-00}\",
                    \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                },
                \"source_modifications\": {
                    \"id\": 24,
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"id\": 84,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 81,
                                    \"uid\": \"cd555580-3dd2-4830-86c6-260f9783569c\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"id\": 81,
                                            \"name\": \"My New Address Ragne\",
                                            \"comment\": \"some comment\",
                                            \"min_ip\": \"192.168.0.1\",
                                            \"max_ip\": \"192.168.0.254\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 83,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 80,
                                    \"uid\": \"fb534919-e43f-42c9-a7e3-cb00f6b9aaac\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"id\": 80,
                                            \"name\": \"My New Network\",
                                            \"comment\": \"some comment\",
                                            \"ip\": \"192.168.0.0\",
                                            \"netmask\": \"255.255.255.0\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 82,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 79,
                                    \"uid\": \"b76a4265-dc2d-43c7-a3f2-dfe434f6a034\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 79,
                                            \"name\": \"My New Host\",
                                            \"comment\": \"some comment\",
                                            \"ip\": \"192.168.0.10\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"id\": 23,
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"id\": 80,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 82,
                                    \"uid\": \"314933de-5b19-4d70-8712-576a0919285e\",
                                    \"device_id\": 2,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"id\": 82,
                                            \"name\": \"Net_10.108.151.0\",
                                            \"comment\": \"\",
                                            \"ip\": \"10.108.151.0\",
                                            \"netmask\": \"255.255.255.0\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 81,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 78,
                                    \"uid\": \"de5a9ef7-a1f0-463c-bf64-9acacbfdb119\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 78,
                                            \"name\": \"Host_10.10.10.10\",
                                            \"comment\": \"\",
                                            \"ip\": \"10.10.10.10\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 79,
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"id\": 83,
                                    \"uid\": \"822004d2-05bc-492b-96d5-6180b998fbc5\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 83,
                                            \"name\": \"22.22.2.2\",
                                            \"comment\": \"\",
                                            \"ip\": \"22.22.2.2\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 78,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 84,
                                    \"uid\": \"714dd5f3-976d-4880-b3cb-e45382ddb8ae\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"id\": 84,
                                            \"name\": \"Range-Test\",
                                            \"comment\": \"\",
                                            \"min_ip\": \"1.1.2.0\",
                                            \"max_ip\": \"1.1.2.55\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            }
        },
        \"designer_result\": {
            \"status\": \"not run\"
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object","folder":"2-23","rawModeData":"{\n\t\"rule_modification_field\": {\n\t\t\"id\": 71,\n\t\t\"name\": \"Fire Wall Rule\",\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\"management_id\": 4,\n\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"id\": 12,\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"id\": 24,\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\t\"uid\": \"cd555580-3dd2-4830-86c6-260f9783569c\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\t\"uid\": \"fb534919-e43f-42c9-a7e3-cb00f6b9aaac\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\t\"uid\": \"b76a4265-dc2d-43c7-a3f2-dfe434f6a034\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"id\": 23,\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\t\"uid\": \"314933de-5b19-4d70-8712-576a0919285e\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\t\"uid\": \"de5a9ef7-a1f0-463c-bf64-9acacbfdb119\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\t\"uid\": \"822004d2-05bc-492b-96d5-6180b998fbc5\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\t\"uid\": \"714dd5f3-976d-4880-b3cb-e45382ddb8ae\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"designer_result\": {\n\t\t\t\"status\": \"not run\"\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-23-138","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change multiple field within a task of a ticket in the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_server_decommission_request\">
         <id>7591</id>
         <name>sd</name>
         <server_decommission_request>
             <id>7596</id>
             <order>DR1</order>
             <servers>
                 <server type=\"IP\">
                     <id>7593</id>
                     <ip_address>2.2.2.2</ip_address>
                     <netmask>255.255.255.255</netmask>
                 </server>
             </servers>
             <targets>
                 <target type=\"ANY\">
                     <id>7595</id>
                 </target>
             </targets>
             <comment>change ip from 1.1.1.1 to 2.2.2.2</comment>
         </server_decommission_request>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"date\">
         <id>7786</id>
         <name>date</name>
         <value>2015-12-15</value>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"time\">
         <id>7787</id>
         <name>time</name>
         <value>12:00</value>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
    \"fields\": {
        \"field\": {
            \"@xsi.type\": \"rule_modification_field\",
            \"id\": 71,
            \"name\": \"Fire Wall Rule\",
            \"read_only\": false,
            \"devices\": {
                \"device\": {
                    \"revision_id\": 4,
                    \"management_name\": \"Panorama/DG_1\",
                    \"management_id\": 4,
                    \"management_ip\": \"10.100.111.120\",
                    \"revision_number\": 1,
                    \"number_of_rules\": 1,
                    \"bindings\": {
                        \"binding\": {
                            \"binding_uid\": \"{00-FACED0-00}\",
                            \"binding\": {
                                \"@xsi.type\": \"policy__binding\",
                                \"policy_name\": \"Standard\"
                            },
                            \"rules\": {
                                \"rule\": {
                                    \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                    \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                    \"name\": \"Application test\",
                                    \"is_disabled\": false,
                                    \"ruleNumber\": 13,
                                    \"from_zone\": \"any\",
                                    \"to_zone\": \"any\",
                                    \"sourceNetworks\": {
                                        \"@xsi.type\": \"host_network_object\",
                                        \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                        \"name\": \"H_5.3.2.5\",
                                        \"display_name\": \"H_5.3.2.5\",
                                        \"class_name\": \"host_plain\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"comment\",
                                        \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                        \"version_id\": 4,
                                        \"device_type\": \"PaloAltoNetworks\",
                                        \"ip_type\": \"IPV4\",
                                        \"referenced\": \"UNKNOWN\",
                                        \"installable_target\": false,
                                        \"ip\": \"5.3.2.5\",
                                        \"subnet_mask\": \"255.255.255.255\"
                                    },
                                    \"destinationNetworks\": {
                                        \"@xsi.type\": \"host_network_object\",
                                        \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                        \"name\": \"22.22.2.2\",
                                        \"display_name\": \"22.22.2.2\",
                                        \"class_name\": \"host_plain\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"\",
                                        \"id\": \"5df1f2a5e9023c311ae4a016\",
                                        \"version_id\": 4,
                                        \"device_type\": \"PaloAltoNetworks\",
                                        \"ip_type\": \"IPV4\",
                                        \"referenced\": \"UNKNOWN\",
                                        \"installable_target\": false,
                                        \"ip\": \"22.22.2.2\",
                                        \"subnet_mask\": \"255.255.255.255\"
                                    },
                                    \"destinationServices\": {
                                        \"@xsi.type\": \"transport_service\",
                                        \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                        \"name\": \"TCP82\",
                                        \"display_name\": \"TCP82\",
                                        \"class_name\": \"tcp_service\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"TCP82\",
                                        \"id\": \"5df1f2a5e9023c311ae4a018\",
                                        \"version_id\": 4,
                                        \"referenced\": \"UNKNOWN\",
                                        \"type_on_device\": \"\",
                                        \"negate\": false,
                                        \"match_for_any\": false,
                                        \"timeout\": 0,
                                        \"protocol\": 6,
                                        \"min_port\": 82,
                                        \"max_port\": 82
                                    },
                                    \"applications\": {
                                        \"@xsi.type\": \"single_application\",
                                        \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                        \"name\": \"web-browsing\",
                                        \"display_name\": \"web-browsing\",
                                        \"class_name\": \"application_object\",
                                        \"origin\": \"DEVICE_PREDEFINED\",
                                        \"global\": true,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"\",
                                        \"service\": [
                                            {
                                                \"@xsi.type\": \"transport_service\",
                                                \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                                \"name\": \"st_implicit_app_web-browsing\",
                                                \"display_name\": \"st_implicit_app_web-browsing\",
                                                \"class_name\": \"tcp_service\",
                                                \"origin\": \"DEVICE\",
                                                \"global\": false,
                                                \"implicit\": true,
                                                \"shared\": false,
                                                \"comment\": \"\",
                                                \"id\": \"5df1f2a5e9023c311ae4a014\",
                                                \"version_id\": 4,
                                                \"referenced\": \"UNKNOWN\",
                                                \"type_on_device\": \"\",
                                                \"negate\": false,
                                                \"match_for_any\": false,
                                                \"timeout\": 0,
                                                \"protocol\": 6,
                                                \"min_port\": 80,
                                                \"max_port\": 80
                                            }
                                        ]
                                    },
                                    \"action\": \"ACCEPT\",
                                    \"additional_parameters\": \"\",
                                    \"options\": {
                                        \"option\": \"LOG_SESSION\"
                                    },
                                    \"rule_location\": \"DG_1\",
                                    \"users\": {
                                        \"user\": [
                                            {
                                                \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                                \"name\": \"Any\",
                                                \"class_name\": \"any_object\",
                                                \"displayName\": \"Any\"
                                            }
                                        ]
                                    },
                                    \"track\": {
                                        \"track_level\": \"LOG\"
                                    },
                                    \"install_ons\": \"\",
                                    \"communities\": \"\",
                                    \"times\": \"\",
                                    \"rule_metadata\": {
                                        \"permissiveness_level\": \"LOW\",
                                        \"violations\": \"\",
                                        \"last_hit\": \"No hits\",
                                        \"shadowed_status\": \"FALSE\",
                                        \"ticket_ids\": \"\",
                                        \"business_owners\": \"\",
                                        \"expirations\": \"\",
                                        \"applications\": \"\",
                                        \"last_modified\": \"Today\"
                                    }
                                }
                            }
                        }
                    }
                }
            },
            \"rule_modifications\": {
                \"rule_modification\": {
                    \"@xsi.type\": \"modify_rule_modification\",
                    \"id\": 10,
                    \"rule_key\": {
                        \"device_id\": 4,
                        \"binding_uid\": \"{00-FACED0-00}\",
                        \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                    },
                    \"source_modifications\": {
                        \"id\": 20,
                        \"network_object_cell_modifications\": {
                            \"network_object_cell_modification\": [
                                {
                                    \"id\": 69,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 65,
                                        \"uid\": \"9b9062a0-228a-4543-bbd4-9fda5c76573b\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 65,
                                                \"name\": \"My New Host\",
                                                \"comment\": \"some comment\",
                                                \"ip\": \"192.168.0.10\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 68,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 64,
                                        \"uid\": \"986c68ab-b5b5-478d-9300-bc0cacc06dfe\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                \"id\": 64,
                                                \"name\": \"My New Address Ragne\",
                                                \"comment\": \"some comment\",
                                                \"min_ip\": \"192.168.0.1\",
                                                \"max_ip\": \"192.168.0.254\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 70,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 68,
                                        \"uid\": \"1073dad5-4dc9-4392-8b42-f32de2937657\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                \"id\": 68,
                                                \"name\": \"My New Network\",
                                                \"comment\": \"some comment\",
                                                \"ip\": \"192.168.0.0\",
                                                \"netmask\": \"255.255.255.0\"
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    },
                    \"destination_modifications\": {
                        \"id\": 19,
                        \"network_object_cell_modifications\": {
                            \"network_object_cell_modification\": [
                                {
                                    \"id\": 66,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 67,
                                        \"uid\": \"e52c07fc-dffb-4c77-a656-40d1b1322e77\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                \"id\": 67,
                                                \"name\": \"Range-Test\",
                                                \"comment\": \"\",
                                                \"min_ip\": \"1.1.2.0\",
                                                \"max_ip\": \"1.1.2.55\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 67,
                                    \"action\": \"REMOVE\",
                                    \"device_network_object\": {
                                        \"id\": 66,
                                        \"uid\": \"fa681c9b-8c4f-449d-9b31-108a399902f5\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 66,
                                                \"name\": \"22.22.2.2\",
                                                \"comment\": \"\",
                                                \"ip\": \"22.22.2.2\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 65,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 70,
                                        \"uid\": \"2b8eaa1a-f4ea-4c39-b89e-361af89a308e\",
                                        \"device_id\": 2,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                \"id\": 70,
                                                \"name\": \"Net_10.108.151.0\",
                                                \"comment\": \"\",
                                                \"ip\": \"10.108.151.0\",
                                                \"netmask\": \"255.255.255.0\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 64,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 69,
                                        \"uid\": \"88efeaad-cfb4-41c4-b14c-fff104c24e52\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 69,
                                                \"name\": \"Host_10.10.10.10\",
                                                \"comment\": \"\",
                                                \"ip\": \"10.10.10.10\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    }
                }
            },
            \"designer_result\": {
                \"status\": \"not run\"
            }
        }
    }
}}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object","folder":"2-23","rawModeData":"{\n\t\"fields\": {\n\t\t\"field\": {\n\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\"id\": 71,\n\t\t\t\"name\": \"Fire Wall Rule\",\n\t\t\t\"read_only\": false,\n\t\t\t\"devices\": {\n\t\t\t\t\"device\": {\n\t\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\t\"management_id\": 4,\n\t\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"rule_modifications\": {\n\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\"id\": 10,\n\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t\t},\n\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\"id\": 20,\n\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"9b9062a0-228a-4543-bbd4-9fda5c76573b\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"986c68ab-b5b5-478d-9300-bc0cacc06dfe\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"1073dad5-4dc9-4392-8b42-f32de2937657\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\"id\": 19,\n\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"e52c07fc-dffb-4c77-a656-40d1b1322e77\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"fa681c9b-8c4f-449d-9b31-108a399902f5\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"2b8eaa1a-f4ea-4c39-b89e-361af89a308e\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"88efeaad-cfb4-41c4-b14c-fff104c24e52\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"designer_result\": {\n\t\t\t\t\"status\": \"not run\"\n\t\t\t}\n\t\t}\n\t}\n}}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields","collectionId":"2","id":"2-23-139","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Modify the Designer suggestions for Access Request or Clone Server Policy","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"instructionId"}],"dataMode":"raw","description":" GENERAL USE
1. Create a ticket using UI/API.
2. Run the designer using UI/API.
3. Use relevent API to get the designer results.
4. Run this API to modify the required parameters.

*Note: you can modify one parameter at a time.

Change rule location use
a. Modifying the rule order places the new rule before the rule with the specified identifier (rule name or number).
b. Modifying the rule placement to \"last\" places the new rule as last rule or last pre-rule (depending on the vendor convention for the device).
c. For vendors that support \"after\" placement, modifying the rule placement allows positioning the new rule before or after the suggested rule location.

track level permitted values:
NONE, LOG, ACCOUNT, ALERT, SNMP, MAIL, USER_DEFINED, EMERGENCIES, ALERTS, CRITICAL, ERRORS, WARNINGS, NOTIFICATIONS, INFORMATIONAL, DEBUGGING, DISABLED, DEFAULT, FULL_LOG, NETWORK_LOG, USER_ALERT_1, USER_ALERT_2, USER_ALERT_3

rule placement permitted values:
BEFORE, AFTER, LAST

Parameters:
body: DesignerInstructionChangeDTO
id: Ticket ID
taskId: Task ID
instructionId: Instruction ID
force: force update when new revision available [optional]

Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196?force=true
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_name\": {\"new_value\":\"new rule name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"track_level\": {\"new_value\":\"LOG\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_name\": {\"new_value\":\"new object name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"log_forwarding_profile\": {\"new_value\":\"new log forwarding profile\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"security_profile_group\": {\"new_value\":\"new security profile group\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_replace\": {
             \"new_value\":\"new object uid\",
             \"old_value\":\"old object uid\"
    }
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_order\": {\"new_value\":\"8\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"last\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"before\"}
}


Response Messages:
200: New rule will be shadowed
200: New rule will be shadowed or break acceleration
400: Modify Designer Results API is only supported for Access Request and Clone Server Policy workflows
412: Current instruction cannot be modified because either the implementation was successful or failed irrevocably.
412: Current step does not support Designer modification action
400: A ticket with ID <ID> cannot be found.
400: Task ID <ID> cannot be found in the current step with ID <ID>.
403: Changing <TYPE> is not supported on this device
403: This Change is not supported for <INSTRUCTION TYPE> instruction type\"
401: You do not have permission to update this task. Contact your administrator for assistance.
403: New revision is available, cannot modify the Designer results
404: Specified instruction, id: <ID> was not found
404: Designer results were not found in the access request.
400: a valid object name must start with an alphanumeric character and can contain alphanumeric characters, underscore '_'. Hypen '-', dot '.' or spaces
400: For this device, the comment must be less than 100 characters per line.
400: For this device, this field must be less than <NUMBER OF CHARACTERS> characters
400: For this device, this field is required.
409: Rule name already exists for this device. Please give this rule a unique name.
409: Rule name <NAME> already exists in the device group hierarchy. Choose a unique name for this rule.
400: Comment contains invalid characters.
400: <DEVICE> does not support tracking level <TRACKING LEVEL>
400: <TRACKING LEVEL> is not a valid rule track level value
400: a valid object name cannot contain any of the following characters: <CHARACTERS>
400: a valid object name must be less than <NUMBER OF CHARACTERS> characters
400: a valid object name cannot be empty
400: a valid object name must conform to the following pattern: <STRING PATTERN>
409: Object already exists
400: A security profile group cannot be empty.
404: The security profile group <SECURITY PROFILE GROUP> was not found.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to validate the security profile group.
400: A log forwarding profile cannot be empty.
404: The log forwarding profile <LOG FORWARDING PROFILE> was not found.
500: An error occurred in SecureTrack while trying to validate the log forwarding profile.
400: Object UID <OLD OBJECT UID> not found in the rule for this instruction.
400: Values of new object UID <NEW OBJECT UID> and old object UID <OLD OBJECT UID> do not match.
400: Rule placement can only be: \"before\", \"after\" or \"last\".
400: You can't change rule placement when there is no rule order. please add rule order first.
400: You can't change rule placement to \"After\" for this type of device.
400: You can't change rule placement to \"Last\" for this type of device.","folder":"2-23","rawModeData":"{\n\t\"rule_placement\": {\"new_value\":\"before\"}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/tasks/{{taskId}}/designer/instruction/{{instructionId}}","collectionId":"2","id":"2-23-140","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket stages","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}","collectionId":"2","id":"2-23-141","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/free_text_search","name":"Returns a list of tickets by search parameters","method":"GET","id":"2-23-142","description":"Parameters:
parameter: Free text search parameter (Search syntax details) [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/free_text_search/?parameter=taskstatus:ASSIGNED AND priority:High

Response Messages:
400: Can not fetch more than 100 tickets in 1 time
401: Access is denied.
404: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED
404: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
404: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
404: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
404: No entity found for query","folder":"2-23"},{"headers":"Accept: application/json\n","name":"Get server clone policy verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/clone_server_policy/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the server clone policy request.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/clone_server_policy/verifier","collectionId":"2","id":"2-23-143","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1
OUTPUT {
    \"ticket\": {
        \"id\": 1,
        \"subject\": \"AR-Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 11,
            \"name\": \"AR & MG\",
            \"uses_topology\": true
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 209,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 209,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": [
                                    {
                                        \"@xsi.type\": \"multi_access_request\",
                                        \"id\": 1695,
                                        \"name\": \"AR\",
                                        \"read_only\": false,
                                        \"access_request\": {
                                            \"id\": 1706,
                                            \"order\": \"AR1\",
                                            \"risk_analysis_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"verifier_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"use_topology\": true,
                                            \"targets\": {
                                                \"target\": {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1705
                                                }
                                            },
                                            \"users\": {
                                                \"user\": [
                                                    \"Any\"
                                                ]
                                            },
                                            \"sources\": {
                                                \"source\": [
                                                    {
                                                        \"@type\": \"INTERNET\",
                                                        \"id\": 1701
                                                    },
                                                    {
                                                        \"@type\": \"DNS\",
                                                        \"id\": 1702,
                                                        \"host_name\": \"www.google.com\",
                                                        \"dns_ip_addresses\": {
                                                            \"ip_address\": \"216.58.214.100\"
                                                        }
                                                    },
                                                    {
                                                        \"@type\": \"IP\",
                                                        \"id\": 1703,
                                                        \"ip_address\": \"1.1.1.1\",
                                                        \"netmask\": \"255.255.255.255\",
                                                        \"nat_ip_address\": \"4.4.4.4\",
                                                        \"nat_netmask\": \"255.255.255.255\"
                                                    }
                                                ]
                                            },
                                            \"destinations\": {
                                                \"destination\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1697
                                                    }
                                                ]
                                            },
                                            \"services\": {
                                                \"service\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1699
                                                    }
                                                ]
                                            },
                                            \"action\": \"Accept\",
                                            \"labels\": \"\"
                                        }
                                    },
                                    {
                                        \"@xsi.type\": \"multi_group_change\",
                                        \"id\": 1707,
                                        \"name\": \"MG\",
                                        \"read_only\": false,
                                        \"implementation_status\": \"NOT_SUPPORTED\"
                                    }
                                ]
                            }
                        }
                    }
                },
                {
                    \"id\": 210,
                    \"name\": \"STEP2 - auto AR with designer /update /commit\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 210,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"unlicensed_devices_for_automation\": {
                                \"unlicensed_device_for_automation\": [
                                    {
                                        \"id\": \"2\",
                                        \"name\": \"asa\"
                                    }
                                ]
                            }
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"multi_access_request\",
                                    \"id\": 1709,
                                    \"name\": \"AR\",
                                    \"read_only\": false,
                                    \"access_request\": {
                                        \"id\": 1720,
                                        \"order\": \"AR1\",
                                        \"risk_analysis_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"verifier_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"use_topology\": true,
                                        \"targets\": {
                                            \"target\": {
                                                \"@type\": \"ANY\",
                                                \"id\": 1719
                                            }
                                        },
                                        \"users\": {
                                            \"user\": [
                                                \"Any\"
                                            ]
                                        },
                                        \"sources\": {
                                            \"source\": [
                                                {
                                                    \"@type\": \"INTERNET\",
                                                    \"id\": 1721
                                                },
                                                {
                                                    \"@type\": \"DNS\",
                                                    \"id\": 1722,
                                                    \"host_name\": \"www.google.com\",
                                                    \"dns_ip_addresses\": {
                                                        \"ip_address\": \"216.58.214.100\"
                                                    }
                                                },
                                                {
                                                    \"@type\": \"IP\",
                                                    \"id\": 1723,
                                                    \"ip_address\": \"1.1.1.1\",
                                                    \"netmask\": \"255.255.255.255\",
                                                    \"nat_ip_address\": \"4.4.4.4\",
                                                    \"nat_netmask\": \"255.255.255.255\"
                                                },
                                                {
                                                    \"@type\": \"RANGE\",
                                                    \"id\": 1724,
                                                    \"range_first_ip\": \"1.1.11.1\",
                                                    \"range_last_ip\": \"1.1.11.10\"
                                                }
                                            ]
                                        },
                                        \"destinations\": {
                                            \"destination\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1711
                                                }
                                            ]
                                        },
                                        \"services\": {
                                            \"service\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1713
                                                }
                                            ]
                                        },
                                        \"action\": \"Accept\",
                                        \"labels\": \"\"
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 210,
            \"name\": \"STEP2 - auto AR with designer /update /commit\"
        },
        \"comments\": \"\"
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2
OUTPUT {
    \"ticket\": {
        \"id\": 2,
        \"subject\": \"Clone Server Policy Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 12,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 109,
            \"name\": \"sc_12705\",
            \"uses_topology\": false
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 78,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 78,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 872,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 869,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 871,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                },
                {
                    \"id\": 79,
                    \"name\": \"Business Approval\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 79,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 876,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 873,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 875,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 79,
            \"name\": \"Business Approval\"
        },
        \"comments\": \"\"
    }
}


Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: No entity found for query","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}","collectionId":"2","id":"2-23-144","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Submit a new ticket to Secure Change","dataMode":"raw","description":" GENERAL USE
When posting a Modify Group ticket, group scope must be configured for FortiManager advanced and Juniper SRX devices.
Juniper SRX devices:
Global address-book will be used unless an existing address-book is given.
Ticket validation will fail in case given Address Book is not configured on the device.
FortiManager advanced devices:
'Any' zone will be used unless an existing zone is given.
Ticket validation will fail in case given zone is not configured on the device.
*Note: Zones and address-books must not be configured for other devices.

Using newly created objects from a different group in the same ticket
The user can add a newly created object from a different group to the selected group, with object_UID equal to the name of the newly created object.
For management devices with hierarchies, the newly created object does not populate other levels of the hierarchies.

Permitted values for @type
Allowed values for @type property included in DestinationDTO and SourceDTO are:
ANY
IP
DNS
Object - Device's existing object
INTERNET
LDAP (SourceDTO only) - LDAP entity

To use a service object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketDTO
closed: Cannot be done from the API [optional]
count [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>topology mode_AR1-with topology_AR2-no topology</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <domain_name>Default</domain_name>
    <workflow>
         <id>7</id>
         <name>Workflow with topology</name>
    </workflow>
    <steps>
         <step>
             <name>Open request</name>
             <tasks>
                 <task>
                     <fields>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_access_request\">
                             <name>Required Access</name>
                             <access_request>
                                 <use_topology>true</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>ASA</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>host_10.100.10.140</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
                                         <management_id>13</management_id>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>h_10.10.10.10</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"PROTOCOL\">
                                         <protocol>TCP</protocol>
                                         <port>80</port>
                                     </service>
                                     <service type=\"APPLICATION_IDENTITY\">
                                         <application_name>Gmail</application_name>
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                             <access_request>
                                 <use_topology>false</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>inside_access_in</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>1.1.1.0</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>network_regi3</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"ANY\">
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                             <name>Business Justification</name>
                             <text>I need access to ftp </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                             <name>Project Number</name>
                             <text>CR124560 </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                             <name>Hyperlink</name>
                             <url>http://192.168.1.1/ticket</url>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                             <name>Change Window</name>
                             <selection>Monday</selection>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                             <name>manager email</name>
                             <text>manager@tufin.com</text>
                         </field>
                     </fields>
                 </task>
             </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>New MG ticket</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <status>In Progress</status>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>6</id>
        <name>MG</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>72</id>
            <name>New step</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>72</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>
                    <status>ASSIGNED</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>262</id>
                            <name>MG</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>ExistingGroup</name>
                                <object_UID>{c862fb6f-1314-45da-9e01-56c9b85d001d}</object_UID>
                                <management_id>58</management_id>
                                <management_name>FMG/root</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>157</id>
                                        <name>10.100 net</name>
                                        <object_UID>{37cdc055-7aac-4385-b46b-cc54d95e4b6d}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.100.0.0/255.255.0.0</object_details>
                                        <management_id>58</management_id>
                                        <management_name>FMG/root</management_name>
                                        <status>NOT_CHANGED</status>
                                        <object_updated_status>EXISTING_EDITED</object_updated_status>
                                        <comment>new_comment</comment>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                            <group_change>
                                <name>78.45.12.0</name>
                                <object_UID>{cac64d34-a05e-4a05-b271-64642eb976ff}</object_UID>
                                <management_id>28</management_id>
                                <management_name>SRX-root-lsys</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>158</id>
                                        <name>78.45.12.1</name>
                                        <object_UID>{7912c335-6dbe-47de-b872-1322f9015b2f}</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>78.45.12.1/255.255.255.255</object_details>
                                        <management_id>28</management_id>
                                        <management_name>SRX-root-lsys</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <address_book>
                                    <name>global</name>
                                </address_book>
                            </group_change>
                            <group_change>
                                <name>10.10.0.0/16</name>
                                <object_UID>{5dff0bd8-51e4-4a83-8138-d54dd18ca52b}</object_UID>
                                <management_id>24</management_id>
                                <management_name>NSX-Distributed Firewall</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>161</id>
                                        <name>10.10.0.0/16</name>
                                        <object_UID>{5d7b826c-f053-40fd-81bd-7a6f44cf15ef}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.10.0.0/255.255.0.0</object_details>
                                        <management_id>24</management_id>
                                        <management_name>NSX-Distributed Firewall</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>test API</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>8</id>
        <name>Modify group</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>11</id>
            <name>Open request</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>11</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>                    <status>DONE</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>137</id>
                            <name>ff</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>port1Group</name>
                                <object_UID>{d5b4459b-6b27-4012-9924-b244c250520f}</object_UID>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"HOST\">
                                        <id>69</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <status>ADDED</status>
                                        <comment/>
                                        <object_updated_status>NEW</object_updated_status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                            <group_change>
                                <name>gfd</name>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>70</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <management_name>10.100.111.8/ADOM_5_2</management_name>
                                        <status>ADDED</status>
                                        <object_updated_status>EXISTING_NOT_EDITED</object_updated_status>
                                    </member>
                                </members>
                                <change_action>CREATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <current_step>
        <id>12</id>
        <name>Copy of Open request</name>
    </current_step>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"application_details\": { \"id\": \"1\" },
        \"subject\": \"topology mode_AR1-with topology_AR2-no topology\",
        \"priority\": \"Normal\",
        \"workflow\": { \"name\": \"ar\" }
    }
}


Response Messages:
400: Application ID is missing.
400: Create closed ticket is enabled only from SecureApp application.
400: The application was already deleted.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: You cannot open a new ticket with an empty subject.
400: Expiration field is required.
400: Submit ticket enabled only with the first step
400: First step can be only with one task
400: The specified workflow does not contain an access request field in the first step.
400: There are no changed connections that are ready for creating a ticket.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
400: Managed tasks are not initialized or done
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (Rule Modification workflow is not supported for this device)
401: You do not have permissions to edit this application.
401: Logged in user: NAME do not have permission to perform on behalf actions
401: You are not a participant in the first step of this workflow
401: UNAUTHORIZED
404: There is no application with the specified ID
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object","folder":"2-23","rawModeData":"{\n\t\"ticket\": {\n\t\t\"application_details\": { \"id\": \"1\" },\n\t\t\"subject\": \"topology mode_AR1-with topology_AR2-no topology\",\n\t\t\"priority\": \"Normal\",\n\t\t\"workflow\": { \"name\": \"ar\" }\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","collectionId":"2","id":"2-23-145","method":"POST"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","name":"Returns the details of a specified tickets (max 100 tickets in a single query)","method":"GET","id":"2-23-146","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
status: The status of the tickets [optional]
count: Tickets list max pagination length (max value is 100) [optional]
start: Offset the count starting point [optional]
desc: Get the list in descending order [optional]
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets?status=In Progress&count=10&start=3&expand_links=false

Response Messages:
400: Status is not a valid. The valid values are: TICKET_STATUSES
400: Can not fetch more than 100 tickets in 1 time
401: Access is denied","folder":"2-23"},{"headers":"Accept: application/json\n","collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/search","name":"Returns a list of tickets by search parameters","method":"GET","id":"2-23-147","description":"If the query is succesful but no results are found (for example, if there is no ticket for the specified Ticket ID) then the return code will be 200 and the results will be empty.

Parameters:
id: The ID number of the ticket as shown in SecureChange [optional]
subject: The subject of the ticket [optional]
requester: The requester of the ticket [optional]
group: The group handling the ticket [optional]
assigned_to: The user name of the person assigned to the ticket [optional]
priority: The priority of the ticket [optional]
status: The status of the ticket [optional]
sla_status: The SLA status of the ticket [optional]
field_name: Field name to search by [optional]
field_value: Field value to search by [optional]
current_step: Current step name [optional]
expiration_date_from: Search requests with expiration date from this date [optional]
expiration_date_to: Search requests with expiration date until this date [optional]
domain_name: The Domain of the ticket [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/search?id=1&status=IN_PROGRESS,REJECTED

Response Messages:
401: Access is denied.
400: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED, WAITING_TO_BE_ASSIGNED, ASSIGNED, WAITING_FOR_MORE_INFO, DONE, INVALID, PENDING, PENDING_LICENS
400: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
400: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
400: Cannot find specified domain <DOMAIN_NAME>","folder":"2-23"},{"name":"Returns topology map image (png file) for specific verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier/topology_map

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.
404: Toplogy map was not found for this field.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier/topology_map","collectionId":"2","id":"2-23-148","method":"GET"},{"headers":"Accept: application/json\n","name":"Get access request verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier","collectionId":"2","id":"2-23-149","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2?expand_links=true

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","collectionId":"2","id":"2-23-150","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4
BODY<task>
     <status>ASSIGNED</status>
     <fields>
         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
             <id>7599</id>
             <name>mf</name>
             <read_only>false</read_only>
             <implementation_status>NOT_STARTED</implementation_status>
             <group_change>
                        <name>ggg</name>
                        <object_UID>{A12AE330-0DBD-11E5-B841-7F0000010E0E}</object_UID>
                        <management_id>42</management_id>
                        <management_name>cp239</management_name>
                        <members>
                             <member type=\"Object\">
                                 <id>8</id>
                                 <name>yaakovs_host</name>
                                 <object_UID>{BDAA378C-C90B-4D12-B598-1AFED2D1DA14}</object_UID>
                                 <object_type>Host</object_type>
                                 <object_details>1.1.1.1/255.255.255.255</object_details>
                         <management_id>42</management_id>
                         <management_name>cp239</management_name>
                                 <status>NOT_CHANGED</status>
                             </member>
                             <member type=\"Object\">
                                 <id>9</id>
                                    <name>Avi_10.100.120.254</name>
                                    <object_UID>{8F195CDC-F426-47B6-9E8A-1FF14C17E54F}</object_UID>
                                     <object_type>Host</object_type>
                                     <object_details>10.100.120.254/255.255.255.255</object_details>
                                     <management_id>42</management_id>
                                     <management_name>cp239</management_name>
                                     <status>NOT_CHANGED</status>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>2.2.2.2/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>3.3.3.3/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                 </members>
                 <change_implementation_status>NOT_RUN</change_implementation_status>
                    </group_change>
            </field>
     </fields>
</task>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/
BODY{
    \"task\": {
        \"id\": 4,
        \"assignee_id\": 4,
        \"assignee\": \"a\",
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 71,
                \"name\": \"Fire Wall Rule\",
                \"read_only\": false,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 4,
                        \"management_name\": \"Panorama/DG_1\",
                        \"management_id\": 4,
                        \"management_ip\": \"10.100.111.120\",
                        \"revision_number\": 1,
                        \"number_of_rules\": 1,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{00-FACED0-00}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"Standard\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                        \"name\": \"Application test\",
                                        \"is_disabled\": false,
                                        \"ruleNumber\": 13,
                                        \"from_zone\": \"any\",
                                        \"to_zone\": \"any\",
                                        \"sourceNetworks\": {
                                            \"@xsi.type\": \"host_network_object\",
                                            \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                            \"name\": \"H_5.3.2.5\",
                                            \"display_name\": \"H_5.3.2.5\",
                                            \"class_name\": \"host_plain\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"comment\",
                                            \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                            \"version_id\": 4,
                                            \"device_type\": \"PaloAltoNetworks\",
                                            \"ip_type\": \"IPV4\",
                                            \"referenced\": \"UNKNOWN\",
                                            \"installable_target\": false,
                                            \"ip\": \"5.3.2.5\",
                                            \"subnet_mask\": \"255.255.255.255\"
                                        },
                                        \"destinationNetworks\": {
                                            \"@xsi.type\": \"host_network_object\",
                                            \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                            \"name\": \"22.22.2.2\",
                                            \"display_name\": \"22.22.2.2\",
                                            \"class_name\": \"host_plain\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"id\": \"5df1f2a5e9023c311ae4a016\",
                                            \"version_id\": 4,
                                            \"device_type\": \"PaloAltoNetworks\",
                                            \"ip_type\": \"IPV4\",
                                            \"referenced\": \"UNKNOWN\",
                                            \"installable_target\": false,
                                            \"ip\": \"22.22.2.2\",
                                            \"subnet_mask\": \"255.255.255.255\"
                                        },
                                        \"destinationServices\": {
                                            \"@xsi.type\": \"transport_service\",
                                            \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                            \"name\": \"TCP82\",
                                            \"display_name\": \"TCP82\",
                                            \"class_name\": \"tcp_service\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"TCP82\",
                                            \"id\": \"5df1f2a5e9023c311ae4a018\",
                                            \"version_id\": 4,
                                            \"referenced\": \"UNKNOWN\",
                                            \"type_on_device\": \"\",
                                            \"negate\": false,
                                            \"match_for_any\": false,
                                            \"timeout\": 0,
                                            \"protocol\": 6,
                                            \"min_port\": 82,
                                            \"max_port\": 82
                                        },
                                        \"applications\": {
                                            \"@xsi.type\": \"single_application\",
                                            \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                            \"name\": \"web-browsing\",
                                            \"display_name\": \"web-browsing\",
                                            \"class_name\": \"application_object\",
                                            \"origin\": \"DEVICE_PREDEFINED\",
                                            \"global\": true,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"service\": [
                                                {
                                                    \"@xsi.type\": \"transport_service\",
                                                    \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                                    \"name\": \"st_implicit_app_web-browsing\",
                                                    \"display_name\": \"st_implicit_app_web-browsing\",
                                                    \"class_name\": \"tcp_service\",
                                                    \"origin\": \"DEVICE\",
                                                    \"global\": false,
                                                    \"implicit\": true,
                                                    \"shared\": false,
                                                    \"comment\": \"\",
                                                    \"id\": \"5df1f2a5e9023c311ae4a014\",
                                                    \"version_id\": 4,
                                                    \"referenced\": \"UNKNOWN\",
                                                    \"type_on_device\": \"\",
                                                    \"negate\": false,
                                                    \"match_for_any\": false,
                                                    \"timeout\": 0,
                                                    \"protocol\": 6,
                                                    \"min_port\": 80,
                                                    \"max_port\": 80
                                                }
                                            ]
                                        },
                                        \"action\": \"ACCEPT\",
                                        \"additional_parameters\": \"\",
                                        \"options\": {
                                            \"option\": \"LOG_SESSION\"
                                        },
                                        \"rule_location\": \"DG_1\",
                                        \"users\": {
                                            \"user\": [
                                                {
                                                    \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                                    \"name\": \"Any\",
                                                    \"class_name\": \"any_object\",
                                                    \"displayName\": \"Any\"
                                                }
                                            ]
                                        },
                                        \"track\": {
                                            \"track_level\": \"LOG\"
                                        },
                                        \"install_ons\": \"\",
                                        \"communities\": \"\",
                                        \"times\": \"\",
                                        \"rule_metadata\": {
                                            \"permissiveness_level\": \"LOW\",
                                            \"violations\": \"\",
                                            \"last_hit\": \"No hits\",
                                            \"shadowed_status\": \"FALSE\",
                                            \"ticket_ids\": \"\",
                                            \"business_owners\": \"\",
                                            \"expirations\": \"\",
                                            \"applications\": \"\",
                                            \"last_modified\": \"Today\"
                                        }
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"id\": 13,
                        \"rule_key\": {
                            \"device_id\": 4,
                            \"binding_uid\": \"{00-FACED0-00}\",
                            \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                        },
                        \"source_modifications\": {
                            \"id\": 26,
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"id\": 89,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 88,
                                            \"uid\": \"e7e4ac52-2fe4-49f7-8071-9638817a7434\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 88,
                                                    \"name\": \"My New Host\",
                                                    \"comment\": \"some comment\",
                                                    \"ip\": \"192.168.0.10\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 91,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 89,
                                            \"uid\": \"13556e3e-1f93-4f95-939c-428a58001615\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"id\": 89,
                                                    \"name\": \"My New Address Ragne\",
                                                    \"comment\": \"some comment\",
                                                    \"min_ip\": \"192.168.0.1\",
                                                    \"max_ip\": \"192.168.0.254\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 90,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 87,
                                            \"uid\": \"1ecb9679-4da4-4fc5-9382-00f5fa455295\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"id\": 87,
                                                    \"name\": \"My New Network\",
                                                    \"comment\": \"some comment\",
                                                    \"ip\": \"192.168.0.0\",
                                                    \"netmask\": \"255.255.255.0\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"id\": 25,
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"id\": 88,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 91,
                                            \"uid\": \"50f35caf-3f13-4961-9ccd-055e1703592a\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 91,
                                                    \"name\": \"Host_10.10.10.10\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"10.10.10.10\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 85,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 90,
                                            \"uid\": \"21342c9a-3974-4bd3-b74b-b142e43ed39a\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"id\": 90,
                                                    \"name\": \"Range-Test\",
                                                    \"comment\": \"\",
                                                    \"min_ip\": \"1.1.2.0\",
                                                    \"max_ip\": \"1.1.2.55\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 86,
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"id\": 86,
                                            \"uid\": \"8fff4c36-da34-4945-be33-ffd5d4d444e2\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 86,
                                                    \"name\": \"22.22.2.2\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"22.22.2.2\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 87,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 85,
                                            \"uid\": \"35ec73ed-e0fa-4690-9570-00b417b63ae6\",
                                            \"device_id\": 2,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"id\": 85,
                                                    \"name\": \"Net_10.108.151.0\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"10.108.151.0\",
                                                    \"netmask\": \"255.255.255.0\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        }
                    }
                },
                \"designer_result\": {
                    \"status\": \"not run\"
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object","folder":"2-23","rawModeData":"{\n\t\"task\": {\n\t\t\"id\": 4,\n\t\t\"assignee_id\": 4,\n\t\t\"assignee\": \"a\",\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 71,\n\t\t\t\t\"name\": \"Fire Wall Rule\",\n\t\t\t\t\"read_only\": false,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\t\t\"management_id\": 4,\n\t\t\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"id\": 13,\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"id\": 26,\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"e7e4ac52-2fe4-49f7-8071-9638817a7434\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"13556e3e-1f93-4f95-939c-428a58001615\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"1ecb9679-4da4-4fc5-9382-00f5fa455295\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"id\": 25,\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"50f35caf-3f13-4961-9ccd-055e1703592a\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"21342c9a-3974-4bd3-b74b-b142e43ed39a\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"8fff4c36-da34-4945-be33-ffd5d4d444e2\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"35ec73ed-e0fa-4690-9570-00b417b63ae6\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"designer_result\": {\n\t\t\t\t\t\"status\": \"not run\"\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","collectionId":"2","id":"2-23-151","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of the tasks","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks","collectionId":"2","id":"2-23-152","method":"GET"}],"order":[],"name":"Tufin Tufin SecureChange/SecureApp R19-3-GA","id":"2","description":"Tufin Orchestration Suite - Tufin SecureChange/SecureApp APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securechangeworkflow/apidoc"} \ No newline at end of file diff --git a/Postman Format v1/R19-3 postman collection/securetrack_R19-3-GA.json b/Postman Format v1/R19-3 postman collection/securetrack_R19-3-GA.json new file mode 100644 index 0000000..8e6103a --- /dev/null +++ b/Postman Format v1/R19-3 postman collection/securetrack_R19-3-GA.json @@ -0,0 +1 @@ +{"folders":[{"order":["1-1-1","1-1-2","1-1-3","1-1-4"],"collectionId":"1","name":"Additional Policy Fields","hasRequests":true,"id":"1-1"},{"order":["1-2-5","1-2-6","1-2-7","1-2-8"],"collectionId":"1","name":"Application IDs","hasRequests":true,"id":"1-2"},{"order":["1-3-9","1-3-10"],"collectionId":"1","name":"Change Authorization","hasRequests":true,"id":"1-3"},{"order":["1-4-11","1-4-12","1-4-13"],"collectionId":"1","name":"Change Windows","hasRequests":true,"id":"1-4"},{"order":["1-5-14","1-5-15","1-5-16","1-5-17","1-5-18"],"collectionId":"1","name":"Device Interfaces and Zones","hasRequests":true,"id":"1-5"},{"order":["1-6-19","1-6-20","1-6-21","1-6-22"],"collectionId":"1","name":"Domains","hasRequests":true,"id":"1-6"},{"order":["1-7-23"],"collectionId":"1","name":"General Properties","hasRequests":true,"id":"1-7"},{"order":["1-8-24","1-8-25","1-8-26","1-8-27"],"collectionId":"1","name":"IPsec VPN","hasRequests":true,"id":"1-8"},{"order":["1-9-28","1-9-29","1-9-30","1-9-31","1-9-32"],"collectionId":"1","name":"Internet Objects","hasRequests":true,"id":"1-9"},{"order":["1-10-33","1-10-34","1-10-35","1-10-36"],"collectionId":"1","name":"LDAP","hasRequests":true,"id":"1-10"},{"order":["1-11-37","1-11-38","1-11-39","1-11-40","1-11-41","1-11-42","1-11-43","1-11-44","1-11-45","1-11-46","1-11-47"],"collectionId":"1","name":"Monitored Devices","hasRequests":true,"id":"1-11"},{"order":["1-12-48","1-12-49","1-12-50"],"collectionId":"1","name":"NAT Policies","hasRequests":true,"id":"1-12"},{"order":["1-13-51","1-13-52","1-13-53","1-13-54","1-13-55","1-13-56","1-13-57"],"collectionId":"1","name":"Network Objects","hasRequests":true,"id":"1-13"},{"order":["1-14-58","1-14-59","1-14-60","1-14-61","1-14-62","1-14-63","1-14-64","1-14-65","1-14-66","1-14-67","1-14-68","1-14-69","1-14-70","1-14-71","1-14-72","1-14-73","1-14-74","1-14-75","1-14-76","1-14-77","1-14-78"],"collectionId":"1","name":"Network Topology","hasRequests":true,"id":"1-14"},{"order":["1-15-79","1-15-80","1-15-81"],"collectionId":"1","name":"Network Zone Manager - Patterns","hasRequests":true,"id":"1-15"},{"order":["1-16-82","1-16-83","1-16-84","1-16-85","1-16-86","1-16-87","1-16-88"],"collectionId":"1","name":"Network Zone Manager - Subnets","hasRequests":true,"id":"1-16"},{"order":["1-17-89","1-17-90","1-17-91","1-17-92","1-17-93","1-17-94","1-17-95","1-17-96","1-17-97","1-17-98","1-17-99","1-17-100","1-17-101","1-17-102","1-17-103","1-17-104"],"collectionId":"1","name":"Network Zone Manager - Zones","hasRequests":true,"id":"1-17"},{"order":["1-18-105","1-18-106","1-18-107","1-18-108","1-18-109","1-18-110"],"collectionId":"1","name":"Policies and Sub-Policies","hasRequests":true,"id":"1-18"},{"order":["1-19-111"],"collectionId":"1","name":"Policy Analysis","hasRequests":true,"id":"1-19"},{"order":["1-20-112","1-20-113","1-20-114","1-20-115","1-20-116","1-20-117"],"collectionId":"1","name":"Policy Browser (formerly Rule Documentation)","hasRequests":true,"id":"1-20"},{"order":["1-21-118","1-21-119","1-21-120","1-21-121","1-21-122","1-21-123","1-21-124","1-21-125"],"collectionId":"1","name":"Policy Optimization","hasRequests":true,"id":"1-21"},{"order":["1-22-126","1-22-127","1-22-128"],"collectionId":"1","name":"Revisions","hasRequests":true,"id":"1-22"},{"order":["1-23-129","1-23-130"],"collectionId":"1","name":"Rule Usage","hasRequests":true,"id":"1-23"},{"order":["1-24-131","1-24-132","1-24-133","1-24-134","1-24-135","1-24-136","1-24-137","1-24-138"],"collectionId":"1","name":"Security Rules","hasRequests":true,"id":"1-24"},{"order":["1-25-139","1-25-140","1-25-141","1-25-142","1-25-143","1-25-144","1-25-145"],"collectionId":"1","name":"Services and Ports","hasRequests":true,"id":"1-25"},{"order":["1-26-146","1-26-147","1-26-148"],"collectionId":"1","name":"Time Objects","hasRequests":true,"id":"1-26"},{"order":["1-27-149"],"collectionId":"1","name":"Traffic Policy Matcher","hasRequests":true,"id":"1-27"},{"order":["1-28-150","1-28-151","1-28-152","1-28-153","1-28-154"],"collectionId":"1","name":"Unified Security Policy - Access Request Violations","hasRequests":true,"id":"1-28"},{"order":["1-29-155","1-29-156","1-29-157","1-29-158","1-29-159"],"collectionId":"1","name":"Unified Security Policy - Alerts","hasRequests":true,"id":"1-29"},{"order":["1-30-160","1-30-161","1-30-162","1-30-163","1-30-164","1-30-165","1-30-166","1-30-167"],"collectionId":"1","name":"Unified Security Policy - Cloud Tag Policy","hasRequests":true,"id":"1-30"},{"order":["1-31-168","1-31-169","1-31-170","1-31-171","1-31-172","1-31-173","1-31-174","1-31-175"],"collectionId":"1","name":"Unified Security Policy - Exceptions","hasRequests":true,"id":"1-31"},{"order":["1-32-176","1-32-177","1-32-178","1-32-179","1-32-180"],"collectionId":"1","name":"Unified Security Policy - Security Zone Matrix","hasRequests":true,"id":"1-32"},{"order":["1-33-181","1-33-182"],"collectionId":"1","name":"Unified Security Policy - Violations","hasRequests":true,"id":"1-33"}],"requests":[{"headers":"Accept: application/json\n","name":"Get all URL Categories by revision.","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"}],"dataMode":"params","description":"Fetches list of URL Categories defined in a revision given by ID.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories","collectionId":"1","id":"1-1-1","method":"GET"},{"headers":"Accept: application/json\n","name":"Get additional parameters identities by revision","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"}],"dataMode":"params","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
type: Additional parameter type [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group

Response Messages:
200: Successful
400: Invalid request","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters","collectionId":"1","id":"1-1-2","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific additional parameter identity","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Additional parameter IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters/{{ids}}","collectionId":"1","id":"1-1-3","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a URL Category.","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more URL Categories.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Url Category IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories/{{ids}}","collectionId":"1","id":"1-1-4","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific application identity","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
Note: This API retrieves the information from the latest revision.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
id: Device ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/1/applications/701
","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications/{{ids}}","collectionId":"1","id":"1-2-5","method":"GET"},{"headers":"Accept: application/json\n","name":"Get application identities by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of applications defined on device given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 50,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications","collectionId":"1","id":"1-2-6","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific application identity","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760
","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/applications/{{ids}}","collectionId":"1","id":"1-2-7","method":"GET"},{"headers":"Accept: application/json\n","name":"Get applications identities by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of applications defined in a revision given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 1,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/applications","collectionId":"1","id":"1-2-8","method":"GET"},{"headers":"Accept: application/json\n","name":"Determine if changes between two revisions are authorized","data":[{"value":null,"type":"text","enabled":true,"key":"new_version"},{"value":null,"type":"text","enabled":true,"key":"old_version"}],"dataMode":"params","description":"This API checks for unauthorized changes between any two versions of a firewall policy.
The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets.
The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket.

The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove).
The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes.

Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing.
Note 2: Use the ID returned by the /revisions API for new_version and old_version.
Note 3: The default value for traffic_details and ignore_tickets is false.
Note 4: Traffic that is handled by an implicit rule will not have a rule ID.

Parameters:
new_version: New version ID
old_version: Old version ID
traffic_details: Return unauthorized traffic change details for all modified rules [optional]
ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional]

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true

Response Messages:
200: Change authorization has been successfully calculated
400: Input parameters are not valid
400: Could not find the requested revisions for comparison","folder":"1-3","url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/","collectionId":"1","id":"1-3-9","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Compare revisions on two different devices in terms of traffic.","dataMode":"raw","description":"This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic.
The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions.
The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions.
Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared.
Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules
Note 3: The format of the result is the same as the one returned by /change_authorization
Note 4: The API accepts in request body only one pair of oldId - newId map
Note 5: The request is valid only if the mapping ids are found in the active policies

Parameters:
body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions.

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison
BODY{
    \"policy_traffic_comparison_request\": {
        \"oldVersionId\": \"234\",
        \"newVersionId\": \"179\",
        \"oldId2newIdMap\": [
            {
                \"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",
                \"newId\" : \"{00-FACED0-00}\"
            }
        ],
        \"withTraffic\": true
    }
}


Response Messages:
200: Policies diff was successfully calculated
400: Could not find the requested revisions for comparison","folder":"1-3","rawModeData":"{\n\t\"policy_traffic_comparison_request\": {\n\t\t\"oldVersionId\": \"234\",\n\t\t\"newVersionId\": \"179\",\n\t\t\"oldId2newIdMap\": [\n\t\t\t{\n\t\t\t\t\"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",\n\t\t\t\t\"newId\" : \"{00-FACED0-00}\"\n\t\t\t}\n\t\t],\n\t\t\"withTraffic\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/policyTrafficComparison","collectionId":"1","id":"1-3-10","method":"POST"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/","name":"Get name and status for all change windows","method":"GET","id":"1-4-11","description":"Retrieves a list of all change windows.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
start: Starting result for query allowable value is numeric [optional]
count: Number of change windows for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true
OUTPUT {
    \"change_windows\": {
        \"count\": 2,
        \"total\": 2,
        \"change_window\": [
            {
                \"uuid\": \"6ae41504-a95c-4f23-98a2-f18b2efadb9d\",
                \"name\": \"cw1\",
                \"domain_id\": 1,
                \"enabled\": true
            },
            {
                \"uuid\": \"fc7b167c-29ea-49a1-9ee3-efb6d1351343\",
                \"name\": \"cw2\",
                \"domain_id\": 1,
                \"enabled\": true
            }
        ]
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context ","folder":"1-4"},{"headers":"Accept: application/json\n","name":"Get scheduling and device details for a specific change window","data":[{"value":null,"type":"text","enabled":true,"key":"uid"},{"value":null,"type":"text","enabled":true,"key":"task_id"}],"dataMode":"params","description":"Retrieves scheduling and device details for a specific change window.

Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
task_id: Task Id

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1
OUTPUT {
    \"commit_task\": {
        \"id\": 1,
        \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
        \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
        \"errors\": \"\",
        \"device_commits\": {
            \"device_commit\": [
                {
                    \"id\": 1,
                    \"result\": {
                        \"errors\": {
                            \"error\": \"got_error_from_dcs\"
                        },
                        \"device\": {
                            \"id\": 17,
                            \"status\": \"FAILURE\",
                            \"revision_id\": 1,
                            \"errors\": {
                                \"error\": \"Login error\"
                            }
                        }
                    }
                },
                {
                    \"id\": 2,
                    \"result\": {
                        \"errors\": \"\",
                        \"device\": {
                            \"id\": 19,
                            \"status\": \"SUCCESS_WITH_WARNINGS\",
                            \"revision_id\": 1,
                            \"warnings\": {
                                \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                            }
                        }
                    }
                }
            ]
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain
404: Fail to find task for change window ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks/{{task_id}}","collectionId":"1","id":"1-4-12","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a list of completed policy changes for a specific change window","data":[{"value":null,"type":"text","enabled":true,"key":"uid"}],"dataMode":"params","description":"Retrieves a list of completed policy changes for a specific change window.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
start: Starting result for query allowable value is numeric [optional]
count: Number of tasks for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true
OUTPUT {
    \"commit_tasks\": {
        \"count\": 1,
        \"total\": 1,
        \"commit_task\": {
            \"id\": 1,
            \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
            \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
            \"errors\": \"\"
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks","collectionId":"1","id":"1-4-13","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network interfaces by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/10/interfaces
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/interfaces","collectionId":"1","id":"1-5-14","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network interfaces by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/interfaces
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/interfaces","collectionId":"1","id":"1-5-15","method":"GET"},{"headers":"Accept: application/json\n","name":"Get device zones by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/787/zones
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/zones","collectionId":"1","id":"1-5-16","method":"GET"},{"headers":"Accept: application/json\n","name":"Get zones and network interfaces that participate in sub-policies","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/bindable_objects
","dataMode":"params","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindable_objects","collectionId":"1","id":"1-5-17","method":"GET"},{"headers":"Accept: application/json\n","name":"Get device zones by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/zones
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/zones","collectionId":"1","id":"1-5-18","method":"GET"},{"headers":"Accept: application/json\n","name":"Get domain","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Domain id

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
401: User not permitted to access domains
400: Domain with ID was not found","dataMode":"params","folder":"1-6","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","collectionId":"1","id":"1-6-19","method":"GET"},{"name":"Update a domain","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Domain id
body [optional]

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
401: User not permitted to access domains
400: Domain with ID was not found
400: Domain with this name already exists
400: Domain name is empty
400: Default domain cannot be changed","dataMode":"params","folder":"1-6","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","collectionId":"1","id":"1-6-20","method":"PUT"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","name":"Get all domains","method":"GET","id":"1-6-21","description":"

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
401: User not permitted to access domains","folder":"1-6"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","name":"Add a domain","method":"POST","id":"1-6-22","description":"Parameters:
body [optional]

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
401: User not permitted to access domains
400: Domain with this name already exists
400: Domain name is empty","folder":"1-6"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/properties/","name":"Get general properties","method":"GET","id":"1-7-23","description":"

Usage Example
URLhttps://192.168.1.1/securetrack/api/properties
OUTPUT{
    \"properties\": {
        \"sc_addresses\": {
            \"sc_address\": [
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"external\"
                },
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"internal\"
                }
            ]
        }
    }
}


Response Messages:
401: User not permitted to view properties","folder":"1-7"},{"headers":"Accept: application/json\n","name":"Get Cisco cryptographic maps by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://191.168.1.1/securetrack/api/revisions/18/crypto_maps
","dataMode":"params","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/crypto_maps","collectionId":"1","id":"1-8-24","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco IPsec policy and peers","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"outputInterfaceName"}],"dataMode":"params","description":"Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config.
You can retrieve the interface names by calling the /devices/id/interfaces API.

Parameters:
device_id: The unique identifier of target device
outputInterfaceName: Interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1
","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_tunnels","collectionId":"1","id":"1-8-25","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Check Point VPN (IPSec) communities and gateways","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities.
Works on clusters and gateways, not on management servers.

Parameters:
device_id: The unique identifier of target device

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities
","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_communities","collectionId":"1","id":"1-8-26","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco cryptographic maps by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/19/crypto_maps
","dataMode":"params","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/crypto_maps","collectionId":"1","id":"1-8-27","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Create new Internet representation for a device","dataMode":"raw","description":"The internet referral lets you represent the Internet as an object on a device.
See REST API: /internet_referral/{deviceId:[0-9]+}/object for a description of how internet referral is resolved.

Parameters:
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_2.2.2.2\"
    }
}


Response Messages:
201: Internet referral configuration was created
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
400: Internet referral configuration for given device ID already exists
401: Access is denied.","folder":"1-9","rawModeData":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_2.2.2.2\"\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/","collectionId":"1","id":"1-9-28","method":"POST"},{"name":"Delete Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration was deleted
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration for device ID does not exist
401: Access is denied.","dataMode":"params","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-29","method":"DELETE"},{"name":"Get Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Internet referral configuration was not found for device ID
401: Access is denied.","dataMode":"params","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-30","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"raw","description":"Updates the Internet referral configuration for the device.
If there was no previous configuration, it will be created.

Parameters:
deviceId: SecureTrack Device ID
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_10.11.73.1\"
    }
}


Response Messages:
200: Internet referral configuration was updated
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
401: Access is denied.","folder":"1-9","rawModeData":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_10.11.73.1\"\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-31","method":"PUT"},{"name":"Get resolved Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"params","description":"The order of precedence used to resolve the Internet object is:
Step 1: Identify the Internet referral:
Search for a defined Internet referral on the specified device.
If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral.
If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2.
If an Internet referral is not found, it resolves to “Any”.
Step 2: Resolve the object by name:
Search the specified device for a defined network object that matches the name returned in Step 1.
If a matching network object is not found, an error will be returned.

Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2/object

Response Messages:
200: Resolved Internet referral object for device is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Configured object was not found on the device
401: Access is denied.","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}/object","collectionId":"1","id":"1-9-32","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getBaseDNEntry","name":"Get the base DN entry details","method":"GET","id":"1-10-33","description":"The returned \"base DN\" is used by GetEntriesByNames API as the search start entry.



Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getBaseDNEntry
OUTPUT{
    \"ldap_entry\": {
        \"dn\": \"DC=tufintest,DC=com\",
        \"uid\": \"nABbRP/lPUKlteNRI4j6iA==\"
    }
}


Response Messages:
200: OK
404: Base Entry cannot be found
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Return LDAP entries which match the given search criteria","dataMode":"raw","description":"Return list of LDAP entries which match the given search criteria according to the search mode (EXACT, CONTAINS, STARTS_WITH, ENDS_WITH).
The search is case insensitive.
The limit of max_search_result is 1000.

Parameters:
body: Search criteria

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/search
BODY{
    \"search_criteria\": {
        \"search_base_dn\": \"DC=tufintest,DC=com\",
        \"search_text\": \"test\",
        \"ldap_search_options\": {
            \"ldap_entry_types\": {
                \"ldap_entry_type\": [
                    \"OU\",
                    \"USER\"
                ]
            },
            \"search_mode\": \"CONTAINS\",
            \"max_search_result\": 3
        }
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
            {
                \"dn\": \"CN=User15ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"ZRuKW3XqIEOIxCwlfgJQYA==\",
                \"displayName\": \"User15ATTesting1\"
            },
            {
                \"dn\": \"CN=IWAM_TEST2003,CN=Users,DC=tufintest,DC=com\",
                \"uid\": \"bYVqqcZXsUSF51hiP4W7Yw==\",
                \"displayName\": \"Testing1\"
            },
            {
                \"dn\": \"CN=User1ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"2ma3TrgeHEWQDITwvcRqlg==\",
                \"displayName\": \"test\"
            }
            ]
        },
            \"has_more_results_to_return\": \"true\"
        }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal or invalid value)
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","rawModeData":"{\n\t\"search_criteria\": {\n\t\t\"search_base_dn\": \"DC=tufintest,DC=com\",\n\t\t\"search_text\": \"test\",\n\t\t\"ldap_search_options\": {\n\t\t\t\"ldap_entry_types\": {\n\t\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\t\"OU\",\n\t\t\t\t\t\"USER\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"search_mode\": \"CONTAINS\",\n\t\t\t\"max_search_result\": 3\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/search","collectionId":"1","id":"1-10-34","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Return entries that exactly match one of the given strings","dataMode":"raw","description":"Return list of LDAP entries which match the exact given multiple search_text.

Parameters:
body: Names to search

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntriesByNames
BODY{
    \"search_by_name_criteria\": {
        \"search_texts\": {
            \"search_text\": [
                \"Finance\",
                \"Marketing\",
                \"Management\"
            ]
        },
        \"ldap_entry_types\": {
            \"ldap_entry_type\": [
                \"GROUP\"
            ]
        },
        \"max_search_result\": 20
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Finance,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"uOvJTpYRD0aTjEENA87N5A==\",
                    \"displayName\": \"Finance\"
                },
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Management,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"jdf778skfsgs730fksdHHs==\",
                    \"displayName\": \"Management\"
                }
            ]
        },
        \"has_more_results_to_return\": false
    }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal value)
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","rawModeData":"{\n\t\"search_by_name_criteria\": {\n\t\t\"search_texts\": {\n\t\t\t\"search_text\": [\n\t\t\t\t\"Finance\",\n\t\t\t\t\"Marketing\",\n\t\t\t\t\"Management\"\n\t\t\t]\n\t\t},\n\t\t\"ldap_entry_types\": {\n\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\"GROUP\"\n\t\t\t]\n\t\t},\n\t\t\"max_search_result\": 20\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntriesByNames","collectionId":"1","id":"1-10-35","method":"POST"},{"headers":"Accept: application/json\n","name":"Get LDAP entry details by DN","data":[{"value":null,"type":"text","enabled":true,"key":"dn"}],"dataMode":"params","description":"Returns the UID, DN and Name of a LDAP entry specified by the DN.

Parameters:
dn: LDAP DN

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntryByDN?dn=CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com
OUTPUT{
    \"ldap_entry\": {
        \"uid\": \"mYbWQms7p0q5YinEyW5Byw==\",
        \"dn\": \"CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com\",
        \"name\": \"Manufacturing\"
    }
}


Response Messages:
200: OK
400: Invalid DN format
404: Entry matching the DN cannot be found
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntryByDN","collectionId":"1","id":"1-10-36","method":"GET"},{"headers":"Accept: application/json\n","name":"Get textual configuration by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns textual configuration for the specified revision Id.


Parameters:
context: Global MSSP context [optional]
id: Revision id

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/config
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/config","collectionId":"1","id":"1-11-37","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","name":"Get devices","method":"GET","id":"1-11-38","description":"Returns the list of devices that are configured in SecureTrack, including the vendor, model, name, domain and device ID.
The results can be sorted by ip, name, vendor and model.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
name: Device name [optional]
ip: Device IP address [optional]
vendor: Device vendor [optional]
model: Device model [optional]
sort: Sort ascending or descending allowable types are: asc or desc [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices

Usage Example
https://192.168.1.1/securetrack/api/devices?vendor=VMware

Usage Example
https://192.168.1.1/securetrack/api/devices?sort=ip:asc

Usage Example
https://192.168.1.1/securetrack/api/devices?show_os_version=true
","folder":"1-11"},{"headers":"Content-Type: application/xml\n","name":"Add offline device","dataMode":"raw","description":"You can choose to select the domain either by name or id using the domain_id or domain_name tags.\nDevice name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
body: Device to be added

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices
BODY<device>
     <model>asa</model>
     <vendor>Cisco</vendor>
     <domain_id>1</domain_id>
     <domain_name>Default</domain_name>
     <name>API OFFLINE ASA1</name>
     <offline>true</offline>
     <topology>true</topology>
</device>

","folder":"1-11","rawModeData":"\n\t asa \n\t Cisco\n\t 1\n\t Default\n\t API OFFLINE ASA1\n\t true\n\t true\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","collectionId":"1","id":"1-11-39","method":"POST"},{"headers":"Accept: application/json\n","name":"Get textual configuration by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get latest revision of running configuration for a given device Id.


Parameters:
context: global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/111/config
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/config","collectionId":"1","id":"1-11-40","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Edit Securetrack device","dataMode":"raw","description":"Use this API to edit the settings of a management device, including changing multiple parameters in the same call.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
Note: This API cannot be used to edit SecureTrack Domains and SecureTrack Servers.
This API verifies connection to the provided device, before updating a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be updated.
Only \"live\" device with correct credentials can be updated using this API.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"device_id\": 1,
             \"display_name\": \"CheckPoint-R77-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.1\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"authentication_mode\": \"LEA\",
                 \"lea_authentication_mode\": \"ssl_opsec\",
                 \"lea_authentication_port\": \"2488\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 2,
             \"display_name\": \"CheckPoint-R80-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.2\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 3,
             \"display_name\": \"Cisco-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"enable_password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 4,
             \"display_name\": \"PaloAlto-PanoramaNg-Device\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 5,
             \"display_name\": \"PaloAlto-DeviceGroup\"
         },
         {
             \"device_id\": 6,
             \"display_name\": \"PaloAlto-FireWall-Device\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         },
         {
             \"device_id\": 7,
             \"display_name\": \"Spain-FortiManager\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 8,
             \"display_name\": \"FortiManager-Adom\"
         },
         {
             \"device_id\": 9,
             \"display_name\": \"FortiManager-FireWall\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n\t\t \"devices\": [{\n\t\t\t \"device_id\": 1,\n\t\t\t \"display_name\": \"CheckPoint-R77-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.1\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"authentication_mode\": \"LEA\",\n\t\t\t\t \"lea_authentication_mode\": \"ssl_opsec\",\n\t\t\t\t \"lea_authentication_port\": \"2488\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 2,\n\t\t\t \"display_name\": \"CheckPoint-R80-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 3,\n\t\t\t \"display_name\": \"Cisco-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"enable_password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 4,\n\t\t\t \"display_name\": \"PaloAlto-PanoramaNg-Device\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 5,\n\t\t\t \"display_name\": \"PaloAlto-DeviceGroup\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 6,\n\t\t\t \"display_name\": \"PaloAlto-FireWall-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 7,\n\t\t\t \"display_name\": \"Spain-FortiManager\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 8,\n\t\t\t \"display_name\": \"FortiManager-Adom\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 9,\n\t\t\t \"display_name\": \"FortiManager-FireWall\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t }\n\t\t]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","collectionId":"1","id":"1-11-41","method":"PATCH"},{"headers":"Content-Type: application/json\n","name":"Add devices to SecureTrack","dataMode":"raw","description":"Use this API to add a single device or a list of devices to SecureTrack.
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
Currently supported types: CMA, SMC, ASA, Panorama NG and FortiManager.

This API verifies connection to the provided device, before adding a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be added.
Only \"live\" device with correct credentials can be added using this API.
To add Checkpoint R77 devices, use \"r80_version\" : \"false\".


Parameters:
body: device_list

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"r80_version\":\"false\"
             }
         },
         {
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"user_name\":\"admin\",
                 \"password\":\"1234\",
                 \"r80_version\":\"true\"
             }
         },
         {
             \"model\":\"ASA\",
             \"vendor\":\"Cisco\",
             \"securetrack_domain\":\"Domain-A\",
             \"display_name\":\"Ireland-ASA\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
             \"enable_virtual_contexts\":\"true\",
             \"import_all\":\"false\",
             \"import_devices\":
                     [\"VC1\",\"VC2\"],
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"collect_dynamic_topology\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"enable_password\":\"st-enable-password\"
             }
         },
         {
             \"model\":\"Panorama\",
             \"vendor\":\"PaloAltoNetworks\",
             \"display_name\":\"First-Device-example\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"model\":\"FortiManager\",
             \"vendor\":\"Fortinet\",
             \"display_name\":\"Spain-FortiManager\",
             \"securetrack_server\":\"RemoteControlServerName\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_all\": \"false\",
                 \"import_devices\": [
                         {
                 \"name\": \"AdomX\",
                 \"import_all\": \"false\",
                 \"managed_devices\": [\"FW1\"]
                        }
                    ]
                }
            }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n \t\t \"devices\": [{ \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"r80_version\":\"false\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"user_name\":\"admin\",\n \t\t\t\t \"password\":\"1234\",\n \t\t\t\t \"r80_version\":\"true\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"ASA\",\n \t\t\t \"vendor\":\"Cisco\",\n \t\t\t \"securetrack_domain\":\"Domain-A\",\n \t\t\t \"display_name\":\"Ireland-ASA\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t \"enable_virtual_contexts\":\"true\",\n \t\t\t \"import_all\":\"false\",\n \t\t\t \"import_devices\": \n \t\t\t\t\t [\"VC1\",\"VC2\"],\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"enable_password\":\"st-enable-password\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"Panorama\",\n \t\t\t \"vendor\":\"PaloAltoNetworks\",\n \t\t\t \"display_name\":\"First-Device-example\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t {\n \t\t\t \"model\":\"FortiManager\",\n \t\t\t \"vendor\":\"Fortinet\",\n \t\t\t \"display_name\":\"Spain-FortiManager\",\n \t\t\t \"securetrack_server\":\"RemoteControlServerName\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_all\": \"false\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t\t { \n \t\t\t\t \"name\": \"AdomX\",\n \t\t\t\t \"import_all\": \"false\", \n \t\t\t\t \"managed_devices\": [\"FW1\"]\n \t\t\t\t\t\t}\n \t\t\t\t\t]\n \t\t\t\t}\n \t\t\t}\n \t\t]\n \t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","collectionId":"1","id":"1-11-42","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Import managed devices","dataMode":"raw","description":"Use this API to import more managed devices to SecureTrack.
The following devices can be added: Device Groups (for Panorama), Administrative Domains (for FortiManager).\nCurrently supported types: Panorama, FortiManager, Cisco ASA.
Please see examples below per device id: device id 1 for Panorama, device 2 for FortiManager, device id 3 for Cisco ASA.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk/import
BODY{
     \"devices_list\":{
         \"devices\":[
         {
             \"device_id\":\"1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"device_id\":\"2\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [
                     {
                         \"name\":\"Adom1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"firewall1\", \"firewall2\"]
                     },
                     {
                         \"name\":\"Adom2\",
                         \"import_all\":\"true\"
                     }
                 ]
             }
         },
         {
             \"device_id\":\"3\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"]
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n \t\t \"devices\":[ \n \t\t { \n \t\t\t \"device_id\":\"1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"2\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"firewall1\", \"firewall2\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"3\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"] \n \t\t\t }\n \t\t }\n \t\t]\n \t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/import","collectionId":"1","id":"1-11-43","method":"POST"},{"headers":"Accept: application/json\n","name":"Get specific task results of bulk operations on devices","data":[{"value":null,"type":"text","enabled":true,"key":"task_uid"}],"dataMode":"params","description":"Use this API to track and display the current progress of the devices being edited or added to\nSecureTrack for a specific Task ID.
For a list of devices, the status of each device is displayed.

A device that was not added due to some reason will be added to \"failed\" list with status element containing a description.
For example:
\"description\": \"No connection to device\".

Parameters:
task_uid: Task UID

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk/tasks/d7e88799-a6e5-45da-8c72-c979a5dbe235
OUTPUT{
    \"task_result\":{
        \"total_succeeded\":\"0\",
        \"total_in_progress\":\"2\",
        \"total_failed\":\"0\",
        \"succeeded\":{
            \"count\":\"0\"
        },
        \"in_progress\":{
            \"count\":\"2\",
            \"devices\":[
                {
                    \"device_id\":\"1\",
                    \"display_name\":\"Europe-CMA\",
                    \"ip_address\":\"192.168.1.1\",
                    \"status\":{
                    }
                },
                {
                    \"device_id\":\"2\",
                    \"display_name\":\"Ireland-ASA\",
                    \"ip_address\":\"172.16.1.1\",
                    \"status\":{
                    }
                }
            ]
        },
        \"failed\":{
            \"count\":\"0\"
        }
    }
}


Response Messages:
404: The task with the given UID was not found
400: Bad request
200: Accepted
408: Request timed out
500: Internal server error","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/tasks/{{task_uid}}","collectionId":"1","id":"1-11-44","method":"GET"},{"name":"Add configuration for offline device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"configuration_file"}],"description":"Parameters:
device_id: Device ID
configuration_file: Configuration File

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"device_id=1\" https://192.168.1.1/securetrack/api/tasks/add_device_config_task

Response Messages:
200: Configuration added successfully.","dataMode":"params","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/tasks/add_device_config_task","collectionId":"1","id":"1-11-45","method":"POST"},{"headers":"Accept: application/json\n","name":"Get specific device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the vendor, model, name, domain and ID for the specified device.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
id: Device ID
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/60

Usage Example
https://192.168.1.1/securetrack/api/devices/20?show_os_version=true
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}","collectionId":"1","id":"1-11-46","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update offline device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"raw","description":"Device name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
device_id: Device ID
body: Device to be updated

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/1
BODY<device>
     <name>API OFFLINE ASA2</name>
     <topology>true</topology>
</device>

","folder":"1-11","rawModeData":"\n\t API OFFLINE ASA2\n\t true\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}","collectionId":"1","id":"1-11-47","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get NAT objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches a list of NAT objects defined on device given by device ID
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable value is numeric [optional]
count: Starting page for query allowable value is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects?get_total=true
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_objects","collectionId":"1","id":"1-12-48","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of NAT rules for device given by device ID

input_interface and output_interface are not supported for Panorama running in Advanced management mode
nat_stage is supported for Netscreen and JunOS
nat_type is supported for FortiManager
Note: For Check Point, NAT rules are available from the modules (not managements)
Note: For Palo Alto, filtering NAT rules by interface is only available for firewall devices

Parameters:
context: Global MSSP context [optional]
id: Device ID
input_interface: Input interface for NAT rules, \"any\" for all interfaces [optional]
output_interface: output interface for NAT rules, \"any\" for all interfaces [optional]
nat_stage: NAT stage for NAT rules allowable values: \"pre_policy\" , \"post_policy\" or \"both\" [optional]
nat_type: NAT stage for NAT rules allowable values: \"vip\" or \"reverse_vip\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/10/nat_rules/bindings?input_interface=Any
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_rules/bindings","collectionId":"1","id":"1-12-49","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches a list of NAT objects for a given revision
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Version ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects?get_total=true
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/nat_objects","collectionId":"1","id":"1-12-50","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of network objects defined on device given by ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169178,
                \"name\": \"Access_role\",
                \"display_name\": \"Access_role\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": false,
                \"comment\": \"\",
                \"uid\": \"{FC267948-DA8C-4FB6-A736-76B5254BF825}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14320,
                        \"name\": \"ad_group_auto_30K_grp1\",
                        \"display_name\": \"auto_30K_grp1\",
                        \"class_name\": \"ad_group\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{CAB92DCC-CF63-4E47-B8E3-1E1231996D5E}\",
                        \"dn\": \"CN=auto_30K_grp1,OU=OU_30K_Groups,DC=rnd,DC=local\"
                    }
                }
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/network_objects","collectionId":"1","id":"1-13-51","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific network object","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches a single or partial list of the network objects for a given device ID.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects/169184?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169184,
            \"name\": \"Access_Role_@grp\",
            \"display_name\": \"Access_Role_@grp\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{1870612C-0922-4AEE-81FF-5472DB7C32E1}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14338,
                    \"name\": \"ad_group_grp\",
                    \"display_name\": \"@grp\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{C5740C23-F36E-4D2E-8B17-1F99C239C12A}\",
                    \"dn\": \"CN=@grp,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}

","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/network_objects/{{ids}}","collectionId":"1","id":"1-13-52","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network groups containing specified network object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns groups that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.

Usage Example
https://192.168.1.1/securetrack/api/network_objects/69577/groups
","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/groups","collectionId":"1","id":"1-13-53","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects matching specified criteria","data":[{"value":null,"type":"text","enabled":true,"key":"filter"}],"dataMode":"params","description":"You can search for network objects where the IP address, name or comment fields have a specified text string,
or you can search for network objects that have an IP address that matches, contains or is contained in a specified IP subnet,
or you can search for network objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns network objects where the IP address, name or comment fields have a specified text string. “subnet” filter returns network objects that have an IP address that matches, contains or is contained in a specified IP subnet. “uid“ filter returns network objects with the specified uid. If no filter is specified, the “text” filter is used.
device_id: Returns network objects belonging to the specified device_id. [optional]
ip: (For “text” filter) You can specify \"ip\" to find network objects with the specified text in the IP address field. [optional]
name: (For “text” filter) You can specify \"name\" to find network objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find network objects with the specified text in the comment field. [optional]
any_field: (For “text” filter) You can specify \"any_field\" to find network objects with the specified text in the IP address, name or comment fields. [optional]
exact_match: (For “text” filter) You can add \"exact_match=true\" to find network objects with the specified text in the comment field. If this field is not specified, the query uses \"exact_match=false\". [optional]
contained_in: (For “subnet” filter) You can specify \"contained_in\" to find network objects that are contained in the specified IP subnet. For example, 10.1.0.0 is contained in 10.0.0.0. [optional]
contains: (For “subnet” filter) You can specify \"contains\" to find network objects that contain the specified IP subnet. For example, 10.0.0.0 contains 10.1.0.0. [optional]
exact_subnet: (For “subnet” filter) You can specify \"exact_subnet\" to find network objects that have the specified IP address. [optional]
uid: (for “uid“ filter) Returns network objects with the specified uid. [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: You can specify \"typeOnDevice\" to find network object groups that are EDL. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=host&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&any_field=host&count=10&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&contains=10.1.1.0

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&count=10&exact_subnet=1.1.1.1

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191&device_id=4

Usage Example
URLhttps://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=Access_Role&identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1,
        \"total\": 1,
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169197,
            \"name\": \"Access_Role_aaa\",
            \"display_name\": \"Access_Role_aaa\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14317,
                    \"name\": \"ad_group_aaa\",
                    \"display_name\": \"aaa\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{5D16859C-0256-4673-A402-4254588B8F40}\",
                    \"dn\": \"CN=aaa,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}


Response Messages:
400: The typeOnDevice value is not valid.Use edl_ip_list as value to search EDL groups.","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/search","collectionId":"1","id":"1-13-54","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific network objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches a single or partial list of the network objects for a given revision.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects/69547?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169185,
            \"name\": \"Access_Role_Domain Controllers\",
            \"display_name\": \"Access_Role_Domain Controllers\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{140B8F32-188D-414C-A7BE-F4A7D7E9A169}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14237,
                    \"name\": \"ad_group_Domain_Controllers\",
                    \"display_name\": \"Domain Controllers\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{0A8A459E-58E8-45DC-981E-16BBF2BD1922}\",
                    \"dn\": \"CN=Domain Controllers,CN=Users,DC=rnd,DC=local\"
                }
            }
        }
    }
}

","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/network_objects/{{ids}}","collectionId":"1","id":"1-13-55","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of network objects from specific revision
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169183,
                \"name\": \"Access role 1\",
                \"display_name\": \"Access role 1\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": true,
                \"comment\": \"\",
                \"uid\": \"{1E4C35A0-1FE4-4101-8A38-FDE656BCDCFB}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14346,
                        \"name\": \"all identified\",
                        \"display_name\": \"all identified\",
                        \"class_name\": \"all_identified\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{17A972AC-4B4A-4715-859F-867128707F59}\",
                        \"dn\": \"\"
                    }
                }
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/network_objects","collectionId":"1","id":"1-13-56","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules containing specified network object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the security rules that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.
include_groups: You can add \"include_groups\" to find rules that include the network object and rules that include the groups that include the network object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/65078/rules?include_groups=true
","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/rules","collectionId":"1","id":"1-13-57","method":"GET"},{"name":"Add generic device to Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"configuration_file"}],"dataMode":"params","description":"Upload a configuration file that will be used to add a generic device to the Topology model.
The context field is the domain ID to which the generic device is added: If not provided, the device is added to the global domain.
configuration_file must include a valid generic device configuration.
The specified path must point to a file on the computer being sue to make the REST API call.
If update update_topology = true, then the Topology model will be updated immediately after the device is added.
For maximum efficiency, if you are adding multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.Default value for update_topology = true.
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
body: Generic device to be added
configuration_file: Configuration File for generic device
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"my_generic_device\", \"customer_id\": 1}};type=application/json' -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices\n

Response Messages:
201: The generic device was created successfully
401: User is not permitted to access the specified domain
400: Failed to create generic device ","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","collectionId":"1","id":"1-14-58","method":"POST"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","name":"Get generic devices that are configured in ST","method":"GET","id":"1-14-59","description":"Returns a list of the generic devices included in all the domains that the user has permission to.
Use context and/or name optional parameters to get more specific results.
To get context optional parameter, you can call /domains/ API and use the id included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
name: Generic device name [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices
","folder":"1-14"},{"name":"Get path image for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns an image containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_image","collectionId":"1","id":"1-14-60","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","name":"Get topology clouds","method":"GET","id":"1-14-61","description":"Returns a list of the topology clouds for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology clouds that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
type: Required clouds type [optional]
name: Cloud name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
OUTPUT{
    \"topology_clouds\": {
        \"count\": 3,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"MEMBER\",
                \"ip\": \"10.100.6.238\"
            },
            {
                \"id\": 66,
                \"name\": \"Cloud 10.100.10.14\",
                \"domain\": 1,
                \"type\": \"JOINED\",
                \"members\": [
                    {
                        \"id\": 50,
                        \"ip\": \"10.100.6.238\",
                        \"name\": \"Cloud 10.100.6.238\"
                    },
                    {
                        \"id\": 73,
                        \"ip\": \"10.100.10.14\",
                        \"name\": \"Cloud 10.100.10.14\"
                    },
                    {
                        \"id\": 74,
                        \"ip\": \"10.100.9.9\",
                        \"name\": \"Cloud 10.100.9.9\"
                    }
                ]
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds?type=non-joined
OUTPUT{
    \"topology_clouds\": {
        \"count\": 2,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"10.100.6.238\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined","folder":"1-14"},{"headers":"Content-Type: application/json\n","name":"Create a joined topology cloud","dataMode":"raw","description":"Create a new topology cloud in the Interactive Map by joining existing clouds together.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
The body must include at least two topology cloud ids that are on a single domain.
If the context parameter is not provided, then the API will use the context id of the first member of the members list in the body.
Clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
If the provided body does not specify a joined cloud name, the newly created topology cloud will be given the name of the first member of the members list in the body.


Parameters:
context: Global MSSP context [optional]
body: Cloud data

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"optional new cloud name\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
201: Joined cloud created successfully
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: You must provide 2 or more clouds
412: Cloud id: cloudId does not belong to domain: Context
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud","folder":"1-14","rawModeData":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"optional new cloud name\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","collectionId":"1","id":"1-14-62","method":"POST"},{"headers":"Accept: application/json\n","name":"Get path for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path?src=29.29.29.1&dst=25.25.25.1&service=Facebook,tcp:80
OUTPUT {
    \"path_calc_results\": {
        \"traffic_allowed\": false,
        \"device_info\": {
            \"id\": \"17\",
            \"name\": \"PA-VM-111.6 (Cluster)\",
            \"type\": \"mgmt\",
            \"vendor\": \"Palo Alto Networks\",
            \"incomingInterfaces\": {
                \"incomingVrf\": \"default\",
                \"ip\": \"29.29.29.1/255.255.255.252\",
                \"name\": \"tunnel.11\"
            },
            \"nextDevices\": {
                \"name\": \"DIRECTLY_CONNECTED\",
                \"routes\": {
                    \"outgoingInterfaceName\": \"ethernet1/5\",
                    \"outgoingVrf\": \"default\",
                    \"routeDestination\": \"25.25.25.1/255.255.255.0\"
                }
            },
            \"bindings\": {
                \"name\": \"\",
                \"rules\": [
                    {
                        \"action\": \"Accept\",
                        \"applications\": \"facebook\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 43,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    },
                    {
                        \"action\": \"Deny\",
                        \"applications\": \"Any\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 62,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    }
                ]
            }
        }
    }
}

","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path","collectionId":"1","id":"1-14-63","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Specific topology subnet","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the subnet for the specified id, including information regarding attached devices and join candidates.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the subnet resides.

Parameters:
id: Subnet id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets/20
OUTPUT{
    \"subnet\": {
        \"id\": 18,
        \"name\": \"90.0.0.0/24\",
        \"ip\": \"90.0.0.0\",
        \"mask\": \"255.255.255.0\",
        \"attached_devices\": {
            \"attached_device\": [
                {
                    \"is_generic\": false,
                    \"id\": 10,
                    \"name\": \"srx\",
                    \"interface_id\": 4,
                    \"interface_name\": \"eth0\",
                    \"interface_ip\": \"90.0.0.1\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 13,
                    \"name\": \"ZBFW\",
                    \"interface_id\": 5,
                    \"interface_name\": \"eth1\",
                    \"interface_ip\": \"90.0.0.124\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 85,
                    \"name\": \"netscreen\",
                    \"interface_id\": 6,
                    \"interface_name\": \"eth2\",
                    \"interface_ip\": \"90.0.0.50\"
                }
            ]
        },
        \"join_candidates\": {
            \"join_candidate\": {
                \"is_generic\": false,
                \"id\": 72,
                \"name\": \"CP25\",
                \"interface_id\": 14,
                \"interface_name\": \"eth24/1\",
                \"interface_ip\": \"90.0.0.83\"
            }
        }
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for subnet with id ID
404: No subnet was found for the provided ID","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets/{{id}}","collectionId":"1","id":"1-14-64","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets","name":"Get topology subnets","method":"GET","id":"1-14-65","description":"Returns a list of the topology subnets for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology subnet names that match the search criteria provided, as follows:
1. If you provide only a mask, then an exact match search is done on the mask portion of the name
e.g. if name=/2, the results will include 1.2.3.4/2, but not 1.2.3.4/22
2. If you provide only a partial or complete IP address, then a contains search is done in the IPv4 block portion of the name
e.g. name=32, the results will include 192.168.205.32/24 and 55.192.32.22/16, but will not include 55.168.205.5/32
3. If you provide both an IPv4 address (either partial or complete) and a mask, then an exact match search is done
e.g. if name=23.4/2, then the results will include 192.168.23.4/2, but will not include 192.168.23.4/23 or 23.4.192.168/2

The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
name: Subnet name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=10.27
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.20/32\",
                \"ip\": \"10.27.122.20\",
                \"mask\": \"255.255.255.255\"
            },
            {
                \"id\": 616,
                \"name\": \"10.27.122.60/32\",
                \"ip\": \"10.27.122.60\",
                \"mask\": \"255.255.255.255\"
            },
            {
                \"id\": 619,
                \"name\": \"10.27.122.0/30\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.252\"
            },
            {
                \"id\": 620,
                \"name\": \"10.27.122.4/30\",
                \"ip\": \"10.27.122.4\",
                \"mask\": \"255.255.255.252\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=144/30
OUTPUT{
    \"topology_subnets\": {
        \"count\": 2,
        \"total\": 2,
        \"subnets\": [
            {
                \"id\": 773,
                \"name\": \"10.13.64.144/30\",
                \"ip\": \"10.13.64.144\",
                \"mask\": \"255.255.255.252\"
            },
            {
                \"id\": 825,
                \"name\": \"10.15.64.144/30\",
                \"ip\": \"10.15.64.144\",
                \"mask\": \"255.255.255.252\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId","folder":"1-14"},{"headers":"Accept: application/json\n","name":"Get Specific topology cloud","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the topology cloud data for the specified id.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the cloud resides.

Parameters:
id: Cloud id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/48
OUTPUT{
    \"topology_cloud\": {
        \"id\": 48,
        \"name\": \"Cloud 69.70.120.155\",
        \"domain\": 1,
        \"type\": \"NON_JOINED\",
        \"ip\": \"69.70.120.155\"
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/66
OUTPUT{
    \"topology_cloud\": {
        \"id\": 66,
        \"name\": \"Cloud 10.100.10.14\",
        \"domain\": 1,
        \"type\": \"JOINED\",
        \"members\": [
            {
                \"id\": 50,
                \"ip\": \"10.100.6.238\",
                \"name\": \"Cloud 10.100.6.238\"
            },
            {
                \"id\": 73,
                \"ip\": \"10.100.10.14\",
                \"name\": \"Cloud 10.100.10.14\"
            },
            {
                \"id\": 74,
                \"ip\": \"10.100.9.9\",
                \"name\": \"Cloud 10.100.9.9\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: No cloud was found for the provided ID","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","collectionId":"1","id":"1-14-66","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update a cloud","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Modify the name of a topology cloud, and add/remove members of a joined cloud.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain context of the joined cloud, and any members specified in the body.
To change the name of a topology cloud, enter a value in the name field of the body.
To add/remove members of a joined cloud, specify the action and specify the clouds in the members list of the body.
The action is used only if the body contains a members list. If a members list is provided but no actions is specified, then the default action is ‘add’.
When adding cloud members, clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
When removing cloud members, if only zero or one member remains in the joined cloud, it will be deleted from the Interactive Map.

Parameters:
id: cloud id
action: action [optional]
body: Cloud data

Usage Example
URLfor renaming of any cloud - https://192.168.1.1/securetrack/api/topology/clouds/436
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\"
    }
}


Usage Example
URLfor renaming and members updating of a joined cloud - https://192.168.1.1/securetrack/api/topology/clouds/436?action=remove
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
204: Cloud updated successfully
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: Cloud with id ID is a not joined cloud
412: Cloud id: cloudId does not belong to domain: Context
412: Provided clouds don't belongs to the same domain
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud
412: Member cloud with id ID cannot be removed - it is not a member of a joined cloud","folder":"1-14","rawModeData":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"new cloud\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","collectionId":"1","id":"1-14-67","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get cloud information","data":[{"value":null,"type":"text","enabled":true,"key":"cloud_id"}],"dataMode":"raw","description":"Returns information about a specific cloud in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
cloud_id: cloud id
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions/120
BODY{
    \"suggested_clouds\": {
        \"count\": 1,
        \"total\": 1,
        \"cloud\": {
            \"management_name\": \"FW1\",
            \"management_id\": 20,
            \"cloud_name\": \"Cloud 10.100.0.1\",
            \"cloud_id\": 120,
            \"vertex_id\": 250,
            \"ip\": \"10.100.0.1\",
            \"routes_count\": 5,
            \"is_parent\": false
        }
    }
}


Response Messages:
202: Accepted
401: User is not permitted to access the specified domain","folder":"1-14","rawModeData":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"cloud\": {\n\t\t\t\"management_name\": \"FW1\",\n\t\t\t\"management_id\": 20,\n\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\"cloud_id\": 120,\n\t\t\t\"vertex_id\": 250,\n\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\"routes_count\": 5,\n\t\t\t\"is_parent\": false\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions/{{cloud_id}}","collectionId":"1","id":"1-14-68","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cloud Internal Networks","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the internal networks for the specified Cloud management id.
This API requires 'Super admin' privileges.

Parameters:
id: Cloud management id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_internal_networks/20
OUTPUT{
    \"network_list\":
    {
        \"count\": 3,
        \"total\": 3,
        \"network\":
        {
            \"ip\": \"10.27.122.20\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.60\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.4\",
            \"mask\": \"255.255.255.252\"
        }
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for NSX with id ID
401: Device ID specified is not supported
404: The specified device ID was not found
404: The specified device ID was not found in Topology","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_internal_networks/{{id}}","collectionId":"1","id":"1-14-69","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize/status","name":"Get Topology Synchronization status","method":"GET","id":"1-14-70","description":"Returns the progress status of the Topology Model Synchronization.



Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize/status

Response Messages:
200: The topology synchronization was invoked successfully.
401: Access is denied
500: Error getting synchronize progress","folder":"1-14"},{"headers":"Accept: application/json\n","name":"Get most specific network interfaces from which a host IP is accessible","data":[{"value":null,"type":"text","enabled":true,"key":"host"}],"description":"Parameters:
context: Global MSSP context [optional]
host: IP address of device for a query

Usage Example
https://192.168.1.1/securetrack/api/devices/interfaces/last_hop?host=192.168.1.66
","dataMode":"params","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/interfaces/last_hop","collectionId":"1","id":"1-14-71","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get cloud information","dataMode":"raw","description":"Returns information about all clouds in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
context: Global MSSP context [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions
BODY{
    \"suggested_clouds\": {
        \"count\": 2,
        \"total\": 2,
        \"cloud\": [
            {
                \"management_name\": \"FW1\",
                \"management_id\": 20,
                \"cloud_name\": \"Cloud 10.100.0.1\",
                \"cloud_id\": 120,
                \"vertex_id\": 250,
                \"ip\": \"10.100.0.1\",
                \"routes_count\": 5,
                \"is_parent\": false
            },
            {
                \"management_name\": \"FW2\",
                \"management_id\": 21,
                \"cloud_name\": \"Cloud 172.16.0.1\",
                \"cloud_id\": 125,
                \"vertex_id\": 270,
                \"ip\": \"172.16.0.1\",
                \"routes_count\": 7,
                \"is_parent\": false,
                \"parent_vertex_id\": 40
                \"parent_cloud_id\": 45
                \"parent_cloud_name\": \"Cloud 172.16.0.1\",
            }
        ]
    }
}


Response Messages:
202: Accepted
401: User is not permitted to access the specified domain","folder":"1-14","rawModeData":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 2,\n\t\t\"total\": 2,\n\t\t\"cloud\": [\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW1\",\n\t\t\t\t\"management_id\": 20,\n\t\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\t\"cloud_id\": 120,\n\t\t\t\t\"vertex_id\": 250,\n\t\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\t\"routes_count\": 5,\n\t\t\t\t\"is_parent\": false\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW2\",\n\t\t\t\t\"management_id\": 21,\n\t\t\t\t\"cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t\t\"cloud_id\": 125,\n\t\t\t\t\"vertex_id\": 270,\n\t\t\t\t\"ip\": \"172.16.0.1\",\n\t\t\t\t\"routes_count\": 7,\n\t\t\t\t\"is_parent\": false,\n\t\t\t\t\"parent_vertex_id\": 40\n\t\t\t\t\"parent_cloud_id\": 45\n\t\t\t\t\"parent_cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t}\n\t\t]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions","collectionId":"1","id":"1-14-72","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology network interfaces by device","data":[{"value":null,"type":"text","enabled":true,"key":"mgmtId"}],"dataMode":"params","description":"The returned interfaces are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
context: Global MSSP context [optional]
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=1&is_generic=true
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_interfaces","collectionId":"1","id":"1-14-73","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology routing tables for a given device","data":[{"value":null,"type":"text","enabled":true,"key":"mgmtId"}],"dataMode":"params","description":"The returned routing tables are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=1&is_generic=true
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_routes","collectionId":"1","id":"1-14-74","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic_vpns{device_id:(/device_id)?}","name":"Get topology generic VPN connections","method":"GET","id":"1-14-75","description":"Returns a list of the generic vpn connections in the Topology map, for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology generic vpn connections that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
is_generic: Get generic devices [optional]
device_id: Device id [optional]
name: VPN connection name (accepts '*', '?' as wildcards) [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns
OUTPUT{
    \"generic_vpns\": {
        \"count\": 3,
        \"total\": 3,
        \"generic_vpn\": [
            {
                \"device_id\": 222,
                \"generic\": false,
                \"id\": 3,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.155\",
                \"tunnel_src_ip\": \"84.200.6.1\",
                \"vpn_name\": \"Palo_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns?is_generic=true
OUTPUT{
    \"generic_vpns\": {
        \"count\": 2,
        \"total\": 2,
        \"generic_vpn\": [
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined","folder":"1-14"},{"name":"Delete generic device from Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete a generic device from the Topology model.
The ID must be for a valid generic device listed in the Topology Model.
If update update_topology = true, then the Topology model will be updated immediately after the device is deleted.
For maximum efficiency, if you are deleting multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.
Default value for update_topology = true.

Parameters:
id: Generic device id
update_topology: Synchronize And Update Topology [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/1

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/10?update_topology=false

Response Messages:
204: Generic Device deleted successfully.
400: Failed to delete generic device with id {}
404: A 'Generic Device' with the specified ID was not found","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","collectionId":"1","id":"1-14-76","method":"DELETE"},{"name":"Update an existing generic device in the Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Modify an existing generic device by uploading a new configuration file and/or specifying a new name.
If name field is specified, the generic device will be renamed.
configuration_file is optional, if provided it must include a valid generic device configuration.
The specified path points to a file in the client machine.
If a generic device name is changed and a new configuration file is not provided, topology will not be synchronized (update_topology flag is ignored).
Default value for update_topology = true.
To save time when there are several consecutive api calls: For the last call, set update_topology = true (for all other calls, update_topology = false).
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
id: Generic device id
body: Generic device to be updated [optional]
configuration_file: Configuration File for generic device [optional]
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices/24

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"new_generic_device_name\"}};type=application/json' -F \"update_topology=false\" https://192.168.1.1/securetrack/api/generic_devices/72

Response Messages:
204: The generic device was updated successfully.
400: A new name or a new configuration file must be indicated in order to update generic device with id {}
400: Failed to update generic device with id {}
404: A 'Generic Device' with the specified ID was not found","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","collectionId":"1","id":"1-14-77","method":"PUT"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize","name":"Synchronize the Topology model","method":"POST","id":"1-14-78","description":"Invoke of the Topology Model Synchronization.
full_sync=false - Builds the topology model from the information stored in the Tufin database.
full_sync=true - Retrieves the current data from devices and builds the topology model.
Default value for full_sync = false.

Parameters:
full_sync: Perform full sync [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize?full_sync=true

Response Messages:
200: The topology synchronization was invoked successfully.
401: Access is denied
500: Error Synchronizing Topology Model","folder":"1-14"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get all pattern entries for specific zones","dataMode":"raw","description":"Get the list of zone pattern entries for specific zones by identifiers

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the pattern entry results. [optional]
pattern: Filter by pattern string for the zone entry results. [optional]
name: Filter by zone name for the pattern entry results. [optional]
comment: Filter by comment for the pattern entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/1,2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entries_find_result>
    <paging_info>
        <start>0</start>
        <count>2</count>
        <total>2</total>
    </paging_info>
    <pattern_match_entries>
        <pattern_match_entry>
            <id>2</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEB</pattern>
            <zone_id>1</zone_id>
        </pattern_match_entry>
        <pattern_match_entry>
            <id>3</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEo</pattern>
            <zone_id>2</zone_id>
        </pattern_match_entry>
    </pattern_match_entries>
</pattern_match_entries_find_result>


Response Messages:
200: The zone pattern entries were successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-15","rawModeData":"\n\n\t\n\t\t0\n\t\t2\n\t\t2\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEB\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEo\n\t\t\t2\n\t\t\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/pattern-entries","collectionId":"1","id":"1-15-79","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create a zone pattern entry in a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"}],"dataMode":"raw","description":"Create a zone pattern entry in a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone pattern entry.
body: The zone pattern entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<create_pattern_match_entry>
    <pattern_match_entry>
        <id>1</id>
        <zone_id>2</zone_id>
        <domain>
            <id>1</id>
            <name>Default</name>
        </domain>
        <pattern>WEB</pattern>
        <type>security_group_by_name</type>
        <comment>This is a comment</comment>
    </pattern_match_entry>
</create_pattern_match_entry>


Response Messages:
201: The zone pattern entry was created successfully.
401: User is not permitted to access the specified domain
400: Some of pattern entry parameters were invalid or missing
404: A zone with the specified identifier was not found.","folder":"1-15","rawModeData":"\n\n\t\n\t\t1\n\t\t2\n\t\t\n\t\t\t1\n\t\t\tDefault\n\t\t\n\t\tWEB\n\t\tsecurity_group_by_name\n\t\tThis is a comment\n\t\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries","collectionId":"1","id":"1-15-80","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get a specific zone pattern entry for a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Get a specific zone pattern entry for a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone entry.
id: Identifier of the zone pattern entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/75/pattern-entries/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entry>
    <id>2</id>    <type>security_group_by_name</type>
    <comment>This is a comment</comment>
    <pattern>WEB</pattern>
    <zone_id>75</zone_id>
    <zone_name>Zone_10_0_0_1</zone_name>
    <domain>
        <address>koko</address>
        <description>bobo</description>
        <id>1</id>
        <name>Default</name>
    </domain>
</pattern_match_entry>


Response Messages:
200: The zone pattern entry was successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified identifier was not found.
404: A zone pattern entry with the specified identifier was not found.","folder":"1-15","rawModeData":"\n\n\t2\tsecurity_group_by_name\n\tThis is a comment\n\tWEB\n\t75\n\tZone_10_0_0_1\n\t\n\t\t
koko
\n\t\tbobo\n\t\t1\n\t\tDefault\n\t
\n
\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries/{{id}}","collectionId":"1","id":"1-15-81","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Modify multiple existing zone entries","data":[{"value":null,"type":"text","enabled":true,"key":"zone_ids"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix.
For IPv6 provide IP and prefix only, netmask is not allowed.
new_zone_id is not optional, it may be the same as the present zoneId.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entries.
ids: The ID(s) of the zone entries to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/85,98/entries/120,139
BODY{
\"zone_entries\" : {
        \"zone_entry\": [
            {
                \"id\": 120,
                \"ip\": \"3.3.3.3\",
                \"prefix\": 32,
                \"new_zone_id\": 85
            },
            {
                \"id\": 139,
                \"ip\": \"1b98:c72:1f00:0001::\",
                \"prefix\": \"52\",
                \"new_zone_id\": 98
            }
        ]
}
}


Response Messages:
200: The zone entry was modified successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entries\" : {\n\t\t\"zone_entry\": [\n\t\t\t{\n\t\t\t\t\"id\": 120,\n\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\"prefix\": 32,\n\t\t\t\t\"new_zone_id\": 85\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"id\": 139,\n\t\t\t\t\"ip\": \"1b98:c72:1f00:0001::\",\n\t\t\t\t\"prefix\": \"52\",\n\t\t\t\t\"new_zone_id\": 98\n\t\t\t}\n\t\t]\n}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","collectionId":"1","id":"1-16-82","method":"PUT"},{"headers":"Content-Type: application/json\n","name":"Create a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
body: The zone entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
201: The zone entry was created successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries","collectionId":"1","id":"1-16-83","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Modify a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.
body: The modified zone entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
200: The zone entry was modified successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-84","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get a specific zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get a specific zone entry by ID for a zone.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/123

Response Messages:
200: The zone entry was successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-85","method":"GET"},{"name":"Delete zone entries","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete existing zone entries.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/10

Response Messages:
200: The zone entry was deleted successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-86","method":"DELETE"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/entries","name":"Get entries for a zone","method":"GET","id":"1-16-87","description":"Get the list of zone entries for a zone.

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the zone entry results. [optional]
name: Filter by name for the zone entry results. [optional]
ip: Filter by IP for the zone entry results. [optional]
netmask: Filter by netmask for the zone entry results. [optional]
prefix: Filter by prefix for the zone entry results. [optional]
comment: Filter by comment for the zone entry results. [optional]
group: Filter by device group for the zone entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries

Response Messages:
200: The zone entries were successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-16"},{"name":"Modify a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_ids"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Modify an existing zone entry.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entry.
ids: The ID(s) of the zone entries to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/entries/10,20

Response Messages:
200: The zone entry was deleted successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","collectionId":"1","id":"1-16-88","method":"DELETE"},{"name":"Delete a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Delete an existing zone.

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zone to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/1,2

Response Messages:
204: The specified zone was successfully deleted.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}","collectionId":"1","id":"1-17-89","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get descendant zones for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of zones descended from the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for descendant zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/10,20/descendants

Response Messages:
200: The zone descendants were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/descendants","collectionId":"1","id":"1-17-90","method":"GET"},{"headers":"Accept: application/json\n","name":"Get ancestor zones for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of ancestor zones for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for ancestor zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/123,234/ancestors

Response Messages:
200: The zone ancestors were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/ancestors","collectionId":"1","id":"1-17-91","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/shared","name":"Get shared zones","method":"GET","id":"1-17-92","description":"Get a list of shared zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/shared

Response Messages:
200: The list of shared zones was retrieved successfully.
401: User is not permitted to access the specified domain","folder":"1-17"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/import/{{ids}}","name":"Import a zone","method":"POST","id":"1-17-93","description":"Import a shared zone into the specified domain

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones to import. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/import/10,20

Response Messages:
200: The zone was imported successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17"},{"name":"Remove a zone as an descendants to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"parent_id"},{"value":null,"type":"text","enabled":true,"key":"child_ids"}],"dataMode":"params","description":"Remove a zone(s) as an descendants to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to remove descendant zone(s).
child_ids: The ID(s) of the zone to remove as a descendant.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was removed as an descendant successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","collectionId":"1","id":"1-17-94","method":"DELETE"},{"name":"Add a zone as a descendant to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"parent_id"},{"value":null,"type":"text","enabled":true,"key":"child_ids"}],"dataMode":"params","description":"Add a zone(s) as a descendant to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to add descendant zone(s).
child_ids: The ID(s) of the zones to add as descendants.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was added as an descendant successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","collectionId":"1","id":"1-17-95","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get configuration usages for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of configuration usages for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for configuration dependencies.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/dependencies

Response Messages:
200: The zone dependencies were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/dependencies","collectionId":"1","id":"1-17-96","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create a zone","dataMode":"raw","description":"Create a zone.

Parameters:
context: Global MSSP context. [optional]
body: The zone to add.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <name>DMZ</name>
    <comment>All DMZ addresses</comment>
    <shared>false</shared>
</zone>


Response Messages:
201: The zone was created successfully.
401: User is not permitted to access the specified domain
400: The zone parameters were invalid","folder":"1-17","rawModeData":"\n\n\tDMZ\n\tAll DMZ addresses\n\tfalse\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","collectionId":"1","id":"1-17-97","method":"POST"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","name":"Delete all zones","method":"DELETE","id":"1-17-98","description":"Delete all existing zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
204: All zones were successfully deleted.
401: User is not permitted to access the specified domain","folder":"1-17"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","name":"Get all zones","method":"GET","id":"1-17-99","description":"Gets a list of all zones.

Parameters:
context: Global MSSP context. [optional]
name: Filter by zone name for the zone results. [optional]
comment: Filter by zone comment for the zone results. [optional]
imported: List domains that imported zones. [optional]
includeInternet: Include the Internet zone. [optional]
includeImported: Include imported zones. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
200: The zones were retrieved successfully.
401: User is not permitted to access the specified domain","folder":"1-17"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Map network elements to security zones","dataMode":"raw","description":"This API maps each network element in the AccessRequestNetworkListDTO (such as IP address, IP address range, object, or group) to all matching Tufin security zones. If the network element is a group, then each zone also identifies all matching group members. The internet referral object can be included in the list, and will always map to the predefined Internet security zone. If the 'Any' element is included in the list it will map to all zones.
Note: if multi-domain mode is enabled, the API calls only checks zones that are in the “Default” domain.

Parameters:
body: AccessRequestNetworkListDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_zones
BODY<network_objects>
     <network_object xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"ip_network\">
         <network xsi:type=\"raw_network_subnet\">
         <ip>10.8.8.0</ip>
         <mask>255.255.255.0</mask>
         </network>
     </network_object>
</network_objects>


Response Messages:
200: Returns mapping of network elements to security zones
400: Access Request Network List is malformed.
401: Access is denied.","folder":"1-17","rawModeData":"\n\t \n\t\t \n\t\t 10.8.8.0\n\t\t 255.255.255.0\n\t\t \n\t \n","url":"https://{{SecureTrack_IP}}/securetrack/api/security_zones/","collectionId":"1","id":"1-17-100","method":"POST"},{"headers":"Accept: application/json\n","name":"Get a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get the zone with the specified ID.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to get.
imported: List domains that imported zones. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2

Response Messages:
200: The zone was retrieved successfully.
401: User is not permitted to access the specified domain
401: A zone with the specified ID does not exist.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","collectionId":"1","id":"1-17-101","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Modify a zone","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Modify an existing zone.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <id>2</id>
    <name>DMZ</name>
    <comment>All DMZ hosts</comment>
    <shared>false</shared>
    <internet>false</internet>
    <user_networks>false</user_networks>
    <unassociated_networks>false</unassociated_networks>
</zone>


Response Messages:
204: The specified zone was successfully modified.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
400: The zone parameters were invalid","folder":"1-17","rawModeData":"\n\n\t2\n\tDMZ\n\tAll DMZ hosts\n\tfalse\n\tfalse\n\tfalse\n\tfalse\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","collectionId":"1","id":"1-17-102","method":"PUT"},{"name":"Remove a zone as an ancestor to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"child_id"},{"value":null,"type":"text","enabled":true,"key":"parent_ids"}],"dataMode":"params","description":"Remove a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to remove ancestors zone(s).
parent_ids: The ID(s) of the zones to remove as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was removed as an ancestor successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","collectionId":"1","id":"1-17-103","method":"DELETE"},{"name":"Add a zone as an ancestor to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"child_id"},{"value":null,"type":"text","enabled":true,"key":"parent_ids"}],"dataMode":"params","description":"Add a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to add ancestors zone(s).
parent_ids: The ID(s) of the zones to add as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was added as an ancestor successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","collectionId":"1","id":"1-17-104","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get rules by input and output interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"description":"Parameters:
device_id: The unique identifier of target device
inputInterfaceName: Input interface name [optional]
outputInterfaceName: Output interface name [optional]

Usage Example
https://192.168.1.1/securetrack/api/bindings/2/topology_interfaces?inputInterfaceName=ethernet1/1&outputInterfaceName=ethernet1/2
","dataMode":"params","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/topology_interfaces","collectionId":"1","id":"1-18-105","method":"GET"},{"headers":"Accept: application/json\n","name":"Get sub-policies (bindings) by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the subpolicies (bindings) for a given device.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Device ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindings","collectionId":"1","id":"1-18-106","method":"GET"},{"headers":"Accept: application/json\n","name":"Get policies by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of policies defined on a given revision ID

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/policies
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/policies","collectionId":"1","id":"1-18-107","method":"GET"},{"headers":"Accept: application/json\n","name":"Get list of sub-policies (bindings) with input and/or output interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"supremum_version_id"},{"value":null,"type":"text","enabled":true,"key":"inputInterfaceName"},{"value":null,"type":"text","enabled":true,"key":"outputInterfaceName"}],"dataMode":"params","description":"Retrieve list of bindings of input and/or output interfaces

Parameters:
device_id: The unique identifier of target device
supremum_version_id: The unique identifier of target revision
inputInterfaceName: Input interface name
outputInterfaceName: Output interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/binding_query?supremum_version_id=785&inputInterfaceName=Any&outputInterfaceName=Any
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/binding_query","collectionId":"1","id":"1-18-108","method":"GET"},{"headers":"Accept: application/json\n","name":"Get sub-policies (bindings) by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the subpolicies (bindings) for a given revision.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Revision ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/bindings","collectionId":"1","id":"1-18-109","method":"GET"},{"headers":"Accept: application/json\n","name":"Get policies by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of policies defined on a given device ID.
Supported devices: CheckPoint, Panorama Advanced, FortiManager Basic and Advanced, FMC and NSX.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/policies
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/policies","collectionId":"1","id":"1-18-110","method":"GET"},{"headers":"Accept: application/json\n","name":"Run Policy Analysis query","data":[{"value":null,"type":"text","enabled":true,"key":"device_ids"},{"value":null,"type":"text","enabled":true,"key":"sources"},{"value":null,"type":"text","enabled":true,"key":"destinations"},{"value":null,"type":"text","enabled":true,"key":"services"}],"description":"Parameters:
device_ids: Device ids
sources: Source list
destinations: Destination list
services: Service list
exclude_any: Exclude any in the specified, comma-separated fields of source, destination or service. For example: exclude_any = destination,service [optional]
action: Action [optional]

Usage Example
https://192.168.1.1/securetrack/api/policy_analysis/query/matching_rules?device_ids=41&sources=33.33.33.0:24,113.113.113.100&destinations=114.1.1.0:24&services=tcp:80&exclude_any=source,destination

Response Messages:
200: Returns request results.
400: Error in request syntax.","dataMode":"params","folder":"1-19","url":"https://{{SecureTrack_IP}}/securetrack/api/policy_analysis/query/matching_rules","collectionId":"1","id":"1-19-111","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Fetches rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-112","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Modify specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"raw","description":"Modify rule documentation for a single rule given by device ID and rule ID
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If there is no existing rule documentation for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If there is existing rule documentation for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>173</id>
         <ticketCr>789112</ticketCr>
     </record_set>
</rule_documentation>

","folder":"1-20","rawModeData":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 173\n\t\t 789112\n\t \n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-113","method":"PUT"},{"name":"Delete specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Delete rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-114","method":"DELETE"},{"name":"Delete specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Delete rule documentation for a single rule given by revision ID and rule ID.
If the rule has automatic mapping to a ticket, the record is not deleted.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Rule id

Usage Example
https://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-115","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Modify specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"raw","description":"Modify rule documentation for a single rule identified by revision ID and rule ID.
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If no rule documentation exists for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If rule documentation already exists for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.
Record set entries that are automatically created or calculated, for example automatic mapping to a SecureChange ticket, cannot be modified.
The following fields are automatically calculated, and cannot be modified:
Permissiveness, Violations, Last Hit, Last Modified, Shadowing Status, Certification Status, Certification Date, Certification Expiration Date, Application Name, Application Owner

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the changed rule
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>172</id>
         <ticketCr>789111</ticketCr>
     </record_set>
</rule_documentation>

","folder":"1-20","rawModeData":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 172\n\t\t 789111\n\t \n","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-116","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Fetches rule documentation for a single rule given by revision ID and rule ID.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the requested rule

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-117","method":"GET"},{"headers":"Accept: application/json\n","name":"Get cleanups by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"code"}],"dataMode":"params","description":"Fetches set of Cleanup calculation results for a device given by ID.
Only fully shadowed rules (cleanup code C01) are supported.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
code: Cleanup category code
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query result allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/cleanups?code=C01
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/cleanups","collectionId":"1","id":"1-21-118","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/","name":"Get risks results","method":"GET","id":"1-21-119","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk
","folder":"1-21"},{"headers":"Accept: application/json\n","name":"Get devices in cleanup results","data":[{"value":null,"type":"text","enabled":true,"key":"cleanup_id"}],"description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/devices
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/devices","collectionId":"1","id":"1-21-120","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the specific objects or rules identified for the cleanup results","data":[{"value":null,"type":"text","enabled":true,"key":"cleanup_id"}],"description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/instances
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/instances","collectionId":"1","id":"1-21-121","method":"GET"},{"headers":"Accept: application/json\n","name":"Get devices in risk results","data":[{"value":null,"type":"text","enabled":true,"key":"risk_id"}],"description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id

Usage Example
https://192.168.1.1/securetrack/api/risk/1/devices
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/devices","collectionId":"1","id":"1-21-122","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the specific objects or rules identified for the risk results","data":[{"value":null,"type":"text","enabled":true,"key":"risk_id"}],"description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk/1/instances
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/instances","collectionId":"1","id":"1-21-123","method":"GET"},{"headers":"Accept: application/json\n","name":"Get shadowing rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"shadowed_uids"}],"dataMode":"params","description":"Find shadowing rules for given shadowed rules of a specific device

Parameters:
device_id: Device ID
shadowed_uids: UIDs of shadowed rules separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/31/shadowing_rules?shadowed_uids=78786a0d-b9cc-478e-b7a2-dea953c976c7
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/shadowing_rules","collectionId":"1","id":"1-21-124","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/","name":"Get cleanups results","method":"GET","id":"1-21-125","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup
","folder":"1-21"},{"headers":"Accept: application/json\n","name":"Get specific revision","data":[{"value":null,"type":"text","enabled":true,"key":"revId"}],"dataMode":"params","description":"Fetches a revision specified by revision Id.
To get revId for this API, use the 'id' property of RevisionDTO that is returned by 'Get revisions by device' or 'Get latest revision by device' APIs

Parameters:
context: Global MSSP context [optional]
revId: Id of fetched revision

Usage Example
https://192.168.1.1/securetrack/api/revisions/785
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revId}}","collectionId":"1","id":"1-22-126","method":"GET"},{"headers":"Accept: application/json\n","name":"Get latest revision by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches latest revision for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/105/latest_revision
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/latest_revision","collectionId":"1","id":"1-22-127","method":"GET"},{"headers":"Accept: application/json\n","name":"Get revisions by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches revisions for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/105/revisions
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/revisions","collectionId":"1","id":"1-22-128","method":"GET"},{"headers":"Accept: application/json\n","name":"Get last hits for all rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.

Parameters:
device_id: device id

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find_all/20
","folder":"1-23","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find_all/{{device_id}}","collectionId":"1","id":"1-23-129","method":"GET"},{"headers":"Accept: application/json\n","name":"Get last hit for a specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"rule_uid"}],"dataMode":"params","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.
The rule_uid is the value from the uid field returned by the /rules API: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Parameters:
device_id: device_id
rule_uid: rule_uid

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find/20/ea9db13e-d058-45c6-a2f0-cd731027c22b
","folder":"1-23","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find/{{device_id}}/{{rule_uid}}","collectionId":"1","id":"1-23-130","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the security rules for the specified revision.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.


Parameters:
context: Global MSSP context [optional]
id: Revision id
policyId: Policy id [optional]
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]
with_zb: Include zone-based rules [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]
is_alternate_order: OrderBy alternate order, for display Aci rules by contracts [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?subpolicy_name=layer1&is_global=true
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules","collectionId":"1","id":"1-24-131","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Returns a list of rules by device ID, rule IDs and additional criteria.
Note: This API retrieves the information from the latest revision.


Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Rule IDs
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16370
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/rules/{{ids}}","collectionId":"1","id":"1-24-132","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Returns a list of rules by revision ID, rule IDs and additional criteria

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \\\"documentation\\\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \\\"bindings\\\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16370
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/rules/{{ids}}","collectionId":"1","id":"1-24-133","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the security rules for the specified device.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.


Parameters:
context: Global MSSP context [optional]
id: Device ID
policyId: Policy ID [optional]
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Show rules grouping criteria. Can be set only to \"bindings\". Output will be grouped by bindings and section header for Check Point devices, ACL for Cisco devices, and Zones for Juniper, Palo Alto, and Fortinet device [optional]
with_zb: Include zone based rules, values can be 'true' or 'false' [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?subpolicy_name=layer1&is_global=true
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules","collectionId":"1","id":"1-24-134","method":"GET"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/","name":"Get rule count per device","method":"GET","id":"1-24-135","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API will return a list of all the devices, the devices that has rules that match the search criteria will have rule_count that is bigger than 0

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=ICMP application:facebook

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT{
    \"device_list\":{
        \"device\":[
            {
                \"device_id\":512,
                \"revision_id\":6864,
                \"rule_count\":1
            },
            {
                \"device_id\":59,
                \"revision_id\":543,
                \"rule_count\":0
            }
        ]
    }
}

","folder":"1-24"},{"headers":"Accept: application/json\n","name":"Find rules","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.To get more information regarding objects included in the returned rules (like src_network or dst_network) use their uid, as the objects’ ID might change.
\n By default, if there are less than 3,000 rules - the API will return all the rules.\nIn case there are more than 3,000 rules the API will return an error code 413 with the error message “There are more than 3000 rules, you must use pagination”

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
device_id: Device id
start: The starting rule to include in the returned results [optional]
count: Number of rules to include in the results [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/31?search_text=source:Sales_192.168.2.60 fromzone:sales tozone:External

Usage Example
https://192.168.1.1/securetrack/api/rule_search/20?search_text=Mobile Access hascomment:false

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=web_server&start=0&count=10

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search/59?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT {
    \"rules\":{
        \"count\":1,
        \"total\":1,
        \"rule\":{
            \"@xsi.type\":\"securityRuleDTO\",
            \"id\":21,
            \"cp_uid\":\"\",
            \"uid\":\"{9259f6ee-47a0-4996-a214-ab7edc14a916}\",
            \"order\":2,
            \"binding\":{
                \"default\":true,
                \"policy\":{
                    \"@xsi.type\":\"managementDomainPolicyDTO\",
                    \"id\":2,
                    \"name\":\"Standard\",
                    \"installable_targets\":\"\"
                },
                \"rule_count\":19,
                \"security_rule_count\":19,
                \"uid\":\"{00-FACED0-00}\"
                },
            \"acceleration_breaker\":false,
            \"action\":\"Accept\",
            \"application\":{
                \"id\":4735,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
            },
            \"authentication_rule\":false,
            \"comment\":\"DO NOT DELETE OR EDIT\",
            \"dst_network\":{
                \"id\":39,
                \"display_name\":\"Net_10.110.65.0\",
                \"name\":\"Net_10.110.65.0\"
                \"uid\":\"{1290f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_networks_negated\":false,
            \"dst_service\":{
                \"id\":7420,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
                \"uid\":\"{2904f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_services_negated\":false,
            \"dst_zone\":\"any\",
            \"disabled\":false,
            \"external\":false,
            \"implicit\":false,
            \"dst_zone_any\":true,
            \"src_zone_any\":true,
            \"name\":\"Accept SSHG\",
            \"option\":\"LOG_SESSION\",
            \"documentation\":{
                \"permissiveness_level\":\"LOW\",
                \"shadowed\":\"Not shadowed\",
                \"last_modified\":\"Today\",
                \"last_hit\":\"N/A\",
                \"violations\":\"\"
            },
            \"rule_location\":\"Shared\",
            \"rule_location_display\":\"Shared - Pre Rule\",
            \"rule_number\":2,
            \"rule_type\":\"universal\",
            \"src_zone\":\"any\",
            \"src_network\":{
                \"id\":38,
                \"display_name\":\"Net_10.110.64.0\",
                \"name\":\"Net_10.110.64.0\"
                \"uid\":\"{4934f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"src_networks_negated\":false,
            \"src_services_negated\":false,
            \"track\":{
                \"level\":\"LOG\"
            },
            \"type\":\"rule\",
            \"users\":{
                \"id\":5,
                \"display_name\":\"tufin\\\\regina\",
                \"name\":\"tufin\\\\regina@ldap\"
            }
        }
    }
}


Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid
413: Max supported count is 3000
413: There are more than 3000 rules, you must use pagination","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/{{device_id}}","collectionId":"1","id":"1-24-136","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/export","name":"Create a CSV file for rules search results","method":"GET","id":"1-24-137","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is : for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API exports the results data as a CSV file in the SecureTrack Reports Repository.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export?search_text=shadowed:true
","folder":"1-24"},{"headers":"Accept: application/json\n","name":"Get a specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"ruleId"}],"description":"Parameters:
ruleId: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/rules/60
","dataMode":"params","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rules/{{ruleId}}","collectionId":"1","id":"1-24-138","method":"GET"},{"headers":"Accept: application/json\n","name":"Get service groups containing specified service objects","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns groups that contain the specified service objects


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.

Usage Example
https://192.168.1.1/securetrack/api/services/69577/groups
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/groups","collectionId":"1","id":"1-25-139","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific service","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of specific service objects defined in device given by device ID and specified by their IDs.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Service object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/services/959888,959966
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/services/{{ids}}","collectionId":"1","id":"1-25-140","method":"GET"},{"headers":"Accept: application/json\n","name":"Get services by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of service objects defined on device given by device ID.
The default value for get_total is false. For APIF calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric between 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/services","collectionId":"1","id":"1-25-141","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules containing specified service object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the security rules that contain the specified service object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.
include_groups: You can add \"include_groups\" to find rules that include the service object and rules that include the groups that include the service object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/65078/rules?include_groups=true
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/rules","collectionId":"1","id":"1-25-142","method":"GET"},{"headers":"Accept: application/json\n","name":"Get services by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of service objects defined in revision given by revision ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric betweenm 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/785/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/services","collectionId":"1","id":"1-25-143","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific service","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of specific service objects defined in revision given by revision ID and specified by their IDs

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/services/959888
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/services/{{ids}}","collectionId":"1","id":"1-25-144","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get services objects matching specified criteria","data":[{"value":null,"type":"text","enabled":true,"key":"filter"}],"dataMode":"raw","description":"You can search for service objects where the name or comment fields have a specified text string,
or you can search for service objects that have an Port or protocol that matches,
or you can search for service objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns service objects where the name or comment fields have a specified text string. \n“protocol” filter returns service objects that have a protocol that matches specified IP protocol number.\n“port” filter returns service objects that have a port that matches specified port number.\n “uid“ filter returns service objects with the specified uid.\n If no filter is specified, the “text” filter is used.
device_id: Returns service objects belonging to the specified device_id. [optional]
name: (For “text” filter) You can specify \"name\" to find service objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find service objects with the specified text in the comment field. [optional]
protocol: Specify Protocolto find service objects that have the specified IP Protocol. [optional]
port: Specify Portto find service objects that have the specified Port. [optional]
uid: (for “uid“ filter) Returns service objects with the specified uid. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=protocol&protocol=6&device_id=68

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=port&port=80

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
URLhttps://192.168.1.1/securetrack/api/services/search?filter=text&name=tcp_10
BODY{
    \"services\": {
        \"count\": 1,
        \"total\": 1,
        \"service:\": {
            \"id\": 169197,
            \"name\": \"tcp_10\",
            \"display_name\": \"tcp_10\",
            \"class_name\": \"access_role\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"max\": false,
            \"min\": false,
            \"protocol\": 6,
            \"timeout\": \"\",
            \"type\": \"tcp_service\",
            }
        }
    }
}

","folder":"1-25","rawModeData":"{\n\t\"services\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"service:\": {\n\t\t\t\"id\": 169197,\n\t\t\t\"name\": \"tcp_10\",\n\t\t\t\"display_name\": \"tcp_10\",\n\t\t\t\"class_name\": \"access_role\",\n\t\t\t\"global\": false,\n\t\t\t\"device_id\": 158,\n\t\t\t\"comment\": \"\",\n\t\t\t\"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",\n\t\t\t\"implicit\": false,\n\t\t\t\"max\": false,\n\t\t\t\"min\": false,\n\t\t\t\"protocol\": 6,\n\t\t\t\"timeout\": \"\",\n\t\t\t\"type\": \"tcp_service\",\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/services/search","collectionId":"1","id":"1-25-145","method":"GET"},{"headers":"Accept: application/json\n","name":"Get time objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the time objects used in the specified device.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Starting page for query allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/time_objects
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/time_objects","collectionId":"1","id":"1-26-146","method":"GET"},{"headers":"Accept: application/json\n","name":"Get time objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the time objects used in the specified revision.

Parameters:
context: Global MSSP context [optional]
id: Revision ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/time_objects
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/time_objects","collectionId":"1","id":"1-26-147","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific time object","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of time objects by revision ID and rule ID

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Rule IDs

Usage Example
https://192.168.1.1/securetrack/api/revisions/7/time_objects/9
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/time_objects/{{ids}}","collectionId":"1","id":"1-26-148","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get policy relevance metrics for traffic","dataMode":"raw","description":"The response lists all the relevant security groups, tags, relevant instances, and count of unrelated instances for each Amazon VPC in the specified traffic path.
A relevant security group contains at least one instance including either the source or destination IP address.
An unrelated instance is included in the security group but not part of the specified traffic path.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is used only if MSSP mode is enabled. If MSSP mode is disabled context is ignored.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
body: Relevance metrics request

Usage Example
URLhttps://192.168.1.1/securetrack/api/traffic_policy
BODY{
    \"relevance_metrics\": {
        \"source_ips\": {
            \"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]
        },
        \"dest_ips\": {
            \"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]
        },
        \"targets\": {
            \"target\": [4, 10]
        }
    }
}


Response Messages:
200: Successful
401: Insufficient user permissions
404: Device not found
400: Invalid parameters","folder":"1-27","rawModeData":"{\n\t\"relevance_metrics\": {\n\t\t\"source_ips\": {\n\t\t\t\"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"dest_ips\": {\n\t\t\t\"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"targets\": {\n\t\t\t\"target\": [4, 10]\n\t\t}\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/traffic_policy/","collectionId":"1","id":"1-27-149","method":"POST"},{"name":"Cancel violation task","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Delete an access request violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/task/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Access request violations task has been aborted successfully.
401: Access is denied.
404: Access request violations task was not found.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task/{{taskId}}","collectionId":"1","id":"1-28-150","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Start a task to calculate violations for an access request","dataMode":"raw","description":"Create a calculation task to find access requests violations.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
body [optional]
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request uses resources from multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/task?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
202: Access request violations task was accepted.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination)
400: No network source were specified.
400: No network destination were specified.
401: Access is denied.
503: Access request violations task was rejected.","folder":"1-28","rawModeData":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task","collectionId":"1","id":"1-28-151","method":"POST"},{"headers":"Accept: application/json\n","name":"Get violation task results","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Get result of access requests violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task results were received.
401: Access is denied.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/result/{{taskId}}","collectionId":"1","id":"1-28-152","method":"GET"},{"headers":"Accept: application/json\n","name":"Get violation task status","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Get access requests violations task status.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task status was received.
401: Access is denied.
404: Access request violations task status was not found.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/status/{{taskId}}","collectionId":"1","id":"1-28-153","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get violations for an access request","dataMode":"raw","description":"Calculate the violations for the given access request.
Note: this API may take a while to complete.
See the asynchronous API /violations/access_request/task as an alternative.

Parameters:
body: AccessRequestListDTO
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request supports multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/sync?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
200: Access request violations were calculated.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination).
401: Access is denied.","folder":"1-28","rawModeData":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/sync","collectionId":"1","id":"1-28-154","method":"POST"},{"name":"Delete alerts by ids","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Delete specified alerts by IDs
To delete multiple alert_ids, use a comma between each ID

Parameters:
context: Delete alerts in the specified domain ID. [optional]
ids: The alert Ids for deletion

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/87

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/86,87,88

Response Messages:
200:
401: Security Policy Alert Ids: :|'alert ids'| don't exist","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{ids}}","collectionId":"1","id":"1-29-155","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get a specific alert","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a specified alert.
If the alert_id does not exist, an error message is returned.

Parameters:
context: MSSP context [optional]
id: The alert Id

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/1

Response Messages:
401: Alert ID does not exist","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","collectionId":"1","id":"1-29-156","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update an alert","dataMode":"raw","description":"Update an alert for unified security policies.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
id: The alert ID for updating [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts/1
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": \"moshe\"
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
204: Alert ID: 'alertId' was updated successfully
404: Alert ID: 'alertId' does not exist
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
401: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain","folder":"1-29","rawModeData":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": \"moshe\"\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","collectionId":"1","id":"1-29-157","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get alerts","data":[{"value":null,"type":"text","enabled":true,"key":"start"},{"value":null,"type":"text","enabled":true,"key":"count"}],"dataMode":"params","description":"Returns a list of all alerts. If an empty list is returned, it implies that there are no configured alerts for that context.
You must set start and count parameters to limit the number of returned alerts.
Start is zero based - to start from the second rule use start=1, to get rules 51-60 use start=50 and count=10.

Parameters:
context: MSSP context [optional]
start: Returns the results beginning with the specified result number
count: Returns the specified number of results

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts?start=10&count=25

Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","collectionId":"1","id":"1-29-158","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Create an alert","dataMode":"raw","description":"Create an alert for unified security policies.
Returns location with the alert id to get the alert.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": \"moshe\"
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
201: Security policy alert id :|'alertId'| , name : 'alertName'
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
401: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain","folder":"1-29","rawModeData":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": \"moshe\"\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","collectionId":"1","id":"1-29-159","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Check if tags are compliant with cloud tag policies","data":[{"value":null,"type":"text","enabled":true,"key":"policy_external_id"}],"dataMode":"raw","description":"Check if the tags of a cloud resource are compliant with the specified cloud tag policy. Specify the tag policy to validate in the TagPolicyViolationsCheckRequestDTO. The tags of a cloud resource are specified as a json object with the attribute 'tags' at the root level. 'tags' attributes can be a list of tag names or a map including both the tag name and value. If no tags are specified or if the tag is specified incorrectly, The compliance check will treat the resource as if it has no tags. If no cloud tag policy violations are found the API returns an empty violations list.

Parameters:
context: Returns results for the specified domain ID [optional]
policy_external_id: Tag policy external identifier
body: Tag policy violation check request

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/violation_check?policy_external_id=policyId
BODY {
    \"type\": \"vm\",
    \"name\": \"CRM-FE\",
    \"os\": \"ubuntu14.4\",
    \"image\": \"AMI-12345\",
    \"tags\": {
        \"Role\": \"webserver\",
        \"Budget\": \"corporate\",
        \"Owner\": \"Steve.Smith\"
    }
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found","folder":"1-30","rawModeData":" {\n\t\"type\": \"vm\",\n\t\"name\": \"CRM-FE\",\n\t\"os\": \"ubuntu14.4\",\n\t\"image\": \"AMI-12345\",\n\t\"tags\": {\n\t\t\"Role\": \"webserver\",\n\t\t\"Budget\": \"corporate\",\n\t\t\"Owner\": \"Steve.Smith\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/violation_check/","collectionId":"1","id":"1-30-160","method":"POST"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","name":"Get all cloud tag policies","method":"GET","id":"1-30-161","description":"This API returns the details of all the tag policies.

Results are filtered according to user domain permissions and request context. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicy1\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                },
                {
                        \"policy_id\": \"tp-102\",
                        \"policy_name\": \"myPolicy2\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions","folder":"1-30"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create a cloud tag policy","dataMode":"raw","description":"Create a new cloud tag policy. The policyName field specified in the TagPolicyDTO must be unique. Define the requirements enforced by the cloud tag policy in the requirements field of the TagPolicyDTO. The supported value for the \"requirement_type\" field are \"mandatory_tags\" and \"valid_values\"If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Create policy for the specified domain ID [optional]
body: cloud tag policy DTO [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
BODY {
    \"policy_name\": \"Production-VPC-Tag-Policy\",
    \"policy_description\": \"Instances tags in production\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_financial_tags\",
            \"requirement_severity\": \"HIGH\",
            \"tags\": [
                \"Owner\",
                \"Budget\"
            ]
        },
        {
            \"requirement_type\": \"valid_values\",
            \"requirement_name\": \"budget_valid_values\",
            \"requirement_severity\": \"CRITICAL\",
            \"tag\": \"Budget\",
            \"values\": [
                \"Corporate\",
                \"Dev\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
409: Policy name already exists","folder":"1-30","rawModeData":" {\n\t\"policy_name\": \"Production-VPC-Tag-Policy\",\n\t\"policy_description\": \"Instances tags in production\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_financial_tags\",\n\t\t\t\"requirement_severity\": \"HIGH\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Budget\"\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"requirement_type\": \"valid_values\",\n\t\t\t\"requirement_name\": \"budget_valid_values\",\n\t\t\t\"requirement_severity\": \"CRITICAL\",\n\t\t\t\"tag\": \"Budget\",\n\t\t\t\"values\": [\n\t\t\t\t\"Corporate\",\n\t\t\t\t\"Dev\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","collectionId":"1","id":"1-30-162","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all cloud tag policy violations for a VPC","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"severity"}],"dataMode":"params","description":"Retrieve all cloud tag policy violations for the specified VPC and severity level.

Parameters:
context: Global MSSP context. [optional]
deviceId: The device ID for which to get violations
severity: Return only violations of this severity
resourceId: The id of the VM instance [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses \"count=100\". [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tag_violations?deviceId=123&severity=CRITICAL
OUTPUT<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<tag_policy_device_violations>
    <violating_resources_count>2</violating_resources_count>
    <device_name>Amazon Test VPC </device_name>
    <severity>critical</severity>
    <violating_resources>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Name' value 'email server' is not valid. Valid values are [R&D, HR]</violation_message>
                    <policy_id>tp-100</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>validValue_constraint2</requirement_name>
                    <requirement_severity>high</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"valid_values\">
                        <tag>Name</tag>
                        <valid_values>
                            <valid_value>R&D</valid_value>
                            <valid_value>HR</valid_value>
                        </valid_values>
                        <invalid_value>email server</invalid_value>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-abc12345</resource_id>
            <resource_name>email server</resource_name>
        </violating_resource>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Application' is missing</violation_message>
                    <policy_id>tp-105</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>mandatory_constraint1</requirement_name>
                    <requirement_severity>critical</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"mandatory_tags\">
                        <missing_tag>Application</missing_tag>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-12345678</resource_id>
            <resource_name>Violations tests server</resource_name>
        </violating_resource>
    </violating_resources>
</tag_policy_device_violations>


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: A device with the specified ID was not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/tag_violations/","collectionId":"1","id":"1-30-163","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Replace a cloud tag policy","dataMode":"raw","description":"Replace the cloud tag policy specified by policyID with the new policy attributes.

Use PATCH in order to partially modify a policy. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Replace policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}

","folder":"1-30","rawModeData":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-164","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Modify a cloud tag policy","dataMode":"raw","description":"Partially modify a cloud tag policy by stating the modified attributes. Providing requirements replaces the entire list.

Specifying an empty requirement list is not permitted. Modify some attributes of the cloud tag policy specified by policyID with the attributes provided. If one or more \"requirement\" objects is provided, the exsiting \"requirement\" objects will be deleted and replaced with the new objetcs. Specifying an empty requirement list is not permitted.If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Rename policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found","folder":"1-30","rawModeData":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-165","method":"PATCH"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","name":"Delete cloud tag policy","method":"DELETE","id":"1-30-166","description":"Delete the cloud tag policy specified by policyId.

If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Delete policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT {
        \"status\": \"OK\",
        \"policy_name\": \"myPolicyName\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found","folder":"1-30"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","name":"Get cloud tag policy","method":"GET","id":"1-30-167","description":"This API retrieves the details of the cloud tag policy specified by policyId.

User must have admin permissions to the policy affiliated domain. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicyName\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryTagsRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found","folder":"1-30"},{"headers":"Accept: application/json\n","name":"Get matching rules task status","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task status was received.
401: User not permitted to Security policy exceptions.
404: Matching rules task status was not found.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/status/{{taskId}}","collectionId":"1","id":"1-31-168","method":"GET"},{"headers":"Accept: application/json\n","name":"Get matching rules task results","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task results were received.
401: User not permitted to Security policy exceptions.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/result/{{taskId}}","collectionId":"1","id":"1-31-169","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a specific exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Gets a specific exception for unified security policies.

Parameters:
exceptionId: The ID of the exception to get.
context: Global MSSP context [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
401: User not permitted to access the specified domain
404: A security policy exception with the specified ID was not found.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","collectionId":"1","id":"1-31-170","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete an exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Delete the specific unified security policy exceptions

Parameters:
exceptionId: The ID of the exception to delete.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
404: The security policy with the specified ID does not exist
401: User not permitted to access the specified domain.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","collectionId":"1","id":"1-31-171","method":"DELETE"},{"name":"Start a task to calculate matching rules for an exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Create a calculation task to find matching rules.
The results will be on the relevant devices for each access.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
exceptionId: Security policy Exception ID on which to run the API.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/1/matching_rules/start

Response Messages:
401: User not permitted to Security policy exceptions.
404: A security policy exception with the specified ID was not found.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}/matching_rules/start","collectionId":"1","id":"1-31-172","method":"POST"},{"name":"Cancel Matching rules task","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Matching rules task has been aborted successfully.
401: User not permitted to Security policy exceptions.
404: Matching rules task was not found.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/{{taskId}}","collectionId":"1","id":"1-31-173","method":"DELETE"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","name":"Get all exceptions","method":"GET","id":"1-31-174","description":"Gets a list of all unified security policy exceptions.

Parameters:
context: Global MSSP context [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions

Response Messages:
401: User not permitted to access the specified domain","folder":"1-31"},{"headers":"Content-Type: application/xml\n","name":"Create an exception","dataMode":"raw","description":"Create an exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/exceptions
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<security_policy_exception>
    <approved_by>admin</approved_by>
    <created_by>st_user</created_by>
    <creation_date>2015-01-01</creation_date>
    <description>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</description>
    <exempted_traffic_list>
        <exempted_traffic>
            <comment>Creating USP exception for ticket 123</comment>
            <dest_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.2</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </dest_network_collection>
            <security_requirements>
                <zone_to_zone_security_requirement>
                    <from_zone>LAN</from_zone>
                    <policy_name>corporate security policy</policy_name>
                    <to_zone>DMZ</to_zone>
                </zone_to_zone_security_requirement>
            </security_requirements>
            <service_collection>
                <service_items>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"custom\">
                        <port>4321</port>
                        <protocol>tcp</protocol>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"device_service\">
                        <mgmt_id>1</mgmt_id>
                        <service_uid>{5aa1c104-bd4d-4635-a281-b3a5442639ba}</service_uid>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"predefined\">
                        <predefined_service_name>http</predefined_service_name>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"range_service\">
                        <minProtocol>10</minProtocol>
                        <maxProtocol>20</maxProtocol>
                    </service_item>
                </service_items>
            </service_collection>
            <source_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.1</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </source_network_collection>
        </exempted_traffic>
    </exempted_traffic_list>
    <expiration_date>2025-01-01</expiration_date>
    <name>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</name>
    <requested_by>admin</requested_by>
    <ticket_id>123</ticket_id>
</security_policy_exception>


Response Messages:
400: The specified network item is not valid.
400: The specified zone name does not exist.
400: The security policy with the specified name does not exist
400: The security policy 'created by' user is not valid.
400: The security policy with the specified name already exists.
401: User not permitted to access the specified domain.","folder":"1-31","rawModeData":"\n\n\tadmin\n\tst_user\n\t2015-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\t\n\t\t\n\t\t\tCreating USP exception for ticket 123\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.2\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tLAN\n\t\t\t\t\tcorporate security policy\n\t\t\t\t\tDMZ\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4321\n\t\t\t\t\t\ttcp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t1\n\t\t\t\t\t\t{5aa1c104-bd4d-4635-a281-b3a5442639ba}\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\thttp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t10\n\t\t\t\t\t\t20\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.1\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t2025-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\tadmin\n\t123\n","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","collectionId":"1","id":"1-31-175","method":"POST"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/","name":"Get unified security policies","method":"GET","id":"1-32-176","description":"Fetches the security zone matrices defined under Unified Security Policy.

Parameters:
context: Returns results for the specified domain ID. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies

Response Messages:
401: User not permitted to access the specified domain","folder":"1-32"},{"headers":"Content-Type: application/xml\n","name":"Set manual device mapping","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"raw","description":"Add or remove a zone on a device interface

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID
body: InterfacesManualMappingsDTO

Usage Example
URLhttps://127.0.0.1/securetrack/api/security_policies/10/manual_mapping
BODY<interfaces_manual_mappings>
<interface_manual_mapping>
<interface_name>Vlan_30</interface_name>
<zones_user_actions>
<zone_user_action>
<zoneId>10</zoneId>
<action>add</action>
</zone_user_action>
</zones_user_actions>
</interface_manual_mapping>
</interfaces_manual_mappings>


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Not found error
404: User action not valid (only add/remove)
404: No interface with name for device with id
404: No zone with id
404: No revision for device with id
404: No device with ID
404: Access denied for device with ID
404: InterfacesManualMappingsDTO is empty
404: Error on updating security_policy_interface_zone_mapping_user_action table for device with ID","folder":"1-32","rawModeData":"\n \n Vlan_30\n \n \n 10\n add\n \n \n \n\n ","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/manual_mapping","collectionId":"1","id":"1-32-177","method":"POST"},{"headers":"Accept: application/json\n","collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/global","name":"Get global unified security policies","method":"GET","id":"1-32-178","description":"Fetches the global security zone matrices defined under Unified Security Policy.



Usage Example
https://192.168.1.1/securetrack/api/security_policies/global

Response Messages:
401: User not permitted to access global security policies","folder":"1-32"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}/export","name":"Get unified security policy as CSV","method":"GET","id":"1-32-179","description":"Exports a Security Policy in CSV format

Parameters:
context: Returns results for the specified domain ID. [optional]
id: ID of the security policy. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1/export

Response Messages:
401: User not permitted to access the specified domain
404: Security Policy does not exist","folder":"1-32"},{"name":"Delete unified security policy","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete a Security Policy Matrix

Parameters:
context: Returns results for the specified domain ID. [optional]
id: The unique identifier of the security policy matrix to delete

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1
","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}","collectionId":"1","id":"1-32-180","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get the violating rules for the specified device.","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"severity"},{"value":null,"type":"text","enabled":true,"key":"type"}],"dataMode":"params","description":"policyName is supported for management devices running in Advanced management mode.

Parameters:
deviceId: The device ID for which to get violations
policyName: Return only violations that match this policy [optional]
severity: Return only violations of this severity
type: Return only violations of this type

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/device_violations?policy=policy_name&type=SECURITY_POLICY&severity=MEDIUM

Response Messages:
200: The violations were successfully retrieved
400: The specified value for the violation severity is invalid
400: The specified value for the violation type is invalid
400: You cannot specify a policyName because the device is not running in Advanced management mode
404: A device with the specified ID was not found
404: A policy with the specified policyName was not found for this device","folder":"1-33","url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/device_violations","collectionId":"1","id":"1-33-181","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the amount of violating rules for the specified device.","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: The device ID for which to get violations.

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/count

Response Messages:
200: The violation count was successfully retrieved
404: Device with id: <deviceId> doesn't exist","dataMode":"params","folder":"1-33","url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/count","collectionId":"1","id":"1-33-182","method":"GET"}],"order":[],"name":"Tufin Tufin SecureTrack R19-3-GA","id":"1","description":"Tufin Orchestration Suite - Tufin SecureTrack APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securetrack/apidoc"} \ No newline at end of file diff --git a/Postman Format v1/R19-3 postman collection/tufin.postman_environment b/Postman Format v1/R19-3 postman collection/tufin.postman_environment new file mode 100644 index 0000000..51d4258 --- /dev/null +++ b/Postman Format v1/R19-3 postman collection/tufin.postman_environment @@ -0,0 +1 @@ +{"name":"Tufin environment","values":[{"type":"text","key":"SecureApp_IP"},{"type":"text","key":"SecureChange_IP"},{"type":"text","key":"SecureTrack_IP"},{"type":"text","key":"applicationId"},{"type":"text","key":"applicationInterfaceId"},{"type":"text","key":"application_id"},{"type":"text","key":"application_pack_id"},{"type":"text","key":"assigneeId"},{"type":"text","key":"child_id"},{"type":"text","key":"child_ids"},{"type":"text","key":"cleanup_id"},{"type":"text","key":"cloud_id"},{"type":"text","key":"connectionId"},{"type":"text","key":"connectionInterfaceId"},{"type":"text","key":"connectionToApplicationId"},{"type":"text","key":"connection_id"},{"type":"text","key":"connection_to_application_pack_id"},{"type":"text","key":"customer_id"},{"type":"text","key":"deviceId"},{"type":"text","key":"device_id"},{"type":"text","key":"domainId"},{"type":"text","key":"exceptionId"},{"type":"text","key":"fieldId"},{"type":"text","key":"id"},{"type":"text","key":"ids"},{"type":"text","key":"instructionId"},{"type":"text","key":"managementId"},{"type":"text","key":"parent_id"},{"type":"text","key":"parent_ids"},{"type":"text","key":"policyId"},{"type":"text","key":"requestId"},{"type":"text","key":"revId"},{"type":"text","key":"revision_id"},{"type":"text","key":"risk_id"},{"type":"text","key":"ruleId"},{"type":"text","key":"rule_id"},{"type":"text","key":"rule_uid"},{"type":"text","key":"serverId"},{"type":"text","key":"serviceId"},{"type":"text","key":"sourceApplicationId"},{"type":"text","key":"stepId"},{"type":"text","key":"tag_id"},{"type":"text","key":"targetApplicationId"},{"type":"text","key":"taskId"},{"type":"text","key":"task_id"},{"type":"text","key":"task_uid"},{"type":"text","key":"toStepId"},{"type":"text","key":"uid"},{"type":"text","key":"userId"},{"type":"text","key":"zone_id"},{"type":"text","key":"zone_ids"}]} \ No newline at end of file diff --git a/Postman Format v1/R20-1 postman collection/securechangeworkflow_R20-1-GA.json b/Postman Format v1/R20-1 postman collection/securechangeworkflow_R20-1-GA.json new file mode 100644 index 0000000..4e7d9d3 --- /dev/null +++ b/Postman Format v1/R20-1 postman collection/securechangeworkflow_R20-1-GA.json @@ -0,0 +1 @@ +{"folders":[{"order":["2-1-1","2-1-2","2-1-3","2-1-4","2-1-5"],"collectionId":"2","name":"Access Portal","hasRequests":true,"id":"2-1"},{"order":["2-2-6","2-2-7","2-2-8","2-2-9","2-2-10","2-2-11","2-2-12","2-2-13"],"collectionId":"2","name":"Application Connections","hasRequests":true,"id":"2-2"},{"order":["2-3-14"],"collectionId":"2","name":"Application Identities","hasRequests":true,"id":"2-3"},{"order":["2-4-15","2-4-16","2-4-17","2-4-18","2-4-19","2-4-20","2-4-21","2-4-22","2-4-23","2-4-24","2-4-25","2-4-26","2-4-27","2-4-28","2-4-29"],"collectionId":"2","name":"Application Interfaces","hasRequests":true,"id":"2-4"},{"order":["2-5-30","2-5-31","2-5-32","2-5-33","2-5-34"],"collectionId":"2","name":"Application Migration","hasRequests":true,"id":"2-5"},{"order":["2-6-35","2-6-36","2-6-37","2-6-38","2-6-39","2-6-40","2-6-41","2-6-42","2-6-43","2-6-44","2-6-45","2-6-46","2-6-47","2-6-48","2-6-49","2-6-50","2-6-51","2-6-52"],"collectionId":"2","name":"Application Packs","hasRequests":true,"id":"2-6"},{"order":["2-7-53"],"collectionId":"2","name":"Application Pending Changes","hasRequests":true,"id":"2-7"},{"order":["2-8-54","2-8-55"],"collectionId":"2","name":"Application Servers (across all applications)","hasRequests":true,"id":"2-8"},{"order":["2-9-56","2-9-57","2-9-58","2-9-59","2-9-60","2-9-61","2-9-62","2-9-63"],"collectionId":"2","name":"Application Servers (by application)","hasRequests":true,"id":"2-9"},{"order":["2-10-64","2-10-65","2-10-66","2-10-67","2-10-68","2-10-69"],"collectionId":"2","name":"Application Services (global)","hasRequests":true,"id":"2-10"},{"order":["2-11-70","2-11-71","2-11-72","2-11-73","2-11-74"],"collectionId":"2","name":"Application Services (local)","hasRequests":true,"id":"2-11"},{"order":["2-12-75","2-12-76","2-12-77","2-12-78"],"collectionId":"2","name":"Application Users","hasRequests":true,"id":"2-12"},{"order":["2-13-79","2-13-80","2-13-81","2-13-82","2-13-83","2-13-84","2-13-85","2-13-86","2-13-87","2-13-88","2-13-89"],"collectionId":"2","name":"Applications","hasRequests":true,"id":"2-13"},{"order":["2-14-90","2-14-91","2-14-92"],"collectionId":"2","name":"Cloud Console","hasRequests":true,"id":"2-14"},{"order":["2-15-93","2-15-94","2-15-95","2-15-96","2-15-97","2-15-98","2-15-99"],"collectionId":"2","name":"Customers","hasRequests":true,"id":"2-15"},{"order":["2-16-100","2-16-101","2-16-102"],"collectionId":"2","name":"Domains","hasRequests":true,"id":"2-16"},{"order":["2-17-103"],"collectionId":"2","name":"Load Balancers","hasRequests":true,"id":"2-17"},{"order":["2-18-104","2-18-105","2-18-106","2-18-107"],"collectionId":"2","name":"SecureChange Devices","hasRequests":true,"id":"2-18"},{"order":["2-19-108","2-19-109","2-19-110","2-19-111","2-19-112","2-19-113"],"collectionId":"2","name":"Server Decommissioning","hasRequests":true,"id":"2-19"},{"order":["2-20-114","2-20-115"],"collectionId":"2","name":"System Configuration","hasRequests":true,"id":"2-20"},{"order":["2-21-116","2-21-117","2-21-118","2-21-119","2-21-120","2-21-121","2-21-122"],"collectionId":"2","name":"System Users","hasRequests":true,"id":"2-21"},{"order":["2-22-123","2-22-124","2-22-125","2-22-126","2-22-127","2-22-128","2-22-129","2-22-130"],"collectionId":"2","name":"Ticket Lifecycle","hasRequests":true,"id":"2-22"},{"order":["2-23-131","2-23-132","2-23-133","2-23-134","2-23-135","2-23-136","2-23-137","2-23-138","2-23-139","2-23-140","2-23-141","2-23-142","2-23-143","2-23-144","2-23-145","2-23-146","2-23-147","2-23-148","2-23-149","2-23-150","2-23-151","2-23-152","2-23-153","2-23-154","2-23-155","2-23-156"],"collectionId":"2","name":"Tickets","hasRequests":true,"id":"2-23"}],"requests":[{"headers":"Accept: application/json\n","name":"Retrieve existing application access requests","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-1","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-1","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update application access requests","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
body: application access requests

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_requests>
    <application_access_request>
        <id>1</id>
        <action>APPROVE</action>
    </application_access_request>
    <application_access_request>
        <id>2</id>
        <action>REJECT</action>
    </application_access_request>
</application_access_requests>


Response Messages:
200: Application access requests were updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-1","rawModeData":"\n\t\n\t\t1\n\t\tAPPROVE\n\t\n\t\n\t\t2\n\t\tREJECT\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-2","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create application access request","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_request>
    <server_group_id>1</server_group_id>
    <server_ip>1.1.1.1</server_ip>
    <comment>Request to join the WebServers server group</comment>
</application_access_request>


Response Messages:
201: Application access request was submitted.
400: The application was already deleted.
400: Server id cannot be empty.
400: Hostname or IP cannot be empty.
400: The provided server does not exist in application.
400: The provided server is not allowed to access.
400: Request already created
400: Requester cannot be null
400: Group cannot be empty
400: Invalid ip
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-1","rawModeData":"\n\t1\n\t1.1.1.1\n\tRequest to join the WebServers server group\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-3","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update an application access request","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"requestId"}],"dataMode":"raw","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1
BODY<application_access_request>
    <action>APPROVE</action>
</application_access_request>


Response Messages:
200: Application access request was updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-1","rawModeData":"\n\tAPPROVE\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","collectionId":"2","id":"2-1-4","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application access request by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"requestId"}],"description":"Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Access request with id ID was not found in application with id ID","dataMode":"params","folder":"2-1","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","collectionId":"2","id":"2-1-5","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections, with extended resources information","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]
start: Return results starting only from the specified index; 0-based index; default value = 0 [optional]
count: Return the specified number of results. Returns all results if no value specified [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name&start=50&count=100

Response Messages:
400: Start value cannot be a negative number.
400: Count value must be greater than 0.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied.
404: There is no application with the specified ID.
404: There are no connections with the name NAME.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_extended","collectionId":"2","id":"2-2-6","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-7","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update a connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection
body: Connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections/1
BODY <connection>
     <name>Connection A</name>
     <comment>Connection A comment</comment>
     <sources>
         <source>
             <id>2</id>
         </source>
         <source>
             <id>3</id>
         </source>
     </sources>
     <services>
         <service>
             <id>1</id>
         </service>
     </services>
     <destinations>
         <destination>
             <id>1</id>
         </destination>
     </destinations>
</connection>


Response Messages:
200: Connection was modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application that contains the server ID
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":" \n\t Connection A\n\t Connection A comment\n\t \n\t\t \n\t\t\t 2\n\t\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n ","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-8","method":"PUT"},{"name":"Delete connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
200: Connection was deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-9","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create a ticket to repair a connection","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_id"}],"description":"Parameters:
application_id: The application ID
connection_id: The connection ID
body: Ticket

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/2/repair
BODY<ticket>
    <subject>Repair connection 2</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <workflow>
        <name>Workflow with topology</name>
    </workflow>
    <steps>
        <step>
            <name>Open request</name>
            <tasks>
                <task>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                            <name>Business Justification</name>
                            <text>I need access to ftp </text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                            <name>Project Number</name>
                            <text>CR124560</text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                            <name>Hyperlink</name>
                            <url>http://192.168.1.1/ticket</url>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                            <name>Change Window</name>
                            <selection>Monday</selection>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                            <name>manager email</name>
                            <text>manager@tufin.com</text>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Response Messages:
201: Ticket was created.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set.
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: Expiration field is required.
400: Submit ticket enabled only with the first step.
400: First step can be only with one task.
400: The specified workflow does not contain an access request field in the first step.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
401: Logged in user: NAME do not have permission to perform on behalf actions.
401: You are not a participant in the first step of this workflow.
401: Access is denied.
401: To create a ticket you must purchase a valid SecureChange license.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: Cannot create a ticket to repair this connection because the connection status is not disconnected.
403: Cannot create a ticket to repair this connection because the connection was edited but a ticket has not been created yet.
403: Cannot create a ticket to repair this connection because there are other open tickets for an application that includes this connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\tRepair connection 2\n\tu1\n\tNormal\n\t\n\t\tWorkflow with topology\n\t\n\t\n\t\t\n\t\t\tOpen request\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBusiness Justification\n\t\t\t\t\t\t\tI need access to ftp \n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tProject Number\n\t\t\t\t\t\t\tCR124560\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tHyperlink\n\t\t\t\t\t\t\thttp://192.168.1.1/ticket\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tChange Window\n\t\t\t\t\t\t\tMonday\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tmanager email\n\t\t\t\t\t\t\tmanager@tufin.com\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connections/{{connection_id}}/repair","collectionId":"2","id":"2-2-10","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Update connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <id>1</id>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <id>2</id>
         <name>Connection B</name>
     </connection>
     <connection>
         <id>3</id>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application that contains the server ID
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\t \n\t\t 1\n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t 2\n\t\t Connection B\n\t \n\t \n\t\t 3\n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-11","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections?name=Connection Name

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no connections with the name NAME.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-12","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: The list of the connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <name>Connection B</name>
     </connection>
     <connection>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were created.
201: Connection was created.
400: There are no items to add.
400: You cannot add to application NAME because it was decommissioned.
400: Connection name already exists.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\t \n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t Connection B\n\t \n\t \n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-13","method":"POST"},{"headers":"Accept: application/json\n","name":"Fetches application identities","description":"Fetches the list of pre-defined application identities (like facebook) that can be used in a connection.

Parameters:
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities?name=facebook

Response Messages:
404: There are no application identities with the name NAME.
401: Access is denied.","folder":"2-3","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/application_identities","collectionId":"2","id":"2-3-14","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application interface by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-15","method":"GET"},{"name":"Delete application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
200: Application interface was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-16","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update an application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"dataMode":"raw","description":"Update the application interface properties. If is_published is set to true, the application interface is published for use by other users.

Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of The application interface
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1
BODY<application_interface>
    <name>updated name</name>
    <comment>Updated application interface</comment>
    <is_published>true</is_published>
</application_interface>


Response Messages:
200: Application interface was modified.
400: Application interface is not complete for publish.
400: Name cannot be empty.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","folder":"2-4","rawModeData":"\n\tupdated name\n\tUpdated application interface\n\ttrue\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-17","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing interface connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
name: The name of the interface connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections?name=Connection 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no connection interfaces with the name NAME.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","collectionId":"2","id":"2-4-18","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create interface connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
body: The interface connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections
BODY<interface_connections>
    <interface_connection>
        <name>Connection 1</name>
        <sources>
            <source>
                <id>3</id>
            </source>
        </sources>
        <services>
            <service>
                <id>3</id>
            </service>
            <service>
                <id>Facebook</id>
            </service>
        </services>
        <comment>New connection</comment>
    </interface_connection>
</interface_connections>


Response Messages:
200: Interface connections were created.
201: Interface connection was created.
400: There are no items to add.
400: Cannot create interface connection without a name.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
401: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\t\n\t\tConnection 1\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\t\n\t\t\t\tFacebook\n\t\t\t\n\t\t\n\t\tNew connection\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","collectionId":"2","id":"2-4-19","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Create connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"Create a connection from this application to an application interface.

Parameters:
applicationId: The unique identifier of the application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications
BODY<connection_to_application>
    <name>Connection to Application 1</name>
    <comment>New connection to application</comment>
    <application_interface_id>1</application_interface_id>
    <servers>
        <server>
            <id>3</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
201: Connection to application was created.
400: You cannot add to application NAME because it was decommissioned.
400: The selected interface cannot be used more than once in the application.
400: Name cannot be empty.
400: Cannot create from local interface.
400: ApplicationInterface didn't got published.
400: Name already exists.
400: Cannot create connection to application without servers, there should be at least one server.
400: Reference to source/destination with ID is invalid.
400: You can use only interface from the same customer.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found.","folder":"2-4","rawModeData":"\n\tConnection to Application 1\n\tNew connection to application\n\t1\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","collectionId":"2","id":"2-4-20","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection to application [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications?name=Connection to Application 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","collectionId":"2","id":"2-4-21","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an interface connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection
body: The interface connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1
BODY<interface_connection>
    <name>Updated name</name>
    <sources>
        <source>
            <id>19</id>
        </source>
    </sources>
    <services>
        <service>
            <id>9</id>
        </service>
    </services>
    <comment>Updated connection</comment>
</interface_connection>


Response Messages:
200: Interface connection was modified.
400: Interface connection name cannot be empty.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
401: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tUpdated name\n\t\n\t\t\n\t\t\t19\n\t\t\n\t\n\t\n\t\t\n\t\t\t9\n\t\t\n\t\n\tUpdated connection\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-22","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing interface connection by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-23","method":"GET"},{"name":"Delete interface connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
200: Interface connection was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-24","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update a connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1
BODY<connection_to_application>
    <name>Updated name</name>
    <comment>Updated connection to application</comment>
    <servers>
        <server>
            <id>4</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
200: Connection to application was modified.
400: Name cannot be empty.
400: Name already exists.
400: Reference to source/destination with ID is invalid.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tUpdated name\n\tUpdated connection to application\n\t\n\t\t\n\t\t\t4\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-25","method":"PUT"},{"name":"Delete connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
200: Connection to application was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-26","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection to application by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-27","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces
BODY<application_interface>
    <name>Interface to Application 1</name>
    <comment>New application interface</comment>
</application_interface>


Response Messages:
201: Application interface was created.
400: You cannot add to application NAME because it was decommissioned.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tInterface to Application 1\n\tNew application interface\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","collectionId":"2","id":"2-4-28","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing application interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"params","description":"To improve response time, set 'calculateIsPublished = false' to avoid calculating 'is_published'.

Parameters:
applicationId: The unique identifier of the application
name: The name of the application interface [optional]
calculateIsPublished: Should calculate is_published value [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces?name=Interface to Application 1

Response Messages:
400: There is no application with the specified ID.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no application interfaces with the name NAME.","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","collectionId":"2","id":"2-4-29","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve server mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
search_servers_type: Search server type [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping?search_servers_type=EXTERNAL

Response Messages:
400: Search migrated servers type parameter must be either internal, external or both.
400: Cannot get mappings between application to itself.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application with ID
401: You do not have permissions to edit this application.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","collectionId":"2","id":"2-5-30","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update server mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"raw","description":"Use id=-1 for target_network_object if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The server mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping
BODY<servers_mapping>
    <server_mapping>
        <source_network_object>
            <id>3</id>
        </source_network_object>
        <target_network_object>
            <id>4</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>5</id>
        </source_network_object>
        <target_network_object>
            <id>-1</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>6</id>
        </source_network_object>
    </server_mapping>
</servers_mapping>


Response Messages:
200: Server mappings were modified.
400: Source network object cannot be empty.
400: Source network object is not valid
400: Target network object is not valid
400: Source and target network objects must be internal or external both.
400: Cannot use DEVICE application resources as external network objects.
400: Source network object with ID must be used by any connection.
400: Cannot remove mapping of network object with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map to ANY network object.
400: Cannot map Internet network object.
400: Cannot map to Internet network object.
400: Target network object ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found.","folder":"2-5","rawModeData":"\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t6\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","collectionId":"2","id":"2-5-31","method":"PUT"},{"name":"Copy application servers and connections to another application.","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"params","description":"This API can be used to:
1. Create applications based on a blueprint (template).
2. Copy applications between environments (dev, test, prod).
3. Migrate applications between data-centers.

Before migrating make sure to map servers and connections to applications (if any exist).\nThis migration uses the configuration specified in the other API calls.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2

Response Messages:
200: Application was migrated.
400: Cannot migrate a decommissioned application.
400: Cannot migrate to a decommissioned application.
400: Cannot migrate an application to itself.
400: Cannot edit target DEVICE application.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
400: The source application has no connections to migrate.
409: You cannot migrate the application because not all servers are mapped.
409: You cannot migrate the application because not all connections to application are mapped.
409: You cannot migrate the application because one of the interfaces in the original application has been changed and has not been published.","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}","collectionId":"2","id":"2-5-32","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Update connection to application mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"raw","description":"Use id=-1 for target_application_interface if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The interface instance mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping
BODY<connections_to_applications_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>1</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>4</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>2</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>-1</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>3</id>
        </source_connection_to_application>
    </connection_to_application_mapping>
</connections_to_applications_mapping>


Response Messages:
200: Connection to application mappings were modified.
400: Source interface instance cannot be empty.
400: Source interface instance object is not valid
400: Target application interface is not valid
400: Connection to application with ID: ID was not found.
400: Interface with ID: ID was not found.
400: Cannot remove mapping of instance with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map instance to interface with ID ID because the interface exists in target application.
400: Cannot map to duplicate application interfaces
400: Application interface didn't got published
400: Connection to application with id: ID must used by source application
400: You cannot map connection to application ID, because it is contained in a connection to application pack.
400: Application interface ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-5","rawModeData":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","collectionId":"2","id":"2-5-33","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve connection to application mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping

Response Messages:
400: Cannot get mappings between application to itself.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","collectionId":"2","id":"2-5-34","method":"GET"},{"headers":"Accept: application/json\n","name":"List all application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
name: The name of the application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs?name=Application pack 1

Response Messages:
401: Access is denied
404: There are no application packs with the NAME in customer with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-35","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create new application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <name>Application pack 1</name>
        <comment>New application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <viewers>
            <viewer>
                <id>5</id>
            </viewer>
        </viewers>
    </application_pack>
</application_packs>


Response Messages:
401: Access is denied
401: You do not have permission to access application that contains the interface ID
400: There are no application packs to add.
400: Application pack can be created only in meshed domain mode.
404: Customer with ID was not found.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: The owner NAME does not have permission to access applications.
400: Application pack was already saved.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tApplication pack 1\n\t\tNew application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t5\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-36","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Update application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"dataMode":"raw","description":"Update the application packs properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <id>1</id>
        <name>Updated name</name>
        <comment>Updated application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <is_published>false</is_published>
    </application_pack>
</application_packs>


Response Messages:
400: There are no application packs to edit.
400: Application pack ID cannot be empty.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
401: Access is denied
401: You do not have permission to access application that contains the interface ID
401: You do not have permissions to edit this application pack.
401: You do not have permissions to change the owner of application pack ID.
401: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID.","folder":"2-6","rawModeData":"\n\t\n\t\t1\n\t\tUpdated name\n\t\tUpdated application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\tfalse\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-37","method":"PUT"},{"name":"Delete a connection to application pack","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
400: Connection to application pack with ID was not found for application with ID.
400: The connection to application pack was already deleted.
401: Access is denied.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-38","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection to application pack by ID.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
404: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-39","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to update
body: Connection to application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1
BODY<connection_to_application_pack>
    <name>Updated name</name>
    <comment>Updated Connection to application pack</comment>
    <tags_servers>
        <tag_servers>
            <tag>
                <id>1</id>
            </tag>
            <servers>
                <server>
                    <id>3</id>
                </server>
            </servers>
        </tag_servers>
        <tag_servers>
            <tag>
                <name>Tag 1</name>
            </tag>
            <servers>
            </servers>
        </tag_servers>
    </tags_servers>
</connection_to_application_pack>


Response Messages:
400: There is no application with the specified ID.
400: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is required.
400: Tag with Name was not found.
400: Server ID cannot be empty.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
401: Access is denied.
401: You do not have permission to access application that contains the server ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.","dataMode":"raw","folder":"2-6","rawModeData":"\n\tUpdated name\n\tUpdated Connection to application pack\n\t\n\t\t\n\t\t\t\n\t\t\t\t1\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTag 1\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-40","method":"PUT"},{"name":"Remove application interfaces from application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"application_interface_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
application_interface_id: IDs of application interfaces to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces?application_interface_id=1&application_interface_id=2

Response Messages:
200: Application Interface was deleted.
401: Access is denied
401: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Application interface ID was not found in application pack ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","collectionId":"2","id":"2-6-41","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update application interfaces and tag mapping","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"dataMode":"raw","description":"Add application interfaces to application pack, and map a tag to the application interface. If a tag is not specified for the interface, the tag will be set to “No Tag”.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: List of interface tag mapping to be added or modified

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces
BODY<application_interface_tags>
    <application_interface_tag>
        <application_interface>
            <id>1</id>
        </application_interface>
        <tag>
            <id>3</id>
        </tag>
    </application_interface_tag>
    <application_interface_tag>
        <application_interface>
            <id>2</id>
        </application_interface>
    </application_interface_tag>
</application_interface_tags>


Response Messages:
401: Access is denied
404: There are no application packs with the NAME in customer with ID.
401: You do not have permissions to edit this application pack.
401: You do not have permission to access application that contains the interface ID
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Application Interface can't be null.
400: Empty interface ID is not valid.","folder":"2-6","rawModeData":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","collectionId":"2","id":"2-6-42","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Modify tags of an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Tags to modify

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <id>1</id>
        <name>Tag 1</name>
    </tag>
    <tag>
        <id>2</id>    
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
401: Access is denied
401: You do not have permissions to edit this application pack.
404: Customer with ID was not found.
404: There is no application pack with the ID in customer with ID.
400: Tag with NAME already exists in application pack ID.
400: Updated tag ID can't be empty
400: Updated Tag ID doesn't exist on application pack ID.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\t1\n\t\tTag 1\n\t\n\t\n\t\t2\t\n\t\tTag 2\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-43","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Create new Tag under an application pack ","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
body: List of tags

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <name>Tag 1</name>
    </tag>
    <tag>
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
401: Access is denied
404: There is no application pack with the ID in customer with ID.
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Tag name must contain at least 2 and no more than 160 characters.
400: Tag with NAME already exists in application pack ID.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tTag 1\n\t\n\t\n\t\tTag 2\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-44","method":"POST"},{"name":"Delete tags from application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"tag_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
tag_id: IDs of tags to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/21/tags?tag_id=1&tag_id=2

Response Messages:
200: Tags were deleted.
401: Access is denied
401: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Tag ID was not found in application pack ID.
404: Tag ID is in use so can't be deleted.
404: Removed tag ID can't be empty.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-45","method":"DELETE"},{"headers":"Accept: application/json\n","name":"List all application pack tags","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags

Response Messages:
401: Access is denied
404: There is no application pack with the ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-46","method":"GET"},{"name":"Delete application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
200: Application pack wes deleted.
401: You do not have permissions to delete this application pack.
400: There is no application pack with the specified ID.
400: Customer with ID doesn't own an application pack with ID.
400: Application Pack ID cannot be deleted. It is in use by applications IDs.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-47","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application pack by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
401: Access is denied
401: You do not have permission to access application pack with ID
404: Application pack with ID was not found for customer with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-48","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"dataMode":"raw","description":"Update the application pack properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1
BODY<application_pack>
    <name>Updated name</name>
    <comment>Updated application pack</comment>
    <owner>
        <id>4</id>
    </owner>
    <editors>
        <editor>
            <id>3</id>
        </editor>
    </editors>
    <viewers>
        <viewer>
            <id>5</id>
        </viewer>
    </viewers>
    <is_published>true</is_published>
</application_pack>


Response Messages:
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
401: Access is denied
401: You do not have permission to access application that contains the interface ID
401: You do not have permissions to edit this application pack.
401: You do not have permissions to change the owner of application pack ID.
401: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID.","folder":"2-6","rawModeData":"\n\tUpdated name\n\tUpdated application pack\n\t\n\t\t4\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\n\ttrue\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-49","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get tag by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"tag_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
tag_id: The unique identifier of a tag

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags/1

Response Messages:
401: Access is denied
404: There is no tag with ID.
404: Customer with ID doesn't own a tag with ID.
404: Application Pack with ID doesn't own a tag with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags/{{tag_id}}","collectionId":"2","id":"2-6-50","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve a list of all connection to application pack by application ID.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of application
name: The name of the connection to application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs?name=Connection to application pack 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
404: There are no connection to application pack with the NAME in application with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","collectionId":"2","id":"2-6-51","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create new connection to application packs","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of application
body: List of connection to application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs
BODY<connection_to_application_packs>
    <connection_to_application_pack>
        <name>Connection to application pack 1</name>
        <comment>New Connection to application pack</comment>
        <application_pack>
            <id>1</id>
        </application_pack>
        <tags_servers>
            <tag_servers>
                <tag>
                    <id>1</id>
                </tag>
                <servers>
                    <server>
                        <id>3</id>
                    </server>
                </servers>
            </tag_servers>
            <tag_servers>
                <tag>
                    <name>Tag 1</name>
                </tag>
                <servers>
                    <server>
                        <id>4</id>
                    </server>
                </servers>
            </tag_servers>
        </tags_servers>
    </connection_to_application_pack>
</connection_to_application_packs>


Response Messages:
400: There are no connection to application packs to add.
400: Application pack ID cannot be empty.
400: Application with ID was not found.
400: There is no application with the specified ID.
400: There is no application pack with the specified ID.
400: Application pack with ID was decommissioned.
400: Application pack with ID was not published.
400: Connection to application pack cannot be created in the domain of the application pack.
400: The application pack cannot be used more than once in the application.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is missing.
400: Tag ID does not exist.
400: Server ID does not exist.
400: Tag ID is not in use in connection to application pack ID, so it cannot be updated.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
401: Access is denied.
401: You do not have permission to access application that contains the server ID
401: You do not have permission to access application pack with ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Tag with NAME was not found.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tConnection to application pack 1\n\t\tNew Connection to application pack\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t3\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tTag 1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","collectionId":"2","id":"2-6-52","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing access rules","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/87/access_requests

Response Messages:
400: The application was already deleted.
400: There are no changed connections that are ready for creating a ticket.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
400: Application with ID ID was not found.","dataMode":"params","folder":"2-7","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/access_requests","collectionId":"2","id":"2-7-53","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches server by ID","data":[{"value":null,"type":"text","enabled":true,"key":"serverId"}],"description":"Parameters:
serverId: The ID of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects/87

Response Messages:
400: Server with id ID was not found.
400: Application with ID ID was not found.
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.","dataMode":"params","folder":"2-8","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects/{{serverId}}","collectionId":"2","id":"2-8-54","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches servers","description":"Parameters:
name: The name of the servers [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?name=server1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: Server with name NAME was not found.
400: Parameter typeOnDevice is not valid.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no servers with the name NAME
404: There are no servers with the typeOnDevice TYPEONDEVICE ","folder":"2-8","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects","collectionId":"2","id":"2-8-55","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: There are no items to add.
400: The application was already deleted.
400: You cannot add to application NAME because it was decommissioned.
400: Network object was already saved
400: Name cannot be empty
400: Server with NAME already exists.
400: IP is missing
400: Mask is missing
400: Invalid IP
400: Invalid mask
400: Max IP is missing
400: Min IP is missing
400: Invalid min IP
400: Invalid max IP
400: Min IP cannot be larger than max IP
400: Invalid network object type CLASS_NAME.
400: Invalid uid
400: Invalid device ID
400: Virtual server does not exist in SecureTrack
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Cannot save the server because the virtual server does not exist.
400: Cannot save the server because an error occurred
400: The type_on_device value is not valid
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
404: Virtual server was not found in SecureTrack.
503: Not connected to SecureTrack.","dataMode":"raw","folder":"2-9","rawModeData":"\n\t \n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t \n\t \n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n \t\t 2.2.2.22\n\t \n\t \n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t \n\t \n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t \n\t \n\t\t group comment\n\t\t group1\n\t\t true\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-56","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the server [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?name=ServerName

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: The application was already deleted.
400: Parameter typeOnDevice is not valid.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no servers with the name NAME.
404: There are no servers with the typeOnDevice TYPEONDEVICE ","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-57","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <id>1</id>
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
         <type>host</type>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <id>2</id>
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
         <type>range</type>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <id>3</id>
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
         <type>subnet</type>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <id>4</id>
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
         <type>virtual-server</type>
     </network_object>
     <network_object xsi:type=\"vmInstanceDTO\">
         <id>5</id>
         <name>vm1</name>
         <comment>vm instance comment</comment>
         <type>vm_instance</type>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <id>6</id>
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <type>group</type>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: The application was already deleted.
400: You cannot update a predefined object.
400: Invalid type in server with id ID.
400: Invalid member with id ID
400: Invalid ID
400: Invalid uid
400: Invalid network object type NAME
400: Cannot update user
400: Network object is new
400: Name cannot be empty
400: Server is in discovery
400: Ip is missing
400: Mask is missing
400: Invalid ip
400: Invalid mask
400: Max ip is missing
400: Min ip is missing
400: Invalid min ip
400: Invalid max ip
400: Min ip cannot be larger than max ip
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Server with NAME already exists.
400: Invalid device ID
400: The type_on_device value is not valid
400: An EDL group can not be modified to a regular group
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: DTO type used for server id ID is incompatible with this vendor.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Virtual server was not found in ST.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
503: Not connected to SecureTrack.","dataMode":"raw","folder":"2-9","rawModeData":"\n\t \n\t\t 1\n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t\t host\n\t \n\t \n\t\t 2\n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n\t\t 2.2.2.22\n\t\t range\n\t \n\t \n\t\t 3\n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t\t subnet\n\t \n\t \n\t\t 4\n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t\t virtual-server\n\t \n\t \n\t\t 5\n\t\t vm1\n\t\t vm instance comment\n\t\t vm_instance\n\t \n\t \n\t\t 6\n\t\t group comment\n\t\t group1\n\t\t true\n\t\t group\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-58","method":"PUT"},{"name":"Delete server","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serverId"}],"dataMode":"params","description":"To decommission a serer use force=true.

Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4?force=true

Response Messages:
400: The application was already deleted.
400: You cannot delete a predefined object.
400: Cannot delete an object that is being referenced by other objects
400: Cannot delete a predefined object.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","collectionId":"2","id":"2-9-59","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing server by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serverId"}],"description":"Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/3

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","collectionId":"2","id":"2-9-60","method":"GET"},{"collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/impact_analysis_csv","name":"Export Server Impact Analysis to a CSV file.","method":"GET","id":"2-9-61","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/impact_analysis_csv

Response Messages:
400: Server with ID was not found.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
404: There is no application with the specified ID.","folder":"2-9"},{"name":"Move server","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"server_id"},{"value":null,"type":"text","enabled":true,"key":"target_application_id"}],"description":"Parameters:
application_id: The unique identifier of the application
server_id: The unique identifier of the server
target_application_id: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/move_server?server_id=5&target_application_id=3

Response Messages:
400: Server ID is missing.
400: Target application ID is missing.
400: You cannot move a predefined object.
400: Server with ID is already associated to application with ID.
400: Cannot move server to a different customer.
400: The application was already deleted.
400: You cannot add to application APPLICATION_NAME because it was decommissioned.
400: Group/Server cannot be moved because there is no other application to move it to.
400: Group/Server cannot be moved because it or at least one of its group members is part of these groups: GROUPS_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is locked for discovery.
400: Group/Server cannot be moved because it or at least one of its group members is used in these application interfaces: APPLICATION_INTERFACE_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is used in these connections with another external resource: CONNECTION_NAME
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/move_server","collectionId":"2","id":"2-9-62","method":"POST"},{"headers":"Accept: application/json\n","name":"If the identified server is a group, return a list of its members. When the media type is 'text/plain' (default), print each member on a separate line.","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/members

Response Messages:
400: Server with ID is not of type group
401: Access is denied
401: You do not have permissions to view this application
403: No available licenses. Ask your SecureApp administrator for assistance
404: There is no application with the specified ID
404: Server with ID was not found","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/members","collectionId":"2","id":"2-9-63","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches service by ID","data":[{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/2

Response Messages:
404: Service with ID <ID> was not found.
401: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","collectionId":"2","id":"2-10-64","method":"GET"},{"name":"Delete unused and non predefined global service","data":[{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/260

Response Messages:
200: Service was deleted.
404: Global Service with ID was not found.
400: Cannot delete an object that is being referenced by other objects.
400: You cannot delete a predefined object.
401: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","collectionId":"2","id":"2-10-65","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Modify unused and non predefined global services","dataMode":"raw","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Service is new.
400: You cannot update a predefined object.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot update a global service that is being referenced by other objects.
400: Cannot update an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Group cannot contain itself as a member.
400: Application identity cannot be a member of a group.
401: Access is denied.","folder":"2-10","rawModeData":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/","collectionId":"2","id":"2-10-66","method":"PUT"},{"headers":"Accept: application/json\n","name":"Fetches services","description":"Parameters:
globals_only: get only globals [optional]
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=AH

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true&name=AH

Response Messages:
404: There are no services with the name NAME.
401: Access is denied.","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-67","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create global services","dataMode":"raw","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Application identity cannot be a member of a group.
401: Access is denied.","folder":"2-10","rawModeData":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-68","method":"POST"},{"name":"Delete unused and non predefined global service by name","data":[{"value":null,"type":"text","enabled":true,"key":"name"}],"description":"Parameters:
name: The name of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=Global service

Response Messages:
200: Service was deleted.
404: Service name has not been provided.
404: There are no services with the name NAME.
400: Cannot delete ANY.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
401: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-69","method":"DELETE"},{"name":"Delete service","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"dataMode":"params","description":"Use force=true to delete a service with decommission.

Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250?force=true

Response Messages:
400: The application was already deleted.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Service with ID <SERVICE_ID> was not found in application with id <APPLICATION_ID>","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","collectionId":"2","id":"2-11-70","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing service by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Response Messages:
400: The application was already deleted.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Service with ID was not found.","dataMode":"params","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","collectionId":"2","id":"2-11-71","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Cannot have members from different applications.
400: Can not have application identity in group
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-11","rawModeData":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-72","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>255</id>
        <name>Service Group 2 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Local service must be associated with an application.
400: Service is locked for discovery.
400: Service is new.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Application identity cannot be a member of a group.
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.","dataMode":"raw","folder":"2-11","rawModeData":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t255\n\t\tService Group 2 updated\n\t\tUpdated comment\n\t\tgroup\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-73","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services?name=Local service

Response Messages:
400: The application was already deleted.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no services with the name NAME.","dataMode":"params","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-74","method":"GET"},{"name":"Delete unused user","data":[{"value":null,"type":"text","enabled":true,"key":"userId"}],"description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
200: User was deleted.
404: User with ID <ID> was not found.
400: Cannot delete an object that is being referenced by other objects.
401: Access is denied.","dataMode":"params","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","collectionId":"2","id":"2-12-75","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Fetches user by ID","data":[{"value":null,"type":"text","enabled":true,"key":"userId"}],"description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
404: User with ID <ID> was not found.
401: Access is denied.","dataMode":"params","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","collectionId":"2","id":"2-12-76","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches users","description":"Parameters:
name: The name of the user [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users?name=Local user 1

Response Messages:
404: There are no users with the name NAME.
401: Access is denied.","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","collectionId":"2","id":"2-12-77","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create users","dataMode":"raw","description":"Parameters:
body: List of users

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/users
BODY<users>
    <user>
        <name>Local user 1</name>
        <comment>New local user</comment>
        <ip>8.8.8.8</ip>
    </user>
    <user>
        <name>Ldap user 1</name>
        <comment>New ldap user</comment>
    </user>
    <user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"userObjectGroupDTO\">
        <name>User group 1</name>
        <comment>New user group</comment>
        <member>
            <id>14</id>
        </member>
        <member>
            <id>15</id>
        </member>
    </user>
</users>


Response Messages:
201: User was created.
200: Users were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: User with id <ID> was not found.
400: Invalid user type <TYPE>
400: Name cannot be empty.
400: User with name <NAME> already exists.
400: Invalid ip
401: Access is denied.","folder":"2-12","rawModeData":"\n\t\n\t\tLocal user 1\n\t\tNew local user\n\t\t8.8.8.8\n\t\n\t\n\t\tLdap user 1\n\t\tNew ldap user\n\t\n\t\n\t\tUser group 1\n\t\tNew user group\n\t\t\n\t\t\t14\n\t\t\n\t\t\n\t\t\t15\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","collectionId":"2","id":"2-12-78","method":"POST"},{"name":"Delete an application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
400: The resources of application NAME are used in connections for other applications.
400: You cannot delete application NAME because its application interfaces are used in other applications.
400: You cannot delete application NAME because its application interfaces are used in other application packs.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
400: Application with ID ID was not found.
400: You cannot delete application NAME because there are connection changes pending a ticket in other application.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-79","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Change an application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
applicationId: The unique identifier of an application to change
body: Application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/139
BODY<application>
     <id>139</id>
     <name>UpdatedAppName</name>
     <comment>UpdatedComment</comment>
     <decommissioned>false</decommissioned>
     <owner>
         <id>4</id>
     </owner>
     <editors>
         <editor>
             <id>3</id>
         </editor>
     </editors>
     <viewers>
         <viewer>
             <id>5</id>
         </viewer>
     </viewers>
</application>


Response Messages:
400: The application was already deleted.
400: Application owner is missing.
400: Owner cannot be empty.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
401: Access is denied
401: You do not have permissions to change the owner of application ID.
401: You do not have permissions to change the editors and a viewer of application ID.
401: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t 139\n\t UpdatedAppName\n\t UpdatedComment\n\t false\n\t \n\t\t 4\n\t \n\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 5\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-80","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of an application to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-81","method":"GET"},{"name":"Export application history to PDF","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History max rows [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&count=2

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?count=2

Response Messages:
401: Access is denied.
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/history/export_pdf","collectionId":"2","id":"2-13-82","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update applications","dataMode":"raw","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
body: List of applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <id>140</id>
         <name>App1</name>
         <decommissioned>true</decommissioned>
         <owner>
             <id>4</id>
         </owner>
     </application>
     <application>
         <id>139</id>
         <name>UpdatedAppName</name>
         <comment>Updated Comment</comment>
         <owner>
             <id>4</id>
         </owner>
         <editors>
             <editor>
                 <id>3</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
     </application>
</applications>


Response Messages:
400: Application ID is missing.
400: Application ID is invalid
400: The application was already deleted.
400: You must include the owner field.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
401: Access is denied
401: You do not have permissions to change the owner of application ID.
401: You do not have permissions to change the editors and a viewer of application ID.
401: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t \n\t\t 140\n\t\t App1\n\t\t true\n\t\t \n\t\t\t 4\n\t\t \n\t \n\t \n\t\t 139\n\t\t UpdatedAppName\n\t\t Updated Comment\n\t\t \n\t\t\t 4\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-83","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create new applications","dataMode":"raw","description":"Parameters:
body: List all applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <name>AppName</name>
         <comment>Comment</comment>
         <owner>
             <id>3</id>
         </owner>
         <editors>
             <editor>
                 <id>4</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
         <customer>
             <id>24</id>
         </customer>
     </application>
</applications>


Response Messages:
400: There are no items to add.
400: Application was already saved.
400: Application name must contain at least 2 and no more than 160 characters.
400: Owner cannot be empty.
400: The specified owner does not exist.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
400: Application with NAME already exists.
400: Application owner is missing.
400: Reference to owner ID is invalid.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to customer ID is invalid.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: The specified customer does not exist.
400: There is an editor without an ID or name.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no editor with the name NAME.","folder":"2-13","rawModeData":"\n\t \n\t\t AppName\n\t\t Comment\n\t\t \n\t\t\t 3\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 4\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t\t \n\t\t\t 24\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-84","method":"POST"},{"headers":"Accept: application/json\n","name":"List all applications","description":"Parameters:
userId: Applications by user ID, if not given the default is logged in user id [optional]
name: The name of the application [optional]
app_permissions: Filter applications by the given permissions (separated with commas):\napp_owner - returns applications where the user is the owner\napp_editor - returns applications where the user has been explicitly added as an editor\napp_viewer - returns applications where the user has been explicitly added as a viewer\napp_adminonly - returns applications where the user only has editor access because user has “edit all applications” permission, and does not include applications where this user is either the app_owner, app_editor, or app_viewer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?userId=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?app_permissions=app_owner,app_editor,app_viewer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App&app_permissions=app_adminonly

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications

Response Messages:
400: Invalid app_permissions value: 'appPermissions'.
401: Access is denied
401: You can't use the parameter 'userId' because you don't have 'View all applications' permission.
404: There are no applications matching your filter.
404: User with ID 'userId' was not found.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-85","method":"GET"},{"name":"Export Impact Analysis to a CSV file.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"dataMode":"params","description":"To prevent a CSV injection attack when exporting Impact Analysis to a CSV file, if a special character ( = - + @ ) appears at the beginning of any field, a single quote (') is added before the character.

Parameters:
application_id: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/impact_analysis_csv

Response Messages:
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
404: There is no application with the specified ID.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/impact_analysis_csv","collectionId":"2","id":"2-13-86","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Move applications to another customer","dataMode":"raw","description":"Parameters:
body: List of applications and customers [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/move_applications
BODY<move_applications>
     <move_application>
         <application>
            <id>1</id>
         </application>
         <customer>
             <id>2</id>
         </customer>
     </move_application>
     <move_application>
         <application>
            <id>2</id>
         </application>
         <customer>
            <name>Default</name>
         </customer>
     </move_application>
</move_applications>


Response Messages:
200: Applications were moved successfully.
400: Multi-Customer mode is not enabled.
400: You cannot move an application pack to a different customer.
400: Reference to application is invalid.
400: APPLICATION already exists in CUSTOMER.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: Reference to CUSTOMER is invalid.
400: CUSTOMER is not imported to SecureApp.
400: CUSTOMER was decommissioned.
400: You must delete virtual servers from CUSTOMER before you move APPLICATION to another customer.
400: You must remove virtual servers from the INTERFACE and publish it before you move APPLICATION to another customer.
400: You cannot move APPLICATION to CUSTOMER because the connection to application pack and the application pack cannot be in the same customer.
400: You cannot move APPLICATION to a different customer because the application interface and the application pack must be in the same customer.
400: You must remove INTERFACE from APPLICATION PACK and publish it before you can move APPLICATION to another customer.
400: CONNECTION TO APPLICATION from APPLICATION must use interface from CUSTOMER.
400: Sources in CONNECTION from APPLICATION must all be from applications in the same customer.
400: Destinations in CONNECTION in APPLICATION must all be from applications in the same customer.
400: Servers in CONNECTION from APPLICATION must all be from CUSTOMER.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from applications in the same customer.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from CUSTOMER.
400: Application or application pack with NAME already exists in CUSTOMER.
400: There are no applications to move.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t \n\t\t \n\t\t\t1\n\t\t \n\t\t \n\t\t\t 2\n\t\t \n\t \n\t \n\t\t \n\t\t\t2\n\t\t \n\t\t \n\t\t\tDefault\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/move_applications","collectionId":"2","id":"2-13-87","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve security policy violations from SecureTrack","description":"Parameters:
applicationId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/compliance_violations

Response Messages:
400: No valid connections found in APPLICATION.
400: Security policy compliance check is not available because a security policy has not been defined.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
503: Cannot connect to SecureTrack.
503: Timeout occurred while waiting for response from SecureTrack.
500: An error occurred in SecureTrack when running the security compliance check.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/compliance_violations","collectionId":"2","id":"2-13-88","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve application history","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History list length [optional]
start: Offset the count starting point [optional]
type: States the history type to fetch [optional]
user: The username of the user made the changes [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start=0&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?type=SERVER

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?user=Jack

Response Messages:
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date
400: Count parameter must be a number
400: Start parameter must be a number
400: Start parameter must be less than total
400: Type parameter must be either server, server_group, connection, application, application_interface, connection_interface or connection_to_application
400: User not found
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/history","collectionId":"2","id":"2-13-89","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Associate cloud servers from SecureTrack with an application","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The ID of the application
body: List of device IDs and cloud server UIDs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?application_id=87
BODY<devices_to_uids>
    <device_to_uids>
        <device_id>9</device_id>
        <uids>
            <uid>{b503916e-4468-4dc8-981b-2ec534587352}</uid>
            <uid>{0cc947a5-276f-4a4a-9d12-df5284fce609}</uid>
        </uids>
    </device_to_uids>
</devices_to_uids>


Response Messages:
201: Servers were imported to SecureApp.
401: Access is denied
400: There is no application with the specified ID.
401: No available licenses. Ask your SecureApp administrator for assistance.
400: You do not have permissions to edit this application.
400: You cannot associate servers with this application, because the application has been decommissioned.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to add cloud servers.
403: UID does not exist in device ID.
403: Device with ID does not exist.
403: Device with ID does not exist in DOMAIN.
403: The AWS instance with UID and device ID has already been imported to application NAME. You cannot import the same instance multiple times.","dataMode":"raw","folder":"2-14","rawModeData":"\n\t\n\t\t9\n\t\t\n\t\t\t{b503916e-4468-4dc8-981b-2ec534587352}\n\t\t\t{0cc947a5-276f-4a4a-9d12-df5284fce609}\n\t\t\n\t\n\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","collectionId":"2","id":"2-14-90","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve cloud server listing from SecureTrack","data":[{"value":null,"type":"text","enabled":true,"key":"vendor"},{"value":null,"type":"text","enabled":true,"key":"search_string"}],"description":"Parameters:
customer_id: Customer ID to be filtered by. [optional]
vendor: Vendor to be filtered by.
search_string: Search text.
start: Returning matching result starting from this element in the array (0-based). [optional]
count: Total number of matching servers to return. [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=WebServe

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=\"WebServer1\"

Response Messages:
401: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.
400: Illegal search string.
400: Start is bigger then possible result count.
400: Start and count cannot hold negative values.
400: Vendor query param is required.
400: Vendor should be one of the following: Amazon.
400: Search string query param is required.
400: Customer with ID does not exist in SecureApp
400: Customer with ID was decommissioned.","dataMode":"params","folder":"2-14","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","collectionId":"2","id":"2-14-91","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Auto associate cloud servers from SecureTrack with an application","dataMode":"raw","description":"When auto-associate is enabled, user must enter key value

Parameters:
body: Auto association rule

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule
BODY<auto_association_rule>
    <key>Application</key>
    <enabled>true</enabled>
</auto_association_rule>


Response Messages:
200: Auto association rule is saved.
400: Enabled rule requires key value.
401: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.","folder":"2-14","rawModeData":"\n\tApplication\n\ttrue\n\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule","collectionId":"2","id":"2-14-92","method":"PUT"},{"headers":"Accept: application/json\n","name":"Fetches customer by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/1

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.","dataMode":"params","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","collectionId":"2","id":"2-15-93","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update a customer","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/2
BODY<customer>
    <usage_mode>NOT_IMPORTED</usage_mode>
</customer>


Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
400: Can not update Default customer.
400: This customer is already not imported.
400: USAGE_MODE is not a valid state. The valid values are: USAGE_MODES
401: Access is denied
500: This customer is not imported.
400: You cannot delete this customer because there are connection changes pending a ticket in another customer.You must decommission this customer first, and then delete it.","dataMode":"raw","folder":"2-15","rawModeData":"\n\tNOT_IMPORTED\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","collectionId":"2","id":"2-15-94","method":"PUT"},{"headers":"Accept: application/json\n","name":"List all customers","description":"Parameters:
name: The name of the customer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers?name=Customer 1

Response Messages:
400: Not available in single-customer mode.
404: There are no customers with the name NAME.","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/","collectionId":"2","id":"2-15-95","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing applications for specific domain","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/2/applications

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
401: Access is denied","dataMode":"params","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}/applications","collectionId":"2","id":"2-15-96","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"import customers","dataMode":"raw","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.

Parameters:
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/import
BODY<customers>
    <customer>
        <id>2</id>
    </customer>
    <customer>
        <id>3</id>
    </customer>
</customers>


Response Messages:
400: Not available in single-customer mode.
400: ID can not be empty.
400: There are some id's that doesn't exist.
401: Access is denied
503: Not connected to SecureTrack.","folder":"2-15","rawModeData":"\n\t\n\t\t2\n\t\n\t\n\t\t3\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/import","collectionId":"2","id":"2-15-97","method":"PUT"},{"headers":"Accept: application/json\n","name":"List all non-imported customers","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.



Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/not_imported

Response Messages:
400: Not available in single-customer mode.
401: Access is denied
503: Not connected to SecureTrack.","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/not_imported","collectionId":"2","id":"2-15-98","method":"GET"},{"headers":"Accept: application/json\n","name":"List all imported customers","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/imported

Response Messages:
400: Not available in single-customer mode.
401: Access is denied","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/imported","collectionId":"2","id":"2-15-99","method":"GET"},{"headers":"Accept: application/json\n","name":"List all domains","description":"Parameters:
name: The name of the domain [optional]

Usage Example


Response Messages:
404: There are no domains with the name NAME.","folder":"2-16","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/","collectionId":"2","id":"2-16-100","method":"GET"},{"collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/synchronize","name":"synchronize domains","method":"PUT","id":"2-16-101","description":"Retrieves all the domains lists in ST , for use by SC. If a domain was deleted in ST, then it will be removed from SC



Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/domains/synchronize

Response Messages:
500: Multi-Domain mode is disabled in SecureChange. Unable to synchronize with SecureTrack domains","folder":"2-16"},{"headers":"Accept: application/json\n","name":"Fetches domain by ID","data":[{"value":null,"type":"text","enabled":true,"key":"domainId"}],"description":"Parameters:
domainId: The ID of the domain

Usage Example


Response Messages:
400: Domain with id ID was not found.","dataMode":"params","folder":"2-16","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/{{domainId}}","collectionId":"2","id":"2-16-102","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches virtual servers from SecureTrack","data":[{"value":null,"type":"text","enabled":true,"key":"ip"}],"dataMode":"params","description":"Find virtual servers matching a given IP address.
You can search for the virtual server itself of any of its members.

Parameters:
ip: ip
domainId: The unique identifier of a domain [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers?ip=2.2.2.2

Response Messages:
400: Invalid IP
400: Invalid Subnet
400: There is no domain with the specified ID.
401: Access is denied
503: Not connected to SecureTrack.","folder":"2-17","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers","collectionId":"2","id":"2-17-103","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of the devices that you can select as a target in SecureChange","description":"Parameters:
name: device name or part of a name [optional]
show_targets: show devices as targets [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/devices?name=asa&show_targets=true

Response Messages:
404: Devices not found","folder":"2-18","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/","collectionId":"2","id":"2-18-104","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update the whole list of excluded devices in SecureChange","dataMode":"raw","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
BODY<device_ids>
    <id>1</id>
    <id>12</id>
</device_ids>

","folder":"2-18","rawModeData":"\n\t1\n\t12\n\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","collectionId":"2","id":"2-18-105","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns IDs for specified list of excluded parent management devices and child firewalls in SecureChange","description":"For example on this Panorama hierarchy:
DG1 - Excluded
  DG1.1
    FW1
    FW2
    FW3

Calling this API with false value will return only DG1’s id.
Calling this API with true value will return DG1, FW1, FW2, FW3 id’s.


Parameters:
show_all: When set to true - Displays the specified devices and all their child firewalls in the hierarchy, which will be excluded implicitly.
When set to false - Displays only the devices which were explicitly excluded.
Default value is false.
[optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=false
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=true
OUTPUT<device_ids>
    <id>33</id>
    <id>10</id>
    <id>11</id>
    <id>35</id>
    <id>29</id>
    <id>31</id>
</device_ids>

","folder":"2-18","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","collectionId":"2","id":"2-18-106","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get suggested targets for a given access request","data":[{"value":null,"type":"text","enabled":true,"key":"domain_name"},{"value":null,"type":"text","enabled":true,"key":"workflow_name"}],"dataMode":"raw","description":"Returns a list of suggested targets for a given access request, based on topology calculations.

Parameters:
body [optional]
domain_name: Domain Name
workflow_name: Workflow Name

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/suggest_target?domain_name=Default&workflow_name=AR
BODY{
    \"access_request\":{
        \"users\":{
            \"user\":[
                \"Any\"
            ]
        },
        \"sources\":{
            \"source\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.1.1\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"destinations\":{
            \"destination\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.20.2\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"services\":{
            \"service\":[
                {
                    \"@type\":\"ANY\",
                }
            ]
        },
        \"action\":\"Accept\",
    }
}
OUTPUT{
    \"multi_target\": {
        \"target\": {
            \"@type\": \"Object\",
            \"object_name\": \"Device-1\",
            \"object_type\": \"firewall\",
            \"object_details\": \"10.100.40.1\",
            \"management_id\": 250,
            \"management_name\": \"Panorama/Domain1\"
        }
    }
}


Response Messages:
200: Targets returned successfully
400: User does not have permissions to domain or domain does not exist
401: Access is denied","folder":"2-18","rawModeData":"{\n\t\"access_request\":{\n\t\t\"users\":{\n\t\t\t\"user\":[\n\t\t\t\t\"Any\"\n\t\t\t]\n\t\t},\n\t\t\"sources\":{\n\t\t\t\"source\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.1.1\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"destinations\":{\n\t\t\t\"destination\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.20.2\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"services\":{\n\t\t\t\"service\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"ANY\",\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"action\":\"Accept\",\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/suggest_target","collectionId":"2","id":"2-18-107","method":"POST"},{"headers":"Accept: application/json\n","name":"Get server decommission designer results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve designer results generated in R17-1 and earlier.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/designer","collectionId":"2","id":"2-19-108","method":"GET"},{"headers":"Accept: application/json\n","name":"Get verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/verifier","collectionId":"2","id":"2-19-109","method":"GET"},{"name":"Run server decommission designer for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/designer

Response Messages:
400: Server decommission designer is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/designer","collectionId":"2","id":"2-19-110","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get impact analysis results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/impact_analysis

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/impact_analysis","collectionId":"2","id":"2-19-111","method":"GET"},{"name":"Run Verifier for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/verifier

Response Messages:
400: Verifier is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/verifier","collectionId":"2","id":"2-19-112","method":"PUT"},{"name":"Run Impact Analysis for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/impact_analysis

Response Messages:
400: Impact analysis is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/impact_analysis","collectionId":"2","id":"2-19-113","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Modify the SecureTrack connection settings and test the connection status","dataMode":"raw","description":"Parameters:
testOnly: Test the connection status using the specified settings. The new settings are not saved. The default value is false [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"remoteHost\">
            <IP_or_hostname>192.168.11.1</IP_or_hostname>
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
        <internal_IP_of_secureChange_server>192.168.2.2</internal_IP_of_secureChange_server>
    </secureTrack_settings>


Response Messages:
400: Invalid host name or IP address.
400: show_link_to_secureTrack is invalid. It must be 'true', 'false' or empty.","folder":"2-20","rawModeData":"\t\n\t\t \n\t\t\t192.168.11.1\n\t\t\tadmin\n\t\t\n\t\tfalse\n\t\t30\n\t\t192.168.2.2\n\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","collectionId":"2","id":"2-20-114","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve the SecureTrack connection settings and status","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack?testOnly=false
","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","collectionId":"2","id":"2-20-115","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Import LDAP users to SecureChange by simulating login process","dataMode":"raw","description":"This API implicitly imports LDAP users to SecureChange by simulating their login.
To explicitly import LDAP entities- both users and groups, it is recommended to use /users/import API

Parameters:
body: partyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users
BODY<user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"user\">
    <name>x</name>
    <origin_type>LDAP</origin_type>
        <ldap_configuration>
            <id>1</id>
        </ldap_configuration>
</user>


Response Messages:
401: Access is denied.
400: Name is missing.
400: Origin is missing.
400: User {login_name} already exists, with ID (id} and name {name}.
400: User {login_name} not found in LDAP.
400: Creating a user via REST API is available only if origin is LDAP.
400: Creating a user via REST API is available only if type is User.
400: Ldap configuration with ID {id} not found.","folder":"2-21","rawModeData":"\n\tx\n\tLDAP\n\t\t\n\t\t\t1\n\t\t\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","collectionId":"2","id":"2-21-116","method":"POST"},{"collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","name":"Return the list of users","method":"GET","id":"2-21-117","description":"user_name: case insensitive, search mode: contains text
exact_name: when set to true, user_name search mode is case sensitive and exact text
email: case insentitive, search mode: exact match
Logical OR between user_name and email.

Parameters:
showIndirectRelation: Members that belong to the selected group only indirectly [optional]
user_name: The user's login name [optional]
email: The user's email [optional]
exact_name: Search user_name as exact match [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users?email=bob@tufin.com&user_name=bob&exact_name=true
","folder":"2-21"},{"headers":"Content-Type: application/json\n","name":"Change local group members","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
id: Group ID
body: groupChangeDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group/1
BODY{
    \"group_change\":{
        \"member_ids_to_add\": [1,2],
        \"member_ids_to_remove\":[3,4]
    }
}    


Response Messages:
400: Exceeded limit of {MAXIMUM} group member changes
400: These user IDs do not exist: {IDs}
400: These user IDs do not exist or are not group members: {IDs}
400: Group ID {ID} is not a local group
400: Group ID {ID} does not exist
400: Cannot add a group to itself
400: Cannot add a group to a group that it already contains. Group {ID1} contains group {ID2}","folder":"2-21","rawModeData":"{\n\t\"group_change\":{\n\t\t\"member_ids_to_add\": [1,2],\n\t\t\"member_ids_to_remove\":[3,4]\n\t}\n}\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group/{{id}}","collectionId":"2","id":"2-21-118","method":"PUT"},{"headers":"Content-Type: application/json\n","name":"Import user / group from LDAP","dataMode":"raw","description":"The imported user / group will be visible in SecureChange GUI under users section.
In multi domain mode, imported entity will be assigned with the domains of \"any user\" group.
Only users with 'view settings tab' permission can run this API.

Parameters:
body: ldapPartyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/import
BODY{
    \"ldap_party\": {
        \"ldap_configuration_name\": \"ldap_name\",
        \"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"
    }
}


Response Messages:
400: The LDAP configuration name does not exist
400: The given ldap_dn does not exist
400: The given ldap_dn is already imported
400: Failed to create the selected user
400: Failed to create the selected group
400: Selected user already exists in SecureChange but is not synchronized with the LDAP server. Go to Settings > LDAP and synchronize with the LDAP
400: This group has a large number of users, and will not be expanded in the users console. To be able to configure roles and step participation for individual users from the group, add them explicitly.
400: Failed to update the selected group
400: Unsupported LDAP object class
400: Unable to establish a connection to server <SERVER_IP>:<SERVER_PORT> within the configured timeout of <TIMEOUT> milliseconds.
401: Access is denied","folder":"2-21","rawModeData":"{\n\t\"ldap_party\": {\n\t\t\"ldap_configuration_name\": \"ldap_name\",\n\t\t\"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/import","collectionId":"2","id":"2-21-119","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Create local group","dataMode":"raw","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
body: CreateGroupDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group
BODY{
    \"group\": {
        \"name\": \"name1\",
        \"description\": \"description1\",
        \"email\": \"email1@tufin.com\"
    }
}    


Response Messages:
400: Input Validation Error : {field name}: {input validation error message}
400: Name already exists","folder":"2-21","rawModeData":"{\n\t\"group\": {\n\t\t\"name\": \"name1\",\n\t\t\"description\": \"description1\",\n\t\t\"email\": \"email1@tufin.com\"\n\t}\n}\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group","collectionId":"2","id":"2-21-120","method":"POST"},{"name":"Delete the specified User or Group","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: User ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User with id {id} does not exist","dataMode":"params","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","collectionId":"2","id":"2-21-121","method":"DELETE"},{"name":"Return the specified user","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: User ID
showIndirectRelation: Members that belong to the selected group only indirectly [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User or group was not found.","dataMode":"params","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","collectionId":"2","id":"2-21-122","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Reject a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: The user id, when logged in user is rejecting on behalf [optional]
body: Reject comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/reject?handler_id=5
BODY<reject_comment>
    <comment>rejected</comment>
</reject_comment>


Response Messages:
400: Ticket status <STATUS> is incorrect to perform this action
400: User <NAME> has no permissions to perform this action
400: Comment cannot be empty
401: User is not permitted to reject this ticket on behalf another user
401: You do not have permission to access ticket <ID>
401: On behalf user do not have permission to access ticket <ID>
401: Access is denied.
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.","dataMode":"raw","folder":"2-22","rawModeData":"\n\trejected\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/reject","collectionId":"2","id":"2-22-123","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change the requester of the specified ticket task to the specified user.","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"assigneeId"}],"description":"Parameters:
id: Ticket ID
assigneeId: The assignee ID
body: CommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/change_requester/4
BODY<comment>
    <comment>user was deleted moving tickets to Bob</comment>
</comment>


Response Messages:
400: The change requester comment must be set in order to change the requester the ticket.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
404: There is no ticket with ID.
404: There is no requester (User) with ID.","dataMode":"raw","folder":"2-22","rawModeData":"\n\tuser was deleted moving tickets to Bob\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/change_requester/{{assigneeId}}","collectionId":"2","id":"2-22-124","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Returns the specified ticket to the specified step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"toStepId"}],"dataMode":"raw","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
toStepId: To which step we the ticket will return
body: RedoCommentDto

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/redo/1
BODY<redo_step_comment>
    <comment>please fix source </comment>
</redo_step_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
401: User has no permissions to redo ticket steps.
404: There is no ticket with ID.
404: No entity found for query","folder":"2-22","rawModeData":"\n\tplease fix source \n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/redo/{{toStepId}}","collectionId":"2","id":"2-22-125","method":"PUT"},{"headers":"Accept: application/json\n","name":"Cancel a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The ID of the ticket as shown in SecureChange
requester_id: The user of the ticket's requester, when logged in user is canceling on behalf [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/cancel?requester_id=5

Response Messages:
401: Access is denied.
404: Ticket is already closed
404: Ticket ID was not found","dataMode":"params","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/cancel","collectionId":"2","id":"2-22-126","method":"PUT"},{"name":"Map rules to ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Maps the rules from the ticket to the relevant rules in SecureTrack.
Adds record set entries to the relevant rules metadata.
Link to history is found in the returned location header.
Applicable only for closed tickets in the following workflows: Access Request, Access Request and Modify Group, and Clone Server Policy.
Use handler_id for running on behalf of another user.
To get handler_id, use the System Users API.

Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: Run API on behalf of defined user id [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules?handler_id=5

Response Messages:
201: Started asynchronous mapping of rules to ticket ID <ID>. Mapping status is displayed in ticket history.
400: Ticket's workflow type does not support this operation
401: Access is denied.
401: You do not have permission to access ticket <ID>
401: On behalf user do not have permission to access ticket <ID>
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.
412: Ticket is not in closed status","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/map_rules","collectionId":"2","id":"2-22-127","method":"POST"},{"headers":"Accept: application/json\n","name":"Returns the history of the specified ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Ticket ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/history

Response Messages:
401: User has no permissions to view ticket history
404: You do not have permission to view this task. Contact your administrator for assistance.
404: There is no ticket with ID.","dataMode":"params","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/history","collectionId":"2","id":"2-22-128","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Confirm the request","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Ticket ID
requester_id: The user of the ticket's requester, when logged in user is confirm on behalf [optional]
body: Confirm comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/confirm?requester_id=5
BODY<confirm_comment>
    <comment>confirmed</comment>
</confirm_comment>


Response Messages:
400: User is trying to confirm a ticket that belongs to another user
400: User is not permitted to confirm this ticket on behalf another user
400: The user can not confirm the ticket, because he is not in the domain of the ticket
401: Access is denied.
404: There is no ticket with ID .","dataMode":"raw","folder":"2-22","rawModeData":"\n\tconfirmed\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/confirm","collectionId":"2","id":"2-22-129","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Reassigns the specified ticket task to the specified user.","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"assigneeId"}],"dataMode":"raw","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
assigneeId: The assignee ID
body: ReassignTaskCommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/reassign/4
BODY<reassign_task_comment>
    <comment>Please complete the AR</comment>
</reassign_task_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
404: There is no ticket with ID.
404: No entity found for query","folder":"2-22","rawModeData":"\n\tPlease complete the AR\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/reassign/{{assigneeId}}","collectionId":"2","id":"2-22-130","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get server clone policy verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/clone_server_policy/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the server clone policy request.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/clone_server_policy/verifier","collectionId":"2","id":"2-23-131","method":"GET"},{"headers":"Accept: application/json\n","name":"Get access request verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier","collectionId":"2","id":"2-23-132","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a task of a ticket at the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY<task>
    <status>DONE</status>
    <fields/>
</task>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value","folder":"2-23","rawModeData":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}","collectionId":"2","id":"2-23-133","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns a list of tickets by search parameters","description":"If the query is succesful but no results are found (for example, if there is no ticket for the specified Ticket ID) then the return code will be 200 and the results will be empty.

Parameters:
id: The ID number of the ticket as shown in SecureChange [optional]
subject: The subject of the ticket [optional]
requester: The requester of the ticket [optional]
group: The group handling the ticket [optional]
assigned_to: The user name of the person assigned to the ticket [optional]
priority: The priority of the ticket [optional]
status: The status of the ticket [optional]
sla_status: The SLA status of the ticket [optional]
field_name: Field name to search by [optional]
field_value: Field value to search by [optional]
current_step: Current step name [optional]
expiration_date_from: Search requests with expiration date from this date [optional]
expiration_date_to: Search requests with expiration date until this date [optional]
domain_name: The Domain of the ticket [optional]
start: Offset the count starting point [optional]
count: Ticket list length [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/search?id=1&status=IN_PROGRESS,REJECTED

Response Messages:
401: Access is denied.
400: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED, WAITING_TO_BE_ASSIGNED, ASSIGNED, WAITING_FOR_MORE_INFO, DONE, INVALID, PENDING, PENDING_LICENS
400: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
400: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
400: Cannot find specified domain <DOMAIN_NAME>","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/search","collectionId":"2","id":"2-23-134","method":"GET"},{"headers":"Accept: application/json\n","name":"Get designer results according to field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve designer results generated in R17-2 and later.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request.","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer","collectionId":"2","id":"2-23-135","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1
OUTPUT {
    \"ticket\": {
        \"id\": 1,
        \"subject\": \"AR-Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 11,
            \"name\": \"AR & MG\",
            \"uses_topology\": true
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 209,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 209,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": [
                                    {
                                        \"@xsi.type\": \"multi_access_request\",
                                        \"id\": 1695,
                                        \"name\": \"AR\",
                                        \"read_only\": false,
                                        \"access_request\": {
                                            \"id\": 1706,
                                            \"order\": \"AR1\",
                                            \"risk_analysis_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"verifier_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"use_topology\": true,
                                            \"targets\": {
                                                \"target\": {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1705
                                                }
                                            },
                                            \"users\": {
                                                \"user\": [
                                                    \"Any\"
                                                ]
                                            },
                                            \"sources\": {
                                                \"source\": [
                                                    {
                                                        \"@type\": \"INTERNET\",
                                                        \"id\": 1701
                                                    },
                                                    {
                                                        \"@type\": \"DNS\",
                                                        \"id\": 1702,
                                                        \"host_name\": \"www.google.com\",
                                                        \"dns_ip_addresses\": {
                                                            \"ip_address\": \"216.58.214.100\"
                                                        }
                                                    },
                                                    {
                                                        \"@type\": \"IP\",
                                                        \"id\": 1703,
                                                        \"ip_address\": \"1.1.1.1\",
                                                        \"netmask\": \"255.255.255.255\",
                                                        \"nat_ip_address\": \"4.4.4.4\",
                                                        \"nat_netmask\": \"255.255.255.255\"
                                                    }
                                                ]
                                            },
                                            \"destinations\": {
                                                \"destination\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1697
                                                    }
                                                ]
                                            },
                                            \"services\": {
                                                \"service\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1699
                                                    }
                                                ]
                                            },
                                            \"action\": \"Accept\",
                                            \"labels\": \"\"
                                        }
                                    },
                                    {
                                        \"@xsi.type\": \"multi_group_change\",
                                        \"id\": 1707,
                                        \"name\": \"MG\",
                                        \"read_only\": false,
                                        \"implementation_status\": \"NOT_SUPPORTED\"
                                    }
                                ]
                            }
                        }
                    }
                },
                {
                    \"id\": 210,
                    \"name\": \"STEP2 - auto AR with designer /update /commit\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 210,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"unlicensed_devices_for_automation\": {
                                \"unlicensed_device_for_automation\": [
                                    {
                                        \"id\": \"2\",
                                        \"name\": \"asa\"
                                    }
                                ]
                            }
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"multi_access_request\",
                                    \"id\": 1709,
                                    \"name\": \"AR\",
                                    \"read_only\": false,
                                    \"access_request\": {
                                        \"id\": 1720,
                                        \"order\": \"AR1\",
                                        \"risk_analysis_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"verifier_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"use_topology\": true,
                                        \"targets\": {
                                            \"target\": {
                                                \"@type\": \"ANY\",
                                                \"id\": 1719
                                            }
                                        },
                                        \"users\": {
                                            \"user\": [
                                                \"Any\"
                                            ]
                                        },
                                        \"sources\": {
                                            \"source\": [
                                                {
                                                    \"@type\": \"INTERNET\",
                                                    \"id\": 1721
                                                },
                                                {
                                                    \"@type\": \"DNS\",
                                                    \"id\": 1722,
                                                    \"host_name\": \"www.google.com\",
                                                    \"dns_ip_addresses\": {
                                                        \"ip_address\": \"216.58.214.100\"
                                                    }
                                                },
                                                {
                                                    \"@type\": \"IP\",
                                                    \"id\": 1723,
                                                    \"ip_address\": \"1.1.1.1\",
                                                    \"netmask\": \"255.255.255.255\",
                                                    \"nat_ip_address\": \"4.4.4.4\",
                                                    \"nat_netmask\": \"255.255.255.255\"
                                                },
                                                {
                                                    \"@type\": \"RANGE\",
                                                    \"id\": 1724,
                                                    \"range_first_ip\": \"1.1.11.1\",
                                                    \"range_last_ip\": \"1.1.11.10\"
                                                }
                                            ]
                                        },
                                        \"destinations\": {
                                            \"destination\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1711
                                                }
                                            ]
                                        },
                                        \"services\": {
                                            \"service\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1713
                                                }
                                            ]
                                        },
                                        \"action\": \"Accept\",
                                        \"labels\": \"\"
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 210,
            \"name\": \"STEP2 - auto AR with designer /update /commit\"
        },
        \"comments\": \"\"
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2
OUTPUT {
    \"ticket\": {
        \"id\": 2,
        \"subject\": \"Clone Server Policy Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 12,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 109,
            \"name\": \"sc_12705\",
            \"uses_topology\": false
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 78,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 78,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 872,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 869,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 871,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                },
                {
                    \"id\": 79,
                    \"name\": \"Business Approval\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 79,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 876,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 873,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 875,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 79,
            \"name\": \"Business Approval\"
        },
        \"comments\": \"\"
    }
}


Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: No entity found for query","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}","collectionId":"2","id":"2-23-136","method":"GET"},{"headers":"Accept: application/json\n","name":"Get commands for device from designer results of a specific field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
deviceId: Device ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/device/136/commands

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the access request.
404: Device with ID <ID> was not found in Designer result.
404: Device with ID <ID> does not support Commands feature.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/device/{{deviceId}}/commands","collectionId":"2","id":"2-23-137","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket stages","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps","collectionId":"2","id":"2-23-138","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change multiple fields within a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_network_object\">
         <id>7885</id>
         <name>n_obj</name>
         <network_object type=\"Object\">
             <object_name>Host_10.1.1.1</object_name>
             <management_name>cp239</management_name>
         </network_object>
         <network_object type=\"Object\">
             <st_uid>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</st_uid>
             <management_id>2</management_id>
         </network_object>
         <network_object type=\"DNS\">
             <host_name>tufin.com</host_name>
         </network_object>
     <field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_service\">
         <id>7887</id>
         <name>service</name>
         <service type=\"PROTOCOL\">
             <protocol>TCP</protocol>
             <port>80</port>
         </service>
         <service type=\"Object\">
             <object_name>AOL</object_name>
             <management_name>cp239</management_name>
         </service>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value","folder":"2-23","rawModeData":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","collectionId":"2","id":"2-23-139","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a the fields","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","collectionId":"2","id":"2-23-140","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified field","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
fieldId: The ID number of the field as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/229

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .
404: Field ID was not found in Task ID in Stage ID in ticket ID .","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-23-141","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a field within a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields/7742
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multiple_selection\">
     <id>7742</id>
     <name>filter type</name>
     <selected_options>
         <selected_option>
             <value>FTP</value>
         </selected_option>
     </selected_options>
</field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Deleting rule recertification info is not allowed
400: Application Change field cannot be managed via this REST API
400: Rule associated with successfully updated recertification info cannot be removed
400: Rule was already updated
400: Rule does not exist
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value","folder":"2-23","rawModeData":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-23-142","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the results of the Commit action","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"},{"value":null,"type":"text","enabled":true,"key":"managementId"}],"dataMode":"params","description":"GENERAL USE
The report returns the Commit results for the device with the specified management ID and for the devices suggested in the Designer results. The report also includes results for devices that are in the related hierarchy of these devices.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID
managementId: Management ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/commit_report/3
OUTPUT{
    \"commit_report\": {
        \"ticketId\": 27,
        \"statTime\": \"24-Oct-2018 08:55 AM\",
        \"endTime\": \"24-Oct-2018 08:56 AM\",
        \"duration\": \"00:00:30\",
        \"vendorName\": \"PALO ALTO NETWORKS\",
        \"managmentName\": \"pano211\",
        \"devices\": {
            \"device\": [
                {
                    \"name\": \"DG1.1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                },
                {
                    \"name\": \"DG1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                }
            ]
        }
    }
}


Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request.","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/commit_report/{{managementId}}","collectionId":"2","id":"2-23-143","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change the ticket properties","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Change the ticket properties listed in the TicketPropertiesDTO.
When specifying the notification_group property you must use the ID of the group or leave the ID empty to remove the group.

Parameters:
body: ticketPropertiesDTO
id: The ID number of the ticket as shown in SecureChange

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id>10</id>
    </notification_group>
</ticket_properties>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id/>
    </notification_group>
</ticket_properties>


Response Messages:
400: Notification Group <ID> is a user and not a user group
400: Notification Group <ID> exceeds the configured maximum allowed number of users for notifications
400: <ID> (“Any User”) is not allowed as a Notification Group
400: Notification Group <ID> does not have permission of 'Group members can perform actions on requests submitted by other members'
400: Notification Group <ID> is not a member in the first step of the workflow
400: Notification Group is not enabled in this workflow
401: You do not have permission to change the Notification Group
404: There is no group with ID <ID>.
404: There is no ticket with ID <ID>.","folder":"2-23","rawModeData":"\n\t\n\t\t\n\t\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/ticket_properties","collectionId":"2","id":"2-23-144","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change multiple field within a task of a ticket in the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_server_decommission_request\">
         <id>7591</id>
         <name>sd</name>
         <server_decommission_request>
             <id>7596</id>
             <order>DR1</order>
             <servers>
                 <server type=\"IP\">
                     <id>7593</id>
                     <ip_address>2.2.2.2</ip_address>
                     <netmask>255.255.255.255</netmask>
                 </server>
             </servers>
             <targets>
                 <target type=\"ANY\">
                     <id>7595</id>
                 </target>
             </targets>
             <comment>change ip from 1.1.1.1 to 2.2.2.2</comment>
         </server_decommission_request>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"date\">
         <id>7786</id>
         <name>date</name>
         <value>2015-12-15</value>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"time\">
         <id>7787</id>
         <name>time</name>
         <value>12:00</value>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value","folder":"2-23","rawModeData":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields","collectionId":"2","id":"2-23-145","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket stages","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}","collectionId":"2","id":"2-23-146","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Submit a new ticket to Secure Change","dataMode":"raw","description":" GENERAL USE
When posting a Modify Group ticket, group scope must be configured for FortiManager advanced and Juniper SRX devices.
Juniper SRX devices:
Global address-book will be used unless an existing address-book is given.
Ticket validation will fail in case given Address Book is not configured on the device.
FortiManager advanced devices:
'Any' zone will be used unless an existing zone is given.
Ticket validation will fail in case given zone is not configured on the device.
*Note: Zones and address-books must not be configured for other devices.

Using newly created objects from a different group in the same ticket
The user can add a newly created object from a different group to the selected group, with object_UID equal to the name of the newly created object.
For management devices with hierarchies, the newly created object does not populate other levels of the hierarchies.

Permitted values for @type
Allowed values for @type property included in DestinationDTO and SourceDTO are:
ANY
IP
DNS
Object - Device's existing object
INTERNET
LDAP (SourceDTO only) - LDAP entity

To use a service object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketDTO
closed: Cannot be done from the API [optional]
count [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>topology mode_AR1-with topology_AR2-no topology</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <domain_name>Default</domain_name>
    <workflow>
         <id>7</id>
         <name>Workflow with topology</name>
    </workflow>
    <steps>
         <step>
             <name>Open request</name>
             <tasks>
                 <task>
                     <fields>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_access_request\">
                             <name>Required Access</name>
                             <access_request>
                                 <use_topology>true</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>ASA</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>host_10.100.10.140</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
                                         <management_id>13</management_id>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>h_10.10.10.10</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"PROTOCOL\">
                                         <protocol>TCP</protocol>
                                         <port>80</port>
                                     </service>
                                     <service type=\"APPLICATION_IDENTITY\">
                                         <application_name>Gmail</application_name>
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                             <access_request>
                                 <use_topology>false</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>inside_access_in</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>1.1.1.0</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>network_regi3</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"ANY\">
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                             <name>Business Justification</name>
                             <text>I need access to ftp </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                             <name>Project Number</name>
                             <text>CR124560 </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                             <name>Hyperlink</name>
                             <url>http://192.168.1.1/ticket</url>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                             <name>Change Window</name>
                             <selection>Monday</selection>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                             <name>manager email</name>
                             <text>manager@tufin.com</text>
                         </field>
                     </fields>
                 </task>
             </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>New MG ticket</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <status>In Progress</status>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>6</id>
        <name>MG</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>72</id>
            <name>New step</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>72</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>
                    <status>ASSIGNED</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>262</id>
                            <name>MG</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>ExistingGroup</name>
                                <object_UID>{c862fb6f-1314-45da-9e01-56c9b85d001d}</object_UID>
                                <management_id>58</management_id>
                                <management_name>FMG/root</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>157</id>
                                        <name>10.100 net</name>
                                        <object_UID>{37cdc055-7aac-4385-b46b-cc54d95e4b6d}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.100.0.0/255.255.0.0</object_details>
                                        <management_id>58</management_id>
                                        <management_name>FMG/root</management_name>
                                        <status>NOT_CHANGED</status>
                                        <object_updated_status>EXISTING_EDITED</object_updated_status>
                                        <comment>new_comment</comment>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                            <group_change>
                                <name>78.45.12.0</name>
                                <object_UID>{cac64d34-a05e-4a05-b271-64642eb976ff}</object_UID>
                                <management_id>28</management_id>
                                <management_name>SRX-root-lsys</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>158</id>
                                        <name>78.45.12.1</name>
                                        <object_UID>{7912c335-6dbe-47de-b872-1322f9015b2f}</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>78.45.12.1/255.255.255.255</object_details>
                                        <management_id>28</management_id>
                                        <management_name>SRX-root-lsys</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <address_book>
                                    <name>global</name>
                                </address_book>
                            </group_change>
                            <group_change>
                                <name>10.10.0.0/16</name>
                                <object_UID>{5dff0bd8-51e4-4a83-8138-d54dd18ca52b}</object_UID>
                                <management_id>24</management_id>
                                <management_name>NSX-Distributed Firewall</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>161</id>
                                        <name>10.10.0.0/16</name>
                                        <object_UID>{5d7b826c-f053-40fd-81bd-7a6f44cf15ef}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.10.0.0/255.255.0.0</object_details>
                                        <management_id>24</management_id>
                                        <management_name>NSX-Distributed Firewall</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>test API</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>8</id>
        <name>Modify group</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>11</id>
            <name>Open request</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>11</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>                    <status>DONE</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>137</id>
                            <name>ff</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>port1Group</name>
                                <object_UID>{d5b4459b-6b27-4012-9924-b244c250520f}</object_UID>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"HOST\">
                                        <id>69</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <status>ADDED</status>
                                        <comment/>
                                        <object_updated_status>NEW</object_updated_status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                            <group_change>
                                <name>gfd</name>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>70</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <management_name>10.100.111.8/ADOM_5_2</management_name>
                                        <status>ADDED</status>
                                        <object_updated_status>EXISTING_NOT_EDITED</object_updated_status>
                                    </member>
                                </members>
                                <change_action>CREATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <current_step>
        <id>12</id>
        <name>Copy of Open request</name>
    </current_step>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"application_details\": { \"id\": \"1\" },
        \"subject\": \"topology mode_AR1-with topology_AR2-no topology\",
        \"priority\": \"Normal\",
        \"workflow\": { \"name\": \"ar\" }
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"subject\": \"RM_EXAMPLE\",
        \"requester\": \"m\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"domain_name\": \"\",
        \"workflow\": {
            \"name\": \"RM\",
        },
        \"steps\": {
            \"step\": [
                {
                    \"tasks\": {
                        \"task\": {
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"rule_modification_field\",
                                    \"devices\": {
                                        \"device\": {
                                            \"revision_id\": 24,
                                            \"management_id\": 5,
                                            \"bindings\": {
                                                \"binding\": {
                                                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                    \"binding\": {
                                                        \"@xsi.type\": \"policy__binding\",
                                                        \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                                    },
                                                    \"rules\": {
                                                        \"rule\": {
                                                            \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                                            \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                                        }
                                                    }
                                                }
                                            }
                                        }
                                    },
                                    \"rule_modifications\": {
                                        \"rule_modification\": {
                                            \"@xsi.type\": \"modify_rule_modification\",
                                            \"rule_key\": {
                                                \"device_id\": 5,
                                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                            },
                                            \"source_modifications\": {
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                                        \"name\": \"RANGE_1\",
                                                                        \"comment\": \"EXAMPLE_RANGE\",
                                                                        \"min_ip\": \"3.3.3.3\",
                                                                        \"max_ip\": \"5.5.5.5\"
                                                                    }
                                                                ]
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                                        \"name\": \"NET_1\",
                                                                        \"comment\": \"\",
                                                                        \"ip\": \"3.3.3.3\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"destination_modifications\": {
                                                \"id\": 11,
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                                        \"name\": \"Host123\",
                                                                        \"comment\": \"cccHost\",
                                                                        \"ip\": \"1.2.3.4\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"service_modifications\": {
                                                \"id\": 9,
                                                \"service_object_cell_modifications\": {
                                                    \"service_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                                    \"name\": \"ICMP_1\",
                                                                    \"comment\": \"EXAMPLE_ICMP\",
                                                                    \"type\": {
                                                                        \"from\": 55,
                                                                        \"to\": 55
                                                                    }
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"UDP_1\",
                                                                    \"comment\": \"EXAMPLE_UDP\",
                                                                    \"port\": {
                                                                        \"from\": 3,
                                                                        \"to\": 3
                                                                    },
                                                                    \"protocol\": \"UDP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"TCP_1\",
                                                                    \"comment\": \"EXAMPLE_TCP\",
                                                                    \"port\": {
                                                                        \"from\": 1234,
                                                                        \"to\": 1234
                                                                    },
                                                                    \"protocol\": \"TCP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                                                }
                                                            }
                                                        }
                                                    ]
                                                }
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
    }
}


Response Messages:
400: Application ID is missing.
400: Create closed ticket is enabled only from SecureApp application.
400: The application was already deleted.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: You cannot open a new ticket with an empty subject.
400: Expiration field is required.
400: Submit ticket enabled only with the first step
400: First step can be only with one task
400: The specified workflow does not contain an access request field in the first step.
400: There are no changed connections that are ready for creating a ticket.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
400: Managed tasks are not initialized or done
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (Rule Modification workflow is not supported for this device)
401: You do not have permissions to edit this application.
401: Logged in user: NAME do not have permission to perform on behalf actions
401: You are not a participant in the first step of this workflow
401: UNAUTHORIZED
404: There is no application with the specified ID
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (Network object cell modification missing action)
400: Invalid value for field: <FIELD_NAME> (Network object cell modification element cannot be empty)
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value","folder":"2-23","rawModeData":"{\n\t\"ticket\": {\n\t\t\"subject\": \"RM_EXAMPLE\",\n\t\t\"requester\": \"m\",\n\t\t\"requester_id\": 4,\n\t\t\"priority\": \"Normal\",\n\t\t\"domain_name\": \"\",\n\t\t\"workflow\": {\n\t\t\t\"name\": \"RM\",\n\t\t},\n\t\t\"steps\": {\n\t\t\t\"step\": [\n\t\t\t\t{\n\t\t\t\t\t\"tasks\": {\n\t\t\t\t\t\t\"task\": {\n\t\t\t\t\t\t\t\"fields\": {\n\t\t\t\t\t\t\t\t\"field\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\t\t\t\t\t\"devices\": {\n\t\t\t\t\t\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 11,\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 9,\n\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","collectionId":"2","id":"2-23-147","method":"POST"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified tickets (max 100 tickets in a single query)","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
status: The status of the tickets [optional]
count: Tickets list max pagination length (max value is 100) [optional]
start: Offset the count starting point [optional]
desc: Get the list in descending order [optional]
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets?status=In Progress&count=10&start=3&expand_links=false

Response Messages:
400: Status is not a valid. The valid values are: TICKET_STATUSES
400: Can not fetch more than 100 tickets in 1 time
401: Access is denied","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","collectionId":"2","id":"2-23-148","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns a list of tickets by search parameters","description":"Parameters:
parameter: Free text search parameter (Search syntax details) [optional]
start: Offset the count starting point [optional]
count: Tickets list max length (max value is 1000) [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/free_text_search/?parameter=taskstatus:ASSIGNED AND priority:High

Response Messages:
400: Can not fetch more than 1000 tickets in 1 time
401: Access is denied.
404: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED
404: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
404: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal count value entered. Max value is 1000
404: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
404: No entity found for query","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/free_text_search","collectionId":"2","id":"2-23-149","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of the tasks","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks","collectionId":"2","id":"2-23-150","method":"GET"},{"name":"Returns topology map image (png file) for specific verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier/topology_map

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.
404: Toplogy map was not found for this field.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier/topology_map","collectionId":"2","id":"2-23-151","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4
BODY<task>
     <status>ASSIGNED</status>
     <fields>
         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
             <id>7599</id>
             <name>mf</name>
             <read_only>false</read_only>
             <implementation_status>NOT_STARTED</implementation_status>
             <group_change>
                        <name>ggg</name>
                        <st_uid>{A12AE330-0DBD-11E5-B841-7F0000010E0E}</st_uid>
                        <management_id>42</management_id>
                        <management_name>cp239</management_name>
                        <members>
                             <member type=\"Object\">
                                 <id>8</id>
                                 <name>yaakovs_host</name>
                                 <st_uid>{BDAA378C-C90B-4D12-B598-1AFED2D1DA14}</st_uid>
                                 <object_type>Host</object_type>
                                 <object_details>1.1.1.1/255.255.255.255</object_details>
                         <management_id>42</management_id>
                         <management_name>cp239</management_name>
                                 <status>NOT_CHANGED</status>
                             </member>
                             <member type=\"Object\">
                                 <id>9</id>
                                    <name>Avi_10.100.120.254</name>
                                    <st_uid>{8F195CDC-F426-47B6-9E8A-1FF14C17E54F}</st_uid>
                                     <object_type>Host</object_type>
                                     <object_details>10.100.120.254/255.255.255.255</object_details>
                                     <management_id>42</management_id>
                                     <management_name>cp239</management_name>
                                     <status>NOT_CHANGED</status>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>2.2.2.2/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>3.3.3.3/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                 </members>
                 <change_implementation_status>NOT_RUN</change_implementation_status>
                    </group_change>
            </field>
     </fields>
</task>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value","folder":"2-23","rawModeData":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","collectionId":"2","id":"2-23-152","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2?expand_links=true

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","collectionId":"2","id":"2-23-153","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Modify the Designer suggestions for Access Request or Clone Server Policy","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"instructionId"}],"dataMode":"raw","description":" GENERAL USE
1. Create a ticket using UI/API.
2. Run the designer using UI/API.
3. Use relevent API to get the designer results.
4. Run this API to modify the required parameters.

*Note: you can modify one parameter at a time.

Change rule location use
a. Modifying the rule order places the new rule before the rule with the specified identifier (rule name or number).
b. Modifying the rule placement to \"last\" places the new rule as last rule or last pre-rule (depending on the vendor convention for the device).
c. For vendors that support \"after\" placement, modifying the rule placement allows positioning the new rule before or after the suggested rule location.

track level permitted values:
NONE, LOG, ACCOUNT, ALERT, SNMP, MAIL, USER_DEFINED, EMERGENCIES, ALERTS, CRITICAL, ERRORS, WARNINGS, NOTIFICATIONS, INFORMATIONAL, DEBUGGING, DISABLED, DEFAULT, FULL_LOG, NETWORK_LOG, USER_ALERT_1, USER_ALERT_2, USER_ALERT_3

rule placement permitted values:
BEFORE, AFTER, LAST

Parameters:
body: DesignerInstructionChangeDTO
id: Ticket ID
taskId: Task ID
instructionId: Instruction ID
force: force update when new revision available [optional]

Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196?force=true
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_name\": {\"new_value\":\"new rule name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"track_level\": {\"new_value\":\"LOG\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_name\": {\"new_value\":\"new object name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"log_forwarding_profile\": {\"new_value\":\"new log forwarding profile\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"security_profile_group\": {\"new_value\":\"new security profile group\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_replace\": {
             \"new_value\":\"new object uid\",
             \"old_value\":\"old object uid\"
    }
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_order\": {\"new_value\":\"8\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"last\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"before\"}
}


Response Messages:
200: New rule will be shadowed
200: New rule will be shadowed or break acceleration
400: Modify Designer Results API is only supported for Access Request and Clone Server Policy workflows
412: Current instruction cannot be modified because either the implementation was successful or failed irrevocably.
412: Current step does not support Designer modification action
400: A ticket with ID <ID> cannot be found.
400: Task ID <ID> cannot be found in the current step with ID <ID>.
403: Changing <TYPE> is not supported on this device
403: This Change is not supported for <INSTRUCTION TYPE> instruction type\"
401: You do not have permission to update this task. Contact your administrator for assistance.
403: New revision is available, cannot modify the Designer results
404: Specified instruction, id: <ID> was not found
404: Designer results were not found in the access request.
400: a valid object name must start with an alphanumeric character and can contain alphanumeric characters, underscore '_'. Hypen '-', dot '.' or spaces
400: For this device, the comment must be less than 100 characters per line.
400: For this device, this field must be less than <NUMBER OF CHARACTERS> characters
400: For this device, this field is required.
400: For this device, a valid object name cannot be <OBJECT NAME> because it is a reserved word
409: Rule name already exists for this device. Please give this rule a unique name.
409: Rule name <NAME> already exists in the device group hierarchy. Choose a unique name for this rule.
400: Comment contains invalid characters.
400: <DEVICE> does not support tracking level <TRACKING LEVEL>
400: <TRACKING LEVEL> is not a valid rule track level value
400: a valid object name cannot contain any of the following characters: <CHARACTERS>
400: a valid object name must be less than <NUMBER OF CHARACTERS> characters
400: a valid object name cannot be empty
400: a valid object name must conform to the following pattern: <STRING PATTERN>
409: Object already exists
400: A security profile group cannot be empty.
404: The security profile group <SECURITY PROFILE GROUP> was not found.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to validate the security profile group.
400: A log forwarding profile cannot be empty.
404: The log forwarding profile <LOG FORWARDING PROFILE> was not found.
500: An error occurred in SecureTrack while trying to validate the log forwarding profile.
400: Object UID <OLD OBJECT UID> not found in the rule for this instruction.
400: Values of new object UID <NEW OBJECT UID> and old object UID <OLD OBJECT UID> do not match.
400: Rule placement can only be: \"before\", \"after\" or \"last\".
400: You can't change rule placement when there is no rule order. please add rule order first.
400: You can't change rule placement to \"After\" for this type of device.
400: You can't change rule placement to \"Last\" for this type of device.","folder":"2-23","rawModeData":"{\n\t\"rule_placement\": {\"new_value\":\"before\"}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/tasks/{{taskId}}/designer/instruction/{{instructionId}}","collectionId":"2","id":"2-23-154","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get rule decommision verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/rule_decommission/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type <TYPE>.
404: Verifier results were not found in the request.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/rule_decommission/verifier","collectionId":"2","id":"2-23-155","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a field within a task of a ticket at the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/7642
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"approve_reject\">
         <id>7661</id>
         <name>approve access</name>
         <approved>true</approved>
         <reason>Request approved</reason>
    </field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value","folder":"2-23","rawModeData":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-23-156","method":"PUT"}],"order":[],"name":"Tufin Tufin SecureChange/SecureApp R20-1-GA","id":"2","description":"Tufin Orchestration Suite - Tufin SecureChange/SecureApp APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securechangeworkflow/apidoc"} \ No newline at end of file diff --git a/Postman Format v1/R20-1 postman collection/securetrack_R20-1-GA.json b/Postman Format v1/R20-1 postman collection/securetrack_R20-1-GA.json new file mode 100644 index 0000000..6a2ac51 --- /dev/null +++ b/Postman Format v1/R20-1 postman collection/securetrack_R20-1-GA.json @@ -0,0 +1 @@ +{"folders":[{"order":["1-1-1","1-1-2","1-1-3","1-1-4"],"collectionId":"1","name":"Additional Policy Fields","hasRequests":true,"id":"1-1"},{"order":["1-2-5","1-2-6","1-2-7","1-2-8"],"collectionId":"1","name":"Application IDs","hasRequests":true,"id":"1-2"},{"order":["1-3-9","1-3-10"],"collectionId":"1","name":"Change Authorization","hasRequests":true,"id":"1-3"},{"order":["1-4-11","1-4-12","1-4-13"],"collectionId":"1","name":"Change Windows","hasRequests":true,"id":"1-4"},{"order":["1-5-14","1-5-15","1-5-16","1-5-17","1-5-18"],"collectionId":"1","name":"Device Interfaces and Zones","hasRequests":true,"id":"1-5"},{"order":["1-6-19","1-6-20","1-6-21","1-6-22"],"collectionId":"1","name":"Domains","hasRequests":true,"id":"1-6"},{"order":["1-7-23"],"collectionId":"1","name":"General Properties","hasRequests":true,"id":"1-7"},{"order":["1-8-24","1-8-25","1-8-26","1-8-27"],"collectionId":"1","name":"IPsec VPN","hasRequests":true,"id":"1-8"},{"order":["1-9-28","1-9-29","1-9-30","1-9-31","1-9-32"],"collectionId":"1","name":"Internet Objects","hasRequests":true,"id":"1-9"},{"order":["1-10-33","1-10-34","1-10-35","1-10-36"],"collectionId":"1","name":"LDAP","hasRequests":true,"id":"1-10"},{"order":["1-11-37","1-11-38","1-11-39","1-11-40","1-11-41","1-11-42","1-11-43","1-11-44","1-11-45","1-11-46","1-11-47"],"collectionId":"1","name":"Monitored Devices","hasRequests":true,"id":"1-11"},{"order":["1-12-48","1-12-49","1-12-50"],"collectionId":"1","name":"NAT Policies","hasRequests":true,"id":"1-12"},{"order":["1-13-51","1-13-52","1-13-53","1-13-54","1-13-55","1-13-56","1-13-57"],"collectionId":"1","name":"Network Objects","hasRequests":true,"id":"1-13"},{"order":["1-14-58","1-14-59","1-14-60","1-14-61","1-14-62","1-14-63","1-14-64","1-14-65","1-14-66","1-14-67","1-14-68","1-14-69","1-14-70","1-14-71","1-14-72","1-14-73","1-14-74","1-14-75","1-14-76","1-14-77","1-14-78","1-14-79","1-14-80","1-14-81","1-14-82","1-14-83","1-14-84","1-14-85","1-14-86","1-14-87","1-14-88","1-14-89","1-14-90","1-14-91","1-14-92","1-14-93","1-14-94","1-14-95","1-14-96","1-14-97","1-14-98","1-14-99","1-14-100","1-14-101","1-14-102","1-14-103","1-14-104","1-14-105","1-14-106","1-14-107","1-14-108","1-14-109","1-14-110","1-14-111","1-14-112","1-14-113","1-14-114"],"collectionId":"1","name":"Network Topology","hasRequests":true,"id":"1-14"},{"order":["1-15-115","1-15-116","1-15-117"],"collectionId":"1","name":"Network Zone Manager - Patterns","hasRequests":true,"id":"1-15"},{"order":["1-16-118","1-16-119","1-16-120","1-16-121","1-16-122","1-16-123","1-16-124"],"collectionId":"1","name":"Network Zone Manager - Subnets","hasRequests":true,"id":"1-16"},{"order":["1-17-125","1-17-126","1-17-127","1-17-128","1-17-129","1-17-130","1-17-131","1-17-132","1-17-133","1-17-134","1-17-135","1-17-136","1-17-137","1-17-138","1-17-139","1-17-140"],"collectionId":"1","name":"Network Zone Manager - Zones","hasRequests":true,"id":"1-17"},{"order":["1-18-141","1-18-142","1-18-143","1-18-144","1-18-145","1-18-146"],"collectionId":"1","name":"Policies and Sub-Policies","hasRequests":true,"id":"1-18"},{"order":["1-19-147"],"collectionId":"1","name":"Policy Analysis","hasRequests":true,"id":"1-19"},{"order":["1-20-148","1-20-149","1-20-150","1-20-151","1-20-152","1-20-153"],"collectionId":"1","name":"Policy Browser (formerly Rule Documentation)","hasRequests":true,"id":"1-20"},{"order":["1-21-154","1-21-155","1-21-156","1-21-157","1-21-158","1-21-159","1-21-160","1-21-161"],"collectionId":"1","name":"Policy Optimization","hasRequests":true,"id":"1-21"},{"order":["1-22-162","1-22-163","1-22-164"],"collectionId":"1","name":"Revisions","hasRequests":true,"id":"1-22"},{"order":["1-23-165","1-23-166"],"collectionId":"1","name":"Rule Usage","hasRequests":true,"id":"1-23"},{"order":["1-24-167","1-24-168","1-24-169","1-24-170","1-24-171","1-24-172","1-24-173","1-24-174"],"collectionId":"1","name":"Security Rules","hasRequests":true,"id":"1-24"},{"order":["1-25-175","1-25-176","1-25-177","1-25-178","1-25-179","1-25-180","1-25-181"],"collectionId":"1","name":"Services and Ports","hasRequests":true,"id":"1-25"},{"order":["1-26-182","1-26-183","1-26-184"],"collectionId":"1","name":"Time Objects","hasRequests":true,"id":"1-26"},{"order":["1-27-185"],"collectionId":"1","name":"Traffic Policy Matcher","hasRequests":true,"id":"1-27"},{"order":["1-28-186","1-28-187","1-28-188","1-28-189","1-28-190"],"collectionId":"1","name":"Unified Security Policy - Access Request Violations","hasRequests":true,"id":"1-28"},{"order":["1-29-191","1-29-192","1-29-193","1-29-194","1-29-195"],"collectionId":"1","name":"Unified Security Policy - Alerts","hasRequests":true,"id":"1-29"},{"order":["1-30-196","1-30-197","1-30-198","1-30-199","1-30-200","1-30-201","1-30-202","1-30-203"],"collectionId":"1","name":"Unified Security Policy - Cloud Tag Policy","hasRequests":true,"id":"1-30"},{"order":["1-31-204","1-31-205","1-31-206","1-31-207","1-31-208","1-31-209","1-31-210","1-31-211"],"collectionId":"1","name":"Unified Security Policy - Exceptions","hasRequests":true,"id":"1-31"},{"order":["1-32-212","1-32-213","1-32-214","1-32-215","1-32-216"],"collectionId":"1","name":"Unified Security Policy - Security Zone Matrix","hasRequests":true,"id":"1-32"},{"order":["1-33-217","1-33-218"],"collectionId":"1","name":"Unified Security Policy - Violations","hasRequests":true,"id":"1-33"}],"requests":[{"headers":"Accept: application/json\n","name":"Get additional parameters identities by revision","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"}],"dataMode":"params","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
type: Additional parameter type [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group

Response Messages:
200: Successful
400: Invalid request","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters","collectionId":"1","id":"1-1-1","method":"GET"},{"headers":"Accept: application/json\n","name":"Get all URL Categories by revision.","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"}],"dataMode":"params","description":"Fetches list of URL Categories defined in a revision given by ID.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories","collectionId":"1","id":"1-1-2","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific additional parameter identity","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Additional parameter IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters/{{ids}}","collectionId":"1","id":"1-1-3","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a URL Category.","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more URL Categories.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Url Category IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories/{{ids}}","collectionId":"1","id":"1-1-4","method":"GET"},{"headers":"Accept: application/json\n","name":"Get applications identities by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of applications defined in a revision given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 1,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/applications","collectionId":"1","id":"1-2-5","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific application identity","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760
","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/applications/{{ids}}","collectionId":"1","id":"1-2-6","method":"GET"},{"headers":"Accept: application/json\n","name":"Get application identities by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of applications defined on device given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 50,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications","collectionId":"1","id":"1-2-7","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific application identity","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
Note: This API retrieves the information from the latest revision.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
id: Device ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/1/applications/701
","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications/{{ids}}","collectionId":"1","id":"1-2-8","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Compare revisions on two different devices in terms of traffic.","dataMode":"raw","description":"This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic.
The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions.
The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions.
Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared.
Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules
Note 3: The format of the result is the same as the one returned by /change_authorization
Note 4: The API accepts in request body only one pair of oldId - newId map
Note 5: The request is valid only if the mapping ids are found in the active policies

Parameters:
body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions.

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison
BODY{
    \"policy_traffic_comparison_request\": {
        \"oldVersionId\": \"234\",
        \"newVersionId\": \"179\",
        \"oldId2newIdMap\": [
            {
                \"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",
                \"newId\" : \"{00-FACED0-00}\"
            }
        ],
        \"withTraffic\": true
    }
}


Response Messages:
200: Policies diff was successfully calculated
400: Could not find the requested revisions for comparison","folder":"1-3","rawModeData":"{\n\t\"policy_traffic_comparison_request\": {\n\t\t\"oldVersionId\": \"234\",\n\t\t\"newVersionId\": \"179\",\n\t\t\"oldId2newIdMap\": [\n\t\t\t{\n\t\t\t\t\"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",\n\t\t\t\t\"newId\" : \"{00-FACED0-00}\"\n\t\t\t}\n\t\t],\n\t\t\"withTraffic\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/policyTrafficComparison","collectionId":"1","id":"1-3-9","method":"POST"},{"headers":"Accept: application/json\n","name":"Determine if changes between two revisions are authorized","data":[{"value":null,"type":"text","enabled":true,"key":"new_version"},{"value":null,"type":"text","enabled":true,"key":"old_version"}],"dataMode":"params","description":"This API checks for unauthorized changes between any two versions of a firewall policy.
The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets.
The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket.

The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove).
The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes.

Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing.
Note 2: Use the ID returned by the /revisions API for new_version and old_version.
Note 3: The default value for traffic_details and ignore_tickets is false.
Note 4: Traffic that is handled by an implicit rule will not have a rule ID.

Parameters:
new_version: New version ID
old_version: Old version ID
traffic_details: Return unauthorized traffic change details for all modified rules [optional]
ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional]

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true

Response Messages:
200: Change authorization has been successfully calculated
400: Input parameters are not valid
400: Could not find the requested revisions for comparison","folder":"1-3","url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/","collectionId":"1","id":"1-3-10","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a list of completed policy changes for a specific change window","data":[{"value":null,"type":"text","enabled":true,"key":"uid"}],"dataMode":"params","description":"Retrieves a list of completed policy changes for a specific change window.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
start: Starting result for query allowable value is numeric [optional]
count: Number of tasks for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true
OUTPUT {
    \"commit_tasks\": {
        \"count\": 1,
        \"total\": 1,
        \"commit_task\": {
            \"id\": 1,
            \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
            \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
            \"errors\": \"\"
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks","collectionId":"1","id":"1-4-11","method":"GET"},{"headers":"Accept: application/json\n","name":"Get scheduling and device details for a specific change window","data":[{"value":null,"type":"text","enabled":true,"key":"uid"},{"value":null,"type":"text","enabled":true,"key":"task_id"}],"dataMode":"params","description":"Retrieves scheduling and device details for a specific change window.

Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
task_id: Task Id

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1
OUTPUT {
    \"commit_task\": {
        \"id\": 1,
        \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
        \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
        \"errors\": \"\",
        \"device_commits\": {
            \"device_commit\": [
                {
                    \"id\": 1,
                    \"result\": {
                        \"errors\": {
                            \"error\": \"got_error_from_dcs\"
                        },
                        \"device\": {
                            \"id\": 17,
                            \"status\": \"FAILURE\",
                            \"revision_id\": 1,
                            \"errors\": {
                                \"error\": \"Login error\"
                            }
                        }
                    }
                },
                {
                    \"id\": 2,
                    \"result\": {
                        \"errors\": \"\",
                        \"device\": {
                            \"id\": 19,
                            \"status\": \"SUCCESS_WITH_WARNINGS\",
                            \"revision_id\": 1,
                            \"warnings\": {
                                \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                            }
                        }
                    }
                }
            ]
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain
404: Fail to find task for change window ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks/{{task_id}}","collectionId":"1","id":"1-4-12","method":"GET"},{"headers":"Accept: application/json\n","name":"Get name and status for all change windows","description":"Retrieves a list of all change windows.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
start: Starting result for query allowable value is numeric [optional]
count: Number of change windows for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true
OUTPUT {
    \"change_windows\": {
        \"count\": 2,
        \"total\": 2,
        \"change_window\": [
            {
                \"uuid\": \"6ae41504-a95c-4f23-98a2-f18b2efadb9d\",
                \"name\": \"cw1\",
                \"domain_id\": 1,
                \"enabled\": true
            },
            {
                \"uuid\": \"fc7b167c-29ea-49a1-9ee3-efb6d1351343\",
                \"name\": \"cw2\",
                \"domain_id\": 1,
                \"enabled\": true
            }
        ]
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/","collectionId":"1","id":"1-4-13","method":"GET"},{"headers":"Accept: application/json\n","name":"Get device zones by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/787/zones
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/zones","collectionId":"1","id":"1-5-14","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network interfaces by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/interfaces
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/interfaces","collectionId":"1","id":"1-5-15","method":"GET"},{"headers":"Accept: application/json\n","name":"Get device zones by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/zones
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/zones","collectionId":"1","id":"1-5-16","method":"GET"},{"headers":"Accept: application/json\n","name":"Get zones and network interfaces that participate in sub-policies","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/bindable_objects
","dataMode":"params","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindable_objects","collectionId":"1","id":"1-5-17","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network interfaces by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/10/interfaces
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/interfaces","collectionId":"1","id":"1-5-18","method":"GET"},{"headers":"Accept: application/json\n","name":"Get domain","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Domain id

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
401: User not permitted to access domains
400: Domain with ID was not found","dataMode":"params","folder":"1-6","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","collectionId":"1","id":"1-6-19","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update a domain","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Domain id
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains/2
BODY{
    \"domain\": {
        \"name\": \"edited name\",
        \"address\": \"edited address\",
        \"description\": \"edited description\"
    }
}


Response Messages:
401: User not permitted to access domains
400: Domain with ID was not found
400: Domain with this name already exists
400: Domain name is empty
400: Default domain cannot be changed","dataMode":"raw","folder":"1-6","rawModeData":"{\n\t\"domain\": {\n\t\t\"name\": \"edited name\",\n\t\t\"address\": \"edited address\",\n\t\t\"description\": \"edited description\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","collectionId":"1","id":"1-6-20","method":"PUT"},{"headers":"Content-Type: application/json\n","name":"Add a domain","dataMode":"raw","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains
BODY{
    \"domain\": {
        \"name\": \"domain1\",
        \"address\": \"address\",
        \"description\": \"description\"
    }
}


Response Messages:
401: User not permitted to access domains
400: Domain with this name already exists
400: Domain name is empty","folder":"1-6","rawModeData":"{\n\t\"domain\": {\n\t\t\"name\": \"domain1\",\n\t\t\"address\": \"address\",\n\t\t\"description\": \"description\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","collectionId":"1","id":"1-6-21","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all domains","description":"

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
401: User not permitted to access domains","folder":"1-6","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","collectionId":"1","id":"1-6-22","method":"GET"},{"headers":"Accept: application/json\n","name":"Get general properties","description":"This API requires 'Super admin' privileges



Usage Example
URLhttps://192.168.1.1/securetrack/api/properties
OUTPUT{
    \"properties\": {
        \"sc_addresses\": {
            \"sc_address\": [
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"external\"
                },
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"internal\"
                }
            ]
        }
    }
}


Response Messages:
401: User not permitted to view properties","folder":"1-7","url":"https://{{SecureTrack_IP}}/securetrack/api/properties/","collectionId":"1","id":"1-7-23","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco cryptographic maps by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://191.168.1.1/securetrack/api/revisions/18/crypto_maps
","dataMode":"params","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/crypto_maps","collectionId":"1","id":"1-8-24","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Check Point VPN (IPSec) communities and gateways","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities.
Works on clusters and gateways, not on management servers.

Parameters:
device_id: The unique identifier of target device

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities
","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_communities","collectionId":"1","id":"1-8-25","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco IPsec policy and peers","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"outputInterfaceName"}],"dataMode":"params","description":"Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config.
You can retrieve the interface names by calling the /devices/id/interfaces API.

Parameters:
device_id: The unique identifier of target device
outputInterfaceName: Interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1
","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_tunnels","collectionId":"1","id":"1-8-26","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco cryptographic maps by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/19/crypto_maps
","dataMode":"params","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/crypto_maps","collectionId":"1","id":"1-8-27","method":"GET"},{"name":"Get resolved Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"params","description":"The order of precedence used to resolve the Internet object is:
Step 1: Identify the Internet referral:
Search for a defined Internet referral on the specified device.
If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral.
If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2.
If an Internet referral is not found, it resolves to “Any”.
Step 2: Resolve the object by name:
Search the specified device for a defined network object that matches the name returned in Step 1.
If a matching network object is not found, an error will be returned.

Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2/object

Response Messages:
200: Resolved Internet referral object for device is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Configured object was not found on the device
401: Access is denied.","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}/object","collectionId":"1","id":"1-9-28","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"raw","description":"Updates the Internet referral configuration for the device.
If there was no previous configuration, it will be created.

Parameters:
deviceId: SecureTrack Device ID
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_10.11.73.1\"
    }
}


Response Messages:
200: Internet referral configuration was updated
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
401: Access is denied.","folder":"1-9","rawModeData":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_10.11.73.1\"\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-29","method":"PUT"},{"name":"Get Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Internet referral configuration was not found for device ID
401: Access is denied.","dataMode":"params","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-30","method":"GET"},{"name":"Delete Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration was deleted
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration for device ID does not exist
401: Access is denied.","dataMode":"params","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-31","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Create new Internet representation for a device","dataMode":"raw","description":"The internet referral lets you represent the Internet as an object on a device.
See REST API: /internet_referral/{deviceId:[0-9]+}/object for a description of how internet referral is resolved.

Parameters:
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_2.2.2.2\"
    }
}


Response Messages:
201: Internet referral configuration was created
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
400: Internet referral configuration for given device ID already exists
401: Access is denied.","folder":"1-9","rawModeData":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_2.2.2.2\"\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/","collectionId":"1","id":"1-9-32","method":"POST"},{"headers":"Accept: application/json\n","name":"Get LDAP entry details by DN","data":[{"value":null,"type":"text","enabled":true,"key":"dn"}],"dataMode":"params","description":"Returns the UID, DN and Name of a LDAP entry specified by the DN.

Parameters:
dn: LDAP DN

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntryByDN?dn=CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com
OUTPUT{
    \"ldap_entry\": {
        \"uid\": \"mYbWQms7p0q5YinEyW5Byw==\",
        \"dn\": \"CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com\",
        \"name\": \"Manufacturing\"
    }
}


Response Messages:
200: OK
400: Invalid DN format
404: Entry matching the DN cannot be found
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntryByDN","collectionId":"1","id":"1-10-33","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the base DN entry details","description":"The returned \"base DN\" is used by GetEntriesByNames API as the search start entry.



Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getBaseDNEntry
OUTPUT{
    \"ldap_entry\": {
        \"dn\": \"DC=tufintest,DC=com\",
        \"uid\": \"nABbRP/lPUKlteNRI4j6iA==\"
    }
}


Response Messages:
200: OK
404: Base Entry cannot be found
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getBaseDNEntry","collectionId":"1","id":"1-10-34","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Return entries that exactly match one of the given strings","dataMode":"raw","description":"Return list of LDAP entries which match the exact given multiple search_text.

Parameters:
body: Names to search

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntriesByNames
BODY{
    \"search_by_name_criteria\": {
        \"search_texts\": {
            \"search_text\": [
                \"Finance\",
                \"Marketing\",
                \"Management\"
            ]
        },
        \"ldap_entry_types\": {
            \"ldap_entry_type\": [
                \"GROUP\"
            ]
        },
        \"max_search_result\": 20
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Finance,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"uOvJTpYRD0aTjEENA87N5A==\",
                    \"displayName\": \"Finance\"
                },
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Management,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"jdf778skfsgs730fksdHHs==\",
                    \"displayName\": \"Management\"
                }
            ]
        },
        \"has_more_results_to_return\": false
    }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal value)
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","rawModeData":"{\n\t\"search_by_name_criteria\": {\n\t\t\"search_texts\": {\n\t\t\t\"search_text\": [\n\t\t\t\t\"Finance\",\n\t\t\t\t\"Marketing\",\n\t\t\t\t\"Management\"\n\t\t\t]\n\t\t},\n\t\t\"ldap_entry_types\": {\n\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\"GROUP\"\n\t\t\t]\n\t\t},\n\t\t\"max_search_result\": 20\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntriesByNames","collectionId":"1","id":"1-10-35","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Return LDAP entries which match the given search criteria","dataMode":"raw","description":"Return list of LDAP entries which match the given search criteria according to the search mode (EXACT, CONTAINS, STARTS_WITH, ENDS_WITH).
The search is case insensitive.
The limit of max_search_result is 1000.

Parameters:
body: Search criteria

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/search
BODY{
    \"search_criteria\": {
        \"search_base_dn\": \"DC=tufintest,DC=com\",
        \"search_text\": \"test\",
        \"ldap_search_options\": {
            \"ldap_entry_types\": {
                \"ldap_entry_type\": [
                    \"OU\",
                    \"USER\"
                ]
            },
            \"search_mode\": \"CONTAINS\",
            \"max_search_result\": 3
        }
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
            {
                \"dn\": \"CN=User15ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"ZRuKW3XqIEOIxCwlfgJQYA==\",
                \"displayName\": \"User15ATTesting1\"
            },
            {
                \"dn\": \"CN=IWAM_TEST2003,CN=Users,DC=tufintest,DC=com\",
                \"uid\": \"bYVqqcZXsUSF51hiP4W7Yw==\",
                \"displayName\": \"Testing1\"
            },
            {
                \"dn\": \"CN=User1ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"2ma3TrgeHEWQDITwvcRqlg==\",
                \"displayName\": \"test\"
            }
            ]
        },
            \"has_more_results_to_return\": \"true\"
        }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal or invalid value)
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","rawModeData":"{\n\t\"search_criteria\": {\n\t\t\"search_base_dn\": \"DC=tufintest,DC=com\",\n\t\t\"search_text\": \"test\",\n\t\t\"ldap_search_options\": {\n\t\t\t\"ldap_entry_types\": {\n\t\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\t\"OU\",\n\t\t\t\t\t\"USER\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"search_mode\": \"CONTAINS\",\n\t\t\t\"max_search_result\": 3\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/search","collectionId":"1","id":"1-10-36","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Add devices to SecureTrack","dataMode":"raw","description":"Use this API to add a single device or a list of devices to SecureTrack.
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
Currently supported types: CMA, SMC, ASA, Panorama NG and FortiManager.

This API verifies connection to the provided device, before adding a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be added.
Only \"live\" device with correct credentials can be added using this API.
To add Checkpoint R77 devices, use \"r80_version\" : \"false\".


Parameters:
body: device_list

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"r80_version\":\"false\"
             }
         },
         {
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"user_name\":\"admin\",
                 \"password\":\"1234\",
                 \"r80_version\":\"true\"
             }
         },
         {
             \"model\":\"ASA\",
             \"vendor\":\"Cisco\",
             \"securetrack_domain\":\"Domain-A\",
             \"display_name\":\"Ireland-ASA\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
             \"enable_virtual_contexts\":\"true\",
             \"import_all\":\"false\",
             \"import_devices\":
                     [\"VC1\",\"VC2\"],
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"collect_dynamic_topology\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"enable_password\":\"st-enable-password\"
             }
         },
         {
             \"model\":\"Panorama\",
             \"vendor\":\"PaloAltoNetworks\",
             \"display_name\":\"First-Device-example\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"model\":\"FortiManager\",
             \"vendor\":\"Fortinet\",
             \"display_name\":\"Spain-FortiManager\",
             \"securetrack_server\":\"RemoteControlServerName\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_all\": \"false\",
                 \"import_devices\": [
                         {
                 \"name\": \"AdomX\",
                 \"import_all\": \"false\",
                 \"managed_devices\": [\"FW1\"]
                        }
                    ]
                }
            }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n \t\t \"devices\": [{ \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"r80_version\":\"false\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"user_name\":\"admin\",\n \t\t\t\t \"password\":\"1234\",\n \t\t\t\t \"r80_version\":\"true\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"ASA\",\n \t\t\t \"vendor\":\"Cisco\",\n \t\t\t \"securetrack_domain\":\"Domain-A\",\n \t\t\t \"display_name\":\"Ireland-ASA\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t \"enable_virtual_contexts\":\"true\",\n \t\t\t \"import_all\":\"false\",\n \t\t\t \"import_devices\": \n \t\t\t\t\t [\"VC1\",\"VC2\"],\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"enable_password\":\"st-enable-password\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"Panorama\",\n \t\t\t \"vendor\":\"PaloAltoNetworks\",\n \t\t\t \"display_name\":\"First-Device-example\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t {\n \t\t\t \"model\":\"FortiManager\",\n \t\t\t \"vendor\":\"Fortinet\",\n \t\t\t \"display_name\":\"Spain-FortiManager\",\n \t\t\t \"securetrack_server\":\"RemoteControlServerName\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_all\": \"false\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t\t { \n \t\t\t\t \"name\": \"AdomX\",\n \t\t\t\t \"import_all\": \"false\", \n \t\t\t\t \"managed_devices\": [\"FW1\"]\n \t\t\t\t\t\t}\n \t\t\t\t\t]\n \t\t\t\t}\n \t\t\t}\n \t\t]\n \t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","collectionId":"1","id":"1-11-37","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Edit Securetrack device","dataMode":"raw","description":"Use this API to edit the settings of a management device, including changing multiple parameters in the same call.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
Note: This API cannot be used to edit SecureTrack Domains and SecureTrack Servers.
This API verifies connection to the provided device, before updating a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be updated.
Only \"live\" device with correct credentials can be updated using this API.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"device_id\": 1,
             \"display_name\": \"CheckPoint-R77-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.1\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"authentication_mode\": \"LEA\",
                 \"lea_authentication_mode\": \"ssl_opsec\",
                 \"lea_authentication_port\": \"2488\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 2,
             \"display_name\": \"CheckPoint-R80-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.2\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 3,
             \"display_name\": \"Cisco-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"enable_password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 4,
             \"display_name\": \"PaloAlto-PanoramaNg-Device\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 5,
             \"display_name\": \"PaloAlto-DeviceGroup\"
         },
         {
             \"device_id\": 6,
             \"display_name\": \"PaloAlto-FireWall-Device\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         },
         {
             \"device_id\": 7,
             \"display_name\": \"Spain-FortiManager\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 8,
             \"display_name\": \"FortiManager-Adom\"
         },
         {
             \"device_id\": 9,
             \"display_name\": \"FortiManager-FireWall\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n\t\t \"devices\": [{\n\t\t\t \"device_id\": 1,\n\t\t\t \"display_name\": \"CheckPoint-R77-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.1\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"authentication_mode\": \"LEA\",\n\t\t\t\t \"lea_authentication_mode\": \"ssl_opsec\",\n\t\t\t\t \"lea_authentication_port\": \"2488\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 2,\n\t\t\t \"display_name\": \"CheckPoint-R80-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 3,\n\t\t\t \"display_name\": \"Cisco-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"enable_password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 4,\n\t\t\t \"display_name\": \"PaloAlto-PanoramaNg-Device\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 5,\n\t\t\t \"display_name\": \"PaloAlto-DeviceGroup\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 6,\n\t\t\t \"display_name\": \"PaloAlto-FireWall-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 7,\n\t\t\t \"display_name\": \"Spain-FortiManager\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 8,\n\t\t\t \"display_name\": \"FortiManager-Adom\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 9,\n\t\t\t \"display_name\": \"FortiManager-FireWall\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t }\n\t\t]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","collectionId":"1","id":"1-11-38","method":"PATCH"},{"name":"Add configuration for offline device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"configuration_file"}],"description":"Parameters:
device_id: Device ID
configuration_file: Configuration File

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"device_id=1\" https://192.168.1.1/securetrack/api/tasks/add_device_config_task

Response Messages:
200: Configuration added successfully.","dataMode":"params","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/tasks/add_device_config_task","collectionId":"1","id":"1-11-39","method":"POST"},{"headers":"Accept: application/json\n","name":"Get textual configuration by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns textual configuration for the specified revision Id.


Parameters:
context: Global MSSP context [optional]
id: Revision id

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/config
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/config","collectionId":"1","id":"1-11-40","method":"GET"},{"headers":"Accept: application/json\n","name":"Get textual configuration by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get latest revision of running configuration for a given device Id.


Parameters:
context: global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/111/config
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/config","collectionId":"1","id":"1-11-41","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update offline device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"raw","description":"Device name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
device_id: Device ID
body: Device to be updated

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/1
BODY<device>
     <name>API OFFLINE ASA2</name>
     <topology>true</topology>
</device>

","folder":"1-11","rawModeData":"\n\t API OFFLINE ASA2\n\t true\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}","collectionId":"1","id":"1-11-42","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get specific device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the vendor, model, name, domain and ID for the specified device.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
id: Device ID
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/60

Usage Example
https://192.168.1.1/securetrack/api/devices/20?show_os_version=true
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}","collectionId":"1","id":"1-11-43","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Import managed devices","dataMode":"raw","description":"Use this API to import more managed devices to SecureTrack.
The following devices can be added: Device Groups (for Panorama), Administrative Domains (for FortiManager).\nCurrently supported types: Panorama, FortiManager, Cisco ASA.
Please see examples below per device id: device id 1 for Panorama, device 2 for FortiManager, device id 3 for Cisco ASA.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk/import
BODY{
     \"devices_list\":{
         \"devices\":[
         {
             \"device_id\":\"1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"device_id\":\"2\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [
                     {
                         \"name\":\"Adom1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"firewall1\", \"firewall2\"]
                     },
                     {
                         \"name\":\"Adom2\",
                         \"import_all\":\"true\"
                     }
                 ]
             }
         },
         {
             \"device_id\":\"3\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"]
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n \t\t \"devices\":[ \n \t\t { \n \t\t\t \"device_id\":\"1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"2\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"firewall1\", \"firewall2\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"3\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"] \n \t\t\t }\n \t\t }\n \t\t]\n \t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/import","collectionId":"1","id":"1-11-44","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Add offline device","dataMode":"raw","description":"You can choose to select the domain either by name or id using the domain_id or domain_name tags.\nDevice name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
body: Device to be added

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices
BODY<device>
     <model>asa</model>
     <vendor>Cisco</vendor>
     <domain_id>1</domain_id>
     <domain_name>Default</domain_name>
     <name>API OFFLINE ASA1</name>
     <offline>true</offline>
     <topology>true</topology>
</device>

","folder":"1-11","rawModeData":"\n\t asa \n\t Cisco\n\t 1\n\t Default\n\t API OFFLINE ASA1\n\t true\n\t true\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","collectionId":"1","id":"1-11-45","method":"POST"},{"headers":"Accept: application/json\n","name":"Get devices","description":"Returns the list of devices that are configured in SecureTrack, including the vendor, model, name, domain and device ID.
The results can be sorted by ip, name, vendor and model.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
name: Device name [optional]
ip: Device IP address [optional]
vendor: Device vendor [optional]
model: Device model [optional]
sort: Sort ascending or descending allowable types are: asc or desc [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices

Usage Example
https://192.168.1.1/securetrack/api/devices?vendor=VMware

Usage Example
https://192.168.1.1/securetrack/api/devices?sort=ip:asc

Usage Example
https://192.168.1.1/securetrack/api/devices?show_os_version=true
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","collectionId":"1","id":"1-11-46","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific task results of bulk operations on devices","data":[{"value":null,"type":"text","enabled":true,"key":"task_uid"}],"dataMode":"params","description":"Use this API to track and display the current progress of the devices being edited or added to\nSecureTrack for a specific Task ID.
For a list of devices, the status of each device is displayed.

A device that was not added due to some reason will be added to \"failed\" list with status element containing a description.
For example:
\"description\": \"No connection to device\".

Parameters:
task_uid: Task UID

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk/tasks/d7e88799-a6e5-45da-8c72-c979a5dbe235
OUTPUT{
    \"task_result\":{
        \"total_succeeded\":\"0\",
        \"total_in_progress\":\"2\",
        \"total_failed\":\"0\",
        \"succeeded\":{
            \"count\":\"0\"
        },
        \"in_progress\":{
            \"count\":\"2\",
            \"devices\":[
                {
                    \"device_id\":\"1\",
                    \"display_name\":\"Europe-CMA\",
                    \"ip_address\":\"192.168.1.1\",
                    \"status\":{
                    }
                },
                {
                    \"device_id\":\"2\",
                    \"display_name\":\"Ireland-ASA\",
                    \"ip_address\":\"172.16.1.1\",
                    \"status\":{
                    }
                }
            ]
        },
        \"failed\":{
            \"count\":\"0\"
        }
    }
}


Response Messages:
404: The task with the given UID was not found
400: Bad request
200: Accepted
408: Request timed out
500: Internal server error","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/tasks/{{task_uid}}","collectionId":"1","id":"1-11-47","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches a list of NAT objects for a given revision
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Version ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects?get_total=true
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/nat_objects","collectionId":"1","id":"1-12-48","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of NAT rules for device given by device ID

input_interface and output_interface are not supported for Panorama running in Advanced management mode
nat_stage is supported for Netscreen and JunOS
nat_type is supported for FortiManager
Note: For Check Point, NAT rules are available from the modules (not managements)
Note: For Palo Alto, filtering NAT rules by interface is only available for firewall devices

Parameters:
context: Global MSSP context [optional]
id: Device ID
input_interface: Input interface for NAT rules, \"any\" for all interfaces [optional]
output_interface: output interface for NAT rules, \"any\" for all interfaces [optional]
nat_stage: NAT stage for NAT rules allowable values: \"pre_policy\" , \"post_policy\" or \"both\" [optional]
nat_type: NAT stage for NAT rules allowable values: \"vip\" or \"reverse_vip\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/10/nat_rules/bindings?input_interface=Any
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_rules/bindings","collectionId":"1","id":"1-12-49","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches a list of NAT objects defined on device given by device ID
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable value is numeric [optional]
count: Starting page for query allowable value is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects?get_total=true
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_objects","collectionId":"1","id":"1-12-50","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules containing specified network object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the security rules that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.
include_groups: You can add \"include_groups\" to find rules that include the network object and rules that include the groups that include the network object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/65078/rules?include_groups=true
","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/rules","collectionId":"1","id":"1-13-51","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific network objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches a single or partial list of the network objects for a given revision.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects/69547?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169185,
            \"name\": \"Access_Role_Domain Controllers\",
            \"display_name\": \"Access_Role_Domain Controllers\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{140B8F32-188D-414C-A7BE-F4A7D7E9A169}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14237,
                    \"name\": \"ad_group_Domain_Controllers\",
                    \"display_name\": \"Domain Controllers\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{0A8A459E-58E8-45DC-981E-16BBF2BD1922}\",
                    \"dn\": \"CN=Domain Controllers,CN=Users,DC=rnd,DC=local\"
                }
            }
        }
    }
}

","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/network_objects/{{ids}}","collectionId":"1","id":"1-13-52","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of network objects defined on device given by ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169178,
                \"name\": \"Access_role\",
                \"display_name\": \"Access_role\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": false,
                \"comment\": \"\",
                \"uid\": \"{FC267948-DA8C-4FB6-A736-76B5254BF825}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14320,
                        \"name\": \"ad_group_auto_30K_grp1\",
                        \"display_name\": \"auto_30K_grp1\",
                        \"class_name\": \"ad_group\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{CAB92DCC-CF63-4E47-B8E3-1E1231996D5E}\",
                        \"dn\": \"CN=auto_30K_grp1,OU=OU_30K_Groups,DC=rnd,DC=local\"
                    }
                }
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/network_objects","collectionId":"1","id":"1-13-53","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific network object","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches a single or partial list of the network objects for a given device ID.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects/169184?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169184,
            \"name\": \"Access_Role_@grp\",
            \"display_name\": \"Access_Role_@grp\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{1870612C-0922-4AEE-81FF-5472DB7C32E1}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14338,
                    \"name\": \"ad_group_grp\",
                    \"display_name\": \"@grp\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{C5740C23-F36E-4D2E-8B17-1F99C239C12A}\",
                    \"dn\": \"CN=@grp,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}

","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/network_objects/{{ids}}","collectionId":"1","id":"1-13-54","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects matching specified criteria","data":[{"value":null,"type":"text","enabled":true,"key":"filter"}],"dataMode":"params","description":"You can search for network objects where the IP address, name or comment fields have a specified text string,
or you can search for network objects that have an IP address that matches, contains or is contained in a specified IP subnet,
or you can search for network objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns network objects where the IP address, name or comment fields have a specified text string. “subnet” filter returns network objects that have an IP address that matches, contains or is contained in a specified IP subnet. “uid“ filter returns network objects with the specified uid. If no filter is specified, the “text” filter is used.
device_id: Returns network objects belonging to the specified device_id. [optional]
ip: (For “text” filter) You can specify \"ip\" to find network objects with the specified text in the IP address field. [optional]
name: (For “text” filter) You can specify \"name\" to find network objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find network objects with the specified text in the comment field. [optional]
any_field: (For “text” filter) You can specify \"any_field\" to find network objects with the specified text in the IP address, name or comment fields. [optional]
exact_match: (For “text” filter) You can add \"exact_match=true\" to find network objects with the specified text in the comment field. If this field is not specified, the query uses \"exact_match=false\". [optional]
contained_in: (For “subnet” filter) You can specify \"contained_in\" to find network objects that are contained in the specified IP subnet. For example, 10.1.0.0 is contained in 10.0.0.0. [optional]
contains: (For “subnet” filter) You can specify \"contains\" to find network objects that contain the specified IP subnet. For example, 10.0.0.0 contains 10.1.0.0. [optional]
exact_subnet: (For “subnet” filter) You can specify \"exact_subnet\" to find network objects that have the specified IP address. [optional]
uid: (for “uid“ filter) Returns network objects with the specified uid. [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: You can specify \"typeOnDevice\" to find network object groups that are EDL. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=host&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&any_field=host&count=10&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&contains=10.1.1.0

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&count=10&exact_subnet=1.1.1.1

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191&device_id=4

Usage Example
URLhttps://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=Access_Role&identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1,
        \"total\": 1,
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169197,
            \"name\": \"Access_Role_aaa\",
            \"display_name\": \"Access_Role_aaa\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14317,
                    \"name\": \"ad_group_aaa\",
                    \"display_name\": \"aaa\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{5D16859C-0256-4673-A402-4254588B8F40}\",
                    \"dn\": \"CN=aaa,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}


Response Messages:
400: The typeOnDevice value is not valid.Use edl_ip_list as value to search EDL groups.","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/search","collectionId":"1","id":"1-13-55","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network groups containing specified network object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns groups that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.

Usage Example
https://192.168.1.1/securetrack/api/network_objects/69577/groups
","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/groups","collectionId":"1","id":"1-13-56","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of network objects from specific revision
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169183,
                \"name\": \"Access role 1\",
                \"display_name\": \"Access role 1\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": true,
                \"comment\": \"\",
                \"uid\": \"{1E4C35A0-1FE4-4101-8A38-FDE656BCDCFB}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14346,
                        \"name\": \"all identified\",
                        \"display_name\": \"all identified\",
                        \"class_name\": \"all_identified\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{17A972AC-4B4A-4715-859F-867128707F59}\",
                        \"dn\": \"\"
                    }
                }
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/network_objects","collectionId":"1","id":"1-13-57","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic Route","description":"Get a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/30
OUTPUT{
    GenericRoute: {
        id: 30,
        mgmtId: 2,
        destination: \"222.100.10.22\",
        mask: \"255.255.0.0\",
        interfaceName: \"catch22\",
        nextHop: \"100.100.10.10\",
        nextHopType: \"IP\",
        vrf: \"V102-YO\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Generic Route Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","collectionId":"1","id":"1-14-58","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Route","description":"Delete a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/5\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: Generic Route Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","collectionId":"1","id":"1-14-59","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get topology routing tables for a given device","data":[{"value":null,"type":"text","enabled":true,"key":"mgmtId"}],"dataMode":"params","description":"The returned routing tables are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=1&is_generic=true
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_routes","collectionId":"1","id":"1-14-60","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Ignored Interfaces.","description":"Delete Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10\n

Response Messages:
200: 2 entries deleted where mgmtId = 10
400: Bad Request.
401: Access is denied.
404: Management Id 10 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-61","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get Ignored Interfaces.","description":"Get Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10
OUTPUT{
    IgnoredInterfaces: [
        {
            interfaceName: \"eth2\",
            mgmtId: 10,
            ip: \"0.0.0.0\"
        },
        {
            interfaceName: \"loopback100\",
            mgmtId: 10,
            ip: \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-62","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get cloud information","data":[{"value":null,"type":"text","enabled":true,"key":"cloud_id"}],"dataMode":"raw","description":"Returns information about a specific cloud in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
cloud_id: cloud id
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions/120
BODY{
    \"suggested_clouds\": {
        \"count\": 1,
        \"total\": 1,
        \"cloud\": {
            \"management_name\": \"FW1\",
            \"management_id\": 20,
            \"cloud_name\": \"Cloud 10.100.0.1\",
            \"cloud_id\": 120,
            \"vertex_id\": 250,
            \"ip\": \"10.100.0.1\",
            \"routes_count\": 5,
            \"is_parent\": false
        }
    }
}


Response Messages:
202: Accepted
401: User is not permitted to access the specified domain","folder":"1-14","rawModeData":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"cloud\": {\n\t\t\t\"management_name\": \"FW1\",\n\t\t\t\"management_id\": 20,\n\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\"cloud_id\": 120,\n\t\t\t\"vertex_id\": 250,\n\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\"routes_count\": 5,\n\t\t\t\"is_parent\": false\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions/{{cloud_id}}","collectionId":"1","id":"1-14-63","method":"GET"},{"name":"Add generic device to Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"configuration_file"}],"dataMode":"params","description":"Upload a configuration file that will be used to add a generic device to the Topology model.
The context field is the domain ID to which the generic device is added: If not provided, the device is added to the global domain.
configuration_file must include a valid generic device configuration.
The specified path must point to a file on the computer being sue to make the REST API call.
If update update_topology = true, then the Topology model will be updated immediately after the device is added.
For maximum efficiency, if you are adding multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.Default value for update_topology = true.
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
body: Generic device to be added
configuration_file: Configuration File for generic device
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"my_generic_device\", \"customer_id\": 1}};type=application/json' -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices\n

Response Messages:
201: The generic device was created successfully
401: User is not permitted to access the specified domain
400: Failed to create generic device ","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","collectionId":"1","id":"1-14-64","method":"POST"},{"headers":"Accept: application/json\n","name":"Get generic devices that are configured in ST","description":"Returns a list of the generic devices included in all the domains that the user has permission to.
Use context and/or name optional parameters to get more specific results.
To get context optional parameter, you can call /domains/ API and use the id included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
name: Generic device name [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","collectionId":"1","id":"1-14-65","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get cloud information","dataMode":"raw","description":"Returns information about all clouds in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
context: Global MSSP context [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions
BODY{
    \"suggested_clouds\": {
        \"count\": 2,
        \"total\": 2,
        \"cloud\": [
            {
                \"management_name\": \"FW1\",
                \"management_id\": 20,
                \"cloud_name\": \"Cloud 10.100.0.1\",
                \"cloud_id\": 120,
                \"vertex_id\": 250,
                \"ip\": \"10.100.0.1\",
                \"routes_count\": 5,
                \"is_parent\": false
            },
            {
                \"management_name\": \"FW2\",
                \"management_id\": 21,
                \"cloud_name\": \"Cloud 172.16.0.1\",
                \"cloud_id\": 125,
                \"vertex_id\": 270,
                \"ip\": \"172.16.0.1\",
                \"routes_count\": 7,
                \"is_parent\": false,
                \"parent_vertex_id\": 40
                \"parent_cloud_id\": 45
                \"parent_cloud_name\": \"Cloud 172.16.0.1\",
            }
        ]
    }
}


Response Messages:
202: Accepted
401: User is not permitted to access the specified domain","folder":"1-14","rawModeData":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 2,\n\t\t\"total\": 2,\n\t\t\"cloud\": [\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW1\",\n\t\t\t\t\"management_id\": 20,\n\t\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\t\"cloud_id\": 120,\n\t\t\t\t\"vertex_id\": 250,\n\t\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\t\"routes_count\": 5,\n\t\t\t\t\"is_parent\": false\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW2\",\n\t\t\t\t\"management_id\": 21,\n\t\t\t\t\"cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t\t\"cloud_id\": 125,\n\t\t\t\t\"vertex_id\": 270,\n\t\t\t\t\"ip\": \"172.16.0.1\",\n\t\t\t\t\"routes_count\": 7,\n\t\t\t\t\"is_parent\": false,\n\t\t\t\t\"parent_vertex_id\": 40\n\t\t\t\t\"parent_cloud_id\": 45\n\t\t\t\t\"parent_cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t}\n\t\t]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions","collectionId":"1","id":"1-14-66","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Vpns","dataMode":"raw","description":"Create generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","collectionId":"1","id":"1-14-67","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Vpns","dataMode":"raw","description":"Update generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"id\": 24,
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"new33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"id\": 25,
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"new111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Vpn/Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"id\": 24,\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"new33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"id\": 25,\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"new111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","collectionId":"1","id":"1-14-68","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get Transparent Firewalls","description":"Get Transparent Firewalls for participated managed/generic DeviceId

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw/device/9?generic=false
OUTPUT{
    TransparentFirewalls: [
        {
            id: 17,
            outputL3DeviceId: 22,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet0/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 1,
            inputL3IsGenericDevice: true,
            inputL3InterfaceName: \"interface2\"
        },
        {
            id: 23,
            outputL3DeviceId: 23,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet2/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 17,
            inputL3IsGenericDevice: false,
            inputL3InterfaceName: \"mgmt\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","collectionId":"1","id":"1-14-69","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Transparent Firewalls.","description":"Delete Transparent Firewalls for participated layer 2 deviceId

Parameters:
deviceId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/device/9\n

Response Messages:
200: 4 entries deleted where layer2 deviceId = 9
400: Bad Request.
401: Access is denied.
404: DeviceId 9 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","collectionId":"1","id":"1-14-70","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Delete generic Vpns","description":"Delete all generic Vpns from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/device/2?generic=false\n

Response Messages:
200: 4 Generic Vpns were deleted from mgmtId 2.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","collectionId":"1","id":"1-14-71","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Vpns","description":"Get generic Vpns of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/device/3?generic=true
OUTPUT{
    GenericVpns: [
    {
        id: 17,
        generic: true,
        deviceId: 3,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.177\",
        tunnelDestIpAddr: \"1.1.1.188\"
    },
    {
        id: 22,
        generic: true,
        deviceId: 3,
        interfaceName: \"111\",
        tunnelSourceIpAddr: \"1.1.1.188\",
        tunnelDestIpAddr: \"1.1.1.177\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","collectionId":"1","id":"1-14-72","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology subnets","description":"Returns a list of the topology subnets for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology subnet names that match the search criteria provided, as follows:
1. If you provide only a mask, then an exact match search is done on the mask portion of the name
e.g. if name=/2, the results will include 1.2.3.4/2, but not 1.2.3.4/22
2. If you provide only a partial or complete IP address, then a contains search is done in the IPv4 block portion of the name
e.g. name=32, the results will include 192.168.205.32/24 and 55.192.32.22/16, but will not include 55.168.205.5/32
3. If you provide both an IPv4 address (either partial or complete) and a mask, then an exact match search is done
e.g. if name=23.4/2, then the results will include 192.168.23.4/2, but will not include 192.168.23.4/23 or 23.4.192.168/2

The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
name: Subnet name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=10.27
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.20/32\",
                \"ip\": \"10.27.122.20\",
                \"mask\": \"255.255.255.255\"
            },
            {
                \"id\": 616,
                \"name\": \"10.27.122.60/32\",
                \"ip\": \"10.27.122.60\",
                \"mask\": \"255.255.255.255\"
            },
            {
                \"id\": 619,
                \"name\": \"10.27.122.0/30\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.252\"
            },
            {
                \"id\": 620,
                \"name\": \"10.27.122.4/30\",
                \"ip\": \"10.27.122.4\",
                \"mask\": \"255.255.255.252\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=144/30
OUTPUT{
    \"topology_subnets\": {
        \"count\": 2,
        \"total\": 2,
        \"subnets\": [
            {
                \"id\": 773,
                \"name\": \"10.13.64.144/30\",
                \"ip\": \"10.13.64.144\",
                \"mask\": \"255.255.255.252\"
            },
            {
                \"id\": 825,
                \"name\": \"10.15.64.144/30\",
                \"ip\": \"10.15.64.144\",
                \"mask\": \"255.255.255.252\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets","collectionId":"1","id":"1-14-73","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Transparent Firewall","description":"Delete Transparent Firewall by Id.

Parameters:
layer2DataId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/17\n

Response Messages:
200: layer2DataId 17 deleted.
400: Bad Request.
401: Access is denied.
404: Layer2Data Id 17 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/{{layer2DataId}}","collectionId":"1","id":"1-14-74","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Join Cloud","dataMode":"raw","description":"Create Join Cloud.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"name\" : \"Yami\",
        \"clouds\" : [1, 2]
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"name\" : \"Yami\",\n\t\t\"clouds\" : [1, 2]\n\t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","collectionId":"1","id":"1-14-75","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update Join Cloud","dataMode":"raw","description":"Update Join Clouds.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"id\" : 67,
        \"name\" : \"Yamile\",
        \"clouds\" : [1, 2, 57]
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"id\" : 67,\n\t\t\"name\" : \"Yamile\",\n\t\t\"clouds\" : [1, 2, 57]\n\t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","collectionId":"1","id":"1-14-76","method":"PUT"},{"name":"Get path image for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns an image containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_image","collectionId":"1","id":"1-14-77","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Vpn","description":"Delete a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/5\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","collectionId":"1","id":"1-14-78","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Vpn","description":"Get a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/18
OUTPUT{
    GenericVpn: {
        id: 18,
        generic: false,
        deviceId: 2,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.77\",
        tunnelDestIpAddr: \"1.1.1.88\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","collectionId":"1","id":"1-14-79","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Interfaces","dataMode":"raw","description":"Update generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"id\": 204,
        \"mgmtId\": 1,
        \"name\": \"NewBob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": null
    },
    {
        \"id\": 205,
        \"mgmtId\": 2,
        \"name\": \"NewBob2\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Interface/Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"id\": 204,\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"NewBob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": null\n\t},\n\t{\n\t\t\"id\": 205,\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"NewBob2\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","collectionId":"1","id":"1-14-80","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Interfaces","dataMode":"raw","description":"Create generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"mgmtId\": 1,
        \"name\": \"Bob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-PA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    },
    {
        \"mgmtId\": 2,
        \"name\": \"Bob2\",
        \"ip\": \"100.100.45.66\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-BA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"Bob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-PA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"Bob2\",\n\t\t\"ip\": \"100.100.45.66\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-BA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","collectionId":"1","id":"1-14-81","method":"POST"},{"headers":"Accept: application/json\n","name":"Get generic Interfaces","description":"Get generic Interfaces of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/mgmt/1
OUTPUT{
    GenericInterfaces: [
    {
        id: 206,
        mgmtId: 1,
        name: \"newApo3\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    },
    {
        id: 208,
        mgmtId: 1,
        name: \"newApo4\",
        ip: \"100.103.33.34\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"internal\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-82","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Interfaces","description":"Delete all generic Interfaces from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/mgmt/2\n

Response Messages:
200: 11 Generic Interfaces were deleted from mgmtId 2.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-83","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Ignored Interfaces.","dataMode":"raw","description":"Create Ignored Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface
BODY{
    \"IgnoredInterfaces\":
    [
        {
            \"interfaceName\" : \"eth2\",
            \"mgmtId\" : 10,
            \"ip\" : \"0.0.0.0\"
        },
        {
            \"interfaceName\" : \"loopback100\",
            \"mgmtId\" : 10,
            \"ip\" : \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Id 10 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"IgnoredInterfaces\": \n\t[\n\t\t{\n\t\t\t\"interfaceName\" : \"eth2\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"0.0.0.0\"\n\t\t},\n\t\t{\n\t\t\t\"interfaceName\" : \"loopback100\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"34.34.34.34\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface","collectionId":"1","id":"1-14-84","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create manual Interface CustomerTags","dataMode":"raw","description":"Create manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port4\",
            \"customerId\": 2
        },
        {
            \"generic\": false,
            \"deviceId\": 6,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
401: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port4\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 6,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","collectionId":"1","id":"1-14-85","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update manual Interface CustomerTags","dataMode":"raw","description":"Update manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"id\": 73,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port5\",
            \"customerId\": 2
        },
        {
            \"id\": 74,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
401: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"id\": 73,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port5\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"id\": 74,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","collectionId":"1","id":"1-14-86","method":"PUT"},{"headers":"Accept: application/json\n","name":"Delete manual Interface CustomerTag","description":"Delete a manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/66\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: InterfaceCustomer Id 66 not found
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","collectionId":"1","id":"1-14-87","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get manual Interface CustomerTag","description":"Get manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/74
OUTPUT{
    InterfaceCustomerTag: {
        id: 74,
        generic: false,
        deviceId: 5,
        interfaceName: \"port4.1\",
        customerId: 3
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: InterfaceCustomer Id 74 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","collectionId":"1","id":"1-14-88","method":"GET"},{"headers":"Accept: application/json\n","name":"Get manual Interface CustomerTags","description":"Get manual Interface CustomerTags of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/5?generic=false
OUTPUT{
    InterfaceCustomerTags: [
        {
            id: 73,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4\",
            customerId: 2
        },
        {
            id: 74,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4.1\",
            customerId: 3
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","collectionId":"1","id":"1-14-89","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete manual Interface CustomerTags","description":"Delete all manual Interface CustomerTags from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/6?generic=false\n

Response Messages:
200: 2 Interface Customers were deleted from deviceId 6.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","collectionId":"1","id":"1-14-90","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Routes","dataMode":"raw","description":"Create generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"mgmtId\": 1,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"mgmtId\": 2,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","collectionId":"1","id":"1-14-91","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Routes","dataMode":"raw","description":"Update generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"id\": 29,
        \"mgmtId\": 3,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"id\": 30,
        \"mgmtId\": 3,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Interface/Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"id\": 29,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"id\": 30,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","collectionId":"1","id":"1-14-92","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get Cloud Internal Networks","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the internal networks for the specified Cloud management id.
This API requires 'Super admin' privileges.

Parameters:
id: Cloud management id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_internal_networks/20
OUTPUT{
    \"network_list\":
    {
        \"count\": 3,
        \"total\": 3,
        \"network\":
        {
            \"ip\": \"10.27.122.20\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.60\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.4\",
            \"mask\": \"255.255.255.252\"
        }
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for NSX with id ID
401: Device ID specified is not supported
404: The specified device ID was not found
404: The specified device ID was not found in Topology","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_internal_networks/{{id}}","collectionId":"1","id":"1-14-93","method":"GET"},{"headers":"Accept: application/json\n","name":"Synchronize the Topology model","description":"Invoke of the Topology Model Synchronization.
full_sync=false - Builds the topology model from the information stored in the Tufin database.
full_sync=true - Retrieves the current data from devices and builds the topology model.
Default value for full_sync = false.

Parameters:
full_sync: Perform full sync [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize?full_sync=true

Response Messages:
200: The topology synchronization was invoked successfully.
401: Access is denied
500: Error Synchronizing Topology Model","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize","collectionId":"1","id":"1-14-94","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Transparent Firewalls","dataMode":"raw","description":"Create Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback0\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Device Id 23 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback0\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","collectionId":"1","id":"1-14-95","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update Transparent Firewalls","dataMode":"raw","description":"Update Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"id\" : 25,
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback2\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"id\" : 27,
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt2\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Device Id 23 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"id\" : 25,\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"id\" : 27,\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","collectionId":"1","id":"1-14-96","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get topology network interfaces by device","data":[{"value":null,"type":"text","enabled":true,"key":"mgmtId"}],"dataMode":"params","description":"The returned interfaces are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
context: Global MSSP context [optional]
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=1&is_generic=true
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_interfaces","collectionId":"1","id":"1-14-97","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Specific topology cloud","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the topology cloud data for the specified id.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the cloud resides.

Parameters:
id: Cloud id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/48
OUTPUT{
    \"topology_cloud\": {
        \"id\": 48,
        \"name\": \"Cloud 69.70.120.155\",
        \"domain\": 1,
        \"type\": \"NON_JOINED\",
        \"ip\": \"69.70.120.155\"
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/66
OUTPUT{
    \"topology_cloud\": {
        \"id\": 66,
        \"name\": \"Cloud 10.100.10.14\",
        \"domain\": 1,
        \"type\": \"JOINED\",
        \"members\": [
            {
                \"id\": 50,
                \"ip\": \"10.100.6.238\",
                \"name\": \"Cloud 10.100.6.238\"
            },
            {
                \"id\": 73,
                \"ip\": \"10.100.10.14\",
                \"name\": \"Cloud 10.100.10.14\"
            },
            {
                \"id\": 74,
                \"ip\": \"10.100.9.9\",
                \"name\": \"Cloud 10.100.9.9\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: No cloud was found for the provided ID","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","collectionId":"1","id":"1-14-98","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update a cloud","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Modify the name of a topology cloud, and add/remove members of a joined cloud.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain context of the joined cloud, and any members specified in the body.
To change the name of a topology cloud, enter a value in the name field of the body.
To add/remove members of a joined cloud, specify the action and specify the clouds in the members list of the body.
The action is used only if the body contains a members list. If a members list is provided but no actions is specified, then the default action is ‘add’.
When adding cloud members, clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
When removing cloud members, if only zero or one member remains in the joined cloud, it will be deleted from the Interactive Map.

Parameters:
id: cloud id
action: action [optional]
body: Cloud data

Usage Example
URLfor renaming of any cloud - https://192.168.1.1/securetrack/api/topology/clouds/436
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\"
    }
}


Usage Example
URLfor renaming and members updating of a joined cloud - https://192.168.1.1/securetrack/api/topology/clouds/436?action=remove
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
204: Cloud updated successfully
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: Cloud with id ID is a not joined cloud
412: Cloud id: cloudId does not belong to domain: Context
412: Provided clouds don't belongs to the same domain
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud
412: Member cloud with id ID cannot be removed - it is not a member of a joined cloud","folder":"1-14","rawModeData":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"new cloud\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","collectionId":"1","id":"1-14-99","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get Topology Synchronization status","description":"Returns the progress status of the Topology Model Synchronization.



Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize/status

Response Messages:
200: The topology synchronization was invoked successfully.
401: Access is denied
500: Error getting synchronize progress","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize/status","collectionId":"1","id":"1-14-100","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Join Cloud","description":"Delete Join Cloud by Id.

Parameters:
cloudId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/join/clouds/67\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","collectionId":"1","id":"1-14-101","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get Join Cloud","description":"Get Join Cloud by Id.

Parameters:
cloudId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds/67
OUTPUT{
    id: 67,
    name: \"Yami\",
    clouds: [
        1,
        2,
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","collectionId":"1","id":"1-14-102","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic Interface","description":"Get a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/212
OUTPUT{
    GenericInterface: {
        id: 212,
        mgmtId: 1,
        name: \"newApo5\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PAL\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Generic Interface Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","collectionId":"1","id":"1-14-103","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Interface","description":"Delete a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/5\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: Generic Interface Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","collectionId":"1","id":"1-14-104","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Create a joined topology cloud","dataMode":"raw","description":"Create a new topology cloud in the Interactive Map by joining existing clouds together.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
The body must include at least two topology cloud ids that are on a single domain.
If the context parameter is not provided, then the API will use the context id of the first member of the members list in the body.
Clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
If the provided body does not specify a joined cloud name, the newly created topology cloud will be given the name of the first member of the members list in the body.


Parameters:
context: Global MSSP context [optional]
body: Cloud data

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"optional new cloud name\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
201: Joined cloud created successfully
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: You must provide 2 or more clouds
412: Cloud id: cloudId does not belong to domain: Context
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud","folder":"1-14","rawModeData":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"optional new cloud name\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","collectionId":"1","id":"1-14-105","method":"POST"},{"headers":"Accept: application/json\n","name":"Get topology clouds","description":"Returns a list of the topology clouds for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology clouds that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
type: Required clouds type [optional]
name: Cloud name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
OUTPUT{
    \"topology_clouds\": {
        \"count\": 3,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"MEMBER\",
                \"ip\": \"10.100.6.238\"
            },
            {
                \"id\": 66,
                \"name\": \"Cloud 10.100.10.14\",
                \"domain\": 1,
                \"type\": \"JOINED\",
                \"members\": [
                    {
                        \"id\": 50,
                        \"ip\": \"10.100.6.238\",
                        \"name\": \"Cloud 10.100.6.238\"
                    },
                    {
                        \"id\": 73,
                        \"ip\": \"10.100.10.14\",
                        \"name\": \"Cloud 10.100.10.14\"
                    },
                    {
                        \"id\": 74,
                        \"ip\": \"10.100.9.9\",
                        \"name\": \"Cloud 10.100.9.9\"
                    }
                ]
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds?type=non-joined
OUTPUT{
    \"topology_clouds\": {
        \"count\": 2,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"10.100.6.238\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","collectionId":"1","id":"1-14-106","method":"GET"},{"headers":"Accept: application/json\n","name":"Get path for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path?src=29.29.29.1&dst=25.25.25.1&service=Facebook,tcp:80
OUTPUT {
    \"path_calc_results\": {
        \"traffic_allowed\": false,
        \"device_info\": {
            \"id\": \"17\",
            \"name\": \"PA-VM-111.6 (Cluster)\",
            \"type\": \"mgmt\",
            \"vendor\": \"Palo Alto Networks\",
            \"incomingInterfaces\": {
                \"incomingVrf\": \"default\",
                \"ip\": \"29.29.29.1/255.255.255.252\",
                \"name\": \"tunnel.11\"
            },
            \"nextDevices\": {
                \"name\": \"DIRECTLY_CONNECTED\",
                \"routes\": {
                    \"outgoingInterfaceName\": \"ethernet1/5\",
                    \"outgoingVrf\": \"default\",
                    \"routeDestination\": \"25.25.25.1/255.255.255.0\"
                }
            },
            \"bindings\": {
                \"name\": \"\",
                \"rules\": [
                    {
                        \"action\": \"Accept\",
                        \"applications\": \"facebook\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 43,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    },
                    {
                        \"action\": \"Deny\",
                        \"applications\": \"Any\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 62,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    }
                ]
            }
        }
    }
}

","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path","collectionId":"1","id":"1-14-107","method":"GET"},{"name":"Delete generic device from Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete a generic device from the Topology model.
The ID must be for a valid generic device listed in the Topology Model.
If update update_topology = true, then the Topology model will be updated immediately after the device is deleted.
For maximum efficiency, if you are deleting multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.
Default value for update_topology = true.

Parameters:
id: Generic device id
update_topology: Synchronize And Update Topology [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/1

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/10?update_topology=false

Response Messages:
204: Generic Device deleted successfully.
400: Failed to delete generic device with id {}
404: A 'Generic Device' with the specified ID was not found","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","collectionId":"1","id":"1-14-108","method":"DELETE"},{"name":"Update an existing generic device in the Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Modify an existing generic device by uploading a new configuration file and/or specifying a new name.
If name field is specified, the generic device will be renamed.
configuration_file is optional, if provided it must include a valid generic device configuration.
The specified path points to a file in the client machine.
If a generic device name is changed and a new configuration file is not provided, topology will not be synchronized (update_topology flag is ignored).
Default value for update_topology = true.
To save time when there are several consecutive api calls: For the last call, set update_topology = true (for all other calls, update_topology = false).
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
id: Generic device id
body: Generic device to be updated [optional]
configuration_file: Configuration File for generic device [optional]
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices/24

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"new_generic_device_name\"}};type=application/json' -F \"update_topology=false\" https://192.168.1.1/securetrack/api/generic_devices/72

Response Messages:
204: The generic device was updated successfully.
400: A new name or a new configuration file must be indicated in order to update generic device with id {}
400: Failed to update generic device with id {}
404: A 'Generic Device' with the specified ID was not found","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","collectionId":"1","id":"1-14-109","method":"PUT"},{"headers":"Accept: application/json\n","name":"Delete generic Routes","description":"Delete all generic Routes from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/mgmt/2\n

Response Messages:
200: 11 Generic Routes were deleted from mgmtId 2.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-110","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Routes","description":"Get generic Routes of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/mgmt/2
OUTPUT{
    GenericRoutes: [
    {
        id: 27,
        mgmtId: 2,
        destination: \"10.4.4.4\",
        mask: \"255.0.0.0\",
        interfaceName: \"\",
        nextHop: \"AA\",
        nextHopType: \"VR\",
        vrf: \"V102-YO\"
    },
    {
        id: 28,
        mgmtId: 2,
        destination: \"10.4.5.5\",
        mask: \"255.0.0.0\",
        interfaceName: \"eeee\",
        nextHop: \"\",
        nextHopType: \"IP\",
        vrf: \"V101-PA\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-111","method":"GET"},{"headers":"Accept: application/json\n","name":"Get most specific network interfaces from which a host IP is accessible","data":[{"value":null,"type":"text","enabled":true,"key":"host"}],"description":"Parameters:
context: Global MSSP context [optional]
host: IP address of device for a query

Usage Example
https://192.168.1.1/securetrack/api/devices/interfaces/last_hop?host=192.168.1.66
","dataMode":"params","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/interfaces/last_hop","collectionId":"1","id":"1-14-112","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology generic VPN connections","description":"Returns a list of the generic vpn connections in the Topology map, for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology generic vpn connections that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
is_generic: Get generic devices [optional]
device_id: Device id [optional]
name: VPN connection name (accepts '*', '?' as wildcards) [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns
OUTPUT{
    \"generic_vpns\": {
        \"count\": 3,
        \"total\": 3,
        \"generic_vpn\": [
            {
                \"device_id\": 222,
                \"generic\": false,
                \"id\": 3,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.155\",
                \"tunnel_src_ip\": \"84.200.6.1\",
                \"vpn_name\": \"Palo_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns?is_generic=true
OUTPUT{
    \"generic_vpns\": {
        \"count\": 2,
        \"total\": 2,
        \"generic_vpn\": [
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic_vpns{device_id:(/device_id)?}","collectionId":"1","id":"1-14-113","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Specific topology subnet","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the subnet for the specified id, including information regarding attached devices and join candidates.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the subnet resides.

Parameters:
id: Subnet id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets/20
OUTPUT{
    \"subnet\": {
        \"id\": 18,
        \"name\": \"90.0.0.0/24\",
        \"ip\": \"90.0.0.0\",
        \"mask\": \"255.255.255.0\",
        \"attached_devices\": {
            \"attached_device\": [
                {
                    \"is_generic\": false,
                    \"id\": 10,
                    \"name\": \"srx\",
                    \"interface_id\": 4,
                    \"interface_name\": \"eth0\",
                    \"interface_ip\": \"90.0.0.1\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 13,
                    \"name\": \"ZBFW\",
                    \"interface_id\": 5,
                    \"interface_name\": \"eth1\",
                    \"interface_ip\": \"90.0.0.124\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 85,
                    \"name\": \"netscreen\",
                    \"interface_id\": 6,
                    \"interface_name\": \"eth2\",
                    \"interface_ip\": \"90.0.0.50\"
                }
            ]
        },
        \"join_candidates\": {
            \"join_candidate\": {
                \"is_generic\": false,
                \"id\": 72,
                \"name\": \"CP25\",
                \"interface_id\": 14,
                \"interface_name\": \"eth24/1\",
                \"interface_ip\": \"90.0.0.83\"
            }
        }
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for subnet with id ID
404: No subnet was found for the provided ID","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets/{{id}}","collectionId":"1","id":"1-14-114","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get a specific zone pattern entry for a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Get a specific zone pattern entry for a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone entry.
id: Identifier of the zone pattern entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/75/pattern-entries/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entry>
    <id>2</id>    <type>security_group_by_name</type>
    <comment>This is a comment</comment>
    <pattern>WEB</pattern>
    <zone_id>75</zone_id>
    <zone_name>Zone_10_0_0_1</zone_name>
    <domain>
        <address>koko</address>
        <description>bobo</description>
        <id>1</id>
        <name>Default</name>
    </domain>
</pattern_match_entry>


Response Messages:
200: The zone pattern entry was successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified identifier was not found.
404: A zone pattern entry with the specified identifier was not found.","folder":"1-15","rawModeData":"\n\n\t2\tsecurity_group_by_name\n\tThis is a comment\n\tWEB\n\t75\n\tZone_10_0_0_1\n\t\n\t\t
koko
\n\t\tbobo\n\t\t1\n\t\tDefault\n\t
\n
\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries/{{id}}","collectionId":"1","id":"1-15-115","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create a zone pattern entry in a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"}],"dataMode":"raw","description":"Create a zone pattern entry in a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone pattern entry.
body: The zone pattern entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<create_pattern_match_entry>
    <pattern_match_entry>
        <id>1</id>
        <zone_id>2</zone_id>
        <domain>
            <id>1</id>
            <name>Default</name>
        </domain>
        <pattern>WEB</pattern>
        <type>security_group_by_name</type>
        <comment>This is a comment</comment>
    </pattern_match_entry>
</create_pattern_match_entry>


Response Messages:
201: The zone pattern entry was created successfully.
401: User is not permitted to access the specified domain
400: Some of pattern entry parameters were invalid or missing
404: A zone with the specified identifier was not found.","folder":"1-15","rawModeData":"\n\n\t\n\t\t1\n\t\t2\n\t\t\n\t\t\t1\n\t\t\tDefault\n\t\t\n\t\tWEB\n\t\tsecurity_group_by_name\n\t\tThis is a comment\n\t\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries","collectionId":"1","id":"1-15-116","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get all pattern entries for specific zones","dataMode":"raw","description":"Get the list of zone pattern entries for specific zones by identifiers

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the pattern entry results. [optional]
pattern: Filter by pattern string for the zone entry results. [optional]
name: Filter by zone name for the pattern entry results. [optional]
comment: Filter by comment for the pattern entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/1,2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entries_find_result>
    <paging_info>
        <start>0</start>
        <count>2</count>
        <total>2</total>
    </paging_info>
    <pattern_match_entries>
        <pattern_match_entry>
            <id>2</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEB</pattern>
            <zone_id>1</zone_id>
        </pattern_match_entry>
        <pattern_match_entry>
            <id>3</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEo</pattern>
            <zone_id>2</zone_id>
        </pattern_match_entry>
    </pattern_match_entries>
</pattern_match_entries_find_result>


Response Messages:
200: The zone pattern entries were successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-15","rawModeData":"\n\n\t\n\t\t0\n\t\t2\n\t\t2\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEB\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEo\n\t\t\t2\n\t\t\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/pattern-entries","collectionId":"1","id":"1-15-117","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a specific zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get a specific zone entry by ID for a zone.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/123

Response Messages:
200: The zone entry was successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-118","method":"GET"},{"name":"Delete zone entries","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete existing zone entries.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/10

Response Messages:
200: The zone entry was deleted successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-119","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Create a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
body: The zone entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
201: The zone entry was created successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries","collectionId":"1","id":"1-16-120","method":"POST"},{"headers":"Accept: application/json\n","name":"Get entries for a zone","description":"Get the list of zone entries for a zone.

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the zone entry results. [optional]
name: Filter by name for the zone entry results. [optional]
ip: Filter by IP for the zone entry results. [optional]
netmask: Filter by netmask for the zone entry results. [optional]
prefix: Filter by prefix for the zone entry results. [optional]
comment: Filter by comment for the zone entry results. [optional]
group: Filter by device group for the zone entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries

Response Messages:
200: The zone entries were successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/entries","collectionId":"1","id":"1-16-121","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Modify multiple existing zone entries","data":[{"value":null,"type":"text","enabled":true,"key":"zone_ids"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix.
For IPv6 provide IP and prefix only, netmask is not allowed.
new_zone_id is not optional, it may be the same as the present zoneId.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entries.
ids: The ID(s) of the zone entries to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/85,98/entries/120,139
BODY{
\"zone_entries\" : {
        \"zone_entry\": [
            {
                \"id\": 120,
                \"ip\": \"3.3.3.3\",
                \"prefix\": 32,
                \"new_zone_id\": 85
            },
            {
                \"id\": 139,
                \"ip\": \"1b98:c72:1f00:0001::\",
                \"prefix\": \"52\",
                \"new_zone_id\": 98
            }
        ]
}
}


Response Messages:
200: The zone entry was modified successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entries\" : {\n\t\t\"zone_entry\": [\n\t\t\t{\n\t\t\t\t\"id\": 120,\n\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\"prefix\": 32,\n\t\t\t\t\"new_zone_id\": 85\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"id\": 139,\n\t\t\t\t\"ip\": \"1b98:c72:1f00:0001::\",\n\t\t\t\t\"prefix\": \"52\",\n\t\t\t\t\"new_zone_id\": 98\n\t\t\t}\n\t\t]\n}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","collectionId":"1","id":"1-16-122","method":"PUT"},{"headers":"Content-Type: application/json\n","name":"Modify a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.
body: The modified zone entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
200: The zone entry was modified successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-123","method":"PUT"},{"name":"Modify a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_ids"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Modify an existing zone entry.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entry.
ids: The ID(s) of the zone entries to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/entries/10,20

Response Messages:
200: The zone entry was deleted successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","collectionId":"1","id":"1-16-124","method":"DELETE"},{"name":"Add a zone as an ancestor to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"child_id"},{"value":null,"type":"text","enabled":true,"key":"parent_ids"}],"dataMode":"params","description":"Add a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to add ancestors zone(s).
parent_ids: The ID(s) of the zones to add as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was added as an ancestor successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","collectionId":"1","id":"1-17-125","method":"PUT"},{"name":"Remove a zone as an ancestor to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"child_id"},{"value":null,"type":"text","enabled":true,"key":"parent_ids"}],"dataMode":"params","description":"Remove a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to remove ancestors zone(s).
parent_ids: The ID(s) of the zones to remove as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was removed as an ancestor successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","collectionId":"1","id":"1-17-126","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get ancestor zones for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of ancestor zones for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for ancestor zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/123,234/ancestors

Response Messages:
200: The zone ancestors were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/ancestors","collectionId":"1","id":"1-17-127","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create a zone","dataMode":"raw","description":"Create a zone.

Parameters:
context: Global MSSP context. [optional]
body: The zone to add.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <name>DMZ</name>
    <comment>All DMZ addresses</comment>
    <shared>false</shared>
</zone>


Response Messages:
201: The zone was created successfully.
401: User is not permitted to access the specified domain
400: The zone parameters were invalid","folder":"1-17","rawModeData":"\n\n\tDMZ\n\tAll DMZ addresses\n\tfalse\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","collectionId":"1","id":"1-17-128","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all zones","description":"Gets a list of all zones.

Parameters:
context: Global MSSP context. [optional]
name: Filter by zone name for the zone results. [optional]
comment: Filter by zone comment for the zone results. [optional]
imported: List domains that imported zones. [optional]
includeInternet: Include the Internet zone. [optional]
includeImported: Include imported zones. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
200: The zones were retrieved successfully.
401: User is not permitted to access the specified domain","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","collectionId":"1","id":"1-17-129","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","name":"Delete all zones","method":"DELETE","id":"1-17-130","description":"Delete all existing zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
204: All zones were successfully deleted.
401: User is not permitted to access the specified domain","folder":"1-17"},{"headers":"Accept: application/json\n","name":"Get shared zones","description":"Get a list of shared zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/shared

Response Messages:
200: The list of shared zones was retrieved successfully.
401: User is not permitted to access the specified domain","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/shared","collectionId":"1","id":"1-17-131","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/import/{{ids}}","name":"Import a zone","method":"POST","id":"1-17-132","description":"Import a shared zone into the specified domain

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones to import. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/import/10,20

Response Messages:
200: The zone was imported successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17"},{"name":"Delete a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Delete an existing zone.

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zone to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/1,2

Response Messages:
204: The specified zone was successfully deleted.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}","collectionId":"1","id":"1-17-133","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Map network elements to security zones","dataMode":"raw","description":"This API maps each network element in the AccessRequestNetworkListDTO (such as IP address, IP address range, object, or group) to all matching Tufin security zones. If the network element is a group, then each zone also identifies all matching group members. The internet referral object can be included in the list, and will always map to the predefined Internet security zone. If the 'Any' element is included in the list it will map to all zones.
Note: if multi-domain mode is enabled, the API calls only checks zones that are in the “Default” domain.

Parameters:
body: AccessRequestNetworkListDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_zones
BODY<network_objects>
     <network_object xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"ip_network\">
         <network xsi:type=\"raw_network_subnet\">
         <ip>10.8.8.0</ip>
         <mask>255.255.255.0</mask>
         </network>
     </network_object>
</network_objects>


Response Messages:
200: Returns mapping of network elements to security zones
400: Access Request Network List is malformed.
401: Access is denied.","folder":"1-17","rawModeData":"\n\t \n\t\t \n\t\t 10.8.8.0\n\t\t 255.255.255.0\n\t\t \n\t \n","url":"https://{{SecureTrack_IP}}/securetrack/api/security_zones/","collectionId":"1","id":"1-17-134","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Modify a zone","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Modify an existing zone.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <id>2</id>
    <name>DMZ</name>
    <comment>All DMZ hosts</comment>
    <shared>false</shared>
    <internet>false</internet>
    <user_networks>false</user_networks>
    <unassociated_networks>false</unassociated_networks>
</zone>


Response Messages:
204: The specified zone was successfully modified.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
400: The zone parameters were invalid","folder":"1-17","rawModeData":"\n\n\t2\n\tDMZ\n\tAll DMZ hosts\n\tfalse\n\tfalse\n\tfalse\n\tfalse\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","collectionId":"1","id":"1-17-135","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get the zone with the specified ID.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to get.
imported: List domains that imported zones. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2

Response Messages:
200: The zone was retrieved successfully.
401: User is not permitted to access the specified domain
401: A zone with the specified ID does not exist.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","collectionId":"1","id":"1-17-136","method":"GET"},{"headers":"Accept: application/json\n","name":"Get descendant zones for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of zones descended from the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for descendant zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/10,20/descendants

Response Messages:
200: The zone descendants were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/descendants","collectionId":"1","id":"1-17-137","method":"GET"},{"headers":"Accept: application/json\n","name":"Get configuration usages for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of configuration usages for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for configuration dependencies.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/dependencies

Response Messages:
200: The zone dependencies were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/dependencies","collectionId":"1","id":"1-17-138","method":"GET"},{"name":"Remove a zone as an descendants to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"parent_id"},{"value":null,"type":"text","enabled":true,"key":"child_ids"}],"dataMode":"params","description":"Remove a zone(s) as an descendants to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to remove descendant zone(s).
child_ids: The ID(s) of the zone to remove as a descendant.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was removed as an descendant successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","collectionId":"1","id":"1-17-139","method":"DELETE"},{"name":"Add a zone as a descendant to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"parent_id"},{"value":null,"type":"text","enabled":true,"key":"child_ids"}],"dataMode":"params","description":"Add a zone(s) as a descendant to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to add descendant zone(s).
child_ids: The ID(s) of the zones to add as descendants.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was added as an descendant successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","collectionId":"1","id":"1-17-140","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get sub-policies (bindings) by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the subpolicies (bindings) for a given revision.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Revision ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/bindings","collectionId":"1","id":"1-18-141","method":"GET"},{"headers":"Accept: application/json\n","name":"Get list of sub-policies (bindings) with input and/or output interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"supremum_version_id"},{"value":null,"type":"text","enabled":true,"key":"inputInterfaceName"},{"value":null,"type":"text","enabled":true,"key":"outputInterfaceName"}],"dataMode":"params","description":"Retrieve list of bindings of input and/or output interfaces

Parameters:
device_id: The unique identifier of target device
supremum_version_id: The unique identifier of target revision
inputInterfaceName: Input interface name
outputInterfaceName: Output interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/binding_query?supremum_version_id=785&inputInterfaceName=Any&outputInterfaceName=Any
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/binding_query","collectionId":"1","id":"1-18-142","method":"GET"},{"headers":"Accept: application/json\n","name":"Get sub-policies (bindings) by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the subpolicies (bindings) for a given device.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Device ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindings","collectionId":"1","id":"1-18-143","method":"GET"},{"headers":"Accept: application/json\n","name":"Get policies by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of policies defined on a given device ID.
Supported devices: CheckPoint, Panorama Advanced, FortiManager Basic and Advanced, FMC and NSX.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/policies
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/policies","collectionId":"1","id":"1-18-144","method":"GET"},{"headers":"Accept: application/json\n","name":"Get policies by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of policies defined on a given revision ID

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/policies
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/policies","collectionId":"1","id":"1-18-145","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by input and output interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"description":"Parameters:
device_id: The unique identifier of target device
inputInterfaceName: Input interface name [optional]
outputInterfaceName: Output interface name [optional]

Usage Example
https://192.168.1.1/securetrack/api/bindings/2/topology_interfaces?inputInterfaceName=ethernet1/1&outputInterfaceName=ethernet1/2
","dataMode":"params","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/topology_interfaces","collectionId":"1","id":"1-18-146","method":"GET"},{"headers":"Accept: application/json\n","name":"Run Policy Analysis query","data":[{"value":null,"type":"text","enabled":true,"key":"device_ids"},{"value":null,"type":"text","enabled":true,"key":"sources"},{"value":null,"type":"text","enabled":true,"key":"destinations"},{"value":null,"type":"text","enabled":true,"key":"services"}],"description":"Parameters:
device_ids: Device ids
sources: Source list
destinations: Destination list
services: Service list
exclude_any: Exclude any in the specified, comma-separated fields of source, destination or service. For example: exclude_any = destination,service [optional]
action: Action [optional]

Usage Example
https://192.168.1.1/securetrack/api/policy_analysis/query/matching_rules?device_ids=41&sources=33.33.33.0:24,113.113.113.100&destinations=114.1.1.0:24&services=tcp:80&exclude_any=source,destination

Response Messages:
200: Returns request results.
400: Error in request syntax.","dataMode":"params","folder":"1-19","url":"https://{{SecureTrack_IP}}/securetrack/api/policy_analysis/query/matching_rules","collectionId":"1","id":"1-19-147","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Fetches rule documentation for a single rule given by revision ID and rule ID.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the requested rule

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-148","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Modify specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"raw","description":"Modify rule documentation for a single rule identified by revision ID and rule ID.
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If no rule documentation exists for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If rule documentation already exists for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.
Record set entries that are automatically created or calculated, for example automatic mapping to a SecureChange ticket, cannot be modified.
The following fields are automatically calculated, and cannot be modified:
Permissiveness, Violations, Last Hit, Last Modified, Shadowing Status, Certification Status, Certification Date, Certification Expiration Date, Application Name, Application Owner

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the changed rule
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>172</id>
         <ticketCr>789111</ticketCr>
     </record_set>
</rule_documentation>

","folder":"1-20","rawModeData":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 172\n\t\t 789111\n\t \n","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-149","method":"PUT"},{"name":"Delete specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Delete rule documentation for a single rule given by revision ID and rule ID.
If the rule has automatic mapping to a ticket, the record is not deleted.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Rule id

Usage Example
https://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-150","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Modify specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"raw","description":"Modify rule documentation for a single rule given by device ID and rule ID
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If there is no existing rule documentation for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If there is existing rule documentation for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>173</id>
         <ticketCr>789112</ticketCr>
     </record_set>
</rule_documentation>

","folder":"1-20","rawModeData":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 173\n\t\t 789112\n\t \n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-151","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Fetches rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-152","method":"GET"},{"name":"Delete specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Delete rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-153","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get the specific objects or rules identified for the cleanup results","data":[{"value":null,"type":"text","enabled":true,"key":"cleanup_id"}],"description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/instances
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/instances","collectionId":"1","id":"1-21-154","method":"GET"},{"headers":"Accept: application/json\n","name":"Get cleanups results","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/","collectionId":"1","id":"1-21-155","method":"GET"},{"headers":"Accept: application/json\n","name":"Get cleanups by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"code"}],"dataMode":"params","description":"Fetches set of Cleanup calculation results for a device given by ID.
Only fully shadowed rules (cleanup code C01) are supported.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
code: Cleanup category code
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query result allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/cleanups?code=C01
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/cleanups","collectionId":"1","id":"1-21-156","method":"GET"},{"headers":"Accept: application/json\n","name":"Get shadowing rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"shadowed_uids"}],"dataMode":"params","description":"Find shadowing rules for given shadowed rules of a specific device

Parameters:
device_id: Device ID
shadowed_uids: UIDs of shadowed rules separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/31/shadowing_rules?shadowed_uids=78786a0d-b9cc-478e-b7a2-dea953c976c7
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/shadowing_rules","collectionId":"1","id":"1-21-157","method":"GET"},{"headers":"Accept: application/json\n","name":"Get devices in risk results","data":[{"value":null,"type":"text","enabled":true,"key":"risk_id"}],"description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id

Usage Example
https://192.168.1.1/securetrack/api/risk/1/devices
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/devices","collectionId":"1","id":"1-21-158","method":"GET"},{"headers":"Accept: application/json\n","name":"Get risks results","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/","collectionId":"1","id":"1-21-159","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the specific objects or rules identified for the risk results","data":[{"value":null,"type":"text","enabled":true,"key":"risk_id"}],"description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk/1/instances
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/instances","collectionId":"1","id":"1-21-160","method":"GET"},{"headers":"Accept: application/json\n","name":"Get devices in cleanup results","data":[{"value":null,"type":"text","enabled":true,"key":"cleanup_id"}],"description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/devices
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/devices","collectionId":"1","id":"1-21-161","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific revision","data":[{"value":null,"type":"text","enabled":true,"key":"revId"}],"dataMode":"params","description":"Fetches a revision specified by revision Id.
To get revId for this API, use the 'id' property of RevisionDTO that is returned by 'Get revisions by device' or 'Get latest revision by device' APIs

Parameters:
context: Global MSSP context [optional]
revId: Id of fetched revision

Usage Example
https://192.168.1.1/securetrack/api/revisions/785
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revId}}","collectionId":"1","id":"1-22-162","method":"GET"},{"headers":"Accept: application/json\n","name":"Get latest revision by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches latest revision for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/105/latest_revision
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/latest_revision","collectionId":"1","id":"1-22-163","method":"GET"},{"headers":"Accept: application/json\n","name":"Get revisions by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches revisions for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/105/revisions
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/revisions","collectionId":"1","id":"1-22-164","method":"GET"},{"headers":"Accept: application/json\n","name":"Get last hit for a specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"rule_uid"}],"dataMode":"params","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.
The rule_uid is the value from the uid field returned by the /rules API: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Parameters:
device_id: device_id
rule_uid: rule_uid

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find/20/ea9db13e-d058-45c6-a2f0-cd731027c22b
","folder":"1-23","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find/{{device_id}}/{{rule_uid}}","collectionId":"1","id":"1-23-165","method":"GET"},{"headers":"Accept: application/json\n","name":"Get last hits for all rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.

Parameters:
device_id: device id

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find_all/20
","folder":"1-23","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find_all/{{device_id}}","collectionId":"1","id":"1-23-166","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"ruleId"}],"description":"Parameters:
ruleId: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/rules/60
","dataMode":"params","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rules/{{ruleId}}","collectionId":"1","id":"1-24-167","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rule count per device","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API will return a list of all the devices, the devices that has rules that match the search criteria will have rule_count that is bigger than 0

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=ICMP application:facebook

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT{
    \"device_list\":{
        \"device\":[
            {
                \"device_id\":512,
                \"revision_id\":6864,
                \"rule_count\":1
            },
            {
                \"device_id\":59,
                \"revision_id\":543,
                \"rule_count\":0
            }
        ]
    }
}

","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/","collectionId":"1","id":"1-24-168","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the security rules for the specified revision.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.


Parameters:
context: Global MSSP context [optional]
id: Revision id
policyId: Policy id [optional]
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]
with_zb: Include zone-based rules [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]
is_alternate_order: OrderBy alternate order, for display Aci rules by contracts [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?subpolicy_name=layer1&is_global=true
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules","collectionId":"1","id":"1-24-169","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the security rules for the specified device.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.


Parameters:
context: Global MSSP context [optional]
id: Device ID
policyId: Policy ID [optional]
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Show rules grouping criteria. Can be set only to \"bindings\". Output will be grouped by bindings and section header for Check Point devices, ACL for Cisco devices, and Zones for Juniper, Palo Alto, and Fortinet device [optional]
with_zb: Include zone based rules, values can be 'true' or 'false' [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?subpolicy_name=layer1&is_global=true
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules","collectionId":"1","id":"1-24-170","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Returns a list of rules by revision ID, rule IDs and additional criteria

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \\\"documentation\\\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \\\"bindings\\\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16370
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/rules/{{ids}}","collectionId":"1","id":"1-24-171","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/export","name":"Create a CSV file for rules search results","method":"GET","id":"1-24-172","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is : for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API exports the results data as a CSV file in the SecureTrack Reports Repository.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export?search_text=shadowed:true
","folder":"1-24"},{"headers":"Accept: application/json\n","name":"Find rules","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.To get more information regarding objects included in the returned rules (like src_network or dst_network) use their uid, as the objects’ ID might change.
\n By default, if there are less than 3,000 rules - the API will return all the rules.\nIn case there are more than 3,000 rules the API will return an error code 413 with the error message “There are more than 3000 rules, you must use pagination”

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
device_id: Device id
start: The starting rule to include in the returned results [optional]
count: Number of rules to include in the results [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/31?search_text=source:Sales_192.168.2.60 fromzone:sales tozone:External

Usage Example
https://192.168.1.1/securetrack/api/rule_search/20?search_text=Mobile Access hascomment:false

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=web_server&start=0&count=10

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search/59?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT {
    \"rules\":{
        \"count\":1,
        \"total\":1,
        \"rule\":{
            \"@xsi.type\":\"securityRuleDTO\",
            \"id\":21,
            \"cp_uid\":\"\",
            \"uid\":\"{9259f6ee-47a0-4996-a214-ab7edc14a916}\",
            \"order\":2,
            \"binding\":{
                \"default\":true,
                \"policy\":{
                    \"@xsi.type\":\"managementDomainPolicyDTO\",
                    \"id\":2,
                    \"name\":\"Standard\",
                    \"installable_targets\":\"\"
                },
                \"rule_count\":19,
                \"security_rule_count\":19,
                \"uid\":\"{00-FACED0-00}\"
                },
            \"acceleration_breaker\":false,
            \"action\":\"Accept\",
            \"application\":{
                \"id\":4735,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
            },
            \"authentication_rule\":false,
            \"comment\":\"DO NOT DELETE OR EDIT\",
            \"dst_network\":{
                \"id\":39,
                \"display_name\":\"Net_10.110.65.0\",
                \"name\":\"Net_10.110.65.0\"
                \"uid\":\"{1290f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_networks_negated\":false,
            \"dst_service\":{
                \"id\":7420,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
                \"uid\":\"{2904f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_services_negated\":false,
            \"dst_zone\":\"any\",
            \"disabled\":false,
            \"external\":false,
            \"implicit\":false,
            \"dst_zone_any\":true,
            \"src_zone_any\":true,
            \"name\":\"Accept SSHG\",
            \"option\":\"LOG_SESSION\",
            \"documentation\":{
                \"permissiveness_level\":\"LOW\",
                \"shadowed\":\"Not shadowed\",
                \"last_modified\":\"Today\",
                \"last_hit\":\"N/A\",
                \"violations\":\"\"
            },
            \"rule_location\":\"Shared\",
            \"rule_location_display\":\"Shared - Pre Rule\",
            \"rule_number\":2,
            \"rule_type\":\"universal\",
            \"src_zone\":\"any\",
            \"src_network\":{
                \"id\":38,
                \"display_name\":\"Net_10.110.64.0\",
                \"name\":\"Net_10.110.64.0\"
                \"uid\":\"{4934f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"src_networks_negated\":false,
            \"src_services_negated\":false,
            \"track\":{
                \"level\":\"LOG\"
            },
            \"type\":\"rule\",
            \"users\":{
                \"id\":5,
                \"display_name\":\"tufin\\\\regina\",
                \"name\":\"tufin\\\\regina@ldap\"
            }
        }
    }
}


Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid
413: Max supported count is 3000
413: There are more than 3000 rules, you must use pagination","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/{{device_id}}","collectionId":"1","id":"1-24-173","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Returns a list of rules by device ID, rule IDs and additional criteria.
Note: This API retrieves the information from the latest revision.


Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Rule IDs
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16370
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/rules/{{ids}}","collectionId":"1","id":"1-24-174","method":"GET"},{"headers":"Accept: application/json\n","name":"Get services by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of service objects defined in revision given by revision ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric betweenm 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/785/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/services","collectionId":"1","id":"1-25-175","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules containing specified service object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the security rules that contain the specified service object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.
include_groups: You can add \"include_groups\" to find rules that include the service object and rules that include the groups that include the service object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/65078/rules?include_groups=true
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/rules","collectionId":"1","id":"1-25-176","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific service","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of specific service objects defined in revision given by revision ID and specified by their IDs

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/services/959888
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/services/{{ids}}","collectionId":"1","id":"1-25-177","method":"GET"},{"headers":"Accept: application/json\n","name":"Get service groups containing specified service objects","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns groups that contain the specified service objects


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.

Usage Example
https://192.168.1.1/securetrack/api/services/69577/groups
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/groups","collectionId":"1","id":"1-25-178","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific service","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of specific service objects defined in device given by device ID and specified by their IDs.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Service object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/services/959888,959966
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/services/{{ids}}","collectionId":"1","id":"1-25-179","method":"GET"},{"headers":"Accept: application/json\n","name":"Get services by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of service objects defined on device given by device ID.
The default value for get_total is false. For APIF calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric between 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/services","collectionId":"1","id":"1-25-180","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get services objects matching specified criteria","data":[{"value":null,"type":"text","enabled":true,"key":"filter"}],"dataMode":"raw","description":"You can search for service objects where the name or comment fields have a specified text string,
or you can search for service objects that have an Port or protocol that matches,
or you can search for service objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns service objects where the name or comment fields have a specified text string. \n“protocol” filter returns service objects that have a protocol that matches specified IP protocol number.\n“port” filter returns service objects that have a port that matches specified port number.\n “uid“ filter returns service objects with the specified uid.\n If no filter is specified, the “text” filter is used.
device_id: Returns service objects belonging to the specified device_id. [optional]
name: (For “text” filter) You can specify \"name\" to find service objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find service objects with the specified text in the comment field. [optional]
protocol: Specify Protocolto find service objects that have the specified IP Protocol. [optional]
port: Specify Portto find service objects that have the specified Port. [optional]
uid: (for “uid“ filter) Returns service objects with the specified uid. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=protocol&protocol=6&device_id=68

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=port&port=80

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
URLhttps://192.168.1.1/securetrack/api/services/search?filter=text&name=tcp_10
BODY{
    \"services\": {
        \"count\": 1,
        \"total\": 1,
        \"service:\": {
            \"id\": 169197,
            \"name\": \"tcp_10\",
            \"display_name\": \"tcp_10\",
            \"class_name\": \"access_role\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"max\": false,
            \"min\": false,
            \"protocol\": 6,
            \"timeout\": \"\",
            \"type\": \"tcp_service\",
            }
        }
    }
}

","folder":"1-25","rawModeData":"{\n\t\"services\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"service:\": {\n\t\t\t\"id\": 169197,\n\t\t\t\"name\": \"tcp_10\",\n\t\t\t\"display_name\": \"tcp_10\",\n\t\t\t\"class_name\": \"access_role\",\n\t\t\t\"global\": false,\n\t\t\t\"device_id\": 158,\n\t\t\t\"comment\": \"\",\n\t\t\t\"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",\n\t\t\t\"implicit\": false,\n\t\t\t\"max\": false,\n\t\t\t\"min\": false,\n\t\t\t\"protocol\": 6,\n\t\t\t\"timeout\": \"\",\n\t\t\t\"type\": \"tcp_service\",\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/services/search","collectionId":"1","id":"1-25-181","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific time object","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of time objects by revision ID and rule ID

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Rule IDs

Usage Example
https://192.168.1.1/securetrack/api/revisions/7/time_objects/9
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/time_objects/{{ids}}","collectionId":"1","id":"1-26-182","method":"GET"},{"headers":"Accept: application/json\n","name":"Get time objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the time objects used in the specified device.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Starting page for query allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/time_objects
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/time_objects","collectionId":"1","id":"1-26-183","method":"GET"},{"headers":"Accept: application/json\n","name":"Get time objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the time objects used in the specified revision.

Parameters:
context: Global MSSP context [optional]
id: Revision ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/time_objects
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/time_objects","collectionId":"1","id":"1-26-184","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get policy relevance metrics for traffic","dataMode":"raw","description":"The response lists all the relevant security groups, tags, relevant instances, and count of unrelated instances for each Amazon VPC in the specified traffic path.
A relevant security group contains at least one instance including either the source or destination IP address.
An unrelated instance is included in the security group but not part of the specified traffic path.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is used only if MSSP mode is enabled. If MSSP mode is disabled context is ignored.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
body: Relevance metrics request

Usage Example
URLhttps://192.168.1.1/securetrack/api/traffic_policy
BODY{
    \"relevance_metrics\": {
        \"source_ips\": {
            \"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]
        },
        \"dest_ips\": {
            \"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]
        },
        \"targets\": {
            \"target\": [4, 10]
        }
    }
}


Response Messages:
200: Successful
401: Insufficient user permissions
404: Device not found
400: Invalid parameters","folder":"1-27","rawModeData":"{\n\t\"relevance_metrics\": {\n\t\t\"source_ips\": {\n\t\t\t\"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"dest_ips\": {\n\t\t\t\"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"targets\": {\n\t\t\t\"target\": [4, 10]\n\t\t}\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/traffic_policy/","collectionId":"1","id":"1-27-185","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Start a task to calculate violations for an access request","dataMode":"raw","description":"Create a calculation task to find access requests violations.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
body [optional]
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request uses resources from multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/task?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
202: Access request violations task was accepted.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination)
400: No network source were specified.
400: No network destination were specified.
401: Access is denied.
503: Access request violations task was rejected.","folder":"1-28","rawModeData":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task","collectionId":"1","id":"1-28-186","method":"POST"},{"headers":"Accept: application/json\n","name":"Get violation task results","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Get result of access requests violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task results were received.
401: Access is denied.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/result/{{taskId}}","collectionId":"1","id":"1-28-187","method":"GET"},{"name":"Cancel violation task","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Delete an access request violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/task/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Access request violations task has been aborted successfully.
401: Access is denied.
404: Access request violations task was not found.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task/{{taskId}}","collectionId":"1","id":"1-28-188","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get violation task status","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Get access requests violations task status.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task status was received.
401: Access is denied.
404: Access request violations task status was not found.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/status/{{taskId}}","collectionId":"1","id":"1-28-189","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get violations for an access request","dataMode":"raw","description":"Calculate the violations for the given access request.
Note: this API may take a while to complete.
See the asynchronous API /violations/access_request/task as an alternative.

Parameters:
body: AccessRequestListDTO
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request supports multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/sync?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
200: Access request violations were calculated.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination).
401: Access is denied.","folder":"1-28","rawModeData":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/sync","collectionId":"1","id":"1-28-190","method":"POST"},{"name":"Delete alerts by ids","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Delete specified alerts by IDs
To delete multiple alert_ids, use a comma between each ID

Parameters:
context: Delete alerts in the specified domain ID. [optional]
ids: The alert Ids for deletion

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/87

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/86,87,88

Response Messages:
200:
401: Security Policy Alert Ids: :|'alert ids'| don't exist","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{ids}}","collectionId":"1","id":"1-29-191","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get a specific alert","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a specified alert.
If the alert_id does not exist, an error message is returned.

Parameters:
context: MSSP context [optional]
id: The alert Id

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/1

Response Messages:
401: Alert ID does not exist","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","collectionId":"1","id":"1-29-192","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update an alert","dataMode":"raw","description":"Update an alert for unified security policies.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
id: The alert ID for updating [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts/1
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": \"moshe\"
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
204: Alert ID: 'alertId' was updated successfully
404: Alert ID: 'alertId' does not exist
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
401: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain","folder":"1-29","rawModeData":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": \"moshe\"\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","collectionId":"1","id":"1-29-193","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get alerts","data":[{"value":null,"type":"text","enabled":true,"key":"start"},{"value":null,"type":"text","enabled":true,"key":"count"}],"dataMode":"params","description":"Returns a list of all alerts. If an empty list is returned, it implies that there are no configured alerts for that context.
You must set start and count parameters to limit the number of returned alerts.
Start is zero based - to start from the second rule use start=1, to get rules 51-60 use start=50 and count=10.

Parameters:
context: MSSP context [optional]
start: Returns the results beginning with the specified result number
count: Returns the specified number of results

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts?start=10&count=25

Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","collectionId":"1","id":"1-29-194","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Create an alert","dataMode":"raw","description":"Create an alert for unified security policies.
Returns location with the alert id to get the alert.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": \"moshe\"
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
201: Security policy alert id :|'alertId'| , name : 'alertName'
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
401: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain","folder":"1-29","rawModeData":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": \"moshe\"\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","collectionId":"1","id":"1-29-195","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create a cloud tag policy","dataMode":"raw","description":"Create a new cloud tag policy. The policyName field specified in the TagPolicyDTO must be unique. Define the requirements enforced by the cloud tag policy in the requirements field of the TagPolicyDTO. The supported value for the \"requirement_type\" field are \"mandatory_tags\" and \"valid_values\"If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Create policy for the specified domain ID [optional]
body: cloud tag policy DTO [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
BODY {
    \"policy_name\": \"Production-VPC-Tag-Policy\",
    \"policy_description\": \"Instances tags in production\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_financial_tags\",
            \"requirement_severity\": \"HIGH\",
            \"tags\": [
                \"Owner\",
                \"Budget\"
            ]
        },
        {
            \"requirement_type\": \"valid_values\",
            \"requirement_name\": \"budget_valid_values\",
            \"requirement_severity\": \"CRITICAL\",
            \"tag\": \"Budget\",
            \"values\": [
                \"Corporate\",
                \"Dev\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
409: Policy name already exists","folder":"1-30","rawModeData":" {\n\t\"policy_name\": \"Production-VPC-Tag-Policy\",\n\t\"policy_description\": \"Instances tags in production\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_financial_tags\",\n\t\t\t\"requirement_severity\": \"HIGH\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Budget\"\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"requirement_type\": \"valid_values\",\n\t\t\t\"requirement_name\": \"budget_valid_values\",\n\t\t\t\"requirement_severity\": \"CRITICAL\",\n\t\t\t\"tag\": \"Budget\",\n\t\t\t\"values\": [\n\t\t\t\t\"Corporate\",\n\t\t\t\t\"Dev\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","collectionId":"1","id":"1-30-196","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all cloud tag policies","description":"This API returns the details of all the tag policies.

Results are filtered according to user domain permissions and request context. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicy1\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                },
                {
                        \"policy_id\": \"tp-102\",
                        \"policy_name\": \"myPolicy2\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","collectionId":"1","id":"1-30-197","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Replace a cloud tag policy","dataMode":"raw","description":"Replace the cloud tag policy specified by policyID with the new policy attributes.

Use PATCH in order to partially modify a policy. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Replace policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}

","folder":"1-30","rawModeData":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-198","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get cloud tag policy","description":"This API retrieves the details of the cloud tag policy specified by policyId.

User must have admin permissions to the policy affiliated domain. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicyName\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryTagsRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-199","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Modify a cloud tag policy","dataMode":"raw","description":"Partially modify a cloud tag policy by stating the modified attributes. Providing requirements replaces the entire list.

Specifying an empty requirement list is not permitted. Modify some attributes of the cloud tag policy specified by policyID with the attributes provided. If one or more \"requirement\" objects is provided, the exsiting \"requirement\" objects will be deleted and replaced with the new objetcs. Specifying an empty requirement list is not permitted.If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Rename policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found","folder":"1-30","rawModeData":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-200","method":"PATCH"},{"headers":"Accept: application/json\n","name":"Delete cloud tag policy","description":"Delete the cloud tag policy specified by policyId.

If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Delete policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT {
        \"status\": \"OK\",
        \"policy_name\": \"myPolicyName\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-201","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Check if tags are compliant with cloud tag policies","data":[{"value":null,"type":"text","enabled":true,"key":"policy_external_id"}],"dataMode":"raw","description":"Check if the tags of a cloud resource are compliant with the specified cloud tag policy. Specify the tag policy to validate in the TagPolicyViolationsCheckRequestDTO. The tags of a cloud resource are specified as a json object with the attribute 'tags' at the root level. 'tags' attributes can be a list of tag names or a map including both the tag name and value. If no tags are specified or if the tag is specified incorrectly, The compliance check will treat the resource as if it has no tags. If no cloud tag policy violations are found the API returns an empty violations list.

Parameters:
context: Returns results for the specified domain ID [optional]
policy_external_id: Tag policy external identifier
body: Tag policy violation check request

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/violation_check?policy_external_id=policyId
BODY {
    \"type\": \"vm\",
    \"name\": \"CRM-FE\",
    \"os\": \"ubuntu14.4\",
    \"image\": \"AMI-12345\",
    \"tags\": {
        \"Role\": \"webserver\",
        \"Budget\": \"corporate\",
        \"Owner\": \"Steve.Smith\"
    }
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found","folder":"1-30","rawModeData":" {\n\t\"type\": \"vm\",\n\t\"name\": \"CRM-FE\",\n\t\"os\": \"ubuntu14.4\",\n\t\"image\": \"AMI-12345\",\n\t\"tags\": {\n\t\t\"Role\": \"webserver\",\n\t\t\"Budget\": \"corporate\",\n\t\t\"Owner\": \"Steve.Smith\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/violation_check/","collectionId":"1","id":"1-30-202","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all cloud tag policy violations for a VPC","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"severity"}],"dataMode":"params","description":"Retrieve all cloud tag policy violations for the specified VPC and severity level.

Parameters:
context: Global MSSP context. [optional]
deviceId: The device ID for which to get violations
severity: Return only violations of this severity
resourceId: The id of the VM instance [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses \"count=100\". [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tag_violations?deviceId=123&severity=CRITICAL
OUTPUT<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<tag_policy_device_violations>
    <violating_resources_count>2</violating_resources_count>
    <device_name>Amazon Test VPC </device_name>
    <severity>critical</severity>
    <violating_resources>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Name' value 'email server' is not valid. Valid values are [R&D, HR]</violation_message>
                    <policy_id>tp-100</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>validValue_constraint2</requirement_name>
                    <requirement_severity>high</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"valid_values\">
                        <tag>Name</tag>
                        <valid_values>
                            <valid_value>R&D</valid_value>
                            <valid_value>HR</valid_value>
                        </valid_values>
                        <invalid_value>email server</invalid_value>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-abc12345</resource_id>
            <resource_name>email server</resource_name>
        </violating_resource>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Application' is missing</violation_message>
                    <policy_id>tp-105</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>mandatory_constraint1</requirement_name>
                    <requirement_severity>critical</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"mandatory_tags\">
                        <missing_tag>Application</missing_tag>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-12345678</resource_id>
            <resource_name>Violations tests server</resource_name>
        </violating_resource>
    </violating_resources>
</tag_policy_device_violations>


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: A device with the specified ID was not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/tag_violations/","collectionId":"1","id":"1-30-203","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete an exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Delete the specific unified security policy exceptions

Parameters:
exceptionId: The ID of the exception to delete.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
404: The security policy with the specified ID does not exist
401: User not permitted to access the specified domain.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","collectionId":"1","id":"1-31-204","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get a specific exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Gets a specific exception for unified security policies.

Parameters:
exceptionId: The ID of the exception to get.
context: Global MSSP context [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
401: User not permitted to access the specified domain
404: A security policy exception with the specified ID was not found.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","collectionId":"1","id":"1-31-205","method":"GET"},{"headers":"Accept: application/json\n","name":"Get matching rules task status","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task status was received.
401: User not permitted to Security policy exceptions.
404: Matching rules task status was not found.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/status/{{taskId}}","collectionId":"1","id":"1-31-206","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create an exception","dataMode":"raw","description":"Create an exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/exceptions
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<security_policy_exception>
    <approved_by>admin</approved_by>
    <created_by>st_user</created_by>
    <creation_date>2015-01-01</creation_date>
    <description>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</description>
    <exempted_traffic_list>
        <exempted_traffic>
            <comment>Creating USP exception for ticket 123</comment>
            <dest_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.2</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </dest_network_collection>
            <security_requirements>
                <zone_to_zone_security_requirement>
                    <from_zone>LAN</from_zone>
                    <policy_name>corporate security policy</policy_name>
                    <to_zone>DMZ</to_zone>
                </zone_to_zone_security_requirement>
            </security_requirements>
            <service_collection>
                <service_items>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"custom\">
                        <port>4321</port>
                        <protocol>tcp</protocol>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"device_service\">
                        <mgmt_id>1</mgmt_id>
                        <service_uid>{5aa1c104-bd4d-4635-a281-b3a5442639ba}</service_uid>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"predefined\">
                        <predefined_service_name>http</predefined_service_name>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"range_service\">
                        <minProtocol>10</minProtocol>
                        <maxProtocol>20</maxProtocol>
                    </service_item>
                </service_items>
            </service_collection>
            <source_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.1</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </source_network_collection>
        </exempted_traffic>
    </exempted_traffic_list>
    <expiration_date>2025-01-01</expiration_date>
    <name>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</name>
    <requested_by>admin</requested_by>
    <ticket_id>123</ticket_id>
</security_policy_exception>


Response Messages:
400: The specified network item is not valid.
400: The specified zone name does not exist.
400: The security policy with the specified name does not exist
400: The security policy 'created by' user is not valid.
400: The security policy with the specified name already exists.
401: User not permitted to access the specified domain.","folder":"1-31","rawModeData":"\n\n\tadmin\n\tst_user\n\t2015-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\t\n\t\t\n\t\t\tCreating USP exception for ticket 123\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.2\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tLAN\n\t\t\t\t\tcorporate security policy\n\t\t\t\t\tDMZ\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4321\n\t\t\t\t\t\ttcp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t1\n\t\t\t\t\t\t{5aa1c104-bd4d-4635-a281-b3a5442639ba}\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\thttp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t10\n\t\t\t\t\t\t20\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.1\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t2025-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\tadmin\n\t123\n","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","collectionId":"1","id":"1-31-207","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all exceptions","description":"Gets a list of all unified security policy exceptions.

Parameters:
context: Global MSSP context [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions

Response Messages:
401: User not permitted to access the specified domain","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","collectionId":"1","id":"1-31-208","method":"GET"},{"name":"Start a task to calculate matching rules for an exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Create a calculation task to find matching rules.
The results will be on the relevant devices for each access.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
exceptionId: Security policy Exception ID on which to run the API.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/1/matching_rules/start

Response Messages:
401: User not permitted to Security policy exceptions.
404: A security policy exception with the specified ID was not found.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}/matching_rules/start","collectionId":"1","id":"1-31-209","method":"POST"},{"headers":"Accept: application/json\n","name":"Get matching rules task results","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task results were received.
401: User not permitted to Security policy exceptions.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/result/{{taskId}}","collectionId":"1","id":"1-31-210","method":"GET"},{"name":"Cancel Matching rules task","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Matching rules task has been aborted successfully.
401: User not permitted to Security policy exceptions.
404: Matching rules task was not found.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/{{taskId}}","collectionId":"1","id":"1-31-211","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Set manual device mapping","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"raw","description":"Add or remove a zone on a device interface

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID
body: InterfacesManualMappingsDTO

Usage Example
URLhttps://127.0.0.1/securetrack/api/security_policies/10/manual_mapping
BODY<interfaces_manual_mappings>
<interface_manual_mapping>
<interface_name>Vlan_30</interface_name>
<zones_user_actions>
<zone_user_action>
<zoneId>10</zoneId>
<action>add</action>
</zone_user_action>
</zones_user_actions>
</interface_manual_mapping>
</interfaces_manual_mappings>


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Not found error
404: User action not valid (only add/remove)
404: No interface with name for device with id
404: No zone with id
404: No revision for device with id
404: No device with ID
404: Access denied for device with ID
404: InterfacesManualMappingsDTO is empty
404: Error on updating security_policy_interface_zone_mapping_user_action table for device with ID","folder":"1-32","rawModeData":"\n \n Vlan_30\n \n \n 10\n add\n \n \n \n\n ","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/manual_mapping","collectionId":"1","id":"1-32-212","method":"POST"},{"name":"Delete unified security policy","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete a Security Policy Matrix

Parameters:
context: Returns results for the specified domain ID. [optional]
id: The unique identifier of the security policy matrix to delete

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1
","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}","collectionId":"1","id":"1-32-213","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get global unified security policies","description":"Fetches the global security zone matrices defined under Unified Security Policy.



Usage Example
https://192.168.1.1/securetrack/api/security_policies/global

Response Messages:
401: User not permitted to access global security policies","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/global","collectionId":"1","id":"1-32-214","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}/export","name":"Get unified security policy as CSV","method":"GET","id":"1-32-215","description":"Exports a Security Policy in CSV format

Parameters:
context: Returns results for the specified domain ID. [optional]
id: ID of the security policy. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1/export

Response Messages:
401: User not permitted to access the specified domain
404: Security Policy does not exist","folder":"1-32"},{"headers":"Accept: application/json\n","name":"Get unified security policies","description":"Fetches the security zone matrices defined under Unified Security Policy.

Parameters:
context: Returns results for the specified domain ID. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies

Response Messages:
401: User not permitted to access the specified domain","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/","collectionId":"1","id":"1-32-216","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the amount of violating rules for the specified device.","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: The device ID for which to get violations.

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/count

Response Messages:
200: The violation count was successfully retrieved
404: Device with id: <deviceId> doesn't exist","dataMode":"params","folder":"1-33","url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/count","collectionId":"1","id":"1-33-217","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the violating rules for the specified device.","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"severity"},{"value":null,"type":"text","enabled":true,"key":"type"}],"dataMode":"params","description":"policyName is supported for management devices running in Advanced management mode.

Parameters:
deviceId: The device ID for which to get violations
policyName: Return only violations that match this policy [optional]
severity: Return only violations of this severity
type: Return only violations of this type

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/device_violations?policy=policy_name&type=SECURITY_POLICY&severity=MEDIUM

Response Messages:
200: The violations were successfully retrieved
400: The specified value for the violation severity is invalid
400: The specified value for the violation type is invalid
400: You cannot specify a policyName because the device is not running in Advanced management mode
404: A device with the specified ID was not found
404: A policy with the specified policyName was not found for this device","folder":"1-33","url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/device_violations","collectionId":"1","id":"1-33-218","method":"GET"}],"order":[],"name":"Tufin Tufin SecureTrack R20-1-GA","id":"1","description":"Tufin Orchestration Suite - Tufin SecureTrack APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securetrack/apidoc"} \ No newline at end of file diff --git a/Postman Format v1/R20-1 postman collection/tufin.postman_environment b/Postman Format v1/R20-1 postman collection/tufin.postman_environment new file mode 100644 index 0000000..c031d2b --- /dev/null +++ b/Postman Format v1/R20-1 postman collection/tufin.postman_environment @@ -0,0 +1 @@ +{"name":"Tufin environment","values":[{"type":"text","key":"SecureApp_IP"},{"type":"text","key":"SecureChange_IP"},{"type":"text","key":"SecureTrack_IP"},{"type":"text","key":"applicationId"},{"type":"text","key":"applicationInterfaceId"},{"type":"text","key":"application_id"},{"type":"text","key":"application_pack_id"},{"type":"text","key":"assigneeId"},{"type":"text","key":"child_id"},{"type":"text","key":"child_ids"},{"type":"text","key":"cleanup_id"},{"type":"text","key":"cloudId"},{"type":"text","key":"cloud_id"},{"type":"text","key":"connectionId"},{"type":"text","key":"connectionInterfaceId"},{"type":"text","key":"connectionToApplicationId"},{"type":"text","key":"connection_id"},{"type":"text","key":"connection_to_application_pack_id"},{"type":"text","key":"customer_id"},{"type":"text","key":"deviceId"},{"type":"text","key":"device_id"},{"type":"text","key":"domainId"},{"type":"text","key":"exceptionId"},{"type":"text","key":"fieldId"},{"type":"text","key":"id"},{"type":"text","key":"ids"},{"type":"text","key":"inId"},{"type":"text","key":"instructionId"},{"type":"text","key":"interfaceCustomerId"},{"type":"text","key":"layer2DataId"},{"type":"text","key":"managementId"},{"type":"text","key":"mgmtId"},{"type":"text","key":"parent_id"},{"type":"text","key":"parent_ids"},{"type":"text","key":"policyId"},{"type":"text","key":"requestId"},{"type":"text","key":"revId"},{"type":"text","key":"revision_id"},{"type":"text","key":"risk_id"},{"type":"text","key":"routeId"},{"type":"text","key":"ruleId"},{"type":"text","key":"rule_id"},{"type":"text","key":"rule_uid"},{"type":"text","key":"serverId"},{"type":"text","key":"serviceId"},{"type":"text","key":"sourceApplicationId"},{"type":"text","key":"stepId"},{"type":"text","key":"tag_id"},{"type":"text","key":"targetApplicationId"},{"type":"text","key":"taskId"},{"type":"text","key":"task_id"},{"type":"text","key":"task_uid"},{"type":"text","key":"toStepId"},{"type":"text","key":"uid"},{"type":"text","key":"userId"},{"type":"text","key":"vpnId"},{"type":"text","key":"zone_id"},{"type":"text","key":"zone_ids"}]} \ No newline at end of file diff --git a/Postman Format v1/R20-2 postman collection/securechangeworkflow_R20-2-HF2.json b/Postman Format v1/R20-2 postman collection/securechangeworkflow_R20-2-HF2.json new file mode 100644 index 0000000..3a0cf83 --- /dev/null +++ b/Postman Format v1/R20-2 postman collection/securechangeworkflow_R20-2-HF2.json @@ -0,0 +1 @@ +{"folders":[{"order":["2-1-1","2-1-2","2-1-3","2-1-4","2-1-5"],"collectionId":"2","name":"Access Portal","hasRequests":true,"id":"2-1"},{"order":["2-2-6","2-2-7","2-2-8","2-2-9","2-2-10","2-2-11","2-2-12","2-2-13"],"collectionId":"2","name":"Application Connections","hasRequests":true,"id":"2-2"},{"order":["2-3-14"],"collectionId":"2","name":"Application Identities","hasRequests":true,"id":"2-3"},{"order":["2-4-15","2-4-16","2-4-17","2-4-18","2-4-19","2-4-20","2-4-21","2-4-22","2-4-23","2-4-24","2-4-25","2-4-26","2-4-27","2-4-28","2-4-29"],"collectionId":"2","name":"Application Interfaces","hasRequests":true,"id":"2-4"},{"order":["2-5-30","2-5-31","2-5-32","2-5-33","2-5-34"],"collectionId":"2","name":"Application Migration","hasRequests":true,"id":"2-5"},{"order":["2-6-35","2-6-36","2-6-37","2-6-38","2-6-39","2-6-40","2-6-41","2-6-42","2-6-43","2-6-44","2-6-45","2-6-46","2-6-47","2-6-48","2-6-49","2-6-50","2-6-51","2-6-52"],"collectionId":"2","name":"Application Packs","hasRequests":true,"id":"2-6"},{"order":["2-7-53"],"collectionId":"2","name":"Application Pending Changes","hasRequests":true,"id":"2-7"},{"order":["2-8-54","2-8-55"],"collectionId":"2","name":"Application Servers (across all applications)","hasRequests":true,"id":"2-8"},{"order":["2-9-56","2-9-57","2-9-58","2-9-59","2-9-60","2-9-61","2-9-62","2-9-63"],"collectionId":"2","name":"Application Servers (by application)","hasRequests":true,"id":"2-9"},{"order":["2-10-64","2-10-65","2-10-66","2-10-67","2-10-68","2-10-69"],"collectionId":"2","name":"Application Services (global)","hasRequests":true,"id":"2-10"},{"order":["2-11-70","2-11-71","2-11-72","2-11-73","2-11-74"],"collectionId":"2","name":"Application Services (local)","hasRequests":true,"id":"2-11"},{"order":["2-12-75","2-12-76","2-12-77","2-12-78"],"collectionId":"2","name":"Application Users","hasRequests":true,"id":"2-12"},{"order":["2-13-79","2-13-80","2-13-81","2-13-82","2-13-83","2-13-84","2-13-85","2-13-86","2-13-87","2-13-88","2-13-89"],"collectionId":"2","name":"Applications","hasRequests":true,"id":"2-13"},{"order":["2-14-90","2-14-91","2-14-92"],"collectionId":"2","name":"Cloud Console","hasRequests":true,"id":"2-14"},{"order":["2-15-93","2-15-94","2-15-95","2-15-96","2-15-97","2-15-98","2-15-99"],"collectionId":"2","name":"Customers","hasRequests":true,"id":"2-15"},{"order":["2-16-100","2-16-101","2-16-102"],"collectionId":"2","name":"Domains","hasRequests":true,"id":"2-16"},{"order":["2-17-103"],"collectionId":"2","name":"Load Balancers","hasRequests":true,"id":"2-17"},{"order":["2-18-104"],"collectionId":"2","name":"Rule Recertification","hasRequests":true,"id":"2-18"},{"order":["2-19-105","2-19-106","2-19-107","2-19-108"],"collectionId":"2","name":"SecureChange Devices","hasRequests":true,"id":"2-19"},{"order":["2-20-109","2-20-110","2-20-111","2-20-112","2-20-113","2-20-114"],"collectionId":"2","name":"Server Decommissioning","hasRequests":true,"id":"2-20"},{"order":["2-21-115","2-21-116"],"collectionId":"2","name":"System Configuration","hasRequests":true,"id":"2-21"},{"order":["2-22-117","2-22-118","2-22-119","2-22-120","2-22-121","2-22-122","2-22-123"],"collectionId":"2","name":"System Users","hasRequests":true,"id":"2-22"},{"order":["2-23-124","2-23-125","2-23-126","2-23-127","2-23-128","2-23-129","2-23-130","2-23-131"],"collectionId":"2","name":"Ticket Lifecycle","hasRequests":true,"id":"2-23"},{"order":["2-24-132","2-24-133","2-24-134","2-24-135","2-24-136","2-24-137","2-24-138","2-24-139","2-24-140","2-24-141","2-24-142","2-24-143","2-24-144","2-24-145","2-24-146","2-24-147","2-24-148","2-24-149","2-24-150","2-24-151","2-24-152","2-24-153","2-24-154","2-24-155","2-24-156","2-24-157","2-24-158"],"collectionId":"2","name":"Tickets","hasRequests":true,"id":"2-24"}],"requests":[{"headers":"Accept: application/json\n","name":"Retrieve existing application access requests","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-1","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-1","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create application access request","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_request>
    <server_group_id>1</server_group_id>
    <server_ip>1.1.1.1</server_ip>
    <comment>Request to join the WebServers server group</comment>
</application_access_request>


Response Messages:
201: Application access request was submitted.
400: The application was already deleted.
400: Server id cannot be empty.
400: Hostname or IP cannot be empty.
400: The provided server does not exist in application.
400: The provided server is not allowed to access.
400: Request already created
400: Requester cannot be null
400: Group cannot be empty
400: Invalid ip
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-1","rawModeData":"\n\t1\n\t1.1.1.1\n\tRequest to join the WebServers server group\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-2","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update application access requests","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
body: application access requests

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_requests>
    <application_access_request>
        <id>1</id>
        <action>APPROVE</action>
    </application_access_request>
    <application_access_request>
        <id>2</id>
        <action>REJECT</action>
    </application_access_request>
</application_access_requests>


Response Messages:
200: Application access requests were updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-1","rawModeData":"\n\t\n\t\t1\n\t\tAPPROVE\n\t\n\t\n\t\t2\n\t\tREJECT\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-3","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update an application access request","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"requestId"}],"dataMode":"raw","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1
BODY<application_access_request>
    <action>APPROVE</action>
</application_access_request>


Response Messages:
200: Application access request was updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-1","rawModeData":"\n\tAPPROVE\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","collectionId":"2","id":"2-1-4","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application access request by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"requestId"}],"description":"Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Access request with id ID was not found in application with id ID","dataMode":"params","folder":"2-1","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","collectionId":"2","id":"2-1-5","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections, with extended resources information","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]
start: Return results starting only from the specified index; 0-based index; default value = 0 [optional]
count: Return the specified number of results. Returns all results if no value specified [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name&start=50&count=100

Response Messages:
400: Start value cannot be a negative number.
400: Count value must be greater than 0.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied.
404: There is no application with the specified ID.
404: There are no connections with the name NAME.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_extended","collectionId":"2","id":"2-2-6","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create a ticket to repair a connection","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_id"}],"description":"Parameters:
application_id: The application ID
connection_id: The connection ID
body: Ticket

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/2/repair
BODY<ticket>
    <subject>Repair connection 2</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <workflow>
        <name>Workflow with topology</name>
    </workflow>
    <steps>
        <step>
            <name>Open request</name>
            <tasks>
                <task>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                            <name>Business Justification</name>
                            <text>I need access to ftp </text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                            <name>Project Number</name>
                            <text>CR124560</text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                            <name>Hyperlink</name>
                            <url>http://192.168.1.1/ticket</url>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                            <name>Change Window</name>
                            <selection>Monday</selection>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                            <name>manager email</name>
                            <text>manager@tufin.com</text>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Response Messages:
201: Ticket was created.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set.
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: Expiration field is required.
400: Submit ticket enabled only with the first step.
400: First step can be only with one task.
400: The specified workflow does not contain an access request field in the first step.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
403: Logged in user: NAME do not have permission to perform on behalf actions.
403: You are not a participant in the first step of this workflow.
403: Access is denied.
403: To create a ticket you must purchase a valid SecureChange license.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Cannot create a ticket to repair this connection because the connection status is not disconnected.
403: Cannot create a ticket to repair this connection because the connection was edited but a ticket has not been created yet.
403: Cannot create a ticket to repair this connection because there are other open tickets for an application that includes this connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\tRepair connection 2\n\tu1\n\tNormal\n\t\n\t\tWorkflow with topology\n\t\n\t\n\t\t\n\t\t\tOpen request\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBusiness Justification\n\t\t\t\t\t\t\tI need access to ftp \n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tProject Number\n\t\t\t\t\t\t\tCR124560\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tHyperlink\n\t\t\t\t\t\t\thttp://192.168.1.1/ticket\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tChange Window\n\t\t\t\t\t\t\tMonday\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tmanager email\n\t\t\t\t\t\t\tmanager@tufin.com\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connections/{{connection_id}}/repair","collectionId":"2","id":"2-2-7","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-8","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update a connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection
body: Connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections/1
BODY <connection>
     <name>Connection A</name>
     <comment>Connection A comment</comment>
     <sources>
         <source>
             <id>2</id>
         </source>
         <source>
             <id>3</id>
         </source>
     </sources>
     <services>
         <service>
             <id>1</id>
         </service>
     </services>
     <destinations>
         <destination>
             <id>1</id>
         </destination>
     </destinations>
</connection>


Response Messages:
200: Connection was modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application that contains the server ID
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":" \n\t Connection A\n\t Connection A comment\n\t \n\t\t \n\t\t\t 2\n\t\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n ","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-9","method":"PUT"},{"name":"Delete connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
200: Connection was deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-10","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <id>1</id>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <id>2</id>
         <name>Connection B</name>
     </connection>
     <connection>
         <id>3</id>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application that contains the server ID
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\t \n\t\t 1\n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t 2\n\t\t Connection B\n\t \n\t \n\t\t 3\n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-11","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections?name=Connection Name

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no connections with the name NAME.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-12","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: The list of the connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <name>Connection B</name>
     </connection>
     <connection>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were created.
201: Connection was created.
400: There are no items to add.
400: You cannot add to application NAME because it was decommissioned.
400: Connection name already exists.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\t \n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t Connection B\n\t \n\t \n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-13","method":"POST"},{"headers":"Accept: application/json\n","name":"Fetches application identities","description":"Fetches the list of pre-defined application identities (like facebook) that can be used in a connection.

Parameters:
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities?name=facebook

Response Messages:
404: There are no application identities with the name NAME.
403: Access is denied.","folder":"2-3","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/application_identities","collectionId":"2","id":"2-3-14","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing interface connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
name: The name of the interface connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections?name=Connection 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no connection interfaces with the name NAME.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","collectionId":"2","id":"2-4-15","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create interface connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
body: The interface connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections
BODY<interface_connections>
    <interface_connection>
        <name>Connection 1</name>
        <sources>
            <source>
                <id>3</id>
            </source>
        </sources>
        <services>
            <service>
                <id>3</id>
            </service>
            <service>
                <id>Facebook</id>
            </service>
        </services>
        <comment>New connection</comment>
    </interface_connection>
</interface_connections>


Response Messages:
200: Interface connections were created.
201: Interface connection was created.
400: There are no items to add.
400: Cannot create interface connection without a name.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
403: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\t\n\t\tConnection 1\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\t\n\t\t\t\tFacebook\n\t\t\t\n\t\t\n\t\tNew connection\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","collectionId":"2","id":"2-4-16","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve an existing interface connection by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-17","method":"GET"},{"name":"Delete interface connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
200: Interface connection was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-18","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update an interface connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection
body: The interface connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1
BODY<interface_connection>
    <name>Updated name</name>
    <sources>
        <source>
            <id>19</id>
        </source>
    </sources>
    <services>
        <service>
            <id>9</id>
        </service>
    </services>
    <comment>Updated connection</comment>
</interface_connection>


Response Messages:
200: Interface connection was modified.
400: Interface connection name cannot be empty.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
403: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tUpdated name\n\t\n\t\t\n\t\t\t19\n\t\t\n\t\n\t\n\t\t\n\t\t\t9\n\t\t\n\t\n\tUpdated connection\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-19","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application interface by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-20","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"dataMode":"raw","description":"Update the application interface properties. If is_published is set to true, the application interface is published for use by other users.

Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of The application interface
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1
BODY<application_interface>
    <name>updated name</name>
    <comment>Updated application interface</comment>
    <is_published>true</is_published>
</application_interface>


Response Messages:
200: Application interface was modified.
400: Application interface is not complete for publish.
400: Name cannot be empty.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","folder":"2-4","rawModeData":"\n\tupdated name\n\tUpdated application interface\n\ttrue\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-21","method":"PUT"},{"name":"Delete application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
200: Application interface was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-22","method":"DELETE"},{"name":"Delete connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
200: Connection to application was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-23","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update a connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1
BODY<connection_to_application>
    <name>Updated name</name>
    <comment>Updated connection to application</comment>
    <servers>
        <server>
            <id>4</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
200: Connection to application was modified.
400: Name cannot be empty.
400: Name already exists.
400: Reference to source/destination with ID is invalid.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tUpdated name\n\tUpdated connection to application\n\t\n\t\t\n\t\t\t4\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-24","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection to application by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-25","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection to application [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications?name=Connection to Application 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","collectionId":"2","id":"2-4-26","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"Create a connection from this application to an application interface.

Parameters:
applicationId: The unique identifier of the application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications
BODY<connection_to_application>
    <name>Connection to Application 1</name>
    <comment>New connection to application</comment>
    <application_interface_id>1</application_interface_id>
    <servers>
        <server>
            <id>3</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
201: Connection to application was created.
400: You cannot add to application NAME because it was decommissioned.
400: The selected interface cannot be used more than once in the application.
400: Name cannot be empty.
400: Cannot create from local interface.
400: ApplicationInterface didn't got published.
400: Name already exists.
400: Cannot create connection to application without servers, there should be at least one server.
400: Reference to source/destination with ID is invalid.
400: You can use only interface from the same customer.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found.","folder":"2-4","rawModeData":"\n\tConnection to Application 1\n\tNew connection to application\n\t1\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","collectionId":"2","id":"2-4-27","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Create application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces
BODY<application_interface>
    <name>Interface to Application 1</name>
    <comment>New application interface</comment>
</application_interface>


Response Messages:
201: Application interface was created.
400: You cannot add to application NAME because it was decommissioned.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tInterface to Application 1\n\tNew application interface\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","collectionId":"2","id":"2-4-28","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing application interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"params","description":"To improve response time, set 'calculateIsPublished = false' to avoid calculating 'is_published'.

Parameters:
applicationId: The unique identifier of the application
name: The name of the application interface [optional]
calculateIsPublished: Should calculate is_published value [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces?name=Interface to Application 1

Response Messages:
400: There is no application with the specified ID.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no application interfaces with the name NAME.","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","collectionId":"2","id":"2-4-29","method":"GET"},{"name":"Copy application servers and connections to another application.","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"params","description":"This API can be used to:
1. Create applications based on a blueprint (template).
2. Copy applications between environments (dev, test, prod).
3. Migrate applications between data-centers.

Before migrating make sure to map servers and connections to applications (if any exist).\nThis migration uses the configuration specified in the other API calls.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2

Response Messages:
200: Application was migrated.
400: Cannot migrate a decommissioned application.
400: Cannot migrate to a decommissioned application.
400: Cannot migrate an application to itself.
400: Cannot edit target DEVICE application.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
400: The source application has no connections to migrate.
409: You cannot migrate the application because not all servers are mapped.
409: You cannot migrate the application because not all connections to application are mapped.
409: You cannot migrate the application because one of the interfaces in the original application has been changed and has not been published.","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}","collectionId":"2","id":"2-5-30","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve server mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
search_servers_type: Search server type [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping?search_servers_type=EXTERNAL

Response Messages:
400: Search migrated servers type parameter must be either internal, external or both.
400: Cannot get mappings between application to itself.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application with ID
403: You do not have permissions to edit this application.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","collectionId":"2","id":"2-5-31","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update server mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"raw","description":"Use id=-1 for target_network_object if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The server mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping
BODY<servers_mapping>
    <server_mapping>
        <source_network_object>
            <id>3</id>
        </source_network_object>
        <target_network_object>
            <id>4</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>5</id>
        </source_network_object>
        <target_network_object>
            <id>-1</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>6</id>
        </source_network_object>
    </server_mapping>
</servers_mapping>


Response Messages:
200: Server mappings were modified.
400: Source network object cannot be empty.
400: Source network object is not valid
400: Target network object is not valid
400: Source and target network objects must be internal or external both.
400: Cannot use DEVICE application resources as external network objects.
400: Source network object with ID must be used by any connection.
400: Cannot remove mapping of network object with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map to ANY network object.
400: Cannot map Internet network object.
400: Cannot map to Internet network object.
400: Target network object ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found.","folder":"2-5","rawModeData":"\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t6\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","collectionId":"2","id":"2-5-32","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Update connection to application mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"raw","description":"Use id=-1 for target_application_interface if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The interface instance mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping
BODY<connections_to_applications_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>1</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>4</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>2</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>-1</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>3</id>
        </source_connection_to_application>
    </connection_to_application_mapping>
</connections_to_applications_mapping>


Response Messages:
200: Connection to application mappings were modified.
400: Source interface instance cannot be empty.
400: Source interface instance object is not valid
400: Target application interface is not valid
400: Connection to application with ID: ID was not found.
400: Interface with ID: ID was not found.
400: Cannot remove mapping of instance with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map instance to interface with ID ID because the interface exists in target application.
400: Cannot map to duplicate application interfaces
400: Application interface didn't got published
400: Connection to application with id: ID must used by source application
400: You cannot map connection to application ID, because it is contained in a connection to application pack.
400: Application interface ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-5","rawModeData":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","collectionId":"2","id":"2-5-33","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve connection to application mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping

Response Messages:
400: Cannot get mappings between application to itself.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","collectionId":"2","id":"2-5-34","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application pack by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
403: Access is denied
403: You do not have permission to access application pack with ID
404: Application pack with ID was not found for customer with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-35","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"dataMode":"raw","description":"Update the application pack properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1
BODY<application_pack>
    <name>Updated name</name>
    <comment>Updated application pack</comment>
    <owner>
        <id>4</id>
    </owner>
    <editors>
        <editor>
            <id>3</id>
        </editor>
    </editors>
    <viewers>
        <viewer>
            <id>5</id>
        </viewer>
    </viewers>
    <is_published>true</is_published>
</application_pack>


Response Messages:
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
403: Access is denied
403: You do not have permission to access application that contains the interface ID
403: You do not have permissions to edit this application pack.
403: You do not have permissions to change the owner of application pack ID.
403: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID.","folder":"2-6","rawModeData":"\n\tUpdated name\n\tUpdated application pack\n\t\n\t\t4\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\n\ttrue\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-36","method":"PUT"},{"name":"Delete application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
200: Application pack wes deleted.
403: You do not have permissions to delete this application pack.
400: There is no application pack with the specified ID.
400: Customer with ID doesn't own an application pack with ID.
400: Application Pack ID cannot be deleted. It is in use by applications IDs.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-37","method":"DELETE"},{"name":"Remove application interfaces from application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"application_interface_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
application_interface_id: IDs of application interfaces to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces?application_interface_id=1&application_interface_id=2

Response Messages:
200: Application Interface was deleted.
403: Access is denied
403: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Application interface ID was not found in application pack ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","collectionId":"2","id":"2-6-38","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update application interfaces and tag mapping","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"dataMode":"raw","description":"Add application interfaces to application pack, and map a tag to the application interface. If a tag is not specified for the interface, the tag will be set to “No Tag”.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: List of interface tag mapping to be added or modified

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces
BODY<application_interface_tags>
    <application_interface_tag>
        <application_interface>
            <id>1</id>
        </application_interface>
        <tag>
            <id>3</id>
        </tag>
    </application_interface_tag>
    <application_interface_tag>
        <application_interface>
            <id>2</id>
        </application_interface>
    </application_interface_tag>
</application_interface_tags>


Response Messages:
403: Access is denied
404: There are no application packs with the NAME in customer with ID.
403: You do not have permissions to edit this application pack.
403: You do not have permission to access application that contains the interface ID
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Application Interface can't be null.
400: Empty interface ID is not valid.","folder":"2-6","rawModeData":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","collectionId":"2","id":"2-6-39","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Update application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"dataMode":"raw","description":"Update the application packs properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <id>1</id>
        <name>Updated name</name>
        <comment>Updated application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <is_published>false</is_published>
    </application_pack>
</application_packs>


Response Messages:
400: There are no application packs to edit.
400: Application pack ID cannot be empty.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
403: Access is denied
403: You do not have permission to access application that contains the interface ID
403: You do not have permissions to edit this application pack.
403: You do not have permissions to change the owner of application pack ID.
403: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID.","folder":"2-6","rawModeData":"\n\t\n\t\t1\n\t\tUpdated name\n\t\tUpdated application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\tfalse\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-40","method":"PUT"},{"headers":"Accept: application/json\n","name":"List all application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
name: The name of the application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs?name=Application pack 1

Response Messages:
403: Access is denied
404: There are no application packs with the NAME in customer with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-41","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create new application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <name>Application pack 1</name>
        <comment>New application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <viewers>
            <viewer>
                <id>5</id>
            </viewer>
        </viewers>
    </application_pack>
</application_packs>


Response Messages:
403: Access is denied
403: You do not have permission to access application that contains the interface ID
400: There are no application packs to add.
400: Application pack can be created only in meshed domain mode.
404: Customer with ID was not found.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: The owner NAME does not have permission to access applications.
400: Application pack was already saved.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tApplication pack 1\n\t\tNew application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t5\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-42","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Modify tags of an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Tags to modify

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <id>1</id>
        <name>Tag 1</name>
    </tag>
    <tag>
        <id>2</id>    
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
403: Access is denied
403: You do not have permissions to edit this application pack.
404: Customer with ID was not found.
404: There is no application pack with the ID in customer with ID.
400: Tag with NAME already exists in application pack ID.
400: Updated tag ID can't be empty
400: Updated Tag ID doesn't exist on application pack ID.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\t1\n\t\tTag 1\n\t\n\t\n\t\t2\t\n\t\tTag 2\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-43","method":"PUT"},{"name":"Delete tags from application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"tag_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
tag_id: IDs of tags to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/21/tags?tag_id=1&tag_id=2

Response Messages:
200: Tags were deleted.
403: Access is denied
403: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Tag ID was not found in application pack ID.
404: Tag ID is in use so can't be deleted.
404: Removed tag ID can't be empty.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-44","method":"DELETE"},{"headers":"Accept: application/json\n","name":"List all application pack tags","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags

Response Messages:
403: Access is denied
404: There is no application pack with the ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-45","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create new Tag under an application pack ","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
body: List of tags

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <name>Tag 1</name>
    </tag>
    <tag>
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
403: Access is denied
404: There is no application pack with the ID in customer with ID.
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Tag name must contain at least 2 and no more than 160 characters.
400: Tag with NAME already exists in application pack ID.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tTag 1\n\t\n\t\n\t\tTag 2\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-46","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Create new connection to application packs","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of application
body: List of connection to application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs
BODY<connection_to_application_packs>
    <connection_to_application_pack>
        <name>Connection to application pack 1</name>
        <comment>New Connection to application pack</comment>
        <application_pack>
            <id>1</id>
        </application_pack>
        <tags_servers>
            <tag_servers>
                <tag>
                    <id>1</id>
                </tag>
                <servers>
                    <server>
                        <id>3</id>
                    </server>
                </servers>
            </tag_servers>
            <tag_servers>
                <tag>
                    <name>Tag 1</name>
                </tag>
                <servers>
                    <server>
                        <id>4</id>
                    </server>
                </servers>
            </tag_servers>
        </tags_servers>
    </connection_to_application_pack>
</connection_to_application_packs>


Response Messages:
400: There are no connection to application packs to add.
400: Application pack ID cannot be empty.
400: Application with ID was not found.
400: There is no application with the specified ID.
400: There is no application pack with the specified ID.
400: Application pack with ID was decommissioned.
400: Application pack with ID was not published.
400: Connection to application pack cannot be created in the domain of the application pack.
400: The application pack cannot be used more than once in the application.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is missing.
400: Tag ID does not exist.
400: Server ID does not exist.
400: Tag ID is not in use in connection to application pack ID, so it cannot be updated.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
403: Access is denied.
403: You do not have permission to access application that contains the server ID
403: You do not have permission to access application pack with ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Tag with NAME was not found.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tConnection to application pack 1\n\t\tNew Connection to application pack\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t3\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tTag 1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","collectionId":"2","id":"2-6-47","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve a list of all connection to application pack by application ID.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of application
name: The name of the connection to application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs?name=Connection to application pack 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
404: There are no connection to application pack with the NAME in application with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","collectionId":"2","id":"2-6-48","method":"GET"},{"headers":"Accept: application/json\n","name":"Get tag by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"tag_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
tag_id: The unique identifier of a tag

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags/1

Response Messages:
403: Access is denied
404: There is no tag with ID.
404: Customer with ID doesn't own a tag with ID.
404: Application Pack with ID doesn't own a tag with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags/{{tag_id}}","collectionId":"2","id":"2-6-49","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to update
body: Connection to application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1
BODY<connection_to_application_pack>
    <name>Updated name</name>
    <comment>Updated Connection to application pack</comment>
    <tags_servers>
        <tag_servers>
            <tag>
                <id>1</id>
            </tag>
            <servers>
                <server>
                    <id>3</id>
                </server>
            </servers>
        </tag_servers>
        <tag_servers>
            <tag>
                <name>Tag 1</name>
            </tag>
            <servers>
            </servers>
        </tag_servers>
    </tags_servers>
</connection_to_application_pack>


Response Messages:
400: There is no application with the specified ID.
400: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is required.
400: Tag with Name was not found.
400: Server ID cannot be empty.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
403: Access is denied.
403: You do not have permission to access application that contains the server ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.","dataMode":"raw","folder":"2-6","rawModeData":"\n\tUpdated name\n\tUpdated Connection to application pack\n\t\n\t\t\n\t\t\t\n\t\t\t\t1\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTag 1\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-50","method":"PUT"},{"name":"Delete a connection to application pack","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
400: Connection to application pack with ID was not found for application with ID.
400: The connection to application pack was already deleted.
403: Access is denied.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-51","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection to application pack by ID.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
404: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-52","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing access rules","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/87/access_requests

Response Messages:
400: The application was already deleted.
400: There are no changed connections that are ready for creating a ticket.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
400: Application with ID ID was not found.","dataMode":"params","folder":"2-7","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/access_requests","collectionId":"2","id":"2-7-53","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches server by ID","data":[{"value":null,"type":"text","enabled":true,"key":"serverId"}],"description":"Parameters:
serverId: The ID of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects/87

Response Messages:
400: Server with id ID was not found.
400: Application with ID ID was not found.
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.","dataMode":"params","folder":"2-8","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects/{{serverId}}","collectionId":"2","id":"2-8-54","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches servers","description":"Parameters:
name: The name of the servers [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?name=server1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: Server with name NAME was not found.
400: Parameter typeOnDevice is not valid.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no servers with the name NAME
404: There are no servers with the typeOnDevice TYPEONDEVICE ","folder":"2-8","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects","collectionId":"2","id":"2-8-55","method":"GET"},{"name":"Delete server","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serverId"}],"dataMode":"params","description":"To decommission a serer use force=true.

Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4?force=true

Response Messages:
400: The application was already deleted.
400: You cannot delete a predefined object.
400: Cannot delete an object that is being referenced by other objects
400: Cannot delete a predefined object.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","collectionId":"2","id":"2-9-56","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing server by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serverId"}],"description":"Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/3

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","collectionId":"2","id":"2-9-57","method":"GET"},{"headers":"Accept: application/json\n","name":"If the identified server is a group, return a list of its members. When the media type is 'text/plain' (default), print each member on a separate line.","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/members

Response Messages:
400: Server with ID is not of type group
403: Access is denied
403: You do not have permissions to view this application
403: No available licenses. Ask your SecureApp administrator for assistance
404: There is no application with the specified ID
404: Server with ID was not found","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/members","collectionId":"2","id":"2-9-58","method":"GET"},{"collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/impact_analysis_csv","name":"Export Server Impact Analysis to a CSV file.","method":"GET","id":"2-9-59","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/impact_analysis_csv

Response Messages:
400: Server with ID was not found.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
404: There is no application with the specified ID.","folder":"2-9"},{"name":"Move server","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"server_id"},{"value":null,"type":"text","enabled":true,"key":"target_application_id"}],"description":"Parameters:
application_id: The unique identifier of the application
server_id: The unique identifier of the server
target_application_id: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/move_server?server_id=5&target_application_id=3

Response Messages:
400: Server ID is missing.
400: Target application ID is missing.
400: You cannot move a predefined object.
400: Server with ID is already associated to application with ID.
400: Cannot move server to a different customer.
400: The application was already deleted.
400: You cannot add to application APPLICATION_NAME because it was decommissioned.
400: Group/Server cannot be moved because there is no other application to move it to.
400: Group/Server cannot be moved because it or at least one of its group members is part of these groups: GROUPS_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is locked for discovery.
400: Group/Server cannot be moved because it or at least one of its group members is used in these application interfaces: APPLICATION_INTERFACE_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is used in these connections with another external resource: CONNECTION_NAME
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/move_server","collectionId":"2","id":"2-9-60","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <id>1</id>
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
         <type>host</type>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <id>2</id>
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
         <type>range</type>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <id>3</id>
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
         <type>subnet</type>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <id>4</id>
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
         <type>virtual-server</type>
     </network_object>
     <network_object xsi:type=\"vmInstanceDTO\">
         <id>5</id>
         <name>vm1</name>
         <comment>vm instance comment</comment>
         <type>vm_instance</type>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <id>6</id>
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <type>group</type>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: The application was already deleted.
400: You cannot update a predefined object.
400: Invalid type in server with id ID.
400: Invalid member with id ID
400: Invalid ID
400: Invalid uid
400: Invalid network object type NAME
400: Cannot update user
400: Network object is new
400: Name cannot be empty
400: Server is in discovery
400: Ip is missing
400: Mask is missing
400: Invalid ip
400: Invalid mask
400: Max ip is missing
400: Min ip is missing
400: Invalid min ip
400: Invalid max ip
400: Min ip cannot be larger than max ip
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Server with NAME already exists.
400: Invalid device ID
400: The type_on_device value is not valid
400: An EDL group can not be modified to a regular group
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: DTO type used for server id ID is incompatible with this vendor.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Virtual server was not found in ST.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
503: Not connected to SecureTrack.","dataMode":"raw","folder":"2-9","rawModeData":"\n\t \n\t\t 1\n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t\t host\n\t \n\t \n\t\t 2\n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n\t\t 2.2.2.22\n\t\t range\n\t \n\t \n\t\t 3\n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t\t subnet\n\t \n\t \n\t\t 4\n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t\t virtual-server\n\t \n\t \n\t\t 5\n\t\t vm1\n\t\t vm instance comment\n\t\t vm_instance\n\t \n\t \n\t\t 6\n\t\t group comment\n\t\t group1\n\t\t true\n\t\t group\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-61","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the server [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?name=ServerName

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: The application was already deleted.
400: Parameter typeOnDevice is not valid.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no servers with the name NAME.
404: There are no servers with the typeOnDevice TYPEONDEVICE ","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-62","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: There are no items to add.
400: The application was already deleted.
400: You cannot add to application NAME because it was decommissioned.
400: Network object was already saved
400: Name cannot be empty
400: Server with NAME already exists.
400: IP is missing
400: Mask is missing
400: Invalid IP
400: Invalid mask
400: Max IP is missing
400: Min IP is missing
400: Invalid min IP
400: Invalid max IP
400: Min IP cannot be larger than max IP
400: Invalid network object type CLASS_NAME.
400: Invalid uid
400: Invalid device ID
400: Virtual server does not exist in SecureTrack
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Cannot save the server because the virtual server does not exist.
400: Cannot save the server because an error occurred
400: The type_on_device value is not valid
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
404: Virtual server was not found in SecureTrack.
503: Not connected to SecureTrack.","dataMode":"raw","folder":"2-9","rawModeData":"\n\t \n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t \n\t \n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n \t\t 2.2.2.22\n\t \n\t \n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t \n\t \n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t \n\t \n\t\t group comment\n\t\t group1\n\t\t true\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-63","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Modify unused and non predefined global services","dataMode":"raw","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Service is new.
400: You cannot update a predefined object.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot update a global service that is being referenced by other objects.
400: Cannot update an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Group cannot contain itself as a member.
400: Application identity cannot be a member of a group.
403: Access is denied.","folder":"2-10","rawModeData":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/","collectionId":"2","id":"2-10-64","method":"PUT"},{"headers":"Accept: application/json\n","name":"Fetches services","description":"Parameters:
globals_only: get only globals [optional]
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=AH

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true&name=AH

Response Messages:
404: There are no services with the name NAME.
403: Access is denied.","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-65","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create global services","dataMode":"raw","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Application identity cannot be a member of a group.
403: Access is denied.","folder":"2-10","rawModeData":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-66","method":"POST"},{"name":"Delete unused and non predefined global service by name","data":[{"value":null,"type":"text","enabled":true,"key":"name"}],"description":"Parameters:
name: The name of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=Global service

Response Messages:
200: Service was deleted.
404: Service name has not been provided.
404: There are no services with the name NAME.
400: Cannot delete ANY.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-67","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Fetches service by ID","data":[{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/2

Response Messages:
404: Service with ID <ID> was not found.
403: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","collectionId":"2","id":"2-10-68","method":"GET"},{"name":"Delete unused and non predefined global service","data":[{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/260

Response Messages:
200: Service was deleted.
404: Global Service with ID was not found.
400: Cannot delete an object that is being referenced by other objects.
400: You cannot delete a predefined object.
403: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","collectionId":"2","id":"2-10-69","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing service by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Response Messages:
400: The application was already deleted.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Service with ID was not found.","dataMode":"params","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","collectionId":"2","id":"2-11-70","method":"GET"},{"name":"Delete service","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"dataMode":"params","description":"Use force=true to delete a service with decommission.

Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250?force=true

Response Messages:
400: The application was already deleted.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Service with ID <SERVICE_ID> was not found in application with id <APPLICATION_ID>","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","collectionId":"2","id":"2-11-71","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Cannot have members from different applications.
400: Can not have application identity in group
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-11","rawModeData":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-72","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services?name=Local service

Response Messages:
400: The application was already deleted.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no services with the name NAME.","dataMode":"params","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-73","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>255</id>
        <name>Service Group 2 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Local service must be associated with an application.
400: Service is locked for discovery.
400: Service is new.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Application identity cannot be a member of a group.
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.","dataMode":"raw","folder":"2-11","rawModeData":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t255\n\t\tService Group 2 updated\n\t\tUpdated comment\n\t\tgroup\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-74","method":"PUT"},{"headers":"Accept: application/json\n","name":"Fetches users","description":"Parameters:
name: The name of the user [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users?name=Local user 1

Response Messages:
404: There are no users with the name NAME.
403: Access is denied.","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","collectionId":"2","id":"2-12-75","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create users","dataMode":"raw","description":"Parameters:
body: List of users

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/users
BODY<users>
    <user>
        <name>Local user 1</name>
        <comment>New local user</comment>
        <ip>8.8.8.8</ip>
    </user>
    <user>
        <name>Ldap user 1</name>
        <comment>New ldap user</comment>
    </user>
    <user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"userObjectGroupDTO\">
        <name>User group 1</name>
        <comment>New user group</comment>
        <member>
            <id>14</id>
        </member>
        <member>
            <id>15</id>
        </member>
    </user>
</users>


Response Messages:
201: User was created.
200: Users were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: User with id <ID> was not found.
400: Invalid user type <TYPE>
400: Name cannot be empty.
400: User with name <NAME> already exists.
400: Invalid ip
403: Access is denied.","folder":"2-12","rawModeData":"\n\t\n\t\tLocal user 1\n\t\tNew local user\n\t\t8.8.8.8\n\t\n\t\n\t\tLdap user 1\n\t\tNew ldap user\n\t\n\t\n\t\tUser group 1\n\t\tNew user group\n\t\t\n\t\t\t14\n\t\t\n\t\t\n\t\t\t15\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","collectionId":"2","id":"2-12-76","method":"POST"},{"name":"Delete unused user","data":[{"value":null,"type":"text","enabled":true,"key":"userId"}],"description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
200: User was deleted.
404: User with ID <ID> was not found.
400: Cannot delete an object that is being referenced by other objects.
403: Access is denied.","dataMode":"params","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","collectionId":"2","id":"2-12-77","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Fetches user by ID","data":[{"value":null,"type":"text","enabled":true,"key":"userId"}],"description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
404: User with ID <ID> was not found.
403: Access is denied.","dataMode":"params","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","collectionId":"2","id":"2-12-78","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Move applications to another customer","dataMode":"raw","description":"Parameters:
body: List of applications and customers [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/move_applications
BODY<move_applications>
     <move_application>
         <application>
            <id>1</id>
         </application>
         <customer>
             <id>2</id>
         </customer>
     </move_application>
     <move_application>
         <application>
            <id>2</id>
         </application>
         <customer>
            <name>Default</name>
         </customer>
     </move_application>
</move_applications>


Response Messages:
200: Applications were moved successfully.
400: Multi-Customer mode is not enabled.
400: You cannot move an application pack to a different customer.
400: Reference to application is invalid.
400: APPLICATION already exists in CUSTOMER.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: Reference to CUSTOMER is invalid.
400: CUSTOMER is not imported to SecureApp.
400: CUSTOMER was decommissioned.
400: You must delete virtual servers from CUSTOMER before you move APPLICATION to another customer.
400: You must remove virtual servers from the INTERFACE and publish it before you move APPLICATION to another customer.
400: You cannot move APPLICATION to CUSTOMER because the connection to application pack and the application pack cannot be in the same customer.
400: You cannot move APPLICATION to a different customer because the application interface and the application pack must be in the same customer.
400: You must remove INTERFACE from APPLICATION PACK and publish it before you can move APPLICATION to another customer.
400: CONNECTION TO APPLICATION from APPLICATION must use interface from CUSTOMER.
400: Sources in CONNECTION from APPLICATION must all be from applications in the same customer.
400: Destinations in CONNECTION in APPLICATION must all be from applications in the same customer.
400: Servers in CONNECTION from APPLICATION must all be from CUSTOMER.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from applications in the same customer.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from CUSTOMER.
400: Application or application pack with NAME already exists in CUSTOMER.
400: There are no applications to move.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t \n\t\t \n\t\t\t1\n\t\t \n\t\t \n\t\t\t 2\n\t\t \n\t \n\t \n\t\t \n\t\t\t2\n\t\t \n\t\t \n\t\t\tDefault\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/move_applications","collectionId":"2","id":"2-13-79","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of an application to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-80","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Change an application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
applicationId: The unique identifier of an application to change
body: Application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/139
BODY<application>
     <id>139</id>
     <name>UpdatedAppName</name>
     <comment>UpdatedComment</comment>
     <decommissioned>false</decommissioned>
     <owner>
         <id>4</id>
     </owner>
     <editors>
         <editor>
             <id>3</id>
         </editor>
     </editors>
     <viewers>
         <viewer>
             <id>5</id>
         </viewer>
     </viewers>
</application>


Response Messages:
400: The application was already deleted.
400: Application owner is missing.
400: Owner cannot be empty.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
403: Access is denied
403: You do not have permissions to change the owner of application ID.
403: You do not have permissions to change the editors and a viewer of application ID.
403: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t 139\n\t UpdatedAppName\n\t UpdatedComment\n\t false\n\t \n\t\t 4\n\t \n\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 5\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-81","method":"PUT"},{"name":"Delete an application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
400: The resources of application NAME are used in connections for other applications.
400: You cannot delete application NAME because its application interfaces are used in other applications.
400: You cannot delete application NAME because its application interfaces are used in other application packs.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
400: Application with ID ID was not found.
400: You cannot delete application NAME because there are connection changes pending a ticket in other application.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-82","method":"DELETE"},{"name":"Export application history to PDF","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History max rows [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&count=2

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?count=2

Response Messages:
403: Access is denied.
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/history/export_pdf","collectionId":"2","id":"2-13-83","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve security policy violations from SecureTrack","description":"Parameters:
applicationId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/compliance_violations

Response Messages:
400: No valid connections found in APPLICATION.
400: Security policy compliance check is not available because a security policy has not been defined.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
503: Cannot connect to SecureTrack.
503: Timeout occurred while waiting for response from SecureTrack.
500: An error occurred in SecureTrack when running the security compliance check.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/compliance_violations","collectionId":"2","id":"2-13-84","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve application history","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History list length [optional]
start: Offset the count starting point [optional]
type: States the history type to fetch [optional]
user: The username of the user made the changes [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start=0&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?type=SERVER

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?user=Jack

Response Messages:
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date
400: Count parameter must be a number
400: Start parameter must be a number
400: Start parameter must be less than total
400: Type parameter must be either server, server_group, connection, application, application_interface, connection_interface or connection_to_application
400: User not found
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/history","collectionId":"2","id":"2-13-85","method":"GET"},{"name":"Export Impact Analysis to a CSV file.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"dataMode":"params","description":"To prevent a CSV injection attack when exporting Impact Analysis to a CSV file, if a special character ( = - + @ ) appears at the beginning of any field, a single quote (') is added before the character.

Parameters:
application_id: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/impact_analysis_csv

Response Messages:
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
404: There is no application with the specified ID.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/impact_analysis_csv","collectionId":"2","id":"2-13-86","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create new applications","dataMode":"raw","description":"Parameters:
body: List all applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <name>AppName</name>
         <comment>Comment</comment>
         <owner>
             <id>3</id>
         </owner>
         <editors>
             <editor>
                 <id>4</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
         <customer>
             <id>24</id>
         </customer>
     </application>
</applications>


Response Messages:
400: There are no items to add.
400: Application was already saved.
400: Application name must contain at least 2 and no more than 160 characters.
400: Owner cannot be empty.
400: The specified owner does not exist.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
400: Application with NAME already exists.
400: Application owner is missing.
400: Reference to owner ID is invalid.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to customer ID is invalid.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: The specified customer does not exist.
400: There is an editor without an ID or name.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no editor with the name NAME.","folder":"2-13","rawModeData":"\n\t \n\t\t AppName\n\t\t Comment\n\t\t \n\t\t\t 3\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 4\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t\t \n\t\t\t 24\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-87","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update applications","dataMode":"raw","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
body: List of applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <id>140</id>
         <name>App1</name>
         <decommissioned>true</decommissioned>
         <owner>
             <id>4</id>
         </owner>
     </application>
     <application>
         <id>139</id>
         <name>UpdatedAppName</name>
         <comment>Updated Comment</comment>
         <owner>
             <id>4</id>
         </owner>
         <editors>
             <editor>
                 <id>3</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
     </application>
</applications>


Response Messages:
400: Application ID is missing.
400: Application ID is invalid
400: The application was already deleted.
400: You must include the owner field.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
403: Access is denied
403: You do not have permissions to change the owner of application ID.
403: You do not have permissions to change the editors and a viewer of application ID.
403: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t \n\t\t 140\n\t\t App1\n\t\t true\n\t\t \n\t\t\t 4\n\t\t \n\t \n\t \n\t\t 139\n\t\t UpdatedAppName\n\t\t Updated Comment\n\t\t \n\t\t\t 4\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-88","method":"PUT"},{"headers":"Accept: application/json\n","name":"List all applications","description":"Parameters:
userId: Applications by user ID, if not given the default is logged in user id [optional]
name: The name of the application [optional]
app_permissions: Filter applications by the given permissions (separated with commas):\napp_owner - returns applications where the user is the owner\napp_editor - returns applications where the user has been explicitly added as an editor\napp_viewer - returns applications where the user has been explicitly added as a viewer\napp_adminonly - returns applications where the user only has editor access because user has “edit all applications” permission, and does not include applications where this user is either the app_owner, app_editor, or app_viewer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?userId=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?app_permissions=app_owner,app_editor,app_viewer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App&app_permissions=app_adminonly

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications

Response Messages:
400: Invalid app_permissions value: 'appPermissions'.
403: Access is denied
403: You can't use the parameter 'userId' because you don't have 'View all applications' permission.
404: There are no applications matching your filter.
404: User with ID 'userId' was not found.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-89","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Auto associate cloud servers from SecureTrack with an application","dataMode":"raw","description":"When auto-associate is enabled, user must enter key value

Parameters:
body: Auto association rule

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule
BODY<auto_association_rule>
    <key>Application</key>
    <enabled>true</enabled>
</auto_association_rule>


Response Messages:
200: Auto association rule is saved.
400: Enabled rule requires key value.
403: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.","folder":"2-14","rawModeData":"\n\tApplication\n\ttrue\n\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule","collectionId":"2","id":"2-14-90","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve cloud server listing from SecureTrack","data":[{"value":null,"type":"text","enabled":true,"key":"vendor"},{"value":null,"type":"text","enabled":true,"key":"search_string"}],"description":"Parameters:
customer_id: Customer ID to be filtered by. [optional]
vendor: Vendor to be filtered by.
search_string: Search text.
start: Returning matching result starting from this element in the array (0-based). [optional]
count: Total number of matching servers to return. [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=WebServe

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=\"WebServer1\"

Response Messages:
403: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.
400: Illegal search string.
400: Start is bigger then possible result count.
400: Start and count cannot hold negative values.
400: Vendor query param is required.
400: Vendor should be one of the following: Amazon.
400: Search string query param is required.
400: Customer with ID does not exist in SecureApp
400: Customer with ID was decommissioned.","dataMode":"params","folder":"2-14","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","collectionId":"2","id":"2-14-91","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Associate cloud servers from SecureTrack with an application","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The ID of the application
body: List of device IDs and cloud server UIDs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?application_id=87
BODY<devices_to_uids>
    <device_to_uids>
        <device_id>9</device_id>
        <uids>
            <uid>{b503916e-4468-4dc8-981b-2ec534587352}</uid>
            <uid>{0cc947a5-276f-4a4a-9d12-df5284fce609}</uid>
        </uids>
    </device_to_uids>
</devices_to_uids>


Response Messages:
201: Servers were imported to SecureApp.
403: Access is denied
400: There is no application with the specified ID.
401: No available licenses. Ask your SecureApp administrator for assistance.
400: You do not have permissions to edit this application.
400: You cannot associate servers with this application, because the application has been decommissioned.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to add cloud servers.
403: UID does not exist in device ID.
403: Device with ID does not exist.
403: Device with ID does not exist in DOMAIN.
403: The AWS instance with UID and device ID has already been imported to application NAME. You cannot import the same instance multiple times.","dataMode":"raw","folder":"2-14","rawModeData":"\n\t\n\t\t9\n\t\t\n\t\t\t{b503916e-4468-4dc8-981b-2ec534587352}\n\t\t\t{0cc947a5-276f-4a4a-9d12-df5284fce609}\n\t\t\n\t\n\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","collectionId":"2","id":"2-14-92","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"import customers","dataMode":"raw","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.

Parameters:
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/import
BODY<customers>
    <customer>
        <id>2</id>
    </customer>
    <customer>
        <id>3</id>
    </customer>
</customers>


Response Messages:
400: Not available in single-customer mode.
400: ID can not be empty.
400: There are some id's that doesn't exist.
403: Access is denied
503: Not connected to SecureTrack.","folder":"2-15","rawModeData":"\n\t\n\t\t2\n\t\n\t\n\t\t3\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/import","collectionId":"2","id":"2-15-93","method":"PUT"},{"headers":"Accept: application/json\n","name":"List all imported customers","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/imported

Response Messages:
400: Not available in single-customer mode.
403: Access is denied","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/imported","collectionId":"2","id":"2-15-94","method":"GET"},{"headers":"Accept: application/json\n","name":"List all non-imported customers","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.



Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/not_imported

Response Messages:
400: Not available in single-customer mode.
403: Access is denied
503: Not connected to SecureTrack.","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/not_imported","collectionId":"2","id":"2-15-95","method":"GET"},{"headers":"Accept: application/json\n","name":"List all customers","description":"Parameters:
name: The name of the customer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers?name=Customer 1

Response Messages:
400: Not available in single-customer mode.
404: There are no customers with the name NAME.","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/","collectionId":"2","id":"2-15-96","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing applications for specific domain","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/2/applications

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
403: Access is denied","dataMode":"params","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}/applications","collectionId":"2","id":"2-15-97","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update a customer","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/2
BODY<customer>
    <usage_mode>NOT_IMPORTED</usage_mode>
</customer>


Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
400: Can not update Default customer.
400: This customer is already not imported.
400: USAGE_MODE is not a valid state. The valid values are: USAGE_MODES
403: Access is denied
500: This customer is not imported.
400: You cannot delete this customer because there are connection changes pending a ticket in another customer.You must decommission this customer first, and then delete it.","dataMode":"raw","folder":"2-15","rawModeData":"\n\tNOT_IMPORTED\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","collectionId":"2","id":"2-15-98","method":"PUT"},{"headers":"Accept: application/json\n","name":"Fetches customer by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/1

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.","dataMode":"params","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","collectionId":"2","id":"2-15-99","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches domain by ID","data":[{"value":null,"type":"text","enabled":true,"key":"domainId"}],"description":"Parameters:
domainId: The ID of the domain

Usage Example


Response Messages:
400: Domain with id ID was not found.","dataMode":"params","folder":"2-16","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/{{domainId}}","collectionId":"2","id":"2-16-100","method":"GET"},{"collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/synchronize","name":"synchronize domains","method":"PUT","id":"2-16-101","description":"Retrieves all the domains lists in ST , for use by SC. If a domain was deleted in ST, then it will be removed from SC



Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/domains/synchronize

Response Messages:
500: Multi-Domain mode is disabled in SecureChange. Unable to synchronize with SecureTrack domains","folder":"2-16"},{"headers":"Accept: application/json\n","name":"List all domains","description":"Parameters:
name: The name of the domain [optional]

Usage Example


Response Messages:
404: There are no domains with the name NAME.","folder":"2-16","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/","collectionId":"2","id":"2-16-102","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches virtual servers from SecureTrack","data":[{"value":null,"type":"text","enabled":true,"key":"ip"}],"dataMode":"params","description":"Find virtual servers matching a given IP address.
You can search for the virtual server itself of any of its members.

Parameters:
ip: ip
domainId: The unique identifier of a domain [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers?ip=2.2.2.2

Response Messages:
400: Invalid IP
400: Invalid Subnet
400: There is no domain with the specified ID.
403: Access is denied
503: Not connected to SecureTrack.","folder":"2-17","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers","collectionId":"2","id":"2-17-103","method":"GET"},{"name":"Run Update Metadata for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"A link to the rule recertification field will returned in the location field of the header, for example: /securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/72

Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/rule_recertification/update_metadata

Response Messages:
400: Update Metadata is not defined for the requested field.
400: Update Metadata is not available for the current ticket status.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a rule recertification request field.
403: You do not have permission to update this task. Contact your administrator for assistance.","folder":"2-18","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/rule_recertification/update_metadata","collectionId":"2","id":"2-18-104","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get suggested targets for a given access request","data":[{"value":null,"type":"text","enabled":true,"key":"domain_name"},{"value":null,"type":"text","enabled":true,"key":"workflow_name"}],"dataMode":"raw","description":"Returns a list of suggested targets for a given access request, based on topology calculations.

Parameters:
body [optional]
domain_name: Domain Name
workflow_name: Workflow Name

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/suggest_target?domain_name=Default&workflow_name=AR
BODY{
    \"access_request\":{
        \"users\":{
            \"user\":[
                \"Any\"
            ]
        },
        \"sources\":{
            \"source\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.1.1\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"destinations\":{
            \"destination\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.20.2\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"services\":{
            \"service\":[
                {
                    \"@type\":\"ANY\",
                }
            ]
        },
        \"action\":\"Accept\",
    }
}
OUTPUT{
    \"multi_target\": {
        \"target\": {
            \"@type\": \"Object\",
            \"object_name\": \"Device-1\",
            \"object_type\": \"firewall\",
            \"object_details\": \"10.100.40.1\",
            \"management_id\": 250,
            \"management_name\": \"Panorama/Domain1\"
        }
    }
}


Response Messages:
200: Targets returned successfully
400: User does not have permissions to domain or domain does not exist
403: Access is denied","folder":"2-19","rawModeData":"{\n\t\"access_request\":{\n\t\t\"users\":{\n\t\t\t\"user\":[\n\t\t\t\t\"Any\"\n\t\t\t]\n\t\t},\n\t\t\"sources\":{\n\t\t\t\"source\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.1.1\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"destinations\":{\n\t\t\t\"destination\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.20.2\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"services\":{\n\t\t\t\"service\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"ANY\",\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"action\":\"Accept\",\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/suggest_target","collectionId":"2","id":"2-19-105","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update the whole list of excluded devices in SecureChange","dataMode":"raw","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
BODY<device_ids>
    <id>1</id>
    <id>12</id>
</device_ids>

","folder":"2-19","rawModeData":"\n\t1\n\t12\n\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","collectionId":"2","id":"2-19-106","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns IDs for specified list of excluded parent management devices and child firewalls in SecureChange","description":"For example on this Panorama hierarchy:
DG1 - Excluded
  DG1.1
    FW1
    FW2
    FW3

Calling this API with false value will return only DG1’s id.
Calling this API with true value will return DG1, FW1, FW2, FW3 id’s.


Parameters:
show_all: When set to true - Displays the specified devices and all their child firewalls in the hierarchy, which will be excluded implicitly.
When set to false - Displays only the devices which were explicitly excluded.
Default value is false.
[optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=false
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=true
OUTPUT<device_ids>
    <id>33</id>
    <id>10</id>
    <id>11</id>
    <id>35</id>
    <id>29</id>
    <id>31</id>
</device_ids>

","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","collectionId":"2","id":"2-19-107","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of the devices that you can select as a target in SecureChange","description":"Parameters:
name: device name or part of a name [optional]
show_targets: show devices as targets [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/devices?name=asa&show_targets=true

Response Messages:
404: Devices not found","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/","collectionId":"2","id":"2-19-108","method":"GET"},{"headers":"Accept: application/json\n","name":"Get server decommission designer results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve designer results generated in R17-1 and earlier.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/designer","collectionId":"2","id":"2-20-109","method":"GET"},{"headers":"Accept: application/json\n","name":"Get verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","dataMode":"params","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/verifier","collectionId":"2","id":"2-20-110","method":"GET"},{"name":"Run Verifier for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/verifier

Response Messages:
400: Verifier is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/verifier","collectionId":"2","id":"2-20-111","method":"PUT"},{"name":"Run Impact Analysis for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/impact_analysis

Response Messages:
400: Impact analysis is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/impact_analysis","collectionId":"2","id":"2-20-112","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get impact analysis results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/impact_analysis

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","dataMode":"params","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/impact_analysis","collectionId":"2","id":"2-20-113","method":"GET"},{"name":"Run server decommission designer for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/designer

Response Messages:
400: Server decommission designer is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/designer","collectionId":"2","id":"2-20-114","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve the SecureTrack connection settings and status","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack?testOnly=false
","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","collectionId":"2","id":"2-21-115","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Modify the SecureTrack connection settings and test the connection status","dataMode":"raw","description":"Parameters:
testOnly: Test the connection status using the specified settings. The new settings are not saved. The default value is false [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"remoteHost\">
            <IP_or_hostname>192.168.11.1</IP_or_hostname>
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
        <internal_IP_of_secureChange_server>192.168.2.2</internal_IP_of_secureChange_server>
    </secureTrack_settings>


Response Messages:
400: Invalid host name or IP address.
400: show_link_to_secureTrack is invalid. It must be 'true', 'false' or empty.","folder":"2-21","rawModeData":"\t\n\t\t \n\t\t\t192.168.11.1\n\t\t\tadmin\n\t\t\n\t\tfalse\n\t\t30\n\t\t192.168.2.2\n\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","collectionId":"2","id":"2-21-116","method":"PUT"},{"collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","name":"Return the list of users","method":"GET","id":"2-22-117","description":"user_name: case insensitive, search mode: contains text
exact_name: when set to true, user_name search mode is case sensitive and exact text
email: case insentitive, search mode: exact match
Logical OR between user_name and email.

Parameters:
showIndirectRelation: Members that belong to the selected group only indirectly [optional]
user_name: The user's login name [optional]
email: The user's email [optional]
exact_name: Search user_name as exact match [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users?email=bob@tufin.com&user_name=bob&exact_name=true
","folder":"2-22"},{"headers":"Content-Type: application/xml\n","name":"Import LDAP users to SecureChange by simulating login process","dataMode":"raw","description":"This API implicitly imports LDAP users to SecureChange by simulating their login.
To explicitly import LDAP entities- both users and groups, it is recommended to use /users/import API

Parameters:
body: partyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users
BODY<user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"user\">
    <name>x</name>
    <origin_type>LDAP</origin_type>
        <ldap_configuration>
            <id>1</id>
        </ldap_configuration>
</user>


Response Messages:
403: Access is denied.
400: Name is missing.
400: Origin is missing.
400: User {login_name} already exists, with ID (id} and name {name}.
400: User {login_name} not found in LDAP.
400: Creating a user via REST API is available only if origin is LDAP.
400: Creating a user via REST API is available only if type is User.
400: Ldap configuration with ID {id} not found.","folder":"2-22","rawModeData":"\n\tx\n\tLDAP\n\t\t\n\t\t\t1\n\t\t\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","collectionId":"2","id":"2-22-118","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Import user / group from LDAP","dataMode":"raw","description":"The imported user / group will be visible in SecureChange GUI under users section.
In multi domain mode, imported entity will be assigned with the domains of \"any user\" group.
Only users with 'view settings tab' permission can run this API.

Parameters:
body: ldapPartyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/import
BODY{
    \"ldap_party\": {
        \"ldap_configuration_name\": \"ldap_name\",
        \"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"
    }
}


Response Messages:
400: The LDAP configuration name does not exist
400: The given ldap_dn does not exist
400: The given ldap_dn is already imported
400: Failed to create the selected user
400: Failed to create the selected group
400: Selected user already exists in SecureChange but is not synchronized with the LDAP server. Go to Settings > LDAP and synchronize with the LDAP
400: This group has a large number of users, and will not be expanded in the users console. To be able to configure roles and step participation for individual users from the group, add them explicitly.
400: Failed to update the selected group
400: Unsupported LDAP object class
400: Unable to establish a connection to server <SERVER_IP>:<SERVER_PORT> within the configured timeout of <TIMEOUT> milliseconds.
403: Access is denied","folder":"2-22","rawModeData":"{\n\t\"ldap_party\": {\n\t\t\"ldap_configuration_name\": \"ldap_name\",\n\t\t\"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/import","collectionId":"2","id":"2-22-119","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Change local group members","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
id: Group ID
body: groupChangeDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group/1
BODY{
    \"group_change\":{
        \"member_ids_to_add\": [1,2],
        \"member_ids_to_remove\":[3,4]
    }
}    


Response Messages:
400: Exceeded limit of {MAXIMUM} group member changes
400: These user IDs do not exist: {IDs}
400: These user IDs do not exist or are not group members: {IDs}
400: Group ID {ID} is not a local group
400: Group ID {ID} does not exist
400: Cannot add a group to itself
400: Cannot add a group to a group that it already contains. Group {ID1} contains group {ID2}","folder":"2-22","rawModeData":"{\n\t\"group_change\":{\n\t\t\"member_ids_to_add\": [1,2],\n\t\t\"member_ids_to_remove\":[3,4]\n\t}\n}\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group/{{id}}","collectionId":"2","id":"2-22-120","method":"PUT"},{"name":"Return the specified user","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: User ID
showIndirectRelation: Members that belong to the selected group only indirectly [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User or group was not found.","dataMode":"params","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","collectionId":"2","id":"2-22-121","method":"GET"},{"name":"Delete the specified User or Group","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: User ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User with id {id} does not exist","dataMode":"params","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","collectionId":"2","id":"2-22-122","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Create local group","dataMode":"raw","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
body: CreateGroupDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group
BODY{
    \"group\": {
        \"name\": \"name1\",
        \"description\": \"description1\",
        \"email\": \"email1@tufin.com\"
    }
}    


Response Messages:
400: Input Validation Error : {field name}: {input validation error message}
400: Name already exists","folder":"2-22","rawModeData":"{\n\t\"group\": {\n\t\t\"name\": \"name1\",\n\t\t\"description\": \"description1\",\n\t\t\"email\": \"email1@tufin.com\"\n\t}\n}\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group","collectionId":"2","id":"2-22-123","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Returns the specified ticket to the specified step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"toStepId"}],"dataMode":"raw","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
toStepId: To which step we the ticket will return
body: RedoCommentDto

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/redo/1
BODY<redo_step_comment>
    <comment>please fix source </comment>
</redo_step_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
403: User has no permissions to redo ticket steps.
404: There is no ticket with ID.
404: No entity found for query","folder":"2-23","rawModeData":"\n\tplease fix source \n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/redo/{{toStepId}}","collectionId":"2","id":"2-23-124","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change the requester of the specified ticket task to the specified user.","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"assigneeId"}],"description":"Parameters:
id: Ticket ID
assigneeId: The assignee ID
body: CommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/change_requester/4
BODY<comment>
    <comment>user was deleted moving tickets to Bob</comment>
</comment>


Response Messages:
400: The change requester comment must be set in order to change the requester the ticket.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
404: There is no ticket with ID.
404: There is no requester (User) with ID.","dataMode":"raw","folder":"2-23","rawModeData":"\n\tuser was deleted moving tickets to Bob\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/change_requester/{{assigneeId}}","collectionId":"2","id":"2-23-125","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Confirm the request","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Ticket ID
requester_id: The user of the ticket's requester, when logged in user is confirm on behalf [optional]
body: Confirm comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/confirm?requester_id=5
BODY<confirm_comment>
    <comment>confirmed</comment>
</confirm_comment>


Response Messages:
400: User is trying to confirm a ticket that belongs to another user
400: User is not permitted to confirm this ticket on behalf another user
400: The user can not confirm the ticket, because he is not in the domain of the ticket
403: Access is denied.
404: There is no ticket with ID .","dataMode":"raw","folder":"2-23","rawModeData":"\n\tconfirmed\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/confirm","collectionId":"2","id":"2-23-126","method":"PUT"},{"headers":"Accept: application/json\n","name":"Cancel a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The ID of the ticket as shown in SecureChange
requester_id: The user of the ticket's requester, when logged in user is canceling on behalf [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/cancel?requester_id=5

Response Messages:
403: Access is denied.
404: Ticket is already closed
404: Ticket ID was not found","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/cancel","collectionId":"2","id":"2-23-127","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Reassigns the specified ticket task to the specified user.","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"assigneeId"}],"dataMode":"raw","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
assigneeId: The assignee ID
body: ReassignTaskCommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/reassign/4
BODY<reassign_task_comment>
    <comment>Please complete the AR</comment>
</reassign_task_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
404: There is no ticket with ID.
404: No entity found for query","folder":"2-23","rawModeData":"\n\tPlease complete the AR\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/reassign/{{assigneeId}}","collectionId":"2","id":"2-23-128","method":"PUT"},{"name":"Map rules to ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Maps the rules from the ticket to the relevant rules in SecureTrack.
Adds record set entries to the relevant rules metadata.
Link to history is found in the returned location header.
Applicable only for closed tickets in the following workflows: Access Request, Access Request and Modify Group, and Clone Server Policy.
Use handler_id for running on behalf of another user.
To get handler_id, use the System Users API.

Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: Run API on behalf of defined user id [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules?handler_id=5

Response Messages:
201: Started asynchronous mapping of rules to ticket ID <ID>. Mapping status is displayed in ticket history.
400: Ticket's workflow type does not support this operation
403: Access is denied.
403: You do not have permission to access ticket <ID>
403: On behalf user do not have permission to access ticket <ID>
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.
412: Ticket is not in closed status","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/map_rules","collectionId":"2","id":"2-23-129","method":"POST"},{"headers":"Accept: application/json\n","name":"Returns the history of the specified ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Ticket ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/history

Response Messages:
403: User has no permissions to view ticket history
404: You do not have permission to view this task. Contact your administrator for assistance.
404: There is no ticket with ID.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/history","collectionId":"2","id":"2-23-130","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Reject a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: The user id, when logged in user is rejecting on behalf [optional]
body: Reject comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/reject?handler_id=5
BODY<reject_comment>
    <comment>rejected</comment>
</reject_comment>


Response Messages:
400: Ticket status <STATUS> is incorrect to perform this action
400: User <NAME> has no permissions to perform this action
400: Comment cannot be empty
403: User is not permitted to reject this ticket on behalf another user
403: You do not have permission to access ticket <ID>
403: On behalf user do not have permission to access ticket <ID>
403: Access is denied.
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.","dataMode":"raw","folder":"2-23","rawModeData":"\n\trejected\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/reject","collectionId":"2","id":"2-23-131","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns a list of tickets by search parameters","description":"If the query is succesful but no results are found (for example, if there is no ticket for the specified Ticket ID) then the return code will be 200 and the results will be empty.

Parameters:
id: The ID number of the ticket as shown in SecureChange [optional]
subject: The subject of the ticket [optional]
requester: The requester of the ticket [optional]
group: The group handling the ticket [optional]
assigned_to: The user name of the person assigned to the ticket [optional]
priority: The priority of the ticket [optional]
status: The status of the ticket [optional]
sla_status: The SLA status of the ticket [optional]
field_name: Field name to search by [optional]
field_value: Field value to search by [optional]
current_step: Current step name [optional]
expiration_date_from: Search requests with expiration date from this date [optional]
expiration_date_to: Search requests with expiration date until this date [optional]
domain_name: The Domain of the ticket [optional]
start: Offset the count starting point [optional]
count: Ticket list length [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/search?id=1&status=IN_PROGRESS,REJECTED

Response Messages:
403: Access is denied.
400: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED, WAITING_TO_BE_ASSIGNED, ASSIGNED, WAITING_FOR_MORE_INFO, DONE, INVALID, PENDING, PENDING_LICENS
400: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
400: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
400: Cannot find specified domain <DOMAIN_NAME>","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/search","collectionId":"2","id":"2-24-132","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket stages","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}","collectionId":"2","id":"2-24-133","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of the tasks","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks","collectionId":"2","id":"2-24-134","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rule decommision verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/rule_decommission/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type <TYPE>.
404: Verifier results were not found in the request.","dataMode":"params","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/rule_decommission/verifier","collectionId":"2","id":"2-24-135","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a the fields","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","collectionId":"2","id":"2-24-136","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change multiple fields within a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_network_object\">
         <id>7885</id>
         <name>n_obj</name>
         <network_object type=\"Object\">
             <object_name>Host_10.1.1.1</object_name>
             <management_name>cp239</management_name>
         </network_object>
         <network_object type=\"Object\">
             <st_uid>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</st_uid>
             <management_id>2</management_id>
         </network_object>
         <network_object type=\"DNS\">
             <host_name>tufin.com</host_name>
         </network_object>
     <field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_service\">
         <id>7887</id>
         <name>service</name>
         <service type=\"PROTOCOL\">
             <protocol>TCP</protocol>
             <port>80</port>
         </service>
         <service type=\"Object\">
             <object_name>AOL</object_name>
             <management_name>cp239</management_name>
         </service>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-24","rawModeData":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","collectionId":"2","id":"2-24-137","method":"PUT"},{"name":"Returns topology map image (png file) for specific verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier/topology_map

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.
404: Toplogy map was not found for this field.","dataMode":"params","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier/topology_map","collectionId":"2","id":"2-24-138","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change the ticket properties","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Change the ticket properties listed in the TicketPropertiesDTO.
When specifying the notification_group property you must use the ID of the group or leave the ID empty to remove the group. This property can be updated on a closed ticket.
When specifying the referenced_ticket property you must use the ID of the ticket or leave the ID empty to remove the ticket.
When specifying the expiration_date property, you must use a yyyy-mm-dd format, or leave the value empty to remove the expiration date. To ignore the field, do not include it in the request. This property can be updated on a closed ticket.

Parameters:
body: ticketPropertiesDTO
id: The ID number of the ticket as shown in SecureChange

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <referenced_ticket>
        <id>9</id>
    </referenced_ticket>
    <notification_group>
        <id>10</id>
    </notification_group>
    <expiration_date>2022-12-10</expiration_date>
</ticket_properties>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id/>
    </notification_group>
    <referenced_ticket>
        <id/>
    </referenced_ticket>
    <expiration_date/>
</ticket_properties>


Response Messages:
400: Notification Group <ID> is a user and not a user group
400: Notification Group <ID> exceeds the configured maximum allowed number of users for notifications
400: <ID> (“Any User”) is not allowed as a Notification Group
400: Notification Group <ID> does not have permission of 'Group members can perform actions on requests submitted by other members'
400: Notification Group <ID> is not a member in the first step of the workflow
400: Notification Group is not enabled in this workflow
403: You do not have permission to change the Notification Group
404: There is no group with ID <ID>.
404: There is no ticket with ID <ID>.
400: Referenced ticket id cannot be the same as ticket id
400: invalid id format for referenced ticket
400: Cannot update properties [<Property A>, <Property B>] for ticket with status <STATUS>
403: You do not have permission to update this ticket at this stage. Contact your administrator for assistance.
403: The user is not allowed to add the specified referenced ticket.
400: Workflow does not support referenced ticket
400: Cannot delete expiration date on this workflow due to it being a mandatory field
400: Invalid date. Cannot update expiration to a date that has passed
400: Invalid value for field: expiration_date (The date format must be: yyyy-mm-dd)
400: Invalid value for field: expiration_date (The date is not valid)
400: This workflow does not support expiration dates","folder":"2-24","rawModeData":"\n\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/ticket_properties","collectionId":"2","id":"2-24-139","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Modify the Designer suggestions for Access Request or Clone Server Policy","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"instructionId"}],"dataMode":"raw","description":" GENERAL USE
1. Create a ticket using UI/API.
2. Run the designer using UI/API.
3. Use relevent API to get the designer results.
4. Run this API to modify the required parameters.

*Note: you can modify one parameter at a time.

Change rule location use
a. Modifying the rule order places the new rule before the rule with the specified identifier (rule name or number).
b. Modifying the rule placement to \"last\" places the new rule as last rule or last pre-rule (depending on the vendor convention for the device).
c. For vendors that support \"after\" placement, modifying the rule placement allows positioning the new rule before or after the suggested rule location.
d. For Check Point R80 and above releases, the indented rule numbering format can be applied to globally assigned policies (for example, “rule_order”: “4.5”).

track level permitted values:
NONE, LOG, ACCOUNT, ALERT, SNMP, MAIL, USER_DEFINED, EMERGENCIES, ALERTS, CRITICAL, ERRORS, WARNINGS, NOTIFICATIONS, INFORMATIONAL, DEBUGGING, DISABLED, DEFAULT, FULL_LOG, NETWORK_LOG, USER_ALERT_1, USER_ALERT_2, USER_ALERT_3

rule placement permitted values:
BEFORE, AFTER, LAST

Parameters:
body: DesignerInstructionChangeDTO
id: Ticket ID
taskId: Task ID
instructionId: Instruction ID
force: force update when new revision available [optional]

Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196?force=true
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_name\": {\"new_value\":\"new rule name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"track_level\": {\"new_value\":\"LOG\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_name\": {\"new_value\":\"new object name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"log_forwarding_profile\": {\"new_value\":\"new log forwarding profile\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"security_profile_group\": {\"new_value\":\"new security profile group\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_replace\": {
             \"new_value\":\"new object uid\",
             \"old_value\":\"old object uid\"
    }
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_order\": {\"new_value\":\"8\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"tags\": {\"values\":[\"tag1\", \"tag2\"]}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"tags\": {\"values\":[]}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"last\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"before\"}
}


Response Messages:
200: New rule will be shadowed
200: New rule will be shadowed or break acceleration
400: Modify Designer Results API is only supported for Access Request and Clone Server Policy workflows
412: Current instruction cannot be modified because either the implementation was successful or failed irrevocably.
412: Current step does not support Designer modification action
404: A ticket with ID <ID> cannot be found.
400: Task ID <ID> cannot be found in the current step with ID <ID>.
403: Changing <TYPE> is not supported on this device
403: This Change is not supported for <INSTRUCTION TYPE> instruction type\"
403: You do not have permission to update this task. Contact your administrator for assistance.
403: New revision is available, cannot modify the Designer results
404: Specified instruction, id: <ID> was not found
404: Designer results were not found in the access request.
400: a valid object name must start with an alphanumeric character and can contain alphanumeric characters, underscore '_'. Hypen '-', dot '.' or spaces
400: For this device, the comment must be less than 100 characters per line.
400: For this device, this field must be less than <NUMBER OF CHARACTERS> characters
400: For this device, this field is required.
400: For this device, a valid object name cannot be <OBJECT NAME> because it is a reserved word
409: Rule name already exists for this device. Please give this rule a unique name.
409: Rule name <NAME> already exists in the device group hierarchy. Choose a unique name for this rule.
400: Comment contains invalid characters.
400: <DEVICE> does not support tracking level <TRACKING LEVEL>
400: <TRACKING LEVEL> is not a valid rule track level value
400: a valid object name cannot contain any of the following characters: <CHARACTERS>
400: a valid object name must be less than <NUMBER OF CHARACTERS> characters
400: a valid object name cannot be empty
400: a valid object name must conform to the following pattern: <STRING PATTERN>
409: Object already exists
400: A security profile group cannot be empty.
404: The security profile group <SECURITY PROFILE GROUP> was not found.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to validate the security profile group.
400: A log forwarding profile cannot be empty.
400: Tag list is longer than 20 items.
400: Tag list contains the same tag more than once.
400: These tags don't exist or aren't relevant to the rule on its DG location : <Tags>
404: The log forwarding profile <LOG FORWARDING PROFILE> was not found.
500: An error occurred in SecureTrack while trying to validate the log forwarding profile.
400: Object UID <OLD OBJECT UID> not found in the rule for this instruction.
400: Values of new object UID <NEW OBJECT UID> and old object UID <OLD OBJECT UID> do not match.
400: Rule placement can only be: \"before\", \"after\" or \"last\".
400: You can't change rule placement when there is no rule order. please add rule order first.
400: You can't change rule placement to \"After\" for this type of device.
400: You can't change rule placement to \"Last\" for this type of device.","folder":"2-24","rawModeData":"{\n\t\"rule_placement\": {\"new_value\":\"before\"}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/tasks/{{taskId}}/designer/instruction/{{instructionId}}","collectionId":"2","id":"2-24-140","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified tickets (max 100 tickets in a single query)","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
status: The status of the tickets [optional]
count: Tickets list max pagination length (max value is 100) [optional]
start: Offset the count starting point [optional]
desc: Get the list in descending order [optional]
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets?status=In Progress&count=10&start=3&expand_links=false

Response Messages:
400: Status is not a valid. The valid values are: TICKET_STATUSES
400: Can not fetch more than 100 tickets in 1 time
403: Access is denied","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","collectionId":"2","id":"2-24-141","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Submit a new ticket to Secure Change","dataMode":"raw","description":" GENERAL USE
When posting a Modify Group ticket, group scope must be configured for FortiManager advanced and Juniper SRX devices.
Juniper SRX devices:
Global address-book will be used unless an existing address-book is given.
Ticket validation will fail in case given Address Book is not configured on the device.
FortiManager advanced devices:
'Any' zone will be used unless an existing zone is given.
Ticket validation will fail in case given zone is not configured on the device.
*Note: Zones and address-books must not be configured for other devices.

Using newly created objects from a different group in the same ticket
The user can add a newly created object from a different group to the selected group, with object_UID equal to the name of the newly created object.
For management devices with hierarchies, the newly created object does not populate other levels of the hierarchies.

Permitted values for @type
Allowed values for @type property included in DestinationDTO and SourceDTO are:
ANY
IP
DNS
Object - Device's existing object
INTERNET
LDAP (SourceDTO only) - LDAP entity

To use a service object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketDTO
closed: Cannot be done from the API [optional]
count [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>topology mode_AR1-with topology_AR2-no topology</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <domain_name>Default</domain_name>
    <workflow>
         <id>7</id>
         <name>Workflow with topology</name>
    </workflow>
    <steps>
         <step>
             <name>Open request</name>
             <tasks>
                 <task>
                     <fields>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_access_request\">
                             <name>Required Access</name>
                             <access_request>
                                 <use_topology>true</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>ASA</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>host_10.100.10.140</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
                                         <management_id>13</management_id>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>h_10.10.10.10</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"PROTOCOL\">
                                         <protocol>TCP</protocol>
                                         <port>80</port>
                                     </service>
                                     <service type=\"APPLICATION_IDENTITY\">
                                         <application_name>Gmail</application_name>
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                             <access_request>
                                 <use_topology>false</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>inside_access_in</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>1.1.1.0</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>network_regi3</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"ANY\">
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                             <name>Business Justification</name>
                             <text>I need access to ftp </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                             <name>Project Number</name>
                             <text>CR124560 </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                             <name>Hyperlink</name>
                             <url>http://192.168.1.1/ticket</url>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                             <name>Change Window</name>
                             <selection>Monday</selection>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                             <name>manager email</name>
                             <text>manager@tufin.com</text>
                         </field>
                     </fields>
                 </task>
             </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>New MG ticket</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <status>In Progress</status>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>6</id>
        <name>MG</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>72</id>
            <name>New step</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>72</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>
                    <status>ASSIGNED</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>262</id>
                            <name>MG</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>ExistingGroup</name>
                                <object_UID>{c862fb6f-1314-45da-9e01-56c9b85d001d}</object_UID>
                                <management_id>58</management_id>
                                <management_name>FMG/root</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>157</id>
                                        <name>10.100 net</name>
                                        <object_UID>{37cdc055-7aac-4385-b46b-cc54d95e4b6d}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.100.0.0/255.255.0.0</object_details>
                                        <management_id>58</management_id>
                                        <management_name>FMG/root</management_name>
                                        <status>NOT_CHANGED</status>
                                        <object_updated_status>EXISTING_EDITED</object_updated_status>
                                        <comment>new_comment</comment>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                            <group_change>
                                <name>78.45.12.0</name>
                                <object_UID>{cac64d34-a05e-4a05-b271-64642eb976ff}</object_UID>
                                <management_id>28</management_id>
                                <management_name>SRX-root-lsys</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>158</id>
                                        <name>78.45.12.1</name>
                                        <object_UID>{7912c335-6dbe-47de-b872-1322f9015b2f}</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>78.45.12.1/255.255.255.255</object_details>
                                        <management_id>28</management_id>
                                        <management_name>SRX-root-lsys</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <address_book>
                                    <name>global</name>
                                </address_book>
                            </group_change>
                            <group_change>
                                <name>10.10.0.0/16</name>
                                <object_UID>{5dff0bd8-51e4-4a83-8138-d54dd18ca52b}</object_UID>
                                <management_id>24</management_id>
                                <management_name>NSX-Distributed Firewall</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>161</id>
                                        <name>10.10.0.0/16</name>
                                        <object_UID>{5d7b826c-f053-40fd-81bd-7a6f44cf15ef}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.10.0.0/255.255.0.0</object_details>
                                        <management_id>24</management_id>
                                        <management_name>NSX-Distributed Firewall</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>test API</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>8</id>
        <name>Modify group</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>11</id>
            <name>Open request</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>11</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>                    <status>DONE</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>137</id>
                            <name>ff</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>port1Group</name>
                                <object_UID>{d5b4459b-6b27-4012-9924-b244c250520f}</object_UID>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"HOST\">
                                        <id>69</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <status>ADDED</status>
                                        <comment/>
                                        <object_updated_status>NEW</object_updated_status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                            <group_change>
                                <name>gfd</name>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>70</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <management_name>10.100.111.8/ADOM_5_2</management_name>
                                        <status>ADDED</status>
                                        <object_updated_status>EXISTING_NOT_EDITED</object_updated_status>
                                    </member>
                                </members>
                                <change_action>CREATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <current_step>
        <id>12</id>
        <name>Copy of Open request</name>
    </current_step>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"application_details\": { \"id\": \"1\" },
        \"referenced_ticket\": { \"id\": \"3\" },
        \"subject\": \"topology mode_AR1-with topology_AR2-no topology\",
        \"priority\": \"Normal\",
        \"workflow\": { \"name\": \"ar\" }
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"subject\": \"RM_EXAMPLE\",
        \"requester\": \"m\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"domain_name\": \"\",
        \"workflow\": {
            \"name\": \"RM\",
        },
        \"steps\": {
            \"step\": [
                {
                    \"tasks\": {
                        \"task\": {
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"rule_modification_field\",
                                    \"devices\": {
                                        \"device\": {
                                            \"revision_id\": 24,
                                            \"management_id\": 5,
                                            \"bindings\": {
                                                \"binding\": {
                                                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                    \"binding\": {
                                                        \"@xsi.type\": \"policy__binding\",
                                                        \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                                    },
                                                    \"rules\": {
                                                        \"rule\": {
                                                            \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                                            \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                                        }
                                                    }
                                                }
                                            }
                                        }
                                    },
                                    \"rule_modifications\": {
                                        \"rule_modification\": {
                                            \"@xsi.type\": \"modify_rule_modification\",
                                            \"rule_key\": {
                                                \"device_id\": 5,
                                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                            },
                                            \"source_modifications\": {
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                                        \"name\": \"RANGE_1\",
                                                                        \"comment\": \"EXAMPLE_RANGE\",
                                                                        \"min_ip\": \"3.3.3.3\",
                                                                        \"max_ip\": \"5.5.5.5\"
                                                                    }
                                                                ]
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                                        \"name\": \"NET_1\",
                                                                        \"comment\": \"\",
                                                                        \"ip\": \"3.3.3.3\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"destination_modifications\": {
                                                \"id\": 11,
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                                        \"name\": \"Host123\",
                                                                        \"comment\": \"cccHost\",
                                                                        \"ip\": \"1.2.3.4\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"service_modifications\": {
                                                \"id\": 9,
                                                \"service_object_cell_modifications\": {
                                                    \"service_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                                    \"name\": \"ICMP_1\",
                                                                    \"comment\": \"EXAMPLE_ICMP\",
                                                                    \"type\": {
                                                                        \"from\": 55,
                                                                        \"to\": 55
                                                                    }
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"UDP_1\",
                                                                    \"comment\": \"EXAMPLE_UDP\",
                                                                    \"port\": {
                                                                        \"from\": 3,
                                                                        \"to\": 3
                                                                    },
                                                                    \"protocol\": \"UDP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"TCP_1\",
                                                                    \"comment\": \"EXAMPLE_TCP\",
                                                                    \"port\": {
                                                                        \"from\": 1234,
                                                                        \"to\": 1234
                                                                    },
                                                                    \"protocol\": \"TCP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                                                }
                                                            }
                                                        }
                                                    ]
                                                }
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
    }
}


Response Messages:
400: Application ID is missing.
400: Create closed ticket is enabled only from SecureApp application.
400: The application was already deleted.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: You cannot open a new ticket with an empty subject.
400: Expiration field is required.
400: Submit ticket enabled only with the first step
400: First step can be only with one task
400: The specified workflow does not contain an access request field in the first step.
400: There are no changed connections that are ready for creating a ticket.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
400: Managed tasks are not initialized or done
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (Rule Modification workflow is not supported for this device)
403: You do not have permissions to edit this application.
403: Logged in user: NAME do not have permission to perform on behalf actions
403: You are not a participant in the first step of this workflow
403: UNAUTHORIZED
404: There is no application with the specified ID
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (Network object cell modification missing action)
400: Invalid value for field: <FIELD_NAME> (Network object cell modification element cannot be empty)
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
400: Workflow does not support referenced ticket
400: The referenced ticket cannot be the ticket itself
406: Invalid format detected: <subject|name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: <subject|name> - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: <subject|name> - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-24","rawModeData":"{\n\t\"ticket\": {\n\t\t\"subject\": \"RM_EXAMPLE\",\n\t\t\"requester\": \"m\",\n\t\t\"requester_id\": 4,\n\t\t\"priority\": \"Normal\",\n\t\t\"domain_name\": \"\",\n\t\t\"workflow\": {\n\t\t\t\"name\": \"RM\",\n\t\t},\n\t\t\"steps\": {\n\t\t\t\"step\": [\n\t\t\t\t{\n\t\t\t\t\t\"tasks\": {\n\t\t\t\t\t\t\"task\": {\n\t\t\t\t\t\t\t\"fields\": {\n\t\t\t\t\t\t\t\t\"field\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\t\t\t\t\t\"devices\": {\n\t\t\t\t\t\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 11,\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 9,\n\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","collectionId":"2","id":"2-24-142","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Change a field within a task of a ticket at the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/7642
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"approve_reject\">
         <id>7661</id>
         <name>approve access</name>
         <approved>true</approved>
         <reason>Request approved</reason>
    </field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-24","rawModeData":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-24-143","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change a task of a ticket at the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY<task>
    <status>DONE</status>
    <fields/>
</task>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-24","rawModeData":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}","collectionId":"2","id":"2-24-144","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change multiple field within a task of a ticket in the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_server_decommission_request\">
         <id>7591</id>
         <name>sd</name>
         <server_decommission_request>
             <id>7596</id>
             <order>DR1</order>
             <servers>
                 <server type=\"IP\">
                     <id>7593</id>
                     <ip_address>2.2.2.2</ip_address>
                     <netmask>255.255.255.255</netmask>
                 </server>
             </servers>
             <targets>
                 <target type=\"ANY\">
                     <id>7595</id>
                 </target>
             </targets>
             <comment>change ip from 1.1.1.1 to 2.2.2.2</comment>
         </server_decommission_request>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"date\">
         <id>7786</id>
         <name>date</name>
         <value>2015-12-15</value>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"time\">
         <id>7787</id>
         <name>time</name>
         <value>12:00</value>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object / device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object / device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-24","rawModeData":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields","collectionId":"2","id":"2-24-145","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get commands for device from designer results of a specific field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
deviceId: Device ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/device/136/commands

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the access request.
404: Device with ID <ID> was not found in Designer result.
404: Device with ID <ID> does not support Commands feature.","dataMode":"params","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/device/{{deviceId}}/commands","collectionId":"2","id":"2-24-146","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket stages","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps","collectionId":"2","id":"2-24-147","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the results of the Commit action","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"},{"value":null,"type":"text","enabled":true,"key":"managementId"}],"dataMode":"params","description":"GENERAL USE
The report returns the Commit results for the device with the specified management ID and for the devices suggested in the Designer results. The report also includes results for devices that are in the related hierarchy of these devices.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID
managementId: Management ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/commit_report/3
OUTPUT{
    \"commit_report\": {
        \"ticketId\": 27,
        \"statTime\": \"24-Oct-2018 08:55 AM\",
        \"endTime\": \"24-Oct-2018 08:56 AM\",
        \"duration\": \"00:00:30\",
        \"vendorName\": \"PALO ALTO NETWORKS\",
        \"managmentName\": \"pano211\",
        \"devices\": {
            \"device\": [
                {
                    \"name\": \"DG1.1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                },
                {
                    \"name\": \"DG1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                }
            ]
        }
    }
}


Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request.","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/commit_report/{{managementId}}","collectionId":"2","id":"2-24-148","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified field","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
fieldId: The ID number of the field as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/229

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .
404: Field ID was not found in Task ID in Stage ID in ticket ID .","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-24-149","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a field within a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields/7742
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multiple_selection\">
     <id>7742</id>
     <name>filter type</name>
     <selected_options>
         <selected_option>
             <value>FTP</value>
         </selected_option>
     </selected_options>
</field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Deleting rule recertification info is not allowed
400: Application Change field cannot be managed via this REST API
400: Rule associated with successfully updated recertification info cannot be removed
400: Rule was already updated
400: Rule does not exist
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-24","rawModeData":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-24-150","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get server clone policy verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/clone_server_policy/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the server clone policy request.","dataMode":"params","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/clone_server_policy/verifier","collectionId":"2","id":"2-24-151","method":"GET"},{"headers":"Accept: application/json\n","name":"Get designer results according to field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve designer results generated in R17-2 and later.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request.","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer","collectionId":"2","id":"2-24-152","method":"GET"},{"headers":"Accept: application/json\n","name":"Get security zones according to field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve security zones for multi access result field

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/security_zones

Response Messages:
404: There is no ticket with ID <ID>.
401: Cannot update ticket because it is either closed, rejected or waiting for requester confirmation
400: Task ID <ID> cannot be found in the current step with ID <ID>.
400: You can only update the current step of the ticket. Step ID <ID> does not match the current step ID <ID>.
400: The task with ID <ID> does not contain a field with ID <ID>.
400: The task with ID <ID> does not contain a field of type <ID>.
400: Security zones tool is not enabled for the requested field.
403: You do not have permission to view this task. Contact your administrator for assistance.","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/security_zones","collectionId":"2","id":"2-24-153","method":"GET"},{"headers":"Accept: application/json\n","name":"Get access request verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.","dataMode":"params","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier","collectionId":"2","id":"2-24-154","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1
OUTPUT {
    \"ticket\": {
        \"id\": 1,
        \"subject\": \"AR-Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 11,
            \"name\": \"AR & MG\",
            \"uses_topology\": true
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 209,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 209,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": [
                                    {
                                        \"@xsi.type\": \"multi_access_request\",
                                        \"id\": 1695,
                                        \"name\": \"AR\",
                                        \"read_only\": false,
                                        \"access_request\": {
                                            \"id\": 1706,
                                            \"order\": \"AR1\",
                                            \"risk_analysis_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"verifier_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"use_topology\": true,
                                            \"targets\": {
                                                \"target\": {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1705
                                                }
                                            },
                                            \"users\": {
                                                \"user\": [
                                                    \"Any\"
                                                ]
                                            },
                                            \"sources\": {
                                                \"source\": [
                                                    {
                                                        \"@type\": \"INTERNET\",
                                                        \"id\": 1701
                                                    },
                                                    {
                                                        \"@type\": \"DNS\",
                                                        \"id\": 1702,
                                                        \"host_name\": \"www.google.com\",
                                                        \"dns_ip_addresses\": {
                                                            \"ip_address\": \"216.58.214.100\"
                                                        }
                                                    },
                                                    {
                                                        \"@type\": \"IP\",
                                                        \"id\": 1703,
                                                        \"ip_address\": \"1.1.1.1\",
                                                        \"netmask\": \"255.255.255.255\",
                                                        \"nat_ip_address\": \"4.4.4.4\",
                                                        \"nat_netmask\": \"255.255.255.255\"
                                                    }
                                                ]
                                            },
                                            \"destinations\": {
                                                \"destination\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1697
                                                    }
                                                ]
                                            },
                                            \"services\": {
                                                \"service\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1699
                                                    }
                                                ]
                                            },
                                            \"action\": \"Accept\",
                                            \"labels\": \"\"
                                        }
                                    },
                                    {
                                        \"@xsi.type\": \"multi_group_change\",
                                        \"id\": 1707,
                                        \"name\": \"MG\",
                                        \"read_only\": false,
                                        \"implementation_status\": \"NOT_SUPPORTED\"
                                    }
                                ]
                            }
                        }
                    }
                },
                {
                    \"id\": 210,
                    \"name\": \"STEP2 - auto AR with designer /update /commit\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 210,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"unlicensed_devices_for_automation\": {
                                \"unlicensed_device_for_automation\": [
                                    {
                                        \"id\": \"2\",
                                        \"name\": \"asa\"
                                    }
                                ]
                            }
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"multi_access_request\",
                                    \"id\": 1709,
                                    \"name\": \"AR\",
                                    \"read_only\": false,
                                    \"access_request\": {
                                        \"id\": 1720,
                                        \"order\": \"AR1\",
                                        \"risk_analysis_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"verifier_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"use_topology\": true,
                                        \"targets\": {
                                            \"target\": {
                                                \"@type\": \"ANY\",
                                                \"id\": 1719
                                            }
                                        },
                                        \"users\": {
                                            \"user\": [
                                                \"Any\"
                                            ]
                                        },
                                        \"sources\": {
                                            \"source\": [
                                                {
                                                    \"@type\": \"INTERNET\",
                                                    \"id\": 1721
                                                },
                                                {
                                                    \"@type\": \"DNS\",
                                                    \"id\": 1722,
                                                    \"host_name\": \"www.google.com\",
                                                    \"dns_ip_addresses\": {
                                                        \"ip_address\": \"216.58.214.100\"
                                                    }
                                                },
                                                {
                                                    \"@type\": \"IP\",
                                                    \"id\": 1723,
                                                    \"ip_address\": \"1.1.1.1\",
                                                    \"netmask\": \"255.255.255.255\",
                                                    \"nat_ip_address\": \"4.4.4.4\",
                                                    \"nat_netmask\": \"255.255.255.255\"
                                                },
                                                {
                                                    \"@type\": \"RANGE\",
                                                    \"id\": 1724,
                                                    \"range_first_ip\": \"1.1.11.1\",
                                                    \"range_last_ip\": \"1.1.11.10\"
                                                }
                                            ]
                                        },
                                        \"destinations\": {
                                            \"destination\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1711
                                                }
                                            ]
                                        },
                                        \"services\": {
                                            \"service\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1713
                                                }
                                            ]
                                        },
                                        \"action\": \"Accept\",
                                        \"labels\": \"\"
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 210,
            \"name\": \"STEP2 - auto AR with designer /update /commit\"
        },
        \"comments\": \"\"
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2
OUTPUT {
    \"ticket\": {
        \"id\": 2,
        \"subject\": \"Clone Server Policy Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 12,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"referenced_ticket\": {
            \"id\": 1,
            \"name\": \"Ticket Subject Sample\",
            \"link\": {
                \"@href\": \"https://host/securechangeworkflow/api/securechange/tickets/1\"
            }
        },
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 109,
            \"name\": \"sc_12705\",
            \"uses_topology\": false
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 78,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 78,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 872,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 869,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 871,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                },
                {
                    \"id\": 79,
                    \"name\": \"Business Approval\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 79,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 876,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 873,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 875,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 79,
            \"name\": \"Business Approval\"
        },
        \"comments\": \"\"
    }
}


Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: No entity found for query","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}","collectionId":"2","id":"2-24-155","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns a list of tickets by search parameters","description":"Parameters:
parameter: Free text search parameter (Search syntax details) [optional]
start: Offset the count starting point [optional]
count: Tickets list max length (max value is 1000) [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/free_text_search/?parameter=taskstatus:ASSIGNED AND priority:High

Response Messages:
400: Can not fetch more than 1000 tickets in 1 time
403: Access is denied.
404: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED
404: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
404: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal count value entered. Max value is 1000
404: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
404: No entity found for query","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/free_text_search","collectionId":"2","id":"2-24-156","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4
BODY<task>
     <status>ASSIGNED</status>
     <fields>
         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
             <id>7599</id>
             <name>mf</name>
             <read_only>false</read_only>
             <implementation_status>NOT_STARTED</implementation_status>
             <group_change>
                        <name>ggg</name>
                        <st_uid>{A12AE330-0DBD-11E5-B841-7F0000010E0E}</st_uid>
                        <management_id>42</management_id>
                        <management_name>cp239</management_name>
                        <members>
                             <member type=\"Object\">
                                 <id>8</id>
                                 <name>yaakovs_host</name>
                                 <st_uid>{BDAA378C-C90B-4D12-B598-1AFED2D1DA14}</st_uid>
                                 <object_type>Host</object_type>
                                 <object_details>1.1.1.1/255.255.255.255</object_details>
                         <management_id>42</management_id>
                         <management_name>cp239</management_name>
                                 <status>NOT_CHANGED</status>
                             </member>
                             <member type=\"Object\">
                                 <id>9</id>
                                    <name>Avi_10.100.120.254</name>
                                    <st_uid>{8F195CDC-F426-47B6-9E8A-1FF14C17E54F}</st_uid>
                                     <object_type>Host</object_type>
                                     <object_details>10.100.120.254/255.255.255.255</object_details>
                                     <management_id>42</management_id>
                                     <management_name>cp239</management_name>
                                     <status>NOT_CHANGED</status>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>2.2.2.2/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>3.3.3.3/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                 </members>
                 <change_implementation_status>NOT_RUN</change_implementation_status>
                    </group_change>
            </field>
     </fields>
</task>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-24","rawModeData":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","collectionId":"2","id":"2-24-157","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2?expand_links=true

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","collectionId":"2","id":"2-24-158","method":"GET"}],"order":[],"name":"Tufin Tufin SecureChange/SecureApp R20-2-HF2","id":"2","description":"Tufin Orchestration Suite - Tufin SecureChange/SecureApp APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securechangeworkflow/apidoc"} \ No newline at end of file diff --git a/Postman Format v1/R20-2 postman collection/securetrack_R20-2-HF2.json b/Postman Format v1/R20-2 postman collection/securetrack_R20-2-HF2.json new file mode 100644 index 0000000..298bbfd --- /dev/null +++ b/Postman Format v1/R20-2 postman collection/securetrack_R20-2-HF2.json @@ -0,0 +1 @@ +{"folders":[{"order":["1-1-1","1-1-2","1-1-3","1-1-4"],"collectionId":"1","name":"Additional Policy Fields","hasRequests":true,"id":"1-1"},{"order":["1-2-5","1-2-6","1-2-7","1-2-8"],"collectionId":"1","name":"Application IDs","hasRequests":true,"id":"1-2"},{"order":["1-3-9","1-3-10"],"collectionId":"1","name":"Change Authorization","hasRequests":true,"id":"1-3"},{"order":["1-4-11","1-4-12","1-4-13"],"collectionId":"1","name":"Change Windows","hasRequests":true,"id":"1-4"},{"order":["1-5-14","1-5-15","1-5-16","1-5-17","1-5-18"],"collectionId":"1","name":"Device Interfaces and Zones","hasRequests":true,"id":"1-5"},{"order":["1-6-19","1-6-20","1-6-21","1-6-22"],"collectionId":"1","name":"Domains","hasRequests":true,"id":"1-6"},{"order":["1-7-23"],"collectionId":"1","name":"General Properties","hasRequests":true,"id":"1-7"},{"order":["1-8-24","1-8-25","1-8-26","1-8-27"],"collectionId":"1","name":"IPsec VPN","hasRequests":true,"id":"1-8"},{"order":["1-9-28","1-9-29","1-9-30","1-9-31","1-9-32"],"collectionId":"1","name":"Internet Objects","hasRequests":true,"id":"1-9"},{"order":["1-10-33","1-10-34","1-10-35","1-10-36"],"collectionId":"1","name":"LDAP","hasRequests":true,"id":"1-10"},{"order":["1-11-37","1-11-38","1-11-39","1-11-40","1-11-41","1-11-42","1-11-43","1-11-44","1-11-45","1-11-46","1-11-47"],"collectionId":"1","name":"Monitored Devices","hasRequests":true,"id":"1-11"},{"order":["1-12-48","1-12-49","1-12-50"],"collectionId":"1","name":"NAT Policies","hasRequests":true,"id":"1-12"},{"order":["1-13-51","1-13-52","1-13-53","1-13-54","1-13-55","1-13-56","1-13-57"],"collectionId":"1","name":"Network Objects","hasRequests":true,"id":"1-13"},{"order":["1-14-58","1-14-59","1-14-60","1-14-61","1-14-62","1-14-63","1-14-64","1-14-65","1-14-66","1-14-67","1-14-68","1-14-69","1-14-70","1-14-71","1-14-72","1-14-73","1-14-74","1-14-75","1-14-76","1-14-77","1-14-78","1-14-79","1-14-80","1-14-81","1-14-82","1-14-83","1-14-84","1-14-85","1-14-86","1-14-87","1-14-88","1-14-89","1-14-90","1-14-91","1-14-92","1-14-93","1-14-94","1-14-95","1-14-96","1-14-97","1-14-98","1-14-99","1-14-100","1-14-101","1-14-102","1-14-103","1-14-104","1-14-105","1-14-106","1-14-107","1-14-108","1-14-109","1-14-110","1-14-111","1-14-112","1-14-113","1-14-114","1-14-115"],"collectionId":"1","name":"Network Topology","hasRequests":true,"id":"1-14"},{"order":["1-15-116","1-15-117","1-15-118"],"collectionId":"1","name":"Network Zone Manager - Patterns","hasRequests":true,"id":"1-15"},{"order":["1-16-119","1-16-120","1-16-121","1-16-122","1-16-123","1-16-124","1-16-125"],"collectionId":"1","name":"Network Zone Manager - Subnets","hasRequests":true,"id":"1-16"},{"order":["1-17-126","1-17-127","1-17-128","1-17-129","1-17-130","1-17-131","1-17-132","1-17-133","1-17-134","1-17-135","1-17-136","1-17-137","1-17-138","1-17-139","1-17-140","1-17-141"],"collectionId":"1","name":"Network Zone Manager - Zones","hasRequests":true,"id":"1-17"},{"order":["1-18-142","1-18-143","1-18-144","1-18-145","1-18-146","1-18-147"],"collectionId":"1","name":"Policies and Sub-Policies","hasRequests":true,"id":"1-18"},{"order":["1-19-148"],"collectionId":"1","name":"Policy Analysis","hasRequests":true,"id":"1-19"},{"order":["1-20-149","1-20-150","1-20-151","1-20-152","1-20-153","1-20-154"],"collectionId":"1","name":"Policy Browser (formerly Rule Documentation)","hasRequests":true,"id":"1-20"},{"order":["1-21-155","1-21-156","1-21-157","1-21-158","1-21-159","1-21-160","1-21-161","1-21-162"],"collectionId":"1","name":"Policy Optimization","hasRequests":true,"id":"1-21"},{"order":["1-22-163","1-22-164","1-22-165"],"collectionId":"1","name":"Revisions","hasRequests":true,"id":"1-22"},{"order":["1-23-166","1-23-167"],"collectionId":"1","name":"Rule Usage","hasRequests":true,"id":"1-23"},{"order":["1-24-168","1-24-169","1-24-170","1-24-171","1-24-172","1-24-173","1-24-174","1-24-175"],"collectionId":"1","name":"Security Rules","hasRequests":true,"id":"1-24"},{"order":["1-25-176","1-25-177","1-25-178","1-25-179","1-25-180","1-25-181","1-25-182"],"collectionId":"1","name":"Services and Ports","hasRequests":true,"id":"1-25"},{"order":["1-26-183","1-26-184","1-26-185"],"collectionId":"1","name":"Time Objects","hasRequests":true,"id":"1-26"},{"order":["1-27-186"],"collectionId":"1","name":"Traffic Policy Matcher","hasRequests":true,"id":"1-27"},{"order":["1-28-187","1-28-188","1-28-189","1-28-190","1-28-191"],"collectionId":"1","name":"Unified Security Policy - Access Request Violations","hasRequests":true,"id":"1-28"},{"order":["1-29-192","1-29-193","1-29-194","1-29-195","1-29-196"],"collectionId":"1","name":"Unified Security Policy - Alerts","hasRequests":true,"id":"1-29"},{"order":["1-30-197","1-30-198","1-30-199","1-30-200","1-30-201","1-30-202","1-30-203","1-30-204"],"collectionId":"1","name":"Unified Security Policy - Cloud Tag Policy","hasRequests":true,"id":"1-30"},{"order":["1-31-205","1-31-206","1-31-207","1-31-208","1-31-209","1-31-210","1-31-211","1-31-212"],"collectionId":"1","name":"Unified Security Policy - Exceptions","hasRequests":true,"id":"1-31"},{"order":["1-32-213","1-32-214","1-32-215","1-32-216","1-32-217","1-32-218"],"collectionId":"1","name":"Unified Security Policy - Security Zone Matrix","hasRequests":true,"id":"1-32"},{"order":["1-33-219","1-33-220"],"collectionId":"1","name":"Unified Security Policy - Violations","hasRequests":true,"id":"1-33"}],"requests":[{"headers":"Accept: application/json\n","name":"Get all URL Categories by revision.","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"}],"dataMode":"params","description":"Fetches list of URL Categories defined in a revision given by ID.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories","collectionId":"1","id":"1-1-1","method":"GET"},{"headers":"Accept: application/json\n","name":"Get additional parameters identities by revision","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"}],"dataMode":"params","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
type: Additional parameter type [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group

Response Messages:
200: Successful
400: Invalid request","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters","collectionId":"1","id":"1-1-2","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific additional parameter identity","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Additional parameter IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters/{{ids}}","collectionId":"1","id":"1-1-3","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a URL Category.","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more URL Categories.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Url Category IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories/{{ids}}","collectionId":"1","id":"1-1-4","method":"GET"},{"headers":"Accept: application/json\n","name":"Get applications identities by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of applications defined in a revision given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 1,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/applications","collectionId":"1","id":"1-2-5","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific application identity","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760
","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/applications/{{ids}}","collectionId":"1","id":"1-2-6","method":"GET"},{"headers":"Accept: application/json\n","name":"Get application identities by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of applications defined on device given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 50,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications","collectionId":"1","id":"1-2-7","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific application identity","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
Note: This API retrieves the information from the latest revision.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
id: Device ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/1/applications/701
","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications/{{ids}}","collectionId":"1","id":"1-2-8","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Compare revisions on two different devices in terms of traffic.","dataMode":"raw","description":"This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic.
The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions.
The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions.
Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared.
Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules
Note 3: The format of the result is the same as the one returned by /change_authorization
Note 4: The API accepts in request body only one pair of oldId - newId map
Note 5: The request is valid only if the mapping ids are found in the active policies

Parameters:
body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions.

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison
BODY{
    \"policy_traffic_comparison_request\": {
        \"oldVersionId\": \"234\",
        \"newVersionId\": \"179\",
        \"oldId2newIdMap\": [
            {
                \"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",
                \"newId\" : \"{00-FACED0-00}\"
            }
        ],
        \"withTraffic\": true
    }
}


Response Messages:
200: Policies diff was successfully calculated
400: Could not find the requested revisions for comparison","folder":"1-3","rawModeData":"{\n\t\"policy_traffic_comparison_request\": {\n\t\t\"oldVersionId\": \"234\",\n\t\t\"newVersionId\": \"179\",\n\t\t\"oldId2newIdMap\": [\n\t\t\t{\n\t\t\t\t\"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",\n\t\t\t\t\"newId\" : \"{00-FACED0-00}\"\n\t\t\t}\n\t\t],\n\t\t\"withTraffic\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/policyTrafficComparison","collectionId":"1","id":"1-3-9","method":"POST"},{"headers":"Accept: application/json\n","name":"Determine if changes between two revisions are authorized","data":[{"value":null,"type":"text","enabled":true,"key":"new_version"},{"value":null,"type":"text","enabled":true,"key":"old_version"}],"dataMode":"params","description":"This API checks for unauthorized changes between any two versions of a firewall policy.
The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets.
The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket.

The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove).
The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes.

Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing.
Note 2: Use the ID returned by the /revisions API for new_version and old_version.
Note 3: The default value for traffic_details and ignore_tickets is false.
Note 4: Traffic that is handled by an implicit rule will not have a rule ID.

Parameters:
new_version: New version ID
old_version: Old version ID
traffic_details: Return unauthorized traffic change details for all modified rules [optional]
ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional]

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true

Response Messages:
200: Change authorization has been successfully calculated
400: Input parameters are not valid
400: Could not find the requested revisions for comparison","folder":"1-3","url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/","collectionId":"1","id":"1-3-10","method":"GET"},{"headers":"Accept: application/json\n","name":"Get scheduling and device details for a specific change window","data":[{"value":null,"type":"text","enabled":true,"key":"uid"},{"value":null,"type":"text","enabled":true,"key":"task_id"}],"dataMode":"params","description":"Retrieves scheduling and device details for a specific change window.

Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
task_id: Task Id

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1
OUTPUT {
    \"commit_task\": {
        \"id\": 1,
        \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
        \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
        \"errors\": \"\",
        \"device_commits\": {
            \"device_commit\": [
                {
                    \"id\": 1,
                    \"result\": {
                        \"errors\": {
                            \"error\": \"got_error_from_dcs\"
                        },
                        \"device\": {
                            \"id\": 17,
                            \"status\": \"FAILURE\",
                            \"revision_id\": 1,
                            \"errors\": {
                                \"error\": \"Login error\"
                            }
                        }
                    }
                },
                {
                    \"id\": 2,
                    \"result\": {
                        \"errors\": \"\",
                        \"device\": {
                            \"id\": 19,
                            \"status\": \"SUCCESS_WITH_WARNINGS\",
                            \"revision_id\": 1,
                            \"warnings\": {
                                \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                            }
                        }
                    }
                }
            ]
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain
404: Fail to find task for change window ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks/{{task_id}}","collectionId":"1","id":"1-4-11","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a list of completed policy changes for a specific change window","data":[{"value":null,"type":"text","enabled":true,"key":"uid"}],"dataMode":"params","description":"Retrieves a list of completed policy changes for a specific change window.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
start: Starting result for query allowable value is numeric [optional]
count: Number of tasks for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true
OUTPUT {
    \"commit_tasks\": {
        \"count\": 1,
        \"total\": 1,
        \"commit_task\": {
            \"id\": 1,
            \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
            \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
            \"errors\": \"\"
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks","collectionId":"1","id":"1-4-12","method":"GET"},{"headers":"Accept: application/json\n","name":"Get name and status for all change windows","description":"Retrieves a list of all change windows.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
start: Starting result for query allowable value is numeric [optional]
count: Number of change windows for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true
OUTPUT {
    \"change_windows\": {
        \"count\": 2,
        \"total\": 2,
        \"change_window\": [
            {
                \"uuid\": \"6ae41504-a95c-4f23-98a2-f18b2efadb9d\",
                \"name\": \"cw1\",
                \"domain_id\": 1,
                \"enabled\": true
            },
            {
                \"uuid\": \"fc7b167c-29ea-49a1-9ee3-efb6d1351343\",
                \"name\": \"cw2\",
                \"domain_id\": 1,
                \"enabled\": true
            }
        ]
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/","collectionId":"1","id":"1-4-13","method":"GET"},{"headers":"Accept: application/json\n","name":"Get device zones by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/zones
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/zones","collectionId":"1","id":"1-5-14","method":"GET"},{"headers":"Accept: application/json\n","name":"Get device zones by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/787/zones
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/zones","collectionId":"1","id":"1-5-15","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network interfaces by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/interfaces
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/interfaces","collectionId":"1","id":"1-5-16","method":"GET"},{"headers":"Accept: application/json\n","name":"Get zones and network interfaces that participate in sub-policies","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/bindable_objects
","dataMode":"params","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindable_objects","collectionId":"1","id":"1-5-17","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network interfaces by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/10/interfaces
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/interfaces","collectionId":"1","id":"1-5-18","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Add a domain","dataMode":"raw","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains
BODY{
    \"domain\": {
        \"name\": \"domain1\",
        \"address\": \"address\",
        \"description\": \"description\"
    }
}


Response Messages:
403: User not permitted to access domains
400: Domain with this name already exists
400: Domain name is empty","folder":"1-6","rawModeData":"{\n\t\"domain\": {\n\t\t\"name\": \"domain1\",\n\t\t\"address\": \"address\",\n\t\t\"description\": \"description\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","collectionId":"1","id":"1-6-19","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all domains","description":"

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
403: User not permitted to access domains","folder":"1-6","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","collectionId":"1","id":"1-6-20","method":"GET"},{"headers":"Accept: application/json\n","name":"Get domain","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Domain id

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
403: User not permitted to access domains
400: Domain with ID was not found","dataMode":"params","folder":"1-6","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","collectionId":"1","id":"1-6-21","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update a domain","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Domain id
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains/2
BODY{
    \"domain\": {
        \"name\": \"edited name\",
        \"address\": \"edited address\",
        \"description\": \"edited description\"
    }
}


Response Messages:
403: User not permitted to access domains
400: Domain with ID was not found
400: Domain with this name already exists
400: Domain name is empty
400: Default domain cannot be changed","dataMode":"raw","folder":"1-6","rawModeData":"{\n\t\"domain\": {\n\t\t\"name\": \"edited name\",\n\t\t\"address\": \"edited address\",\n\t\t\"description\": \"edited description\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","collectionId":"1","id":"1-6-22","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get general properties","description":"This API requires 'Super admin' privileges



Usage Example
URLhttps://192.168.1.1/securetrack/api/properties
OUTPUT{
    \"properties\": {
        \"sc_addresses\": {
            \"sc_address\": [
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"external\"
                },
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"internal\"
                }
            ]
        }
    }
}


Response Messages:
403: User not permitted to view properties","folder":"1-7","url":"https://{{SecureTrack_IP}}/securetrack/api/properties/","collectionId":"1","id":"1-7-23","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Check Point VPN (IPSec) communities and gateways","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities.
Works on clusters and gateways, not on management servers.

Parameters:
device_id: The unique identifier of target device

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities
","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_communities","collectionId":"1","id":"1-8-24","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco IPsec policy and peers","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"outputInterfaceName"}],"dataMode":"params","description":"Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config.
You can retrieve the interface names by calling the /devices/id/interfaces API.

Parameters:
device_id: The unique identifier of target device
outputInterfaceName: Interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1
","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_tunnels","collectionId":"1","id":"1-8-25","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco cryptographic maps by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://191.168.1.1/securetrack/api/revisions/18/crypto_maps
","dataMode":"params","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/crypto_maps","collectionId":"1","id":"1-8-26","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco cryptographic maps by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/19/crypto_maps
","dataMode":"params","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/crypto_maps","collectionId":"1","id":"1-8-27","method":"GET"},{"name":"Get resolved Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"params","description":"The order of precedence used to resolve the Internet object is:
Step 1: Identify the Internet referral:
Search for a defined Internet referral on the specified device.
If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral.
If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2.
If an Internet referral is not found, it resolves to “Any”.
Step 2: Resolve the object by name:
Search the specified device for a defined network object that matches the name returned in Step 1.
If a matching network object is not found, an error will be returned.

Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2/object

Response Messages:
200: Resolved Internet referral object for device is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Configured object was not found on the device
403: Access is denied.","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}/object","collectionId":"1","id":"1-9-28","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"raw","description":"Updates the Internet referral configuration for the device.
If there was no previous configuration, it will be created.

Parameters:
deviceId: SecureTrack Device ID
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_10.11.73.1\"
    }
}


Response Messages:
200: Internet referral configuration was updated
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
403: Access is denied.","folder":"1-9","rawModeData":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_10.11.73.1\"\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-29","method":"PUT"},{"name":"Get Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Internet referral configuration was not found for device ID
403: Access is denied.","dataMode":"params","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-30","method":"GET"},{"name":"Delete Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration was deleted
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration for device ID does not exist
403: Access is denied.","dataMode":"params","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-31","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Create new Internet representation for a device","dataMode":"raw","description":"The internet referral lets you represent the Internet as an object on a device.
See REST API: /internet_referral/{deviceId:[0-9]+}/object for a description of how internet referral is resolved.

Parameters:
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_2.2.2.2\"
    }
}


Response Messages:
201: Internet referral configuration was created
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
400: Internet referral configuration for given device ID already exists
403: Access is denied.","folder":"1-9","rawModeData":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_2.2.2.2\"\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/","collectionId":"1","id":"1-9-32","method":"POST"},{"headers":"Accept: application/json\n","name":"Get LDAP entry details by DN","data":[{"value":null,"type":"text","enabled":true,"key":"dn"}],"dataMode":"params","description":"Returns the UID, DN and Name of a LDAP entry specified by the DN.

Parameters:
dn: LDAP DN

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntryByDN?dn=CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com
OUTPUT{
    \"ldap_entry\": {
        \"uid\": \"mYbWQms7p0q5YinEyW5Byw==\",
        \"dn\": \"CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com\",
        \"name\": \"Manufacturing\"
    }
}


Response Messages:
200: OK
400: Invalid DN format
404: Entry matching the DN cannot be found
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntryByDN","collectionId":"1","id":"1-10-33","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Return LDAP entries which match the given search criteria","dataMode":"raw","description":"Return list of LDAP entries which match the given search criteria according to the search mode (EXACT, CONTAINS, STARTS_WITH, ENDS_WITH).
The search is case insensitive.
The limit of max_search_result is 1000.

Parameters:
body: Search criteria

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/search
BODY{
    \"search_criteria\": {
        \"search_base_dn\": \"DC=tufintest,DC=com\",
        \"search_text\": \"test\",
        \"ldap_search_options\": {
            \"ldap_entry_types\": {
                \"ldap_entry_type\": [
                    \"OU\",
                    \"USER\"
                ]
            },
            \"search_mode\": \"CONTAINS\",
            \"max_search_result\": 3
        }
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
            {
                \"dn\": \"CN=User15ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"ZRuKW3XqIEOIxCwlfgJQYA==\",
                \"displayName\": \"User15ATTesting1\"
            },
            {
                \"dn\": \"CN=IWAM_TEST2003,CN=Users,DC=tufintest,DC=com\",
                \"uid\": \"bYVqqcZXsUSF51hiP4W7Yw==\",
                \"displayName\": \"Testing1\"
            },
            {
                \"dn\": \"CN=User1ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"2ma3TrgeHEWQDITwvcRqlg==\",
                \"displayName\": \"test\"
            }
            ]
        },
            \"has_more_results_to_return\": \"true\"
        }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal or invalid value)
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","rawModeData":"{\n\t\"search_criteria\": {\n\t\t\"search_base_dn\": \"DC=tufintest,DC=com\",\n\t\t\"search_text\": \"test\",\n\t\t\"ldap_search_options\": {\n\t\t\t\"ldap_entry_types\": {\n\t\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\t\"OU\",\n\t\t\t\t\t\"USER\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"search_mode\": \"CONTAINS\",\n\t\t\t\"max_search_result\": 3\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/search","collectionId":"1","id":"1-10-34","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Return entries that exactly match one of the given strings","dataMode":"raw","description":"Return list of LDAP entries which match the exact given multiple search_text.

Parameters:
body: Names to search

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntriesByNames
BODY{
    \"search_by_name_criteria\": {
        \"search_texts\": {
            \"search_text\": [
                \"Finance\",
                \"Marketing\",
                \"Management\"
            ]
        },
        \"ldap_entry_types\": {
            \"ldap_entry_type\": [
                \"GROUP\"
            ]
        },
        \"max_search_result\": 20
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Finance,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"uOvJTpYRD0aTjEENA87N5A==\",
                    \"displayName\": \"Finance\"
                },
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Management,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"jdf778skfsgs730fksdHHs==\",
                    \"displayName\": \"Management\"
                }
            ]
        },
        \"has_more_results_to_return\": false
    }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal value)
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","rawModeData":"{\n\t\"search_by_name_criteria\": {\n\t\t\"search_texts\": {\n\t\t\t\"search_text\": [\n\t\t\t\t\"Finance\",\n\t\t\t\t\"Marketing\",\n\t\t\t\t\"Management\"\n\t\t\t]\n\t\t},\n\t\t\"ldap_entry_types\": {\n\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\"GROUP\"\n\t\t\t]\n\t\t},\n\t\t\"max_search_result\": 20\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntriesByNames","collectionId":"1","id":"1-10-35","method":"POST"},{"headers":"Accept: application/json\n","name":"Get the base DN entry details","description":"The returned \"base DN\" is used by GetEntriesByNames API as the search start entry.



Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getBaseDNEntry
OUTPUT{
    \"ldap_entry\": {
        \"dn\": \"DC=tufintest,DC=com\",
        \"uid\": \"nABbRP/lPUKlteNRI4j6iA==\"
    }
}


Response Messages:
200: OK
404: Base Entry cannot be found
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getBaseDNEntry","collectionId":"1","id":"1-10-36","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Add devices to SecureTrack","dataMode":"raw","description":"Use this API to add a single device or a list of devices to SecureTrack.
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
Currently supported types: CMA, SMC, ASA, Panorama NG and FortiManager.

This API verifies connection to the provided device, before adding a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be added.
Only \"live\" device with correct credentials can be added using this API.
To add Checkpoint R77 devices, use \"r80_version\" : \"false\".


Parameters:
body: device_list

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"r80_version\":\"false\"
             }
         },
         {
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"user_name\":\"admin\",
                 \"password\":\"1234\",
                 \"r80_version\":\"true\"
             }
         },
         {
             \"model\":\"ASA\",
             \"vendor\":\"Cisco\",
             \"securetrack_domain\":\"Domain-A\",
             \"display_name\":\"Ireland-ASA\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
             \"enable_virtual_contexts\":\"true\",
             \"import_all\":\"false\",
             \"import_devices\":
                     [\"VC1\",\"VC2\"],
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"collect_dynamic_topology\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"enable_password\":\"st-enable-password\"
             }
         },
         {
             \"model\":\"Panorama\",
             \"vendor\":\"PaloAltoNetworks\",
             \"display_name\":\"First-Device-example\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"model\":\"FortiManager\",
             \"vendor\":\"Fortinet\",
             \"display_name\":\"Spain-FortiManager\",
             \"securetrack_server\":\"RemoteControlServerName\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_all\": \"false\",
                 \"import_devices\": [
                         {
                 \"name\": \"AdomX\",
                 \"import_all\": \"false\",
                 \"managed_devices\": [\"FW1\"]
                        }
                    ]
                }
            }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n \t\t \"devices\": [{ \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"r80_version\":\"false\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"user_name\":\"admin\",\n \t\t\t\t \"password\":\"1234\",\n \t\t\t\t \"r80_version\":\"true\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"ASA\",\n \t\t\t \"vendor\":\"Cisco\",\n \t\t\t \"securetrack_domain\":\"Domain-A\",\n \t\t\t \"display_name\":\"Ireland-ASA\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t \"enable_virtual_contexts\":\"true\",\n \t\t\t \"import_all\":\"false\",\n \t\t\t \"import_devices\": \n \t\t\t\t\t [\"VC1\",\"VC2\"],\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"enable_password\":\"st-enable-password\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"Panorama\",\n \t\t\t \"vendor\":\"PaloAltoNetworks\",\n \t\t\t \"display_name\":\"First-Device-example\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t {\n \t\t\t \"model\":\"FortiManager\",\n \t\t\t \"vendor\":\"Fortinet\",\n \t\t\t \"display_name\":\"Spain-FortiManager\",\n \t\t\t \"securetrack_server\":\"RemoteControlServerName\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_all\": \"false\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t\t { \n \t\t\t\t \"name\": \"AdomX\",\n \t\t\t\t \"import_all\": \"false\", \n \t\t\t\t \"managed_devices\": [\"FW1\"]\n \t\t\t\t\t\t}\n \t\t\t\t\t]\n \t\t\t\t}\n \t\t\t}\n \t\t]\n \t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","collectionId":"1","id":"1-11-37","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Edit Securetrack device","dataMode":"raw","description":"Use this API to edit the settings of a management device, including changing multiple parameters in the same call.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
Note: This API cannot be used to edit SecureTrack Domains and SecureTrack Servers.
This API verifies connection to the provided device, before updating a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be updated.
Only \"live\" device with correct credentials can be updated using this API.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"device_id\": 1,
             \"display_name\": \"CheckPoint-R77-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.1\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"authentication_mode\": \"LEA\",
                 \"lea_authentication_mode\": \"ssl_opsec\",
                 \"lea_authentication_port\": \"2488\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 2,
             \"display_name\": \"CheckPoint-R80-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.2\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 3,
             \"display_name\": \"Cisco-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"enable_password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 4,
             \"display_name\": \"PaloAlto-PanoramaNg-Device\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 5,
             \"display_name\": \"PaloAlto-DeviceGroup\"
         },
         {
             \"device_id\": 6,
             \"display_name\": \"PaloAlto-FireWall-Device\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         },
         {
             \"device_id\": 7,
             \"display_name\": \"Spain-FortiManager\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 8,
             \"display_name\": \"FortiManager-Adom\"
         },
         {
             \"device_id\": 9,
             \"display_name\": \"FortiManager-FireWall\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n\t\t \"devices\": [{\n\t\t\t \"device_id\": 1,\n\t\t\t \"display_name\": \"CheckPoint-R77-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.1\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"authentication_mode\": \"LEA\",\n\t\t\t\t \"lea_authentication_mode\": \"ssl_opsec\",\n\t\t\t\t \"lea_authentication_port\": \"2488\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 2,\n\t\t\t \"display_name\": \"CheckPoint-R80-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 3,\n\t\t\t \"display_name\": \"Cisco-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"enable_password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 4,\n\t\t\t \"display_name\": \"PaloAlto-PanoramaNg-Device\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 5,\n\t\t\t \"display_name\": \"PaloAlto-DeviceGroup\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 6,\n\t\t\t \"display_name\": \"PaloAlto-FireWall-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 7,\n\t\t\t \"display_name\": \"Spain-FortiManager\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 8,\n\t\t\t \"display_name\": \"FortiManager-Adom\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 9,\n\t\t\t \"display_name\": \"FortiManager-FireWall\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t }\n\t\t]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","collectionId":"1","id":"1-11-38","method":"PATCH"},{"headers":"Accept: application/json\n","name":"Get specific device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the vendor, model, name, domain and ID for the specified device.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
id: Device ID
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/60

Usage Example
https://192.168.1.1/securetrack/api/devices/20?show_os_version=true
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}","collectionId":"1","id":"1-11-39","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Add offline device","dataMode":"raw","description":"You can choose to select the domain either by name or id using the domain_id or domain_name tags.\nDevice name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
body: Device to be added

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices
BODY<device>
     <model>asa</model>
     <vendor>Cisco</vendor>
     <domain_id>1</domain_id>
     <domain_name>Default</domain_name>
     <name>API OFFLINE ASA1</name>
     <offline>true</offline>
     <topology>true</topology>
</device>

","folder":"1-11","rawModeData":"\n\t asa \n\t Cisco\n\t 1\n\t Default\n\t API OFFLINE ASA1\n\t true\n\t true\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","collectionId":"1","id":"1-11-40","method":"POST"},{"headers":"Accept: application/json\n","name":"Get devices","description":"Returns the list of devices that are configured in SecureTrack, including the vendor, model, name, domain and device ID.
The results can be sorted by ip, name, vendor and model.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
name: Device name [optional]
ip: Device IP address [optional]
vendor: Device vendor [optional]
model: Device model [optional]
sort: Sort ascending or descending allowable types are: asc or desc [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices

Usage Example
https://192.168.1.1/securetrack/api/devices?vendor=VMware

Usage Example
https://192.168.1.1/securetrack/api/devices?sort=ip:asc

Usage Example
https://192.168.1.1/securetrack/api/devices?show_os_version=true
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","collectionId":"1","id":"1-11-41","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Import managed devices","dataMode":"raw","description":"Use this API to import more managed devices to SecureTrack.
The following devices can be added: Device Groups (for Panorama), Administrative Domains (for FortiManager).\nCurrently supported types: Panorama, FortiManager, Cisco ASA.
Please see examples below per device id: device id 1 for Panorama, device 2 for FortiManager, device id 3 for Cisco ASA.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk/import
BODY{
     \"devices_list\":{
         \"devices\":[
         {
             \"device_id\":\"1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"device_id\":\"2\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [
                     {
                         \"name\":\"Adom1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"firewall1\", \"firewall2\"]
                     },
                     {
                         \"name\":\"Adom2\",
                         \"import_all\":\"true\"
                     }
                 ]
             }
         },
         {
             \"device_id\":\"3\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"]
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n \t\t \"devices\":[ \n \t\t { \n \t\t\t \"device_id\":\"1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"2\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"firewall1\", \"firewall2\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"3\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"] \n \t\t\t }\n \t\t }\n \t\t]\n \t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/import","collectionId":"1","id":"1-11-42","method":"POST"},{"headers":"Accept: application/json\n","name":"Get specific task results of bulk operations on devices","data":[{"value":null,"type":"text","enabled":true,"key":"task_uid"}],"dataMode":"params","description":"Use this API to track and display the current progress of the devices being edited or added to\nSecureTrack for a specific Task ID.
For a list of devices, the status of each device is displayed.

A device that was not added due to some reason will be added to \"failed\" list with status element containing a description.
For example:
\"description\": \"No connection to device\".

Parameters:
task_uid: Task UID

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk/tasks/d7e88799-a6e5-45da-8c72-c979a5dbe235
OUTPUT{
    \"task_result\":{
        \"total_succeeded\":\"0\",
        \"total_in_progress\":\"2\",
        \"total_failed\":\"0\",
        \"succeeded\":{
            \"count\":\"0\"
        },
        \"in_progress\":{
            \"count\":\"2\",
            \"devices\":[
                {
                    \"device_id\":\"1\",
                    \"display_name\":\"Europe-CMA\",
                    \"ip_address\":\"192.168.1.1\",
                    \"status\":{
                    }
                },
                {
                    \"device_id\":\"2\",
                    \"display_name\":\"Ireland-ASA\",
                    \"ip_address\":\"172.16.1.1\",
                    \"status\":{
                    }
                }
            ]
        },
        \"failed\":{
            \"count\":\"0\"
        }
    }
}


Response Messages:
404: The task with the given UID was not found
400: Bad request
200: Accepted
408: Request timed out
500: Internal server error","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/tasks/{{task_uid}}","collectionId":"1","id":"1-11-43","method":"GET"},{"headers":"Accept: application/json\n","name":"Get textual configuration by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get latest revision of running configuration for a given device Id.


Parameters:
context: global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/111/config
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/config","collectionId":"1","id":"1-11-44","method":"GET"},{"name":"Add configuration for offline device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"configuration_file"}],"description":"Parameters:
device_id: Device ID
configuration_file: Configuration File

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"device_id=1\" https://192.168.1.1/securetrack/api/tasks/add_device_config_task

Response Messages:
200: Configuration added successfully.","dataMode":"params","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/tasks/add_device_config_task","collectionId":"1","id":"1-11-45","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Update offline device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"raw","description":"Device name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
device_id: Device ID
body: Device to be updated

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/1
BODY<device>
     <name>API OFFLINE ASA2</name>
     <topology>true</topology>
</device>

","folder":"1-11","rawModeData":"\n\t API OFFLINE ASA2\n\t true\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}","collectionId":"1","id":"1-11-46","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get textual configuration by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns textual configuration for the specified revision Id.


Parameters:
context: Global MSSP context [optional]
id: Revision id

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/config
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/config","collectionId":"1","id":"1-11-47","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches a list of NAT objects for a given revision
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Version ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects?get_total=true
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/nat_objects","collectionId":"1","id":"1-12-48","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches a list of NAT objects defined on device given by device ID
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable value is numeric [optional]
count: Starting page for query allowable value is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects?get_total=true
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_objects","collectionId":"1","id":"1-12-49","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of NAT rules for device given by device ID

input_interface and output_interface are not supported for Panorama running in Advanced management mode
nat_stage is supported for Netscreen and JunOS
nat_type is supported for FortiManager
Note: For Check Point, NAT rules are available from the modules (not managements)
Note: For Palo Alto, filtering NAT rules by interface is only available for firewall devices

Parameters:
context: Global MSSP context [optional]
id: Device ID
input_interface: Input interface for NAT rules, \"any\" for all interfaces [optional]
output_interface: output interface for NAT rules, \"any\" for all interfaces [optional]
nat_stage: NAT stage for NAT rules allowable values: \"pre_policy\" , \"post_policy\" or \"both\" [optional]
nat_type: NAT stage for NAT rules allowable values: \"vip\" or \"reverse_vip\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/10/nat_rules/bindings?input_interface=Any
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_rules/bindings","collectionId":"1","id":"1-12-50","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network groups containing specified network object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns groups that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.

Usage Example
https://192.168.1.1/securetrack/api/network_objects/69577/groups
","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/groups","collectionId":"1","id":"1-13-51","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules containing specified network object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the security rules that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.
include_groups: You can add \"include_groups\" to find rules that include the network object and rules that include the groups that include the network object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/65078/rules?include_groups=true
","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/rules","collectionId":"1","id":"1-13-52","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of network objects defined on device given by ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169178,
                \"name\": \"Access_role\",
                \"display_name\": \"Access_role\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": false,
                \"comment\": \"\",
                \"uid\": \"{FC267948-DA8C-4FB6-A736-76B5254BF825}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14320,
                        \"name\": \"ad_group_auto_30K_grp1\",
                        \"display_name\": \"auto_30K_grp1\",
                        \"class_name\": \"ad_group\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{CAB92DCC-CF63-4E47-B8E3-1E1231996D5E}\",
                        \"dn\": \"CN=auto_30K_grp1,OU=OU_30K_Groups,DC=rnd,DC=local\"
                    }
                }
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/network_objects","collectionId":"1","id":"1-13-53","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of network objects from specific revision
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169183,
                \"name\": \"Access role 1\",
                \"display_name\": \"Access role 1\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": true,
                \"comment\": \"\",
                \"uid\": \"{1E4C35A0-1FE4-4101-8A38-FDE656BCDCFB}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14346,
                        \"name\": \"all identified\",
                        \"display_name\": \"all identified\",
                        \"class_name\": \"all_identified\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{17A972AC-4B4A-4715-859F-867128707F59}\",
                        \"dn\": \"\"
                    }
                }
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/network_objects","collectionId":"1","id":"1-13-54","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects matching specified criteria","data":[{"value":null,"type":"text","enabled":true,"key":"filter"}],"dataMode":"params","description":"You can search for network objects where the IP address, name or comment fields have a specified text string,
or you can search for network objects that have an IP address that matches, contains or is contained in a specified IP subnet,
or you can search for network objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns network objects where the IP address, name or comment fields have a specified text string. “subnet” filter returns network objects that have an IP address that matches, contains or is contained in a specified IP subnet. “uid“ filter returns network objects with the specified uid. If no filter is specified, the “text” filter is used.
device_id: Returns network objects belonging to the specified device_id. [optional]
ip: (For “text” filter) You can specify \"ip\" to find network objects with the specified text in the IP address field. [optional]
name: (For “text” filter) You can specify \"name\" to find network objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find network objects with the specified text in the comment field. [optional]
any_field: (For “text” filter) You can specify \"any_field\" to find network objects with the specified text in the IP address, name or comment fields. [optional]
exact_match: (For “text” filter) You can add \"exact_match=true\" to find network objects with the specified text in the comment field. If this field is not specified, the query uses \"exact_match=false\". [optional]
contained_in: (For “subnet” filter) You can specify \"contained_in\" to find network objects that are contained in the specified IP subnet. For example, 10.1.0.0 is contained in 10.0.0.0. [optional]
contains: (For “subnet” filter) You can specify \"contains\" to find network objects that contain the specified IP subnet. For example, 10.0.0.0 contains 10.1.0.0. [optional]
exact_subnet: (For “subnet” filter) You can specify \"exact_subnet\" to find network objects that have the specified IP address. [optional]
uid: (for “uid“ filter) Returns network objects with the specified uid. [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: You can specify \"typeOnDevice\" to find network object groups that are EDL. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=host&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&any_field=host&count=10&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&contains=10.1.1.0

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&count=10&exact_subnet=1.1.1.1

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191&device_id=4

Usage Example
URLhttps://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=Access_Role&identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1,
        \"total\": 1,
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169197,
            \"name\": \"Access_Role_aaa\",
            \"display_name\": \"Access_Role_aaa\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14317,
                    \"name\": \"ad_group_aaa\",
                    \"display_name\": \"aaa\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{5D16859C-0256-4673-A402-4254588B8F40}\",
                    \"dn\": \"CN=aaa,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}


Response Messages:
400: The typeOnDevice value is not valid.Use edl_ip_list as value to search EDL groups.","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/search","collectionId":"1","id":"1-13-55","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific network objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches a single or partial list of the network objects for a given revision.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects/69547?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169185,
            \"name\": \"Access_Role_Domain Controllers\",
            \"display_name\": \"Access_Role_Domain Controllers\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{140B8F32-188D-414C-A7BE-F4A7D7E9A169}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14237,
                    \"name\": \"ad_group_Domain_Controllers\",
                    \"display_name\": \"Domain Controllers\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{0A8A459E-58E8-45DC-981E-16BBF2BD1922}\",
                    \"dn\": \"CN=Domain Controllers,CN=Users,DC=rnd,DC=local\"
                }
            }
        }
    }
}

","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/network_objects/{{ids}}","collectionId":"1","id":"1-13-56","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific network object","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches a single or partial list of the network objects for a given device ID.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects/169184?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169184,
            \"name\": \"Access_Role_@grp\",
            \"display_name\": \"Access_Role_@grp\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{1870612C-0922-4AEE-81FF-5472DB7C32E1}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14338,
                    \"name\": \"ad_group_grp\",
                    \"display_name\": \"@grp\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{C5740C23-F36E-4D2E-8B17-1F99C239C12A}\",
                    \"dn\": \"CN=@grp,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}

","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/network_objects/{{ids}}","collectionId":"1","id":"1-13-57","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic devices that are configured in ST","description":"Returns a list of the generic devices included in all the domains that the user has permission to.
Use context and/or name optional parameters to get more specific results.
To get context optional parameter, you can call /domains/ API and use the id included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
name: Generic device name [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","collectionId":"1","id":"1-14-58","method":"GET"},{"name":"Add generic device to Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"configuration_file"}],"dataMode":"params","description":"Upload a configuration file that will be used to add a generic device to the Topology model.
The context field is the domain ID to which the generic device is added: If not provided, the device is added to the global domain.
configuration_file must include a valid generic device configuration.
The specified path must point to a file on the computer being sue to make the REST API call.
If update update_topology = true, then the Topology model will be updated immediately after the device is added.
For maximum efficiency, if you are adding multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.Default value for update_topology = true.
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
body: Generic device to be added
configuration_file: Configuration File for generic device
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"my_generic_device\", \"customer_id\": 1}};type=application/json' -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices\n

Response Messages:
201: The generic device was created successfully
403: User is not permitted to access the specified domain
400: Failed to create generic device ","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","collectionId":"1","id":"1-14-59","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get cloud information","dataMode":"raw","description":"Returns information about all clouds in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
context: Global MSSP context [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions
BODY{
    \"suggested_clouds\": {
        \"count\": 2,
        \"total\": 2,
        \"cloud\": [
            {
                \"management_name\": \"FW1\",
                \"management_id\": 20,
                \"cloud_name\": \"Cloud 10.100.0.1\",
                \"cloud_id\": 120,
                \"vertex_id\": 250,
                \"ip\": \"10.100.0.1\",
                \"routes_count\": 5,
                \"is_parent\": false
            },
            {
                \"management_name\": \"FW2\",
                \"management_id\": 21,
                \"cloud_name\": \"Cloud 172.16.0.1\",
                \"cloud_id\": 125,
                \"vertex_id\": 270,
                \"ip\": \"172.16.0.1\",
                \"routes_count\": 7,
                \"is_parent\": false,
                \"parent_vertex_id\": 40
                \"parent_cloud_id\": 45
                \"parent_cloud_name\": \"Cloud 172.16.0.1\",
            }
        ]
    }
}


Response Messages:
202: Accepted
403: User is not permitted to access the specified domain","folder":"1-14","rawModeData":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 2,\n\t\t\"total\": 2,\n\t\t\"cloud\": [\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW1\",\n\t\t\t\t\"management_id\": 20,\n\t\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\t\"cloud_id\": 120,\n\t\t\t\t\"vertex_id\": 250,\n\t\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\t\"routes_count\": 5,\n\t\t\t\t\"is_parent\": false\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW2\",\n\t\t\t\t\"management_id\": 21,\n\t\t\t\t\"cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t\t\"cloud_id\": 125,\n\t\t\t\t\"vertex_id\": 270,\n\t\t\t\t\"ip\": \"172.16.0.1\",\n\t\t\t\t\"routes_count\": 7,\n\t\t\t\t\"is_parent\": false,\n\t\t\t\t\"parent_vertex_id\": 40\n\t\t\t\t\"parent_cloud_id\": 45\n\t\t\t\t\"parent_cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t}\n\t\t]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions","collectionId":"1","id":"1-14-60","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology network interfaces by device","data":[{"value":null,"type":"text","enabled":true,"key":"mgmtId"}],"dataMode":"params","description":"The returned interfaces are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
context: Global MSSP context [optional]
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=1&is_generic=true
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_interfaces","collectionId":"1","id":"1-14-61","method":"GET"},{"headers":"Accept: application/json\n","name":"Get most specific network interfaces from which a host IP is accessible","data":[{"value":null,"type":"text","enabled":true,"key":"host"}],"description":"Parameters:
context: Global MSSP context [optional]
host: IP address of device for a query

Usage Example
https://192.168.1.1/securetrack/api/devices/interfaces/last_hop?host=192.168.1.66
","dataMode":"params","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/interfaces/last_hop","collectionId":"1","id":"1-14-62","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology routing tables for a given device","data":[{"value":null,"type":"text","enabled":true,"key":"mgmtId"}],"dataMode":"params","description":"The returned routing tables are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=1&is_generic=true
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_routes","collectionId":"1","id":"1-14-63","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology subnets","description":"Returns a list of the topology subnets for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology subnet names that match the search criteria provided, as follows:
1. If you provide only a mask, then an exact match search is done on the mask portion of the name
e.g. if name=/2, the results will include 1.2.3.4/2, but not 1.2.3.4/22
2. If you provide only a partial or complete IP address, then a contains search is done in the IPv4 block portion of the name
e.g. name=32, the results will include 192.168.205.32/24 and 55.192.32.22/16, but will not include 55.168.205.5/32
3. If you provide both an IPv4 address (either partial or complete) and a mask, then an exact match search is done
e.g. if name=23.4/2, then the results will include 192.168.23.4/2, but will not include 192.168.23.4/23 or 23.4.192.168/2

Use the optional ip parameter to restrict the results to topology subnets that contain this ip, see example below.

User can use ip or name parameter, not both.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
name: Subnet name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]
ip: Ip host [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=10.27
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.20/32\",
                \"ip\": \"10.27.122.20\",
                \"mask\": \"255.255.255.255\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 616,
                \"name\": \"10.27.122.60/32\",
                \"ip\": \"10.27.122.60\",
                \"mask\": \"255.255.255.255\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 619,
                \"name\": \"10.27.122.0/30\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 620,
                \"name\": \"10.27.122.4/30\",
                \"ip\": \"10.27.122.4\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=144/30
OUTPUT{
    \"topology_subnets\": {
        \"count\": 2,
        \"total\": 2,
        \"subnets\": [
            {
                \"id\": 773,
                \"name\": \"10.13.64.144/30\",
                \"ip\": \"10.13.64.144\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 825,
                \"name\": \"10.15.64.144/30\",
                \"ip\": \"10.15.64.144\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?ip=10.27.122.3
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.0/24\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.0\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 616,
                \"name\": \"10.27.0.0/16\",
                \"ip\": \"10.27.0.0\",
                \"mask\": \"255.255.0.0\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 619,
                \"name\": \"10.0.0.0/8\",
                \"ip\": \"10.0.0.0\",
                \"mask\": \"255.0.0.0\",
                \"domainIdTag\": 1
            },
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
403: Using name and ip parameters is not allowed
403: Using Ipv6 in ip parameter is not supported
403: Ip parameter is not valid","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets","collectionId":"1","id":"1-14-64","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Join Cloud","description":"Delete Join Cloud by Id.

Parameters:
cloudId [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
https://{st_host}/securetrack/api/topology/join/clouds/67\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","collectionId":"1","id":"1-14-65","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get Join Cloud","description":"Get Join Cloud by Id.

Parameters:
cloudId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds/67
OUTPUT{
    id: 67,
    name: \"Yami\",
    clouds: [
        1,
        2,
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","collectionId":"1","id":"1-14-66","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Routes","dataMode":"raw","description":"Create generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"mgmtId\": 1,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"mgmtId\": 2,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","collectionId":"1","id":"1-14-67","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Routes","dataMode":"raw","description":"Update generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"id\": 29,
        \"mgmtId\": 3,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"id\": 30,
        \"mgmtId\": 3,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Interface/Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"id\": 29,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"id\": 30,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","collectionId":"1","id":"1-14-68","method":"PUT"},{"headers":"Accept: application/json\n","name":"Delete generic Routes","description":"Delete all generic Routes from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/mgmt/2\n

Response Messages:
200: 11 Generic Routes were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-69","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Routes","description":"Get generic Routes of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/mgmt/2
OUTPUT{
    GenericRoutes: [
    {
        id: 27,
        mgmtId: 2,
        destination: \"10.4.4.4\",
        mask: \"255.0.0.0\",
        interfaceName: \"\",
        nextHop: \"AA\",
        nextHopType: \"VR\",
        vrf: \"V102-YO\"
    },
    {
        id: 28,
        mgmtId: 2,
        destination: \"10.4.5.5\",
        mask: \"255.0.0.0\",
        interfaceName: \"eeee\",
        nextHop: \"\",
        nextHopType: \"IP\",
        vrf: \"V101-PA\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-70","method":"GET"},{"name":"Update an existing generic device in the Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Modify an existing generic device by uploading a new configuration file and/or specifying a new name.
If name field is specified, the generic device will be renamed.
configuration_file is optional, if provided it must include a valid generic device configuration.
The specified path points to a file in the client machine.
If a generic device name is changed and a new configuration file is not provided, topology will not be synchronized (update_topology flag is ignored).
Default value for update_topology = true.
To save time when there are several consecutive api calls: For the last call, set update_topology = true (for all other calls, update_topology = false).
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
id: Generic device id
body: Generic device to be updated [optional]
configuration_file: Configuration File for generic device [optional]
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices/24

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"new_generic_device_name\"}};type=application/json' -F \"update_topology=false\" https://192.168.1.1/securetrack/api/generic_devices/72

Response Messages:
204: The generic device was updated successfully.
400: A new name or a new configuration file must be indicated in order to update generic device with id {}
400: Failed to update generic device with id {}
404: A 'Generic Device' with the specified ID was not found","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","collectionId":"1","id":"1-14-71","method":"PUT"},{"name":"Delete generic device from Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete a generic device from the Topology model.
The ID must be for a valid generic device listed in the Topology Model.
If update update_topology = true, then the Topology model will be updated immediately after the device is deleted.
For maximum efficiency, if you are deleting multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.
Default value for update_topology = true.

Parameters:
id: Generic device id
update_topology: Synchronize And Update Topology [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/1

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/10?update_topology=false

Response Messages:
204: Generic Device deleted successfully.
400: Failed to delete generic device with id {}
404: A 'Generic Device' with the specified ID was not found","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","collectionId":"1","id":"1-14-72","method":"DELETE"},{"name":"Get path image for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns an image containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_image","collectionId":"1","id":"1-14-73","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Interface","description":"Delete a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Interface Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","collectionId":"1","id":"1-14-74","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Interface","description":"Get a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/212
OUTPUT{
    GenericInterface: {
        id: 212,
        mgmtId: 1,
        name: \"newApo5\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PAL\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Interface Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","collectionId":"1","id":"1-14-75","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic Interfaces","description":"Get generic Interfaces of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/mgmt/1
OUTPUT{
    GenericInterfaces: [
    {
        id: 206,
        mgmtId: 1,
        name: \"newApo3\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    },
    {
        id: 208,
        mgmtId: 1,
        name: \"newApo4\",
        ip: \"100.103.33.34\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"internal\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-76","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Interfaces","description":"Delete all generic Interfaces from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/mgmt/2\n

Response Messages:
200: 11 Generic Interfaces were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-77","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update manual Interface CustomerTags","dataMode":"raw","description":"Update manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"id\": 73,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port5\",
            \"customerId\": 2
        },
        {
            \"id\": 74,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
403: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"id\": 73,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port5\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"id\": 74,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","collectionId":"1","id":"1-14-78","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create manual Interface CustomerTags","dataMode":"raw","description":"Create manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port4\",
            \"customerId\": 2
        },
        {
            \"generic\": false,
            \"deviceId\": 6,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
403: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port4\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 6,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","collectionId":"1","id":"1-14-79","method":"POST"},{"headers":"Accept: application/json\n","name":"Delete manual Interface CustomerTags","description":"Delete all manual Interface CustomerTags from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/6?generic=false\n

Response Messages:
200: 2 Interface Customers were deleted from deviceId 6.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","collectionId":"1","id":"1-14-80","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get manual Interface CustomerTags","description":"Get manual Interface CustomerTags of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/5?generic=false
OUTPUT{
    InterfaceCustomerTags: [
        {
            id: 73,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4\",
            customerId: 2
        },
        {
            id: 74,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4.1\",
            customerId: 3
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","collectionId":"1","id":"1-14-81","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update a cloud","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Modify the name of a topology cloud, and add/remove members of a joined cloud.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain context of the joined cloud, and any members specified in the body.
To change the name of a topology cloud, enter a value in the name field of the body.
To add/remove members of a joined cloud, specify the action and specify the clouds in the members list of the body.
The action is used only if the body contains a members list. If a members list is provided but no actions is specified, then the default action is ‘add’.
When adding cloud members, clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
When removing cloud members, if only zero or one member remains in the joined cloud, it will be deleted from the Interactive Map.

Parameters:
id: cloud id
action: action [optional]
body: Cloud data
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLfor renaming of any cloud - https://192.168.1.1/securetrack/api/topology/clouds/436
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\"
    }
}


Usage Example
URLfor renaming and members updating of a joined cloud - https://192.168.1.1/securetrack/api/topology/clouds/436?action=remove
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
204: Cloud updated successfully
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: Cloud with id ID is a not joined cloud
412: Cloud id: cloudId does not belong to domain: Context
412: Provided clouds don't belongs to the same domain
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud
412: Member cloud with id ID cannot be removed - it is not a member of a joined cloud","folder":"1-14","rawModeData":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"new cloud\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","collectionId":"1","id":"1-14-82","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get Specific topology cloud","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the topology cloud data for the specified id.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the cloud resides.

Parameters:
id: Cloud id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/48
OUTPUT{
    \"topology_cloud\": {
        \"id\": 48,
        \"name\": \"Cloud 69.70.120.155\",
        \"domain\": 1,
        \"type\": \"NON_JOINED\",
        \"ip\": \"69.70.120.155\"
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/66
OUTPUT{
    \"topology_cloud\": {
        \"id\": 66,
        \"name\": \"Cloud 10.100.10.14\",
        \"domain\": 1,
        \"type\": \"JOINED\",
        \"members\": [
            {
                \"id\": 50,
                \"ip\": \"10.100.6.238\",
                \"name\": \"Cloud 10.100.6.238\"
            },
            {
                \"id\": 73,
                \"ip\": \"10.100.10.14\",
                \"name\": \"Cloud 10.100.10.14\"
            },
            {
                \"id\": 74,
                \"ip\": \"10.100.9.9\",
                \"name\": \"Cloud 10.100.9.9\"
            }
        ]
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: No cloud was found for the provided ID","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","collectionId":"1","id":"1-14-83","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Interfaces","dataMode":"raw","description":"Update generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"id\": 204,
        \"mgmtId\": 1,
        \"name\": \"NewBob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": null
    },
    {
        \"id\": 205,
        \"mgmtId\": 2,
        \"name\": \"NewBob2\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Interface/Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"id\": 204,\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"NewBob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": null\n\t},\n\t{\n\t\t\"id\": 205,\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"NewBob2\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","collectionId":"1","id":"1-14-84","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Interfaces","dataMode":"raw","description":"Create generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"mgmtId\": 1,
        \"name\": \"Bob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-PA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    },
    {
        \"mgmtId\": 2,
        \"name\": \"Bob2\",
        \"ip\": \"100.100.45.66\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-BA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"Bob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-PA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"Bob2\",\n\t\t\"ip\": \"100.100.45.66\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-BA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","collectionId":"1","id":"1-14-85","method":"POST"},{"headers":"Accept: application/json\n","name":"Get path domains for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns one or more domain entries for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_domains?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path_domains?src=10.0.2.1&dst=10.0.1.1&service=Facebook,tcp:80
OUTPUT {
    \"path_domain_entries\": {
        \"path_domain_entry\": [
                {
                        \"domainId\": \"1\",
                        \"vertex\": \"Subnet 10.0.2.0/24\",
                        \"entryType\": \"STARTING_POINT\",
                }
                {
                        \"domainId\": \"1\",
                        \"vertex\": \"Subnet 10.0.1.0/24\",
                        \"entryType\": \"ENDING_POINT\",
                }
    ]
}

","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_domains","collectionId":"1","id":"1-14-86","method":"GET"},{"headers":"Accept: application/json\n","name":"Get manual Interface CustomerTag","description":"Get manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/74
OUTPUT{
    InterfaceCustomerTag: {
        id: 74,
        generic: false,
        deviceId: 5,
        interfaceName: \"port4.1\",
        customerId: 3
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: InterfaceCustomer Id 74 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","collectionId":"1","id":"1-14-87","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete manual Interface CustomerTag","description":"Delete a manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/66\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: InterfaceCustomer Id 66 not found
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","collectionId":"1","id":"1-14-88","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get Ignored Interfaces.","description":"Get Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10
OUTPUT{
    IgnoredInterfaces: [
        {
            interfaceName: \"eth2\",
            mgmtId: 10,
            ip: \"0.0.0.0\"
        },
        {
            interfaceName: \"loopback100\",
            mgmtId: 10,
            ip: \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-89","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Ignored Interfaces.","description":"Delete Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10\n

Response Messages:
200: 2 entries deleted where mgmtId = 10
400: Bad Request.
403: Access is denied.
404: Management Id 10 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-90","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Ignored Interfaces.","dataMode":"raw","description":"Create Ignored Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface
BODY{
    \"IgnoredInterfaces\":
    [
        {
            \"interfaceName\" : \"eth2\",
            \"mgmtId\" : 10,
            \"ip\" : \"0.0.0.0\"
        },
        {
            \"interfaceName\" : \"loopback100\",
            \"mgmtId\" : 10,
            \"ip\" : \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Id 10 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"IgnoredInterfaces\": \n\t[\n\t\t{\n\t\t\t\"interfaceName\" : \"eth2\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"0.0.0.0\"\n\t\t},\n\t\t{\n\t\t\t\"interfaceName\" : \"loopback100\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"34.34.34.34\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface","collectionId":"1","id":"1-14-91","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Vpns","dataMode":"raw","description":"Update generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"id\": 24,
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"new33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"id\": 25,
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"new111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Vpn/Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"id\": 24,\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"new33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"id\": 25,\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"new111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","collectionId":"1","id":"1-14-92","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Vpns","dataMode":"raw","description":"Create generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","collectionId":"1","id":"1-14-93","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Transparent Firewalls","dataMode":"raw","description":"Create Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback0\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Device Id 23 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback0\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","collectionId":"1","id":"1-14-94","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update Transparent Firewalls","dataMode":"raw","description":"Update Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"id\" : 25,
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback2\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"id\" : 27,
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt2\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Device Id 23 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"id\" : 25,\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"id\" : 27,\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","collectionId":"1","id":"1-14-95","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get Transparent Firewalls","description":"Get Transparent Firewalls for participated managed/generic DeviceId

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw/device/9?generic=false
OUTPUT{
    TransparentFirewalls: [
        {
            id: 17,
            outputL3DeviceId: 22,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet0/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 1,
            inputL3IsGenericDevice: true,
            inputL3InterfaceName: \"interface2\"
        },
        {
            id: 23,
            outputL3DeviceId: 23,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet2/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 17,
            inputL3IsGenericDevice: false,
            inputL3InterfaceName: \"mgmt\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","collectionId":"1","id":"1-14-96","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Transparent Firewalls.","description":"Delete Transparent Firewalls for participated layer 2 deviceId

Parameters:
deviceId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/device/9\n

Response Messages:
200: 4 entries deleted where layer2 deviceId = 9
400: Bad Request.
403: Access is denied.
404: DeviceId 9 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","collectionId":"1","id":"1-14-97","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Delete Transparent Firewall","description":"Delete Transparent Firewall by Id.

Parameters:
layer2DataId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/17\n

Response Messages:
200: layer2DataId 17 deleted.
400: Bad Request.
403: Access is denied.
404: Layer2Data Id 17 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/{{layer2DataId}}","collectionId":"1","id":"1-14-98","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get Specific topology subnet","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the subnet for the specified id, including information regarding attached devices and join candidates.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the subnet resides.

Parameters:
id: Subnet id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets/20
OUTPUT{
    \"subnet\": {
        \"id\": 18,
        \"name\": \"90.0.0.0/24\",
        \"ip\": \"90.0.0.0\",
        \"mask\": \"255.255.255.0\",
        \"attached_devices\": {
            \"attached_device\": [
                {
                    \"is_generic\": false,
                    \"id\": 10,
                    \"name\": \"srx\",
                    \"interface_id\": 4,
                    \"interface_name\": \"eth0\",
                    \"interface_ip\": \"90.0.0.1\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 13,
                    \"name\": \"ZBFW\",
                    \"interface_id\": 5,
                    \"interface_name\": \"eth1\",
                    \"interface_ip\": \"90.0.0.124\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 85,
                    \"name\": \"netscreen\",
                    \"interface_id\": 6,
                    \"interface_name\": \"eth2\",
                    \"interface_ip\": \"90.0.0.50\"
                }
            ]
        },
        \"join_candidates\": {
            \"join_candidate\": {
                \"is_generic\": false,
                \"id\": 72,
                \"name\": \"CP25\",
                \"interface_id\": 14,
                \"interface_name\": \"eth24/1\",
                \"interface_ip\": \"90.0.0.83\"
            }
        }
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for subnet with id ID
404: No subnet was found for the provided ID","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets/{{id}}","collectionId":"1","id":"1-14-99","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cloud Internal Networks","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the internal networks for the specified Cloud management id.
This API requires 'Super admin' privileges.

Parameters:
id: Cloud management id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_internal_networks/20
OUTPUT{
    \"network_list\":
    {
        \"count\": 3,
        \"total\": 3,
        \"network\":
        {
            \"ip\": \"10.27.122.20\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.60\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.4\",
            \"mask\": \"255.255.255.252\"
        }
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for NSX with id ID
403: Device ID specified is not supported
404: The specified device ID was not found
404: The specified device ID was not found in Topology","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_internal_networks/{{id}}","collectionId":"1","id":"1-14-100","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology clouds","description":"Returns a list of the topology clouds for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology clouds that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
type: Required clouds type [optional]
name: Cloud name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
OUTPUT{
    \"topology_clouds\": {
        \"count\": 3,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"MEMBER\",
                \"ip\": \"10.100.6.238\"
            },
            {
                \"id\": 66,
                \"name\": \"Cloud 10.100.10.14\",
                \"domain\": 1,
                \"type\": \"JOINED\",
                \"members\": [
                    {
                        \"id\": 50,
                        \"ip\": \"10.100.6.238\",
                        \"name\": \"Cloud 10.100.6.238\"
                    },
                    {
                        \"id\": 73,
                        \"ip\": \"10.100.10.14\",
                        \"name\": \"Cloud 10.100.10.14\"
                    },
                    {
                        \"id\": 74,
                        \"ip\": \"10.100.9.9\",
                        \"name\": \"Cloud 10.100.9.9\"
                    }
                ]
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds?type=non-joined
OUTPUT{
    \"topology_clouds\": {
        \"count\": 2,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"10.100.6.238\"
            }
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","collectionId":"1","id":"1-14-101","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Create a joined topology cloud","dataMode":"raw","description":"Create a new topology cloud in the Interactive Map by joining existing clouds together.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
The body must include at least two topology cloud ids that are on a single domain.
If the context parameter is not provided, then the API will use the context id of the first member of the members list in the body.
Clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
If the provided body does not specify a joined cloud name, the newly created topology cloud will be given the name of the first member of the members list in the body.


Parameters:
context: Global MSSP context [optional]
body: Cloud data
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"optional new cloud name\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
201: Joined cloud created successfully
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: You must provide 2 or more clouds
412: Cloud id: cloudId does not belong to domain: Context
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud","folder":"1-14","rawModeData":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"optional new cloud name\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","collectionId":"1","id":"1-14-102","method":"POST"},{"headers":"Accept: application/json\n","name":"Delete generic Route","description":"Delete a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Route Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","collectionId":"1","id":"1-14-103","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Route","description":"Get a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/30
OUTPUT{
    GenericRoute: {
        id: 30,
        mgmtId: 2,
        destination: \"222.100.10.22\",
        mask: \"255.255.0.0\",
        interfaceName: \"catch22\",
        nextHop: \"100.100.10.10\",
        nextHopType: \"IP\",
        vrf: \"V102-YO\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Route Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","collectionId":"1","id":"1-14-104","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Join Cloud","dataMode":"raw","description":"Create Join Cloud.

Parameters:
body [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"name\" : \"Yami\",
        \"clouds\" : [1, 2]
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"name\" : \"Yami\",\n\t\t\"clouds\" : [1, 2]\n\t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","collectionId":"1","id":"1-14-105","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update Join Cloud","dataMode":"raw","description":"Update Join Clouds.

Parameters:
body [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"id\" : 67,
        \"name\" : \"Yamile\",
        \"clouds\" : [1, 2, 57]
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"id\" : 67,\n\t\t\"name\" : \"Yamile\",\n\t\t\"clouds\" : [1, 2, 57]\n\t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","collectionId":"1","id":"1-14-106","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get cloud information","data":[{"value":null,"type":"text","enabled":true,"key":"cloud_id"}],"dataMode":"raw","description":"Returns information about a specific cloud in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
cloud_id: cloud id
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions/120
BODY{
    \"suggested_clouds\": {
        \"count\": 1,
        \"total\": 1,
        \"cloud\": {
            \"management_name\": \"FW1\",
            \"management_id\": 20,
            \"cloud_name\": \"Cloud 10.100.0.1\",
            \"cloud_id\": 120,
            \"vertex_id\": 250,
            \"ip\": \"10.100.0.1\",
            \"routes_count\": 5,
            \"is_parent\": false
        }
    }
}


Response Messages:
202: Accepted
403: User is not permitted to access the specified domain","folder":"1-14","rawModeData":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"cloud\": {\n\t\t\t\"management_name\": \"FW1\",\n\t\t\t\"management_id\": 20,\n\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\"cloud_id\": 120,\n\t\t\t\"vertex_id\": 250,\n\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\"routes_count\": 5,\n\t\t\t\"is_parent\": false\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions/{{cloud_id}}","collectionId":"1","id":"1-14-107","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Topology Synchronization status","description":"Returns the progress status of the Topology Model Synchronization.



Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize/status

Response Messages:
200: The topology synchronization was invoked successfully.
403: Access is denied
500: Error getting synchronize progress","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize/status","collectionId":"1","id":"1-14-108","method":"GET"},{"headers":"Accept: application/json\n","name":"Get path for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path?src=29.29.29.1&dst=25.25.25.1&service=Facebook,tcp:80
OUTPUT {
    \"path_calc_results\": {
        \"traffic_allowed\": false,
        \"device_info\": {
            \"id\": \"17\",
            \"name\": \"PA-VM-111.6 (Cluster)\",
            \"type\": \"mgmt\",
            \"vendor\": \"Palo Alto Networks\",
            \"incomingInterfaces\": {
                \"incomingVrf\": \"default\",
                \"ip\": \"29.29.29.1/255.255.255.252\",
                \"name\": \"tunnel.11\"
            },
            \"nextDevices\": {
                \"name\": \"DIRECTLY_CONNECTED\",
                \"routes\": {
                    \"outgoingInterfaceName\": \"ethernet1/5\",
                    \"outgoingVrf\": \"default\",
                    \"routeDestination\": \"25.25.25.1/255.255.255.0\"
                }
            },
            \"bindings\": {
                \"name\": \"\",
                \"rules\": [
                    {
                        \"action\": \"Accept\",
                        \"applications\": \"facebook\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 43,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    },
                    {
                        \"action\": \"Deny\",
                        \"applications\": \"Any\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 62,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    }
                ]
            }
        }
    }
}

","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path","collectionId":"1","id":"1-14-109","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic Vpn","description":"Get a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/18
OUTPUT{
    GenericVpn: {
        id: 18,
        generic: false,
        deviceId: 2,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.77\",
        tunnelDestIpAddr: \"1.1.1.88\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","collectionId":"1","id":"1-14-110","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Vpn","description":"Delete a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","collectionId":"1","id":"1-14-111","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get topology generic VPN connections","description":"Returns a list of the generic vpn connections in the Topology map, for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology generic vpn connections that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
is_generic: Get generic devices [optional]
device_id: Device id [optional]
name: VPN connection name (accepts '*', '?' as wildcards) [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns
OUTPUT{
    \"generic_vpns\": {
        \"count\": 3,
        \"total\": 3,
        \"generic_vpn\": [
            {
                \"device_id\": 222,
                \"generic\": false,
                \"id\": 3,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.155\",
                \"tunnel_src_ip\": \"84.200.6.1\",
                \"vpn_name\": \"Palo_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns?is_generic=true
OUTPUT{
    \"generic_vpns\": {
        \"count\": 2,
        \"total\": 2,
        \"generic_vpn\": [
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic_vpns{device_id:(/device_id)?}","collectionId":"1","id":"1-14-112","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Vpns","description":"Delete all generic Vpns from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/device/2?generic=false\n

Response Messages:
200: 4 Generic Vpns were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","collectionId":"1","id":"1-14-113","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Vpns","description":"Get generic Vpns of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/device/3?generic=true
OUTPUT{
    GenericVpns: [
    {
        id: 17,
        generic: true,
        deviceId: 3,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.177\",
        tunnelDestIpAddr: \"1.1.1.188\"
    },
    {
        id: 22,
        generic: true,
        deviceId: 3,
        interfaceName: \"111\",
        tunnelSourceIpAddr: \"1.1.1.188\",
        tunnelDestIpAddr: \"1.1.1.177\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","collectionId":"1","id":"1-14-114","method":"GET"},{"headers":"Accept: application/json\n","name":"Synchronize the Topology model","description":"Invoke of the Topology Model Synchronization.
full_sync=false - Builds the topology model from the information stored in the Tufin database.
full_sync=true - Retrieves the current data from devices and builds the topology model.
Default value for full_sync = false.

Parameters:
full_sync: Perform full sync [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize?full_sync=true

Response Messages:
200: The topology synchronization was invoked successfully.
403: Access is denied
500: Error Synchronizing Topology Model
503: Service unavailable, Graph builder is currently running","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize","collectionId":"1","id":"1-14-115","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get all pattern entries for specific zones","dataMode":"raw","description":"Get the list of zone pattern entries for specific zones by identifiers

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the pattern entry results. [optional]
pattern: Filter by pattern string for the zone entry results. [optional]
name: Filter by zone name for the pattern entry results. [optional]
comment: Filter by comment for the pattern entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/1,2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entries_find_result>
    <paging_info>
        <start>0</start>
        <count>2</count>
        <total>2</total>
    </paging_info>
    <pattern_match_entries>
        <pattern_match_entry>
            <id>2</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEB</pattern>
            <zone_id>1</zone_id>
        </pattern_match_entry>
        <pattern_match_entry>
            <id>3</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEo</pattern>
            <zone_id>2</zone_id>
        </pattern_match_entry>
    </pattern_match_entries>
</pattern_match_entries_find_result>


Response Messages:
200: The zone pattern entries were successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-15","rawModeData":"\n\n\t\n\t\t0\n\t\t2\n\t\t2\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEB\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEo\n\t\t\t2\n\t\t\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/pattern-entries","collectionId":"1","id":"1-15-116","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get a specific zone pattern entry for a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Get a specific zone pattern entry for a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone entry.
id: Identifier of the zone pattern entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/75/pattern-entries/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entry>
    <id>2</id>    <type>security_group_by_name</type>
    <comment>This is a comment</comment>
    <pattern>WEB</pattern>
    <zone_id>75</zone_id>
    <zone_name>Zone_10_0_0_1</zone_name>
    <domain>
        <address>koko</address>
        <description>bobo</description>
        <id>1</id>
        <name>Default</name>
    </domain>
</pattern_match_entry>


Response Messages:
200: The zone pattern entry was successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified identifier was not found.
404: A zone pattern entry with the specified identifier was not found.","folder":"1-15","rawModeData":"\n\n\t2\tsecurity_group_by_name\n\tThis is a comment\n\tWEB\n\t75\n\tZone_10_0_0_1\n\t\n\t\t
koko
\n\t\tbobo\n\t\t1\n\t\tDefault\n\t
\n
\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries/{{id}}","collectionId":"1","id":"1-15-117","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create a zone pattern entry in a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"}],"dataMode":"raw","description":"Create a zone pattern entry in a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone pattern entry.
body: The zone pattern entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<create_pattern_match_entry>
    <pattern_match_entry>
        <id>1</id>
        <zone_id>2</zone_id>
        <domain>
            <id>1</id>
            <name>Default</name>
        </domain>
        <pattern>WEB</pattern>
        <type>security_group_by_name</type>
        <comment>This is a comment</comment>
    </pattern_match_entry>
</create_pattern_match_entry>


Response Messages:
201: The zone pattern entry was created successfully.
403: User is not permitted to access the specified domain
400: Some of pattern entry parameters were invalid or missing
404: A zone with the specified identifier was not found.","folder":"1-15","rawModeData":"\n\n\t\n\t\t1\n\t\t2\n\t\t\n\t\t\t1\n\t\t\tDefault\n\t\t\n\t\tWEB\n\t\tsecurity_group_by_name\n\t\tThis is a comment\n\t\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries","collectionId":"1","id":"1-15-118","method":"POST"},{"headers":"Accept: application/json\n","name":"Get entries for a zone","description":"Get the list of zone entries for a zone.

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the zone entry results. [optional]
name: Filter by name for the zone entry results. [optional]
ip: Filter by IP for the zone entry results. [optional]
netmask: Filter by netmask for the zone entry results. [optional]
prefix: Filter by prefix for the zone entry results. [optional]
comment: Filter by comment for the zone entry results. [optional]
group: Filter by device group for the zone entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries

Response Messages:
200: The zone entries were successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/entries","collectionId":"1","id":"1-16-119","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Modify a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.
body: The modified zone entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
200: The zone entry was modified successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-120","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get a specific zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get a specific zone entry by ID for a zone.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/123

Response Messages:
200: The zone entry was successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-121","method":"GET"},{"name":"Delete zone entries","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete existing zone entries.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/10

Response Messages:
200: The zone entry was deleted successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-122","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Modify multiple existing zone entries","data":[{"value":null,"type":"text","enabled":true,"key":"zone_ids"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix.
For IPv6 provide IP and prefix only, netmask is not allowed.
new_zone_id is not optional, it may be the same as the present zoneId.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entries.
ids: The ID(s) of the zone entries to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/85,98/entries/120,139
BODY{
\"zone_entries\" : {
        \"zone_entry\": [
            {
                \"id\": 120,
                \"ip\": \"3.3.3.3\",
                \"prefix\": 32,
                \"new_zone_id\": 85
            },
            {
                \"id\": 139,
                \"ip\": \"1b98:c72:1f00:0001::\",
                \"prefix\": \"52\",
                \"new_zone_id\": 98
            }
        ]
}
}


Response Messages:
200: The zone entry was modified successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entries\" : {\n\t\t\"zone_entry\": [\n\t\t\t{\n\t\t\t\t\"id\": 120,\n\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\"prefix\": 32,\n\t\t\t\t\"new_zone_id\": 85\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"id\": 139,\n\t\t\t\t\"ip\": \"1b98:c72:1f00:0001::\",\n\t\t\t\t\"prefix\": \"52\",\n\t\t\t\t\"new_zone_id\": 98\n\t\t\t}\n\t\t]\n}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","collectionId":"1","id":"1-16-123","method":"PUT"},{"headers":"Content-Type: application/json\n","name":"Create a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
body: The zone entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
201: The zone entry was created successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries","collectionId":"1","id":"1-16-124","method":"POST"},{"name":"Modify a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_ids"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Modify an existing zone entry.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entry.
ids: The ID(s) of the zone entries to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/entries/10,20

Response Messages:
200: The zone entry was deleted successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","collectionId":"1","id":"1-16-125","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Create a zone","dataMode":"raw","description":"Create a zone.

Parameters:
context: Global MSSP context. [optional]
body: The zone to add.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <name>DMZ</name>
    <comment>All DMZ addresses</comment>
    <shared>false</shared>
</zone>


Response Messages:
201: The zone was created successfully.
403: User is not permitted to access the specified domain
400: The zone parameters were invalid","folder":"1-17","rawModeData":"\n\n\tDMZ\n\tAll DMZ addresses\n\tfalse\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","collectionId":"1","id":"1-17-126","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all zones","description":"Gets a list of all zones.

Parameters:
context: Global MSSP context. [optional]
name: Filter by zone name for the zone results. [optional]
comment: Filter by zone comment for the zone results. [optional]
imported: List domains that imported zones. [optional]
includeInternet: Include the Internet zone. [optional]
includeImported: Include imported zones. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
200: The zones were retrieved successfully.
403: User is not permitted to access the specified domain","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","collectionId":"1","id":"1-17-127","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","name":"Delete all zones","method":"DELETE","id":"1-17-128","description":"Delete all existing zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
204: All zones were successfully deleted.
403: User is not permitted to access the specified domain","folder":"1-17"},{"headers":"Accept: application/json\n","name":"Get descendant zones for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of zones descended from the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for descendant zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/10,20/descendants

Response Messages:
200: The zone descendants were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/descendants","collectionId":"1","id":"1-17-129","method":"GET"},{"name":"Add a zone as a descendant to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"parent_id"},{"value":null,"type":"text","enabled":true,"key":"child_ids"}],"dataMode":"params","description":"Add a zone(s) as a descendant to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to add descendant zone(s).
child_ids: The ID(s) of the zones to add as descendants.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was added as an descendant successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","collectionId":"1","id":"1-17-130","method":"PUT"},{"name":"Remove a zone as an descendants to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"parent_id"},{"value":null,"type":"text","enabled":true,"key":"child_ids"}],"dataMode":"params","description":"Remove a zone(s) as an descendants to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to remove descendant zone(s).
child_ids: The ID(s) of the zone to remove as a descendant.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was removed as an descendant successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","collectionId":"1","id":"1-17-131","method":"DELETE"},{"name":"Remove a zone as an ancestor to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"child_id"},{"value":null,"type":"text","enabled":true,"key":"parent_ids"}],"dataMode":"params","description":"Remove a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to remove ancestors zone(s).
parent_ids: The ID(s) of the zones to remove as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was removed as an ancestor successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","collectionId":"1","id":"1-17-132","method":"DELETE"},{"name":"Add a zone as an ancestor to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"child_id"},{"value":null,"type":"text","enabled":true,"key":"parent_ids"}],"dataMode":"params","description":"Add a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to add ancestors zone(s).
parent_ids: The ID(s) of the zones to add as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was added as an ancestor successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","collectionId":"1","id":"1-17-133","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get shared zones","description":"Get a list of shared zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/shared

Response Messages:
200: The list of shared zones was retrieved successfully.
403: User is not permitted to access the specified domain","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/shared","collectionId":"1","id":"1-17-134","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Map network elements to security zones","dataMode":"raw","description":"This API maps each network element in the AccessRequestNetworkListDTO (such as IP address, IP address range, object, or group) to all matching Tufin security zones. If the network element is a group, then each zone also identifies all matching group members. The internet referral object can be included in the list, and will always map to the predefined Internet security zone. If the 'Any' element is included in the list it will map to all zones.
Note: if multi-domain mode is enabled, the API calls only checks zones that are in the “Default” domain.

Parameters:
body: AccessRequestNetworkListDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_zones
BODY<network_objects>
     <network_object xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"ip_network\">
         <network xsi:type=\"raw_network_subnet\">
         <ip>10.8.8.0</ip>
         <mask>255.255.255.0</mask>
         </network>
     </network_object>
</network_objects>


Response Messages:
200: Returns mapping of network elements to security zones
400: Access Request Network List is malformed.
403: Access is denied.","folder":"1-17","rawModeData":"\n\t \n\t\t \n\t\t 10.8.8.0\n\t\t 255.255.255.0\n\t\t \n\t \n","url":"https://{{SecureTrack_IP}}/securetrack/api/security_zones/","collectionId":"1","id":"1-17-135","method":"POST"},{"name":"Delete a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Delete an existing zone.

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zone to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/1,2

Response Messages:
204: The specified zone was successfully deleted.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}","collectionId":"1","id":"1-17-136","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Modify a zone","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Modify an existing zone.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <id>2</id>
    <name>DMZ</name>
    <comment>All DMZ hosts</comment>
    <shared>false</shared>
    <internet>false</internet>
    <user_networks>false</user_networks>
    <unassociated_networks>false</unassociated_networks>
</zone>


Response Messages:
204: The specified zone was successfully modified.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
400: The zone parameters were invalid","folder":"1-17","rawModeData":"\n\n\t2\n\tDMZ\n\tAll DMZ hosts\n\tfalse\n\tfalse\n\tfalse\n\tfalse\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","collectionId":"1","id":"1-17-137","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get the zone with the specified ID.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to get.
imported: List domains that imported zones. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2

Response Messages:
200: The zone was retrieved successfully.
403: User is not permitted to access the specified domain
403: A zone with the specified ID does not exist.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","collectionId":"1","id":"1-17-138","method":"GET"},{"headers":"Accept: application/json\n","name":"Get configuration usages for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of configuration usages for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for configuration dependencies.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/dependencies

Response Messages:
200: The zone dependencies were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/dependencies","collectionId":"1","id":"1-17-139","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/import/{{ids}}","name":"Import a zone","method":"POST","id":"1-17-140","description":"Import a shared zone into the specified domain

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones to import. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/import/10,20

Response Messages:
200: The zone was imported successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17"},{"headers":"Accept: application/json\n","name":"Get ancestor zones for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of ancestor zones for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for ancestor zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/123,234/ancestors

Response Messages:
200: The zone ancestors were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/ancestors","collectionId":"1","id":"1-17-141","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by input and output interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"description":"Parameters:
device_id: The unique identifier of target device
inputInterfaceName: Input interface name [optional]
outputInterfaceName: Output interface name [optional]
isIpv6: Is ipv6 policy [optional]

Usage Example
https://192.168.1.1/securetrack/api/bindings/2/topology_interfaces?inputInterfaceName=ethernet1/1&outputInterfaceName=ethernet1/2
","dataMode":"params","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/topology_interfaces","collectionId":"1","id":"1-18-142","method":"GET"},{"headers":"Accept: application/json\n","name":"Get sub-policies (bindings) by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the subpolicies (bindings) for a given revision.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Revision ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/bindings","collectionId":"1","id":"1-18-143","method":"GET"},{"headers":"Accept: application/json\n","name":"Get policies by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of policies defined on a given revision ID

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/policies
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/policies","collectionId":"1","id":"1-18-144","method":"GET"},{"headers":"Accept: application/json\n","name":"Get sub-policies (bindings) by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the subpolicies (bindings) for a given device.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Device ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindings","collectionId":"1","id":"1-18-145","method":"GET"},{"headers":"Accept: application/json\n","name":"Get policies by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of policies defined on a given device ID.
Supported devices: CheckPoint, Panorama Advanced, FortiManager Basic and Advanced, FMC and NSX.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/policies
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/policies","collectionId":"1","id":"1-18-146","method":"GET"},{"headers":"Accept: application/json\n","name":"Get list of sub-policies (bindings) with input and/or output interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"supremum_version_id"},{"value":null,"type":"text","enabled":true,"key":"inputInterfaceName"},{"value":null,"type":"text","enabled":true,"key":"outputInterfaceName"}],"dataMode":"params","description":"Retrieve list of bindings of input and/or output interfaces

Parameters:
device_id: The unique identifier of target device
supremum_version_id: The unique identifier of target revision
inputInterfaceName: Input interface name
outputInterfaceName: Output interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/binding_query?supremum_version_id=785&inputInterfaceName=Any&outputInterfaceName=Any
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/binding_query","collectionId":"1","id":"1-18-147","method":"GET"},{"headers":"Accept: application/json\n","name":"Run Policy Analysis query","data":[{"value":null,"type":"text","enabled":true,"key":"device_ids"},{"value":null,"type":"text","enabled":true,"key":"sources"},{"value":null,"type":"text","enabled":true,"key":"destinations"},{"value":null,"type":"text","enabled":true,"key":"services"}],"description":"Parameters:
device_ids: Device ids
sources: Source list
destinations: Destination list
services: Service list
exclude_any: Exclude any in the specified, comma-separated fields of source, destination or service. For example: exclude_any = destination,service [optional]
action: Action [optional]

Usage Example
https://192.168.1.1/securetrack/api/policy_analysis/query/matching_rules?device_ids=41&sources=33.33.33.0:24,113.113.113.100&destinations=114.1.1.0:24&services=tcp:80&exclude_any=source,destination

Response Messages:
200: Returns request results.
400: Error in request syntax.","dataMode":"params","folder":"1-19","url":"https://{{SecureTrack_IP}}/securetrack/api/policy_analysis/query/matching_rules","collectionId":"1","id":"1-19-148","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Fetches rule documentation for a single rule given by revision ID and rule ID.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the requested rule

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-149","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Modify specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"raw","description":"Modify rule documentation for a single rule identified by revision ID and rule ID.
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If no rule documentation exists for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If rule documentation already exists for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.
Record set entries that are automatically created or calculated, for example automatic mapping to a SecureChange ticket, cannot be modified.
The following fields are automatically calculated, and cannot be modified:
Permissiveness, Violations, Last Hit, Last Modified, Shadowing Status, Certification Status, Certification Date, Certification Expiration Date, Application Name, Application Owner

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the changed rule
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>172</id>
         <ticketCr>789111</ticketCr>
     </record_set>
</rule_documentation>

","folder":"1-20","rawModeData":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 172\n\t\t 789111\n\t \n","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-150","method":"PUT"},{"name":"Delete specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Delete rule documentation for a single rule given by revision ID and rule ID.
If the rule has automatic mapping to a ticket, the record is not deleted.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Rule id

Usage Example
https://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-151","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Modify specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"raw","description":"Modify rule documentation for a single rule given by device ID and rule ID
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If there is no existing rule documentation for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If there is existing rule documentation for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>173</id>
         <ticketCr>789112</ticketCr>
     </record_set>
</rule_documentation>

","folder":"1-20","rawModeData":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 173\n\t\t 789112\n\t \n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-152","method":"PUT"},{"name":"Delete specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Delete rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-153","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Fetches rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-154","method":"GET"},{"headers":"Accept: application/json\n","name":"Get cleanups results","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/","collectionId":"1","id":"1-21-155","method":"GET"},{"headers":"Accept: application/json\n","name":"Get shadowing rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"shadowed_uids"}],"dataMode":"params","description":"Find shadowing rules for given shadowed rules of a specific device

Parameters:
device_id: Device ID
shadowed_uids: UIDs of shadowed rules separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/31/shadowing_rules?shadowed_uids=78786a0d-b9cc-478e-b7a2-dea953c976c7
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/shadowing_rules","collectionId":"1","id":"1-21-156","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the specific objects or rules identified for the cleanup results","data":[{"value":null,"type":"text","enabled":true,"key":"cleanup_id"}],"description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/instances
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/instances","collectionId":"1","id":"1-21-157","method":"GET"},{"headers":"Accept: application/json\n","name":"Get devices in cleanup results","data":[{"value":null,"type":"text","enabled":true,"key":"cleanup_id"}],"description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/devices
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/devices","collectionId":"1","id":"1-21-158","method":"GET"},{"headers":"Accept: application/json\n","name":"Get devices in risk results","data":[{"value":null,"type":"text","enabled":true,"key":"risk_id"}],"description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id

Usage Example
https://192.168.1.1/securetrack/api/risk/1/devices
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/devices","collectionId":"1","id":"1-21-159","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the specific objects or rules identified for the risk results","data":[{"value":null,"type":"text","enabled":true,"key":"risk_id"}],"description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk/1/instances
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/instances","collectionId":"1","id":"1-21-160","method":"GET"},{"headers":"Accept: application/json\n","name":"Get risks results","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/","collectionId":"1","id":"1-21-161","method":"GET"},{"headers":"Accept: application/json\n","name":"Get cleanups by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"code"}],"dataMode":"params","description":"Fetches set of Cleanup calculation results for a device given by ID.
Only fully shadowed rules (cleanup code C01) are supported.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
code: Cleanup category code
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query result allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/cleanups?code=C01
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/cleanups","collectionId":"1","id":"1-21-162","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific revision","data":[{"value":null,"type":"text","enabled":true,"key":"revId"}],"dataMode":"params","description":"Fetches a revision specified by revision Id.
To get revId for this API, use the 'id' property of RevisionDTO that is returned by 'Get revisions by device' or 'Get latest revision by device' APIs

Parameters:
context: Global MSSP context [optional]
revId: Id of fetched revision

Usage Example
https://192.168.1.1/securetrack/api/revisions/785
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revId}}","collectionId":"1","id":"1-22-163","method":"GET"},{"headers":"Accept: application/json\n","name":"Get latest revision by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches latest revision for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/105/latest_revision
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/latest_revision","collectionId":"1","id":"1-22-164","method":"GET"},{"headers":"Accept: application/json\n","name":"Get revisions by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches revisions for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/105/revisions
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/revisions","collectionId":"1","id":"1-22-165","method":"GET"},{"headers":"Accept: application/json\n","name":"Get last hits for all rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.

Parameters:
device_id: device id

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find_all/20
","folder":"1-23","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find_all/{{device_id}}","collectionId":"1","id":"1-23-166","method":"GET"},{"headers":"Accept: application/json\n","name":"Get last hit for a specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"rule_uid"}],"dataMode":"params","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.
The rule_uid is the value from the uid field returned by the /rules API: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Parameters:
device_id: device_id
rule_uid: rule_uid

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find/20/ea9db13e-d058-45c6-a2f0-cd731027c22b
","folder":"1-23","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find/{{device_id}}/{{rule_uid}}","collectionId":"1","id":"1-23-167","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/export","name":"Create a CSV file for rules search results","method":"GET","id":"1-24-168","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is : for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API exports the results data as a CSV file in the SecureTrack Reports Repository.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export?search_text=shadowed:true
","folder":"1-24"},{"headers":"Accept: application/json\n","name":"Get a specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"ruleId"}],"description":"Parameters:
ruleId: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/rules/60
","dataMode":"params","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rules/{{ruleId}}","collectionId":"1","id":"1-24-169","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the security rules for the specified device.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.
For Cisco ASA devices, when applying a filter you must also add the direction.


Parameters:
context: Global MSSP context [optional]
id: Device ID
policyId: Policy ID [optional]
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Show rules grouping criteria. Can be set only to \"bindings\". Output will be grouped by bindings and section header for Check Point devices, ACL for Cisco devices, and Zones for Juniper, Palo Alto, and Fortinet device [optional]
with_zb: Include zone based rules, values can be 'true' or 'false' [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?subpolicy_name=layer1&is_global=true

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?interface=Loopback99:INSIDE
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules","collectionId":"1","id":"1-24-170","method":"GET"},{"headers":"Accept: application/json\n","name":"Find rules","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.To get more information regarding objects included in the returned rules (like src_network or dst_network) use their uid, as the objects’ ID might change.
\n By default, if there are less than 3,000 rules - the API will return all the rules.\nIn case there are more than 3,000 rules the API will return an error code 413 with the error message “There are more than 3000 rules, you must use pagination”
“display_rule_number” should return only for Check Point R80 and higher devices.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
device_id: Device id
start: The starting rule to include in the returned results [optional]
count: Number of rules to include in the results [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/31?search_text=source:Sales_192.168.2.60 fromzone:sales tozone:External

Usage Example
https://192.168.1.1/securetrack/api/rule_search/20?search_text=Mobile Access hascomment:false

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=web_server&start=0&count=10

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search/59?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT {
    \"rules\":{
        \"count\":1,
        \"total\":1,
        \"rule\":{
            \"@xsi.type\":\"securityRuleDTO\",
            \"id\":21,
            \"cp_uid\":\"\",
            \"uid\":\"{9259f6ee-47a0-4996-a214-ab7edc14a916}\",
            \"order\":2,
            \"binding\":{
                \"default\":true,
                \"policy\":{
                    \"@xsi.type\":\"managementDomainPolicyDTO\",
                    \"id\":2,
                    \"name\":\"Standard\",
                    \"installable_targets\":\"\"
                },
                \"rule_count\":19,
                \"security_rule_count\":19,
                \"uid\":\"{00-FACED0-00}\"
                },
            \"acceleration_breaker\":false,
            \"action\":\"Accept\",
            \"application\":{
                \"id\":4735,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
            },
            \"authentication_rule\":false,
            \"comment\":\"DO NOT DELETE OR EDIT\",
            \"dst_network\":{
                \"id\":39,
                \"display_name\":\"Net_10.110.65.0\",
                \"name\":\"Net_10.110.65.0\"
                \"uid\":\"{1290f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_networks_negated\":false,
            \"dst_service\":{
                \"id\":7420,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
                \"uid\":\"{2904f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_services_negated\":false,
            \"dst_zone\":\"any\",
            \"disabled\":false,
            \"external\":false,
            \"implicit\":false,
            \"dst_zone_any\":true,
            \"src_zone_any\":true,
            \"name\":\"Accept SSHG\",
            \"option\":\"LOG_SESSION\",
            \"documentation\":{
                \"permissiveness_level\":\"LOW\",
                \"shadowed\":\"Not shadowed\",
                \"last_modified\":\"Today\",
                \"last_hit\":\"N/A\",
                \"violations\":\"\"
            },
            \"rule_location\":\"Shared\",
            \"rule_location_display\":\"Shared - Pre Rule\",
            \"rule_number\":2,
            \"display_rule_number\":\"2.1\",
            \"rule_type\":\"universal\",
            \"src_zone\":\"any\",
            \"src_network\":{
                \"id\":38,
                \"display_name\":\"Net_10.110.64.0\",
                \"name\":\"Net_10.110.64.0\"
                \"uid\":\"{4934f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"src_networks_negated\":false,
            \"src_services_negated\":false,
            \"track\":{
                \"level\":\"LOG\"
            },
            \"type\":\"rule\",
            \"users\":{
                \"id\":5,
                \"display_name\":\"tufin\\\\regina\",
                \"name\":\"tufin\\\\regina@ldap\"
            }
        }
    }
}


Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid
413: Max supported count is 3000
413: There are more than 3000 rules, you must use pagination","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/{{device_id}}","collectionId":"1","id":"1-24-171","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Returns a list of rules by revision ID, rule IDs and additional criteria

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \\\"documentation\\\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \\\"bindings\\\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16370
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/rules/{{ids}}","collectionId":"1","id":"1-24-172","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the security rules for the specified revision.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.
For Cisco ASA devices, when applying a filter you must also add the direction.


Parameters:
context: Global MSSP context [optional]
id: Revision id
policyId: Policy id [optional]
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]
with_zb: Include zone-based rules [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]
is_alternate_order: OrderBy alternate order, for display Aci rules by contracts [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?subpolicy_name=layer1&is_global=true

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?interface=Loopback99:INSIDE
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules","collectionId":"1","id":"1-24-173","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rule count per device","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API will return a list of all the devices, the devices that has rules that match the search criteria will have rule_count that is bigger than 0

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=ICMP application:facebook

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT{
    \"device_list\":{
        \"device\":[
            {
                \"device_id\":512,
                \"revision_id\":6864,
                \"rule_count\":1
            },
            {
                \"device_id\":59,
                \"revision_id\":543,
                \"rule_count\":0
            }
        ]
    }
}

","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/","collectionId":"1","id":"1-24-174","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Returns a list of rules by device ID, rule IDs and additional criteria.
Note: This API retrieves the information from the latest revision.


Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Rule IDs
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16370
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/rules/{{ids}}","collectionId":"1","id":"1-24-175","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific service","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of specific service objects defined in revision given by revision ID and specified by their IDs

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/services/959888
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/services/{{ids}}","collectionId":"1","id":"1-25-176","method":"GET"},{"headers":"Accept: application/json\n","name":"Get service groups containing specified service objects","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns groups that contain the specified service objects


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.

Usage Example
https://192.168.1.1/securetrack/api/services/69577/groups
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/groups","collectionId":"1","id":"1-25-177","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific service","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of specific service objects defined in device given by device ID and specified by their IDs.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Service object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/services/959888,959966
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/services/{{ids}}","collectionId":"1","id":"1-25-178","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules containing specified service object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the security rules that contain the specified service object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.
include_groups: You can add \"include_groups\" to find rules that include the service object and rules that include the groups that include the service object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/65078/rules?include_groups=true
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/rules","collectionId":"1","id":"1-25-179","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get services objects matching specified criteria","data":[{"value":null,"type":"text","enabled":true,"key":"filter"}],"dataMode":"raw","description":"You can search for service objects where the name or comment fields have a specified text string,
or you can search for service objects that have an Port or protocol that matches,
or you can search for service objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns service objects where the name or comment fields have a specified text string. \n“protocol” filter returns service objects that have a protocol that matches specified IP protocol number.\n“port” filter returns service objects that have a port that matches specified port number.\n “uid“ filter returns service objects with the specified uid.\n If no filter is specified, the “text” filter is used.
device_id: Returns service objects belonging to the specified device_id. [optional]
name: (For “text” filter) You can specify \"name\" to find service objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find service objects with the specified text in the comment field. [optional]
protocol: Specify Protocolto find service objects that have the specified IP Protocol. [optional]
port: Specify Portto find service objects that have the specified Port. [optional]
uid: (for “uid“ filter) Returns service objects with the specified uid. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=protocol&protocol=6&device_id=68

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=port&port=80

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
URLhttps://192.168.1.1/securetrack/api/services/search?filter=text&name=tcp_10
BODY{
    \"services\": {
        \"count\": 1,
        \"total\": 1,
        \"service:\": {
            \"id\": 169197,
            \"name\": \"tcp_10\",
            \"display_name\": \"tcp_10\",
            \"class_name\": \"access_role\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"max\": false,
            \"min\": false,
            \"protocol\": 6,
            \"timeout\": \"\",
            \"type\": \"tcp_service\",
            }
        }
    }
}

","folder":"1-25","rawModeData":"{\n\t\"services\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"service:\": {\n\t\t\t\"id\": 169197,\n\t\t\t\"name\": \"tcp_10\",\n\t\t\t\"display_name\": \"tcp_10\",\n\t\t\t\"class_name\": \"access_role\",\n\t\t\t\"global\": false,\n\t\t\t\"device_id\": 158,\n\t\t\t\"comment\": \"\",\n\t\t\t\"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",\n\t\t\t\"implicit\": false,\n\t\t\t\"max\": false,\n\t\t\t\"min\": false,\n\t\t\t\"protocol\": 6,\n\t\t\t\"timeout\": \"\",\n\t\t\t\"type\": \"tcp_service\",\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/services/search","collectionId":"1","id":"1-25-180","method":"GET"},{"headers":"Accept: application/json\n","name":"Get services by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of service objects defined on device given by device ID.
The default value for get_total is false. For APIF calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric between 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/services","collectionId":"1","id":"1-25-181","method":"GET"},{"headers":"Accept: application/json\n","name":"Get services by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of service objects defined in revision given by revision ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric betweenm 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/785/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/services","collectionId":"1","id":"1-25-182","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific time object","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of time objects by revision ID and rule ID

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Rule IDs

Usage Example
https://192.168.1.1/securetrack/api/revisions/7/time_objects/9
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/time_objects/{{ids}}","collectionId":"1","id":"1-26-183","method":"GET"},{"headers":"Accept: application/json\n","name":"Get time objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the time objects used in the specified revision.

Parameters:
context: Global MSSP context [optional]
id: Revision ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/time_objects
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/time_objects","collectionId":"1","id":"1-26-184","method":"GET"},{"headers":"Accept: application/json\n","name":"Get time objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the time objects used in the specified device.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Starting page for query allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/time_objects
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/time_objects","collectionId":"1","id":"1-26-185","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get policy relevance metrics for traffic","dataMode":"raw","description":"The response lists all the relevant security groups, tags, relevant instances, and count of unrelated instances for each Amazon VPC in the specified traffic path.
A relevant security group contains at least one instance including either the source or destination IP address.
An unrelated instance is included in the security group but not part of the specified traffic path.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is used only if MSSP mode is enabled. If MSSP mode is disabled context is ignored.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
body: Relevance metrics request

Usage Example
URLhttps://192.168.1.1/securetrack/api/traffic_policy
BODY{
    \"relevance_metrics\": {
        \"source_ips\": {
            \"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]
        },
        \"dest_ips\": {
            \"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]
        },
        \"targets\": {
            \"target\": [4, 10]
        }
    }
}


Response Messages:
200: Successful
403: Insufficient user permissions
404: Device not found
400: Invalid parameters","folder":"1-27","rawModeData":"{\n\t\"relevance_metrics\": {\n\t\t\"source_ips\": {\n\t\t\t\"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"dest_ips\": {\n\t\t\t\"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"targets\": {\n\t\t\t\"target\": [4, 10]\n\t\t}\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/traffic_policy/","collectionId":"1","id":"1-27-186","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get violations for an access request","dataMode":"raw","description":"Calculate the violations for the given access request.
Note: this API may take a while to complete.
See the asynchronous API /violations/access_request/task as an alternative.

Parameters:
body: AccessRequestListDTO
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request supports multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/sync?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
200: Access request violations were calculated.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination).
403: Access is denied.","folder":"1-28","rawModeData":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/sync","collectionId":"1","id":"1-28-187","method":"POST"},{"headers":"Accept: application/json\n","name":"Get violation task results","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Get result of access requests violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task results were received.
403: Access is denied.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/result/{{taskId}}","collectionId":"1","id":"1-28-188","method":"GET"},{"name":"Cancel violation task","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Delete an access request violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/task/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Access request violations task has been aborted successfully.
403: Access is denied.
404: Access request violations task was not found.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task/{{taskId}}","collectionId":"1","id":"1-28-189","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Start a task to calculate violations for an access request","dataMode":"raw","description":"Create a calculation task to find access requests violations.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
body [optional]
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request uses resources from multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/task?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
202: Access request violations task was accepted.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination)
400: No network source were specified.
400: No network destination were specified.
403: Access is denied.
503: Access request violations task was rejected.","folder":"1-28","rawModeData":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task","collectionId":"1","id":"1-28-190","method":"POST"},{"headers":"Accept: application/json\n","name":"Get violation task status","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Get access requests violations task status.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task status was received.
403: Access is denied.
404: Access request violations task status was not found.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/status/{{taskId}}","collectionId":"1","id":"1-28-191","method":"GET"},{"headers":"Accept: application/json\n","name":"Get alerts","data":[{"value":null,"type":"text","enabled":true,"key":"start"},{"value":null,"type":"text","enabled":true,"key":"count"}],"dataMode":"params","description":"Returns a list of all alerts. If an empty list is returned, it implies that there are no configured alerts for that context.
You must set start and count parameters to limit the number of returned alerts.
Start is zero based - to start from the second rule use start=1, to get rules 51-60 use start=50 and count=10.

Parameters:
context: MSSP context [optional]
start: Returns the results beginning with the specified result number
count: Returns the specified number of results

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts?start=10&count=25

Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","collectionId":"1","id":"1-29-192","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Create an alert","dataMode":"raw","description":"Create an alert for unified security policies.
Returns location with the alert id to get the alert.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": [
                \"moshe\",
                \"admin\"
                ]
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
201: Security policy alert id :|'alertId'| , name : 'alertName'
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
403: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain","folder":"1-29","rawModeData":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": [\n\t\t\t\t\"moshe\",\n\t\t\t\t\"admin\"\n\t\t\t\t]\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","collectionId":"1","id":"1-29-193","method":"POST"},{"name":"Delete alerts by ids","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Delete specified alerts by IDs
To delete multiple alert_ids, use a comma between each ID

Parameters:
context: Delete alerts in the specified domain ID. [optional]
ids: The alert Ids for deletion

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/87

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/86,87,88

Response Messages:
200:
403: Security Policy Alert Ids: :|'alert ids'| don't exist","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{ids}}","collectionId":"1","id":"1-29-194","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get a specific alert","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a specified alert.
If the alert_id does not exist, an error message is returned.

Parameters:
context: MSSP context [optional]
id: The alert Id

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/1

Response Messages:
403: Alert ID does not exist","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","collectionId":"1","id":"1-29-195","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update an alert","dataMode":"raw","description":"Update an alert for unified security policies.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
id: The alert ID for updating [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts/1
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": [
                \"moshe\",
                \"admin\"
                ]
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
204: Alert ID: 'alertId' was updated successfully
404: Alert ID: 'alertId' does not exist
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
403: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain","folder":"1-29","rawModeData":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": [\n\t\t\t\t\"moshe\",\n\t\t\t\t\"admin\"\n\t\t\t\t]\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","collectionId":"1","id":"1-29-196","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Check if tags are compliant with cloud tag policies","data":[{"value":null,"type":"text","enabled":true,"key":"policy_external_id"}],"dataMode":"raw","description":"Check if the tags of a cloud resource are compliant with the specified cloud tag policy. Specify the tag policy to validate in the TagPolicyViolationsCheckRequestDTO. The tags of a cloud resource are specified as a json object with the attribute 'tags' at the root level. 'tags' attributes can be a list of tag names or a map including both the tag name and value. If no tags are specified or if the tag is specified incorrectly, The compliance check will treat the resource as if it has no tags. If no cloud tag policy violations are found the API returns an empty violations list.

Parameters:
context: Returns results for the specified domain ID [optional]
policy_external_id: Tag policy external identifier
body: Tag policy violation check request

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/violation_check?policy_external_id=policyId
BODY {
    \"type\": \"vm\",
    \"name\": \"CRM-FE\",
    \"os\": \"ubuntu14.4\",
    \"image\": \"AMI-12345\",
    \"tags\": {
        \"Role\": \"webserver\",
        \"Budget\": \"corporate\",
        \"Owner\": \"Steve.Smith\"
    }
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found","folder":"1-30","rawModeData":" {\n\t\"type\": \"vm\",\n\t\"name\": \"CRM-FE\",\n\t\"os\": \"ubuntu14.4\",\n\t\"image\": \"AMI-12345\",\n\t\"tags\": {\n\t\t\"Role\": \"webserver\",\n\t\t\"Budget\": \"corporate\",\n\t\t\"Owner\": \"Steve.Smith\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/violation_check/","collectionId":"1","id":"1-30-197","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Replace a cloud tag policy","dataMode":"raw","description":"Replace the cloud tag policy specified by policyID with the new policy attributes.

Use PATCH in order to partially modify a policy. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Replace policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}

","folder":"1-30","rawModeData":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-198","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get cloud tag policy","description":"This API retrieves the details of the cloud tag policy specified by policyId.

User must have admin permissions to the policy affiliated domain. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicyName\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryTagsRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-199","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Modify a cloud tag policy","dataMode":"raw","description":"Partially modify a cloud tag policy by stating the modified attributes. Providing requirements replaces the entire list.

Specifying an empty requirement list is not permitted. Modify some attributes of the cloud tag policy specified by policyID with the attributes provided. If one or more \"requirement\" objects is provided, the exsiting \"requirement\" objects will be deleted and replaced with the new objetcs. Specifying an empty requirement list is not permitted.If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Rename policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found","folder":"1-30","rawModeData":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-200","method":"PATCH"},{"headers":"Accept: application/json\n","name":"Delete cloud tag policy","description":"Delete the cloud tag policy specified by policyId.

If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Delete policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT {
        \"status\": \"OK\",
        \"policy_name\": \"myPolicyName\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-201","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get all cloud tag policies","description":"This API returns the details of all the tag policies.

Results are filtered according to user domain permissions and request context. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicy1\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                },
                {
                        \"policy_id\": \"tp-102\",
                        \"policy_name\": \"myPolicy2\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","collectionId":"1","id":"1-30-202","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create a cloud tag policy","dataMode":"raw","description":"Create a new cloud tag policy. The policyName field specified in the TagPolicyDTO must be unique. Define the requirements enforced by the cloud tag policy in the requirements field of the TagPolicyDTO. The supported value for the \"requirement_type\" field are \"mandatory_tags\" and \"valid_values\"If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Create policy for the specified domain ID [optional]
body: cloud tag policy DTO [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
BODY {
    \"policy_name\": \"Production-VPC-Tag-Policy\",
    \"policy_description\": \"Instances tags in production\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_financial_tags\",
            \"requirement_severity\": \"HIGH\",
            \"tags\": [
                \"Owner\",
                \"Budget\"
            ]
        },
        {
            \"requirement_type\": \"valid_values\",
            \"requirement_name\": \"budget_valid_values\",
            \"requirement_severity\": \"CRITICAL\",
            \"tag\": \"Budget\",
            \"values\": [
                \"Corporate\",
                \"Dev\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
409: Policy name already exists","folder":"1-30","rawModeData":" {\n\t\"policy_name\": \"Production-VPC-Tag-Policy\",\n\t\"policy_description\": \"Instances tags in production\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_financial_tags\",\n\t\t\t\"requirement_severity\": \"HIGH\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Budget\"\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"requirement_type\": \"valid_values\",\n\t\t\t\"requirement_name\": \"budget_valid_values\",\n\t\t\t\"requirement_severity\": \"CRITICAL\",\n\t\t\t\"tag\": \"Budget\",\n\t\t\t\"values\": [\n\t\t\t\t\"Corporate\",\n\t\t\t\t\"Dev\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","collectionId":"1","id":"1-30-203","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all cloud tag policy violations for a VPC","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"severity"}],"dataMode":"params","description":"Retrieve all cloud tag policy violations for the specified VPC and severity level.

Parameters:
context: Global MSSP context. [optional]
deviceId: The device ID for which to get violations
severity: Return only violations of this severity
resourceId: The id of the VM instance [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses \"count=100\". [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tag_violations?deviceId=123&severity=CRITICAL
OUTPUT<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<tag_policy_device_violations>
    <violating_resources_count>2</violating_resources_count>
    <device_name>Amazon Test VPC </device_name>
    <severity>critical</severity>
    <violating_resources>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Name' value 'email server' is not valid. Valid values are [R&D, HR]</violation_message>
                    <policy_id>tp-100</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>validValue_constraint2</requirement_name>
                    <requirement_severity>high</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"valid_values\">
                        <tag>Name</tag>
                        <valid_values>
                            <valid_value>R&D</valid_value>
                            <valid_value>HR</valid_value>
                        </valid_values>
                        <invalid_value>email server</invalid_value>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-abc12345</resource_id>
            <resource_name>email server</resource_name>
        </violating_resource>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Application' is missing</violation_message>
                    <policy_id>tp-105</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>mandatory_constraint1</requirement_name>
                    <requirement_severity>critical</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"mandatory_tags\">
                        <missing_tag>Application</missing_tag>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-12345678</resource_id>
            <resource_name>Violations tests server</resource_name>
        </violating_resource>
    </violating_resources>
</tag_policy_device_violations>


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: A device with the specified ID was not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/tag_violations/","collectionId":"1","id":"1-30-204","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a specific exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Gets a specific exception for unified security policies.

Parameters:
exceptionId: The ID of the exception to get.
context: Global MSSP context [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
403: User not permitted to access the specified domain
404: A security policy exception with the specified ID was not found.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","collectionId":"1","id":"1-31-205","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete an exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Delete the specific unified security policy exceptions

Parameters:
exceptionId: The ID of the exception to delete.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
404: The security policy with the specified ID does not exist
403: User not permitted to access the specified domain.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","collectionId":"1","id":"1-31-206","method":"DELETE"},{"name":"Start a task to calculate matching rules for an exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Create a calculation task to find matching rules.
The results will be on the relevant devices for each access.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
exceptionId: Security policy Exception ID on which to run the API.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/1/matching_rules/start

Response Messages:
403: User not permitted to Security policy exceptions.
404: A security policy exception with the specified ID was not found.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}/matching_rules/start","collectionId":"1","id":"1-31-207","method":"POST"},{"headers":"Accept: application/json\n","name":"Get matching rules task status","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task status was received.
403: User not permitted to Security policy exceptions.
404: Matching rules task status was not found.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/status/{{taskId}}","collectionId":"1","id":"1-31-208","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create an exception","dataMode":"raw","description":"Create an exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/exceptions
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<security_policy_exception>
    <approved_by>admin</approved_by>
    <created_by>st_user</created_by>
    <creation_date>2015-01-01</creation_date>
    <description>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</description>
    <exempted_traffic_list>
        <exempted_traffic>
            <comment>Creating USP exception for ticket 123</comment>
            <dest_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.2</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </dest_network_collection>
            <security_requirements>
                <zone_to_zone_security_requirement>
                    <from_zone>LAN</from_zone>
                    <policy_name>corporate security policy</policy_name>
                    <to_zone>DMZ</to_zone>
                </zone_to_zone_security_requirement>
            </security_requirements>
            <service_collection>
                <service_items>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"custom\">
                        <port>4321</port>
                        <protocol>tcp</protocol>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"device_service\">
                        <mgmt_id>1</mgmt_id>
                        <service_uid>{5aa1c104-bd4d-4635-a281-b3a5442639ba}</service_uid>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"predefined\">
                        <predefined_service_name>http</predefined_service_name>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"range_service\">
                        <minProtocol>10</minProtocol>
                        <maxProtocol>20</maxProtocol>
                    </service_item>
                </service_items>
            </service_collection>
            <source_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.1</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </source_network_collection>
        </exempted_traffic>
    </exempted_traffic_list>
    <expiration_date>2025-01-01</expiration_date>
    <name>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</name>
    <requested_by>admin</requested_by>
    <ticket_id>123</ticket_id>
</security_policy_exception>


Response Messages:
400: The specified network item is not valid.
400: The specified zone name does not exist.
400: The security policy with the specified name does not exist
400: The security policy 'created by' user is not valid.
400: The security policy with the specified name already exists.
403: User not permitted to access the specified domain.","folder":"1-31","rawModeData":"\n\n\tadmin\n\tst_user\n\t2015-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\t\n\t\t\n\t\t\tCreating USP exception for ticket 123\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.2\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tLAN\n\t\t\t\t\tcorporate security policy\n\t\t\t\t\tDMZ\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4321\n\t\t\t\t\t\ttcp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t1\n\t\t\t\t\t\t{5aa1c104-bd4d-4635-a281-b3a5442639ba}\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\thttp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t10\n\t\t\t\t\t\t20\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.1\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t2025-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\tadmin\n\t123\n","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","collectionId":"1","id":"1-31-209","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all exceptions","description":"Gets a list of all unified security policy exceptions.

Parameters:
context: Global MSSP context [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions

Response Messages:
403: User not permitted to access the specified domain","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","collectionId":"1","id":"1-31-210","method":"GET"},{"headers":"Accept: application/json\n","name":"Get matching rules task results","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task results were received.
403: User not permitted to Security policy exceptions.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/result/{{taskId}}","collectionId":"1","id":"1-31-211","method":"GET"},{"name":"Cancel Matching rules task","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Matching rules task has been aborted successfully.
403: User not permitted to Security policy exceptions.
404: Matching rules task was not found.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/{{taskId}}","collectionId":"1","id":"1-31-212","method":"DELETE"},{"name":"Delete unified security policy","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete a Security Policy Matrix

Parameters:
context: Returns results for the specified domain ID. [optional]
id: The unique identifier of the security policy matrix to delete

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1
","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}","collectionId":"1","id":"1-32-213","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get zone to interface mapping","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"params","description":"Fetches mapping of SecureTrack zones to device interfaces

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID

Usage Example
https://127.0.0.1/securetrack/api/security_policies/9/mapping

Response Messages:
200: Successful
400: This device does not support zone to interface mapping
403: User not permitted to access the specified domain
404: Device ID: <deviceId> does not exist
404: Access denied for device with ID: <deviceId>","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/mapping","collectionId":"1","id":"1-32-214","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}/export","name":"Get unified security policy as CSV","method":"GET","id":"1-32-215","description":"Exports a Security Policy in CSV format

Parameters:
context: Returns results for the specified domain ID. [optional]
id: ID of the security policy. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1/export

Response Messages:
403: User not permitted to access the specified domain
404: Security Policy does not exist","folder":"1-32"},{"headers":"Accept: application/json\n","name":"Get unified security policies","description":"Fetches the security zone matrices defined under Unified Security Policy.

Parameters:
context: Returns results for the specified domain ID. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies

Response Messages:
403: User not permitted to access the specified domain","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/","collectionId":"1","id":"1-32-216","method":"GET"},{"headers":"Accept: application/json\n","name":"Get global unified security policies","description":"Fetches the global security zone matrices defined under Unified Security Policy.



Usage Example
https://192.168.1.1/securetrack/api/security_policies/global

Response Messages:
403: User not permitted to access global security policies","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/global","collectionId":"1","id":"1-32-217","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Set manual device mapping","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"raw","description":"Add or remove a zone on a device interface

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID
body: InterfacesManualMappingsDTO

Usage Example
URLhttps://127.0.0.1/securetrack/api/security_policies/10/manual_mapping
BODY<interfaces_manual_mappings>
<interface_manual_mapping>
<interface_name>Vlan_30</interface_name>
<zones_user_actions>
<zone_user_action>
<zoneId>10</zoneId>
<action>add</action>
</zone_user_action>
</zones_user_actions>
</interface_manual_mapping>
</interfaces_manual_mappings>


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Not found error
404: User action not valid (only add/remove)
404: No interface with name for device with id
404: No zone with id
404: No revision for device with id
404: Device ID: <deviceId> does not exist
404: Access denied for device with ID: <deviceId>
404: InterfacesManualMappingsDTO is empty
404: Error on updating security_policy_interface_zone_mapping_user_action table for device with ID","folder":"1-32","rawModeData":"\n \n Vlan_30\n \n \n 10\n add\n \n \n \n\n ","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/manual_mapping","collectionId":"1","id":"1-32-218","method":"POST"},{"headers":"Accept: application/json\n","name":"Get the amount of violating rules for the specified device.","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: The device ID for which to get violations.

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/count

Response Messages:
200: The violation count was successfully retrieved
404: Device with id: <deviceId> doesn't exist","dataMode":"params","folder":"1-33","url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/count","collectionId":"1","id":"1-33-219","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the violating rules for the specified device.","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"severity"},{"value":null,"type":"text","enabled":true,"key":"type"}],"dataMode":"params","description":"policyName is supported for management devices running in Advanced management mode.

Parameters:
deviceId: The device ID for which to get violations
policyName: Return only violations that match this policy [optional]
severity: Return only violations of this severity
type: Return only violations of this type

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/device_violations?policy=policy_name&type=SECURITY_POLICY&severity=MEDIUM

Response Messages:
200: The violations were successfully retrieved
400: The specified value for the violation severity is invalid
400: The specified value for the violation type is invalid
400: You cannot specify a policyName because the device is not running in Advanced management mode
404: A device with the specified ID was not found
404: A policy with the specified policyName was not found for this device","folder":"1-33","url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/device_violations","collectionId":"1","id":"1-33-220","method":"GET"}],"order":[],"name":"Tufin Tufin SecureTrack R20-2-HF2","id":"1","description":"Tufin Orchestration Suite - Tufin SecureTrack APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securetrack/apidoc"} \ No newline at end of file diff --git a/Postman Format v1/R20-2 postman collection/tufin.postman_environment b/Postman Format v1/R20-2 postman collection/tufin.postman_environment new file mode 100644 index 0000000..c031d2b --- /dev/null +++ b/Postman Format v1/R20-2 postman collection/tufin.postman_environment @@ -0,0 +1 @@ +{"name":"Tufin environment","values":[{"type":"text","key":"SecureApp_IP"},{"type":"text","key":"SecureChange_IP"},{"type":"text","key":"SecureTrack_IP"},{"type":"text","key":"applicationId"},{"type":"text","key":"applicationInterfaceId"},{"type":"text","key":"application_id"},{"type":"text","key":"application_pack_id"},{"type":"text","key":"assigneeId"},{"type":"text","key":"child_id"},{"type":"text","key":"child_ids"},{"type":"text","key":"cleanup_id"},{"type":"text","key":"cloudId"},{"type":"text","key":"cloud_id"},{"type":"text","key":"connectionId"},{"type":"text","key":"connectionInterfaceId"},{"type":"text","key":"connectionToApplicationId"},{"type":"text","key":"connection_id"},{"type":"text","key":"connection_to_application_pack_id"},{"type":"text","key":"customer_id"},{"type":"text","key":"deviceId"},{"type":"text","key":"device_id"},{"type":"text","key":"domainId"},{"type":"text","key":"exceptionId"},{"type":"text","key":"fieldId"},{"type":"text","key":"id"},{"type":"text","key":"ids"},{"type":"text","key":"inId"},{"type":"text","key":"instructionId"},{"type":"text","key":"interfaceCustomerId"},{"type":"text","key":"layer2DataId"},{"type":"text","key":"managementId"},{"type":"text","key":"mgmtId"},{"type":"text","key":"parent_id"},{"type":"text","key":"parent_ids"},{"type":"text","key":"policyId"},{"type":"text","key":"requestId"},{"type":"text","key":"revId"},{"type":"text","key":"revision_id"},{"type":"text","key":"risk_id"},{"type":"text","key":"routeId"},{"type":"text","key":"ruleId"},{"type":"text","key":"rule_id"},{"type":"text","key":"rule_uid"},{"type":"text","key":"serverId"},{"type":"text","key":"serviceId"},{"type":"text","key":"sourceApplicationId"},{"type":"text","key":"stepId"},{"type":"text","key":"tag_id"},{"type":"text","key":"targetApplicationId"},{"type":"text","key":"taskId"},{"type":"text","key":"task_id"},{"type":"text","key":"task_uid"},{"type":"text","key":"toStepId"},{"type":"text","key":"uid"},{"type":"text","key":"userId"},{"type":"text","key":"vpnId"},{"type":"text","key":"zone_id"},{"type":"text","key":"zone_ids"}]} \ No newline at end of file diff --git a/Postman Format v1/R21-1 postman collection/securechangeworkflow_R21-1-RC1.json b/Postman Format v1/R21-1 postman collection/securechangeworkflow_R21-1-RC1.json new file mode 100644 index 0000000..73276e3 --- /dev/null +++ b/Postman Format v1/R21-1 postman collection/securechangeworkflow_R21-1-RC1.json @@ -0,0 +1 @@ +{"folders":[{"order":["2-1-1","2-1-2","2-1-3","2-1-4","2-1-5"],"collectionId":"2","name":"Access Portal","hasRequests":true,"id":"2-1"},{"order":["2-2-6","2-2-7","2-2-8","2-2-9","2-2-10","2-2-11","2-2-12","2-2-13"],"collectionId":"2","name":"Application Connections","hasRequests":true,"id":"2-2"},{"order":["2-3-14"],"collectionId":"2","name":"Application Identities","hasRequests":true,"id":"2-3"},{"order":["2-4-15","2-4-16","2-4-17","2-4-18","2-4-19","2-4-20","2-4-21","2-4-22","2-4-23","2-4-24","2-4-25","2-4-26","2-4-27","2-4-28","2-4-29"],"collectionId":"2","name":"Application Interfaces","hasRequests":true,"id":"2-4"},{"order":["2-5-30","2-5-31","2-5-32","2-5-33","2-5-34"],"collectionId":"2","name":"Application Migration","hasRequests":true,"id":"2-5"},{"order":["2-6-35","2-6-36","2-6-37","2-6-38","2-6-39","2-6-40","2-6-41","2-6-42","2-6-43","2-6-44","2-6-45","2-6-46","2-6-47","2-6-48","2-6-49","2-6-50","2-6-51","2-6-52"],"collectionId":"2","name":"Application Packs","hasRequests":true,"id":"2-6"},{"order":["2-7-53"],"collectionId":"2","name":"Application Pending Changes","hasRequests":true,"id":"2-7"},{"order":["2-8-54","2-8-55"],"collectionId":"2","name":"Application Servers (across all applications)","hasRequests":true,"id":"2-8"},{"order":["2-9-56","2-9-57","2-9-58","2-9-59","2-9-60","2-9-61","2-9-62","2-9-63"],"collectionId":"2","name":"Application Servers (by application)","hasRequests":true,"id":"2-9"},{"order":["2-10-64","2-10-65","2-10-66","2-10-67","2-10-68","2-10-69"],"collectionId":"2","name":"Application Services (global)","hasRequests":true,"id":"2-10"},{"order":["2-11-70","2-11-71","2-11-72","2-11-73","2-11-74"],"collectionId":"2","name":"Application Services (local)","hasRequests":true,"id":"2-11"},{"order":["2-12-75","2-12-76","2-12-77","2-12-78"],"collectionId":"2","name":"Application Users","hasRequests":true,"id":"2-12"},{"order":["2-13-79","2-13-80","2-13-81","2-13-82","2-13-83","2-13-84","2-13-85","2-13-86","2-13-87","2-13-88","2-13-89"],"collectionId":"2","name":"Applications","hasRequests":true,"id":"2-13"},{"order":["2-14-90","2-14-91","2-14-92"],"collectionId":"2","name":"Cloud Console","hasRequests":true,"id":"2-14"},{"order":["2-15-93","2-15-94","2-15-95","2-15-96","2-15-97","2-15-98","2-15-99"],"collectionId":"2","name":"Customers","hasRequests":true,"id":"2-15"},{"order":["2-16-100","2-16-101","2-16-102"],"collectionId":"2","name":"Domains","hasRequests":true,"id":"2-16"},{"order":["2-17-103"],"collectionId":"2","name":"External Provider","hasRequests":true,"id":"2-17"},{"order":["2-18-104"],"collectionId":"2","name":"Load Balancers","hasRequests":true,"id":"2-18"},{"order":["2-19-105"],"collectionId":"2","name":"Rule Recertification","hasRequests":true,"id":"2-19"},{"order":["2-20-106","2-20-107","2-20-108","2-20-109"],"collectionId":"2","name":"SecureChange Devices","hasRequests":true,"id":"2-20"},{"order":["2-21-110","2-21-111","2-21-112","2-21-113","2-21-114","2-21-115"],"collectionId":"2","name":"Server Decommissioning","hasRequests":true,"id":"2-21"},{"order":["2-22-116","2-22-117"],"collectionId":"2","name":"System Configuration","hasRequests":true,"id":"2-22"},{"order":["2-23-118","2-23-119","2-23-120","2-23-121","2-23-122","2-23-123","2-23-124"],"collectionId":"2","name":"System Users","hasRequests":true,"id":"2-23"},{"order":["2-24-125","2-24-126","2-24-127","2-24-128","2-24-129","2-24-130","2-24-131","2-24-132"],"collectionId":"2","name":"Ticket Lifecycle","hasRequests":true,"id":"2-24"},{"order":["2-25-133","2-25-134","2-25-135","2-25-136","2-25-137","2-25-138","2-25-139","2-25-140","2-25-141","2-25-142","2-25-143","2-25-144","2-25-145","2-25-146","2-25-147","2-25-148","2-25-149","2-25-150","2-25-151","2-25-152","2-25-153","2-25-154","2-25-155","2-25-156","2-25-157","2-25-158","2-25-159"],"collectionId":"2","name":"Tickets","hasRequests":true,"id":"2-25"}],"requests":[{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update application access requests","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
body: application access requests

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_requests>
    <application_access_request>
        <id>1</id>
        <action>APPROVE</action>
    </application_access_request>
    <application_access_request>
        <id>2</id>
        <action>REJECT</action>
    </application_access_request>
</application_access_requests>


Response Messages:
200: Application access requests were updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-1","rawModeData":"\n\t\n\t\t1\n\t\tAPPROVE\n\t\n\t\n\t\t2\n\t\tREJECT\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-1","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create application access request","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_request>
    <server_group_id>1</server_group_id>
    <server_ip>1.1.1.1</server_ip>
    <comment>Request to join the WebServers server group</comment>
</application_access_request>


Response Messages:
201: Application access request was submitted.
400: The application was already deleted.
400: Server id cannot be empty.
400: Hostname or IP cannot be empty.
400: The provided server does not exist in application.
400: The provided server is not allowed to access.
400: Request already created
400: Requester cannot be null
400: Group cannot be empty
400: Invalid ip
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-1","rawModeData":"\n\t1\n\t1.1.1.1\n\tRequest to join the WebServers server group\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-2","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing application access requests","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-1","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","collectionId":"2","id":"2-1-3","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update an application access request","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"requestId"}],"dataMode":"raw","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1
BODY<application_access_request>
    <action>APPROVE</action>
</application_access_request>


Response Messages:
200: Application access request was updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-1","rawModeData":"\n\tAPPROVE\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","collectionId":"2","id":"2-1-4","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application access request by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"requestId"}],"description":"Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Access request with id ID was not found in application with id ID","dataMode":"params","folder":"2-1","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","collectionId":"2","id":"2-1-5","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections, with extended resources information","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]
start: Return results starting only from the specified index; 0-based index; default value = 0 [optional]
count: Return the specified number of results. Returns all results if no value specified [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name&start=50&count=100

Response Messages:
400: Start value cannot be a negative number.
400: Count value must be greater than 0.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied.
404: There is no application with the specified ID.
404: There are no connections with the name NAME.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_extended","collectionId":"2","id":"2-2-6","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create a ticket to repair a connection","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_id"}],"description":"Parameters:
application_id: The application ID
connection_id: The connection ID
body: Ticket

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/2/repair
BODY<ticket>
    <subject>Repair connection 2</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <workflow>
        <name>Workflow with topology</name>
    </workflow>
    <steps>
        <step>
            <name>Open request</name>
            <tasks>
                <task>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                            <name>Business Justification</name>
                            <text>I need access to ftp </text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                            <name>Project Number</name>
                            <text>CR124560</text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                            <name>Hyperlink</name>
                            <url>http://192.168.1.1/ticket</url>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                            <name>Change Window</name>
                            <selection>Monday</selection>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                            <name>manager email</name>
                            <text>manager@tufin.com</text>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Response Messages:
201: Ticket was created.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set.
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: Expiration field is required.
400: Submit ticket enabled only with the first step.
400: First step can be only with one task.
400: The specified workflow does not contain an access request field in the first step.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
403: Logged in user: NAME do not have permission to perform on behalf actions.
403: You are not a participant in the first step of this workflow.
403: Access is denied.
403: To create a ticket you must purchase a valid SecureChange license.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Cannot create a ticket to repair this connection because the connection status is not disconnected.
403: Cannot create a ticket to repair this connection because the connection was edited but a ticket has not been created yet.
403: Cannot create a ticket to repair this connection because there are other open tickets for an application that includes this connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\tRepair connection 2\n\tu1\n\tNormal\n\t\n\t\tWorkflow with topology\n\t\n\t\n\t\t\n\t\t\tOpen request\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBusiness Justification\n\t\t\t\t\t\t\tI need access to ftp \n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tProject Number\n\t\t\t\t\t\t\tCR124560\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tHyperlink\n\t\t\t\t\t\t\thttp://192.168.1.1/ticket\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tChange Window\n\t\t\t\t\t\t\tMonday\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tmanager email\n\t\t\t\t\t\t\tmanager@tufin.com\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connections/{{connection_id}}/repair","collectionId":"2","id":"2-2-7","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Update a connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection
body: Connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections/1
BODY <connection>
     <name>Connection A</name>
     <comment>Connection A comment</comment>
     <sources>
         <source>
             <id>2</id>
         </source>
         <source>
             <id>3</id>
         </source>
     </sources>
     <services>
         <service>
             <id>1</id>
         </service>
     </services>
     <destinations>
         <destination>
             <id>1</id>
         </destination>
     </destinations>
</connection>


Response Messages:
200: Connection was modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application that contains the server ID
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":" \n\t Connection A\n\t Connection A comment\n\t \n\t\t \n\t\t\t 2\n\t\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n ","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-8","method":"PUT"},{"name":"Delete connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
200: Connection was deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-9","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","collectionId":"2","id":"2-2-10","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <id>1</id>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <id>2</id>
         <name>Connection B</name>
     </connection>
     <connection>
         <id>3</id>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application that contains the server ID
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\t \n\t\t 1\n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t 2\n\t\t Connection B\n\t \n\t \n\t\t 3\n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-11","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections?name=Connection Name

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no connections with the name NAME.","dataMode":"params","folder":"2-2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-12","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: The list of the connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <name>Connection B</name>
     </connection>
     <connection>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were created.
201: Connection was created.
400: There are no items to add.
400: You cannot add to application NAME because it was decommissioned.
400: Connection name already exists.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-2","rawModeData":"\n\t \n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t Connection B\n\t \n\t \n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","collectionId":"2","id":"2-2-13","method":"POST"},{"headers":"Accept: application/json\n","name":"Fetches application identities","description":"Fetches the list of pre-defined application identities (like facebook) that can be used in a connection.

Parameters:
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities?name=facebook

Response Messages:
404: There are no application identities with the name NAME.
403: Access is denied.","folder":"2-3","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/application_identities","collectionId":"2","id":"2-3-14","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create interface connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
body: The interface connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections
BODY<interface_connections>
    <interface_connection>
        <name>Connection 1</name>
        <sources>
            <source>
                <id>3</id>
            </source>
        </sources>
        <services>
            <service>
                <id>3</id>
            </service>
            <service>
                <id>Facebook</id>
            </service>
        </services>
        <comment>New connection</comment>
    </interface_connection>
</interface_connections>


Response Messages:
200: Interface connections were created.
201: Interface connection was created.
400: There are no items to add.
400: Cannot create interface connection without a name.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
403: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\t\n\t\tConnection 1\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\t\n\t\t\t\tFacebook\n\t\t\t\n\t\t\n\t\tNew connection\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","collectionId":"2","id":"2-4-15","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve existing interface connections","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
name: The name of the interface connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections?name=Connection 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no connection interfaces with the name NAME.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","collectionId":"2","id":"2-4-16","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing application interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"params","description":"To improve response time, set 'calculateIsPublished = false' to avoid calculating 'is_published'.

Parameters:
applicationId: The unique identifier of the application
name: The name of the application interface [optional]
calculateIsPublished: Should calculate is_published value [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces?name=Interface to Application 1

Response Messages:
400: There is no application with the specified ID.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no application interfaces with the name NAME.","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","collectionId":"2","id":"2-4-17","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces
BODY<application_interface>
    <name>Interface to Application 1</name>
    <comment>New application interface</comment>
</application_interface>


Response Messages:
201: Application interface was created.
400: You cannot add to application NAME because it was decommissioned.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tInterface to Application 1\n\tNew application interface\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","collectionId":"2","id":"2-4-18","method":"POST"},{"name":"Delete interface connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
200: Interface connection was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-19","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update an interface connection","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection
body: The interface connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1
BODY<interface_connection>
    <name>Updated name</name>
    <sources>
        <source>
            <id>19</id>
        </source>
    </sources>
    <services>
        <service>
            <id>9</id>
        </service>
    </services>
    <comment>Updated connection</comment>
</interface_connection>


Response Messages:
200: Interface connection was modified.
400: Interface connection name cannot be empty.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
403: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tUpdated name\n\t\n\t\t\n\t\t\t19\n\t\t\n\t\n\t\n\t\t\n\t\t\t9\n\t\t\n\t\n\tUpdated connection\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-20","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing interface connection by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"},{"value":null,"type":"text","enabled":true,"key":"connectionInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","collectionId":"2","id":"2-4-21","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection to application by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-22","method":"GET"},{"name":"Delete connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
200: Connection to application was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-23","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update a connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"connectionToApplicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1
BODY<connection_to_application>
    <name>Updated name</name>
    <comment>Updated connection to application</comment>
    <servers>
        <server>
            <id>4</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
200: Connection to application was modified.
400: Name cannot be empty.
400: Name already exists.
400: Reference to source/destination with ID is invalid.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID.","dataMode":"raw","folder":"2-4","rawModeData":"\n\tUpdated name\n\tUpdated connection to application\n\t\n\t\t\n\t\t\t4\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","collectionId":"2","id":"2-4-24","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing connections to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection to application [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications?name=Connection to Application 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","collectionId":"2","id":"2-4-25","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create connection to application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"Create a connection from this application to an application interface.

Parameters:
applicationId: The unique identifier of the application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications
BODY<connection_to_application>
    <name>Connection to Application 1</name>
    <comment>New connection to application</comment>
    <application_interface_id>1</application_interface_id>
    <servers>
        <server>
            <id>3</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
201: Connection to application was created.
400: You cannot add to application NAME because it was decommissioned.
400: The selected interface cannot be used more than once in the application.
400: Name cannot be empty.
400: Cannot create from local interface.
400: ApplicationInterface didn't got published.
400: Name already exists.
400: Cannot create connection to application without servers, there should be at least one server.
400: Reference to source/destination with ID is invalid.
400: You can use only interface from the same customer.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found.","folder":"2-4","rawModeData":"\n\tConnection to Application 1\n\tNew connection to application\n\t1\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","collectionId":"2","id":"2-4-26","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Update an application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"dataMode":"raw","description":"Update the application interface properties. If is_published is set to true, the application interface is published for use by other users.

Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of The application interface
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1
BODY<application_interface>
    <name>updated name</name>
    <comment>Updated application interface</comment>
    <is_published>true</is_published>
</application_interface>


Response Messages:
200: Application interface was modified.
400: Application interface is not complete for publish.
400: Name cannot be empty.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","folder":"2-4","rawModeData":"\n\tupdated name\n\tUpdated application interface\n\ttrue\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-27","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application interface by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-28","method":"GET"},{"name":"Delete application interface","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"applicationInterfaceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
200: Application interface was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.","dataMode":"params","folder":"2-4","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","collectionId":"2","id":"2-4-29","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update server mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"raw","description":"Use id=-1 for target_network_object if new mapping is ���Not Needed���.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The server mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping
BODY<servers_mapping>
    <server_mapping>
        <source_network_object>
            <id>3</id>
        </source_network_object>
        <target_network_object>
            <id>4</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>5</id>
        </source_network_object>
        <target_network_object>
            <id>-1</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>6</id>
        </source_network_object>
    </server_mapping>
</servers_mapping>


Response Messages:
200: Server mappings were modified.
400: Source network object cannot be empty.
400: Source network object is not valid
400: Target network object is not valid
400: Source and target network objects must be internal or external both.
400: Cannot use DEVICE application resources as external network objects.
400: Source network object with ID must be used by any connection.
400: Cannot remove mapping of network object with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map to ANY network object.
400: Cannot map Internet network object.
400: Cannot map to Internet network object.
400: Target network object ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found.","folder":"2-5","rawModeData":"\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t6\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","collectionId":"2","id":"2-5-30","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve server mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
search_servers_type: Search server type [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping?search_servers_type=EXTERNAL

Response Messages:
400: Search migrated servers type parameter must be either internal, external or both.
400: Cannot get mappings between application to itself.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application with ID
403: You do not have permissions to edit this application.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","collectionId":"2","id":"2-5-31","method":"GET"},{"name":"Copy application servers and connections to another application.","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"params","description":"This API can be used to:
1. Create applications based on a blueprint (template).
2. Copy applications between environments (dev, test, prod).
3. Migrate applications between data-centers.

Before migrating make sure to map servers and connections to applications (if any exist).\nThis migration uses the configuration specified in the other API calls.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2

Response Messages:
200: Application was migrated.
400: Cannot migrate a decommissioned application.
400: Cannot migrate to a decommissioned application.
400: Cannot migrate an application to itself.
400: Cannot edit target DEVICE application.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
400: The source application has no connections to migrate.
409: You cannot migrate the application because not all servers are mapped.
409: You cannot migrate the application because not all connections to application are mapped.
409: You cannot migrate the application because one of the interfaces in the original application has been changed and has not been published.","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}","collectionId":"2","id":"2-5-32","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Update connection to application mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"dataMode":"raw","description":"Use id=-1 for target_application_interface if new mapping is ���Not Needed���.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The interface instance mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping
BODY<connections_to_applications_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>1</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>4</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>2</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>-1</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>3</id>
        </source_connection_to_application>
    </connection_to_application_mapping>
</connections_to_applications_mapping>


Response Messages:
200: Connection to application mappings were modified.
400: Source interface instance cannot be empty.
400: Source interface instance object is not valid
400: Target application interface is not valid
400: Connection to application with ID: ID was not found.
400: Interface with ID: ID was not found.
400: Cannot remove mapping of instance with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map instance to interface with ID ID because the interface exists in target application.
400: Cannot map to duplicate application interfaces
400: Application interface didn't got published
400: Connection to application with id: ID must used by source application
400: You cannot map connection to application ID, because it is contained in a connection to application pack.
400: Application interface ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-5","rawModeData":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","collectionId":"2","id":"2-5-33","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve connection to application mappings for source and target applications","data":[{"value":null,"type":"text","enabled":true,"key":"sourceApplicationId"},{"value":null,"type":"text","enabled":true,"key":"targetApplicationId"}],"description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping

Response Messages:
400: Cannot get mappings between application to itself.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-5","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","collectionId":"2","id":"2-5-34","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update application interfaces and tag mapping","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"dataMode":"raw","description":"Add application interfaces to application pack, and map a tag to the application interface. If a tag is not specified for the interface, the tag will be set to ���No Tag���.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: List of interface tag mapping to be added or modified

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces
BODY<application_interface_tags>
    <application_interface_tag>
        <application_interface>
            <id>1</id>
        </application_interface>
        <tag>
            <id>3</id>
        </tag>
    </application_interface_tag>
    <application_interface_tag>
        <application_interface>
            <id>2</id>
        </application_interface>
    </application_interface_tag>
</application_interface_tags>


Response Messages:
403: Access is denied
404: There are no application packs with the NAME in customer with ID.
403: You do not have permissions to edit this application pack.
403: You do not have permission to access application that contains the interface ID
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Application Interface can't be null.
400: Empty interface ID is not valid.","folder":"2-6","rawModeData":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","collectionId":"2","id":"2-6-35","method":"PUT"},{"name":"Remove application interfaces from application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"application_interface_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
application_interface_id: IDs of application interfaces to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces?application_interface_id=1&application_interface_id=2

Response Messages:
200: Application Interface was deleted.
403: Access is denied
403: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Application interface ID was not found in application pack ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","collectionId":"2","id":"2-6-36","method":"DELETE"},{"name":"Delete tags from application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"tag_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
tag_id: IDs of tags to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/21/tags?tag_id=1&tag_id=2

Response Messages:
200: Tags were deleted.
403: Access is denied
403: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Tag ID was not found in application pack ID.
404: Tag ID is in use so can't be deleted.
404: Removed tag ID can't be empty.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-37","method":"DELETE"},{"headers":"Accept: application/json\n","name":"List all application pack tags","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags

Response Messages:
403: Access is denied
404: There is no application pack with the ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-38","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Modify tags of an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Tags to modify

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <id>1</id>
        <name>Tag 1</name>
    </tag>
    <tag>
        <id>2</id>    
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
403: Access is denied
403: You do not have permissions to edit this application pack.
404: Customer with ID was not found.
404: There is no application pack with the ID in customer with ID.
400: Tag with NAME already exists in application pack ID.
400: Updated tag ID can't be empty
400: Updated Tag ID doesn't exist on application pack ID.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\t1\n\t\tTag 1\n\t\n\t\n\t\t2\t\n\t\tTag 2\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-39","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Create new Tag under an application pack ","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
body: List of tags

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <name>Tag 1</name>
    </tag>
    <tag>
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
403: Access is denied
404: There is no application pack with the ID in customer with ID.
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Tag name must contain at least 2 and no more than 160 characters.
400: Tag with NAME already exists in application pack ID.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tTag 1\n\t\n\t\n\t\tTag 2\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","collectionId":"2","id":"2-6-40","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve a list of all connection to application pack by application ID.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of application
name: The name of the connection to application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs?name=Connection to application pack 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
404: There are no connection to application pack with the NAME in application with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","collectionId":"2","id":"2-6-41","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create new connection to application packs","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of application
body: List of connection to application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs
BODY<connection_to_application_packs>
    <connection_to_application_pack>
        <name>Connection to application pack 1</name>
        <comment>New Connection to application pack</comment>
        <application_pack>
            <id>1</id>
        </application_pack>
        <tags_servers>
            <tag_servers>
                <tag>
                    <id>1</id>
                </tag>
                <servers>
                    <server>
                        <id>3</id>
                    </server>
                </servers>
            </tag_servers>
            <tag_servers>
                <tag>
                    <name>Tag 1</name>
                </tag>
                <servers>
                    <server>
                        <id>4</id>
                    </server>
                </servers>
            </tag_servers>
        </tags_servers>
    </connection_to_application_pack>
</connection_to_application_packs>


Response Messages:
400: There are no connection to application packs to add.
400: Application pack ID cannot be empty.
400: Application with ID was not found.
400: There is no application with the specified ID.
400: There is no application pack with the specified ID.
400: Application pack with ID was decommissioned.
400: Application pack with ID was not published.
400: Connection to application pack cannot be created in the domain of the application pack.
400: The application pack cannot be used more than once in the application.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is missing.
400: Tag ID does not exist.
400: Server ID does not exist.
400: Tag ID is not in use in connection to application pack ID, so it cannot be updated.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
403: Access is denied.
403: You do not have permission to access application that contains the server ID
403: You do not have permission to access application pack with ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Tag with NAME was not found.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tConnection to application pack 1\n\t\tNew Connection to application pack\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t3\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tTag 1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","collectionId":"2","id":"2-6-42","method":"POST"},{"headers":"Accept: application/json\n","name":"List all application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
name: The name of the application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs?name=Application pack 1

Response Messages:
403: Access is denied
404: There are no application packs with the NAME in customer with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-43","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"dataMode":"raw","description":"Update the application packs properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <id>1</id>
        <name>Updated name</name>
        <comment>Updated application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <is_published>false</is_published>
    </application_pack>
</application_packs>


Response Messages:
400: There are no application packs to edit.
400: Application pack ID cannot be empty.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
403: Access is denied
403: You do not have permission to access application that contains the interface ID
403: You do not have permissions to edit this application pack.
403: You do not have permissions to change the owner of application pack ID.
403: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID.","folder":"2-6","rawModeData":"\n\t\n\t\t1\n\t\tUpdated name\n\t\tUpdated application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\tfalse\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-44","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Create new application packs","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <name>Application pack 1</name>
        <comment>New application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <viewers>
            <viewer>
                <id>5</id>
            </viewer>
        </viewers>
    </application_pack>
</application_packs>


Response Messages:
403: Access is denied
403: You do not have permission to access application that contains the interface ID
400: There are no application packs to add.
400: Application pack can be created only in meshed domain mode.
404: Customer with ID was not found.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: The owner NAME does not have permission to access applications.
400: Application pack was already saved.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.","dataMode":"raw","folder":"2-6","rawModeData":"\n\t\n\t\tApplication pack 1\n\t\tNew application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t5\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","collectionId":"2","id":"2-6-45","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application pack by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
403: Access is denied
403: You do not have permission to access application pack with ID
404: Application pack with ID was not found for customer with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-46","method":"GET"},{"name":"Delete application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
200: Application pack wes deleted.
403: You do not have permissions to delete this application pack.
400: There is no application pack with the specified ID.
400: Customer with ID doesn't own an application pack with ID.
400: Application Pack ID cannot be deleted. It is in use by applications IDs.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-47","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Update an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"}],"dataMode":"raw","description":"Update the application pack properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1
BODY<application_pack>
    <name>Updated name</name>
    <comment>Updated application pack</comment>
    <owner>
        <id>4</id>
    </owner>
    <editors>
        <editor>
            <id>3</id>
        </editor>
    </editors>
    <viewers>
        <viewer>
            <id>5</id>
        </viewer>
    </viewers>
    <is_published>true</is_published>
</application_pack>


Response Messages:
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
403: Access is denied
403: You do not have permission to access application that contains the interface ID
403: You do not have permissions to edit this application pack.
403: You do not have permissions to change the owner of application pack ID.
403: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID.","folder":"2-6","rawModeData":"\n\tUpdated name\n\tUpdated application pack\n\t\n\t\t4\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\n\ttrue\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","collectionId":"2","id":"2-6-48","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get tag by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"},{"value":null,"type":"text","enabled":true,"key":"application_pack_id"},{"value":null,"type":"text","enabled":true,"key":"tag_id"}],"description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
tag_id: The unique identifier of a tag

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags/1

Response Messages:
403: Access is denied
404: There is no tag with ID.
404: Customer with ID doesn't own a tag with ID.
404: Application Pack with ID doesn't own a tag with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags/{{tag_id}}","collectionId":"2","id":"2-6-49","method":"GET"},{"name":"Delete a connection to application pack","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
400: Connection to application pack with ID was not found for application with ID.
400: The connection to application pack was already deleted.
403: Access is denied.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-50","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing connection to application pack by ID.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
404: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.","dataMode":"params","folder":"2-6","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-51","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update an application pack","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"connection_to_application_pack_id"}],"description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to update
body: Connection to application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1
BODY<connection_to_application_pack>
    <name>Updated name</name>
    <comment>Updated Connection to application pack</comment>
    <tags_servers>
        <tag_servers>
            <tag>
                <id>1</id>
            </tag>
            <servers>
                <server>
                    <id>3</id>
                </server>
            </servers>
        </tag_servers>
        <tag_servers>
            <tag>
                <name>Tag 1</name>
            </tag>
            <servers>
            </servers>
        </tag_servers>
    </tags_servers>
</connection_to_application_pack>


Response Messages:
400: There is no application with the specified ID.
400: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is required.
400: Tag with Name was not found.
400: Server ID cannot be empty.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
403: Access is denied.
403: You do not have permission to access application that contains the server ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.","dataMode":"raw","folder":"2-6","rawModeData":"\n\tUpdated name\n\tUpdated Connection to application pack\n\t\n\t\t\n\t\t\t\n\t\t\t\t1\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTag 1\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","collectionId":"2","id":"2-6-52","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing access rules","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/87/access_requests

Response Messages:
400: The application was already deleted.
400: There are no changed connections that are ready for creating a ticket.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
400: Application with ID ID was not found.","dataMode":"params","folder":"2-7","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/access_requests","collectionId":"2","id":"2-7-53","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches server by ID","data":[{"value":null,"type":"text","enabled":true,"key":"serverId"}],"description":"Parameters:
serverId: The ID of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects/87

Response Messages:
400: Server with id ID was not found.
400: Application with ID ID was not found.
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.","dataMode":"params","folder":"2-8","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects/{{serverId}}","collectionId":"2","id":"2-8-54","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches servers","description":"Parameters:
name: The name of the servers [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?name=server1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: Server with name NAME was not found.
400: Parameter typeOnDevice is not valid.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no servers with the name NAME
404: There are no servers with the typeOnDevice TYPEONDEVICE ","folder":"2-8","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects","collectionId":"2","id":"2-8-55","method":"GET"},{"name":"Move server","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"},{"value":null,"type":"text","enabled":true,"key":"server_id"},{"value":null,"type":"text","enabled":true,"key":"target_application_id"}],"description":"Parameters:
application_id: The unique identifier of the application
server_id: The unique identifier of the server
target_application_id: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/move_server?server_id=5&target_application_id=3

Response Messages:
400: Server ID is missing.
400: Target application ID is missing.
400: You cannot move a predefined object.
400: Server with ID is already associated to application with ID.
400: Cannot move server to a different customer.
400: The application was already deleted.
400: You cannot add to application APPLICATION_NAME because it was decommissioned.
400: Group/Server cannot be moved because there is no other application to move it to.
400: Group/Server cannot be moved because it or at least one of its group members is part of these groups: GROUPS_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is locked for discovery.
400: Group/Server cannot be moved because it or at least one of its group members is used in these application interfaces: APPLICATION_INTERFACE_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is used in these connections with another external resource: CONNECTION_NAME
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/move_server","collectionId":"2","id":"2-9-56","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: There are no items to add.
400: The application was already deleted.
400: You cannot add to application NAME because it was decommissioned.
400: Network object was already saved
400: Name cannot be empty
400: Server with NAME already exists.
400: IP is missing
400: Mask is missing
400: Invalid IP
400: Invalid mask
400: Max IP is missing
400: Min IP is missing
400: Invalid min IP
400: Invalid max IP
400: Min IP cannot be larger than max IP
400: Invalid network object type CLASS_NAME.
400: Invalid uid
400: Invalid device ID
400: Virtual server does not exist in SecureTrack
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Cannot save the server because the virtual server does not exist.
400: Cannot save the server because an error occurred
400: The type_on_device value is not valid
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
404: Virtual server was not found in SecureTrack.
503: Not connected to SecureTrack.","dataMode":"raw","folder":"2-9","rawModeData":"\n\t \n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t \n\t \n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n \t\t 2.2.2.22\n\t \n\t \n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t \n\t \n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t \n\t \n\t\t group comment\n\t\t group1\n\t\t true\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-57","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <id>1</id>
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
         <type>host</type>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <id>2</id>
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
         <type>range</type>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <id>3</id>
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
         <type>subnet</type>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <id>4</id>
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
         <type>virtual-server</type>
     </network_object>
     <network_object xsi:type=\"vmInstanceDTO\">
         <id>5</id>
         <name>vm1</name>
         <comment>vm instance comment</comment>
         <type>vm_instance</type>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <id>6</id>
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <type>group</type>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: The application was already deleted.
400: You cannot update a predefined object.
400: Invalid type in server with id ID.
400: Invalid member with id ID
400: Invalid ID
400: Invalid uid
400: Invalid network object type NAME
400: Cannot update user
400: Network object is new
400: Name cannot be empty
400: Server is in discovery
400: Ip is missing
400: Mask is missing
400: Invalid ip
400: Invalid mask
400: Max ip is missing
400: Min ip is missing
400: Invalid min ip
400: Invalid max ip
400: Min ip cannot be larger than max ip
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Server with NAME already exists.
400: Invalid device ID
400: The type_on_device value is not valid
400: An EDL group can not be modified to a regular group
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: DTO type used for server id ID is incompatible with this vendor.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Virtual server was not found in ST.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
503: Not connected to SecureTrack.","dataMode":"raw","folder":"2-9","rawModeData":"\n\t \n\t\t 1\n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t\t host\n\t \n\t \n\t\t 2\n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n\t\t 2.2.2.22\n\t\t range\n\t \n\t \n\t\t 3\n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t\t subnet\n\t \n\t \n\t\t 4\n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t\t virtual-server\n\t \n\t \n\t\t 5\n\t\t vm1\n\t\t vm instance comment\n\t\t vm_instance\n\t \n\t \n\t\t 6\n\t\t group comment\n\t\t group1\n\t\t true\n\t\t group\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-58","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve existing servers","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the server [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?name=ServerName

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: The application was already deleted.
400: Parameter typeOnDevice is not valid.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no servers with the name NAME.
404: There are no servers with the typeOnDevice TYPEONDEVICE ","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","collectionId":"2","id":"2-9-59","method":"GET"},{"collectionId":"2","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/impact_analysis_csv","name":"Export Server Impact Analysis to a CSV file.","method":"GET","id":"2-9-60","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/impact_analysis_csv

Response Messages:
400: Server with ID was not found.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
404: There is no application with the specified ID.","folder":"2-9"},{"headers":"Accept: application/json\n","name":"If the identified server is a group, return a list of its members. When the media type is 'text/plain' (default), print each member on a separate line.","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/members

Response Messages:
400: Server with ID is not of type group
403: Access is denied
403: You do not have permissions to view this application
403: No available licenses. Ask your SecureApp administrator for assistance
404: There is no application with the specified ID
404: Server with ID was not found","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/members","collectionId":"2","id":"2-9-61","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve an existing server by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serverId"}],"description":"Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/3

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.","dataMode":"params","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","collectionId":"2","id":"2-9-62","method":"GET"},{"name":"Delete server","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serverId"}],"dataMode":"params","description":"To decommission a serer use force=true.

Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4?force=true

Response Messages:
400: The application was already deleted.
400: You cannot delete a predefined object.
400: Cannot delete an object that is being referenced by other objects
400: Cannot delete a predefined object.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.","folder":"2-9","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","collectionId":"2","id":"2-9-63","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Fetches service by ID","data":[{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/2

Response Messages:
404: Service with ID <ID> was not found.
403: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","collectionId":"2","id":"2-10-64","method":"GET"},{"name":"Delete unused and non predefined global service","data":[{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/260

Response Messages:
200: Service was deleted.
404: Global Service with ID was not found.
400: Cannot delete an object that is being referenced by other objects.
400: You cannot delete a predefined object.
403: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","collectionId":"2","id":"2-10-65","method":"DELETE"},{"headers":"Content-Type: application/xml\n","name":"Modify unused and non predefined global services","dataMode":"raw","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Service is new.
400: You cannot update a predefined object.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot update a global service that is being referenced by other objects.
400: Cannot update an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Group cannot contain itself as a member.
400: Application identity cannot be a member of a group.
403: Access is denied.","folder":"2-10","rawModeData":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/","collectionId":"2","id":"2-10-66","method":"PUT"},{"headers":"Accept: application/json\n","name":"Fetches services","description":"Parameters:
globals_only: get only globals [optional]
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=AH

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true&name=AH

Response Messages:
404: There are no services with the name NAME.
403: Access is denied.","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-67","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create global services","dataMode":"raw","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Application identity cannot be a member of a group.
403: Access is denied.","folder":"2-10","rawModeData":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-68","method":"POST"},{"name":"Delete unused and non predefined global service by name","data":[{"value":null,"type":"text","enabled":true,"key":"name"}],"description":"Parameters:
name: The name of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=Global service

Response Messages:
200: Service was deleted.
404: Service name has not been provided.
404: There are no services with the name NAME.
400: Cannot delete ANY.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: Access is denied.","dataMode":"params","folder":"2-10","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","collectionId":"2","id":"2-10-69","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve existing services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services?name=Local service

Response Messages:
400: The application was already deleted.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no services with the name NAME.","dataMode":"params","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-70","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Cannot have members from different applications.
400: Can not have application identity in group
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.
404: There is no application with the specified ID.","dataMode":"raw","folder":"2-11","rawModeData":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-71","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update services","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>255</id>
        <name>Service Group 2 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Local service must be associated with an application.
400: Service is locked for discovery.
400: Service is new.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Application identity cannot be a member of a group.
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.","dataMode":"raw","folder":"2-11","rawModeData":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t255\n\t\tService Group 2 updated\n\t\tUpdated comment\n\t\tgroup\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","collectionId":"2","id":"2-11-72","method":"PUT"},{"name":"Delete service","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"dataMode":"params","description":"Use force=true to delete a service with decommission.

Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250?force=true

Response Messages:
400: The application was already deleted.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Service with ID <SERVICE_ID> was not found in application with id <APPLICATION_ID>","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","collectionId":"2","id":"2-11-73","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing service by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"},{"value":null,"type":"text","enabled":true,"key":"serviceId"}],"description":"Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Response Messages:
400: The application was already deleted.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Service with ID was not found.","dataMode":"params","folder":"2-11","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","collectionId":"2","id":"2-11-74","method":"GET"},{"name":"Delete unused user","data":[{"value":null,"type":"text","enabled":true,"key":"userId"}],"description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
200: User was deleted.
404: User with ID <ID> was not found.
400: Cannot delete an object that is being referenced by other objects.
403: Access is denied.","dataMode":"params","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","collectionId":"2","id":"2-12-75","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Fetches user by ID","data":[{"value":null,"type":"text","enabled":true,"key":"userId"}],"description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
404: User with ID <ID> was not found.
403: Access is denied.","dataMode":"params","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","collectionId":"2","id":"2-12-76","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create users","dataMode":"raw","description":"Parameters:
body: List of users

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/users
BODY<users>
    <user>
        <name>Local user 1</name>
        <comment>New local user</comment>
        <ip>8.8.8.8</ip>
    </user>
    <user>
        <name>Ldap user 1</name>
        <comment>New ldap user</comment>
    </user>
    <user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"userObjectGroupDTO\">
        <name>User group 1</name>
        <comment>New user group</comment>
        <member>
            <id>14</id>
        </member>
        <member>
            <id>15</id>
        </member>
    </user>
</users>


Response Messages:
201: User was created.
200: Users were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: User with id <ID> was not found.
400: Invalid user type <TYPE>
400: Name cannot be empty.
400: User with name <NAME> already exists.
400: Invalid ip
403: Access is denied.","folder":"2-12","rawModeData":"\n\t\n\t\tLocal user 1\n\t\tNew local user\n\t\t8.8.8.8\n\t\n\t\n\t\tLdap user 1\n\t\tNew ldap user\n\t\n\t\n\t\tUser group 1\n\t\tNew user group\n\t\t\n\t\t\t14\n\t\t\n\t\t\n\t\t\t15\n\t\t\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","collectionId":"2","id":"2-12-77","method":"POST"},{"headers":"Accept: application/json\n","name":"Fetches users","description":"Parameters:
name: The name of the user [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users?name=Local user 1

Response Messages:
404: There are no users with the name NAME.
403: Access is denied.","folder":"2-12","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","collectionId":"2","id":"2-12-78","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Move applications to another customer","dataMode":"raw","description":"Parameters:
body: List of applications and customers [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/move_applications
BODY<move_applications>
     <move_application>
         <application>
            <id>1</id>
         </application>
         <customer>
             <id>2</id>
         </customer>
     </move_application>
     <move_application>
         <application>
            <id>2</id>
         </application>
         <customer>
            <name>Default</name>
         </customer>
     </move_application>
</move_applications>


Response Messages:
200: Applications were moved successfully.
400: Multi-Customer mode is not enabled.
400: You cannot move an application pack to a different customer.
400: Reference to application is invalid.
400: APPLICATION already exists in CUSTOMER.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: Reference to CUSTOMER is invalid.
400: CUSTOMER is not imported to SecureApp.
400: CUSTOMER was decommissioned.
400: You must delete virtual servers from CUSTOMER before you move APPLICATION to another customer.
400: You must remove virtual servers from the INTERFACE and publish it before you move APPLICATION to another customer.
400: You cannot move APPLICATION to CUSTOMER because the connection to application pack and the application pack cannot be in the same customer.
400: You cannot move APPLICATION to a different customer because the application interface and the application pack must be in the same customer.
400: You must remove INTERFACE from APPLICATION PACK and publish it before you can move APPLICATION to another customer.
400: CONNECTION TO APPLICATION from APPLICATION must use interface from CUSTOMER.
400: Sources in CONNECTION from APPLICATION must all be from applications in the same customer.
400: Destinations in CONNECTION in APPLICATION must all be from applications in the same customer.
400: Servers in CONNECTION from APPLICATION must all be from CUSTOMER.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from applications in the same customer.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from CUSTOMER.
400: Application or application pack with NAME already exists in CUSTOMER.
400: There are no applications to move.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t \n\t\t \n\t\t\t1\n\t\t \n\t\t \n\t\t\t 2\n\t\t \n\t \n\t \n\t\t \n\t\t\t2\n\t\t \n\t\t \n\t\t\tDefault\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/move_applications","collectionId":"2","id":"2-13-79","method":"PUT"},{"name":"Export Impact Analysis to a CSV file.","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"dataMode":"params","description":"To prevent a CSV injection attack when exporting Impact Analysis to a CSV file, if a special character ( = - + @ ) appears at the beginning of any field, a single quote (') is added before the character.

Parameters:
application_id: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/impact_analysis_csv

Response Messages:
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
404: There is no application with the specified ID.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/impact_analysis_csv","collectionId":"2","id":"2-13-80","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve security policy violations from SecureTrack","description":"Parameters:
applicationId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/compliance_violations

Response Messages:
400: No valid connections found in APPLICATION.
400: Security policy compliance check is not available because a security policy has not been defined.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
503: Cannot connect to SecureTrack.
503: Timeout occurred while waiting for response from SecureTrack.
500: An error occurred in SecureTrack when running the security compliance check.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/compliance_violations","collectionId":"2","id":"2-13-81","method":"GET"},{"name":"Export application history to PDF","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History max rows [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&count=2

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?count=2

Response Messages:
403: Access is denied.
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/history/export_pdf","collectionId":"2","id":"2-13-82","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve application history","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History list length [optional]
start: Offset the count starting point [optional]
type: States the history type to fetch [optional]
user: The username of the user made the changes [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start=0&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?type=SERVER

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?user=Jack

Response Messages:
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date
400: Count parameter must be a number
400: Start parameter must be a number
400: Start parameter must be less than total
400: Type parameter must be either server, server_group, connection, application, application_interface, connection_interface or connection_to_application
400: User not found
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/history","collectionId":"2","id":"2-13-83","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Change an application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"dataMode":"raw","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
applicationId: The unique identifier of an application to change
body: Application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/139
BODY<application>
     <id>139</id>
     <name>UpdatedAppName</name>
     <comment>UpdatedComment</comment>
     <decommissioned>false</decommissioned>
     <owner>
         <id>4</id>
     </owner>
     <editors>
         <editor>
             <id>3</id>
         </editor>
     </editors>
     <viewers>
         <viewer>
             <id>5</id>
         </viewer>
     </viewers>
</application>


Response Messages:
400: The application was already deleted.
400: Application owner is missing.
400: Owner cannot be empty.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
403: Access is denied
403: You do not have permissions to change the owner of application ID.
403: You do not have permissions to change the editors and a viewer of application ID.
403: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t 139\n\t UpdatedAppName\n\t UpdatedComment\n\t false\n\t \n\t\t 4\n\t \n\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 5\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-84","method":"PUT"},{"name":"Delete an application","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of the application to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
400: The resources of application NAME are used in connections for other applications.
400: You cannot delete application NAME because its application interfaces are used in other applications.
400: You cannot delete application NAME because its application interfaces are used in other application packs.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
400: Application with ID ID was not found.
400: You cannot delete application NAME because there are connection changes pending a ticket in other application.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-85","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Retrieve an existing application by ID","data":[{"value":null,"type":"text","enabled":true,"key":"applicationId"}],"description":"Parameters:
applicationId: The unique identifier of an application to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.","dataMode":"params","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","collectionId":"2","id":"2-13-86","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Create new applications","dataMode":"raw","description":"Parameters:
body: List all applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <name>AppName</name>
         <comment>Comment</comment>
         <owner>
             <id>3</id>
         </owner>
         <editors>
             <editor>
                 <id>4</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
         <customer>
             <id>24</id>
         </customer>
     </application>
</applications>


Response Messages:
400: There are no items to add.
400: Application was already saved.
400: Application name must contain at least 2 and no more than 160 characters.
400: Owner cannot be empty.
400: The specified owner does not exist.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
400: Application with NAME already exists.
400: Application owner is missing.
400: Reference to owner ID is invalid.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to customer ID is invalid.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: The specified customer does not exist.
400: There is an editor without an ID or name.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no editor with the name NAME.","folder":"2-13","rawModeData":"\n\t \n\t\t AppName\n\t\t Comment\n\t\t \n\t\t\t 3\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 4\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t\t \n\t\t\t 24\n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-87","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update applications","dataMode":"raw","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
body: List of applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <id>140</id>
         <name>App1</name>
         <decommissioned>true</decommissioned>
         <owner>
             <id>4</id>
         </owner>
     </application>
     <application>
         <id>139</id>
         <name>UpdatedAppName</name>
         <comment>Updated Comment</comment>
         <owner>
             <id>4</id>
         </owner>
         <editors>
             <editor>
                 <id>3</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
     </application>
</applications>


Response Messages:
400: Application ID is missing.
400: Application ID is invalid
400: The application was already deleted.
400: You must include the owner field.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
403: Access is denied
403: You do not have permissions to change the owner of application ID.
403: You do not have permissions to change the editors and a viewer of application ID.
403: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.","folder":"2-13","rawModeData":"\n\t \n\t\t 140\n\t\t App1\n\t\t true\n\t\t \n\t\t\t 4\n\t\t \n\t \n\t \n\t\t 139\n\t\t UpdatedAppName\n\t\t Updated Comment\n\t\t \n\t\t\t 4\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t \n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-88","method":"PUT"},{"headers":"Accept: application/json\n","name":"List all applications","description":"Parameters:
userId: Applications by user ID, if not given the default is logged in user id [optional]
name: The name of the application [optional]
app_permissions: Filter applications by the given permissions (separated with commas):\napp_owner - returns applications where the user is the owner\napp_editor - returns applications where the user has been explicitly added as an editor\napp_viewer - returns applications where the user has been explicitly added as a viewer\napp_adminonly - returns applications where the user only has editor access because user has ���edit all applications��� permission, and does not include applications where this user is either the app_owner, app_editor, or app_viewer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?userId=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?app_permissions=app_owner,app_editor,app_viewer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App&app_permissions=app_adminonly

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications

Response Messages:
400: Invalid app_permissions value: 'appPermissions'.
403: Access is denied
403: You can't use the parameter 'userId' because you don't have 'View all applications' permission.
404: There are no applications matching your filter.
404: User with ID 'userId' was not found.","folder":"2-13","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","collectionId":"2","id":"2-13-89","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Auto associate cloud servers from SecureTrack with an application","dataMode":"raw","description":"When auto-associate is enabled, user must enter key value

Parameters:
body: Auto association rule

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule
BODY<auto_association_rule>
    <key>Application</key>
    <enabled>true</enabled>
</auto_association_rule>


Response Messages:
200: Auto association rule is saved.
400: Enabled rule requires key value.
403: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.","folder":"2-14","rawModeData":"\n\tApplication\n\ttrue\n\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule","collectionId":"2","id":"2-14-90","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Associate cloud servers from SecureTrack with an application","data":[{"value":null,"type":"text","enabled":true,"key":"application_id"}],"description":"Parameters:
application_id: The ID of the application
body: List of device IDs and cloud server UIDs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?application_id=87
BODY<devices_to_uids>
    <device_to_uids>
        <device_id>9</device_id>
        <uids>
            <uid>{b503916e-4468-4dc8-981b-2ec534587352}</uid>
            <uid>{0cc947a5-276f-4a4a-9d12-df5284fce609}</uid>
        </uids>
    </device_to_uids>
</devices_to_uids>


Response Messages:
201: Servers were imported to SecureApp.
403: Access is denied
400: There is no application with the specified ID.
401: No available licenses. Ask your SecureApp administrator for assistance.
400: You do not have permissions to edit this application.
400: You cannot associate servers with this application, because the application has been decommissioned.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to add cloud servers.
403: UID does not exist in device ID.
403: Device with ID does not exist.
403: Device with ID does not exist in DOMAIN.
403: The AWS instance with UID and device ID has already been imported to application NAME. You cannot import the same instance multiple times.","dataMode":"raw","folder":"2-14","rawModeData":"\n\t\n\t\t9\n\t\t\n\t\t\t{b503916e-4468-4dc8-981b-2ec534587352}\n\t\t\t{0cc947a5-276f-4a4a-9d12-df5284fce609}\n\t\t\n\t\n\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","collectionId":"2","id":"2-14-91","method":"POST"},{"headers":"Accept: application/json\n","name":"Retrieve cloud server listing from SecureTrack","data":[{"value":null,"type":"text","enabled":true,"key":"vendor"},{"value":null,"type":"text","enabled":true,"key":"search_string"}],"description":"Parameters:
customer_id: Customer ID to be filtered by. [optional]
vendor: Vendor to be filtered by.
search_string: Search text.
start: Returning matching result starting from this element in the array (0-based). [optional]
count: Total number of matching servers to return. [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=WebServe

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=\"WebServer1\"

Response Messages:
403: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.
400: Illegal search string.
400: Start is bigger then possible result count.
400: Start and count cannot hold negative values.
400: Vendor query param is required.
400: Vendor should be one of the following: Amazon.
400: Search string query param is required.
400: Customer with ID does not exist in SecureApp
400: Customer with ID was decommissioned.","dataMode":"params","folder":"2-14","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","collectionId":"2","id":"2-14-92","method":"GET"},{"headers":"Accept: application/json\n","name":"List all customers","description":"Parameters:
name: The name of the customer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers?name=Customer 1

Response Messages:
400: Not available in single-customer mode.
404: There are no customers with the name NAME.","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/","collectionId":"2","id":"2-15-93","method":"GET"},{"headers":"Accept: application/json\n","name":"List all imported customers","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/imported

Response Messages:
400: Not available in single-customer mode.
403: Access is denied","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/imported","collectionId":"2","id":"2-15-94","method":"GET"},{"headers":"Accept: application/json\n","name":"Retrieve existing applications for specific domain","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/2/applications

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
403: Access is denied","dataMode":"params","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}/applications","collectionId":"2","id":"2-15-95","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"import customers","dataMode":"raw","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.

Parameters:
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/import
BODY<customers>
    <customer>
        <id>2</id>
    </customer>
    <customer>
        <id>3</id>
    </customer>
</customers>


Response Messages:
400: Not available in single-customer mode.
400: ID can not be empty.
400: There are some id's that doesn't exist.
403: Access is denied
503: Not connected to SecureTrack.","folder":"2-15","rawModeData":"\n\t\n\t\t2\n\t\n\t\n\t\t3\n\t\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/import","collectionId":"2","id":"2-15-96","method":"PUT"},{"headers":"Accept: application/json\n","name":"Fetches customer by ID","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/1

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.","dataMode":"params","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","collectionId":"2","id":"2-15-97","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Update a customer","data":[{"value":null,"type":"text","enabled":true,"key":"customer_id"}],"description":"Parameters:
customer_id: The ID of the customer
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/2
BODY<customer>
    <usage_mode>NOT_IMPORTED</usage_mode>
</customer>


Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
400: Can not update Default customer.
400: This customer is already not imported.
400: USAGE_MODE is not a valid state. The valid values are: USAGE_MODES
403: Access is denied
500: This customer is not imported.
400: You cannot delete this customer because there are connection changes pending a ticket in another customer.You must decommission this customer first, and then delete it.","dataMode":"raw","folder":"2-15","rawModeData":"\n\tNOT_IMPORTED\n","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","collectionId":"2","id":"2-15-98","method":"PUT"},{"headers":"Accept: application/json\n","name":"List all non-imported customers","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.



Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/not_imported

Response Messages:
400: Not available in single-customer mode.
403: Access is denied
503: Not connected to SecureTrack.","folder":"2-15","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/not_imported","collectionId":"2","id":"2-15-99","method":"GET"},{"headers":"Accept: application/json\n","name":"List all domains","description":"Parameters:
name: The name of the domain [optional]

Usage Example


Response Messages:
404: There are no domains with the name NAME.","folder":"2-16","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/","collectionId":"2","id":"2-16-100","method":"GET"},{"collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/synchronize","name":"synchronize domains","method":"PUT","id":"2-16-101","description":"Retrieves all the domains lists in ST , for use by SC. If a domain was deleted in ST, then it will be removed from SC



Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/domains/synchronize

Response Messages:
500: Multi-Domain mode is disabled in SecureChange. Unable to synchronize with SecureTrack domains","folder":"2-16"},{"headers":"Accept: application/json\n","name":"Fetches domain by ID","data":[{"value":null,"type":"text","enabled":true,"key":"domainId"}],"description":"Parameters:
domainId: The ID of the domain

Usage Example


Response Messages:
400: Domain with id ID was not found.","dataMode":"params","folder":"2-16","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/{{domainId}}","collectionId":"2","id":"2-16-102","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns a detailed list of the external network resources available to SeucreChange from external provider (SecureCloud or alternate)","description":"Parameters:
name: Filter by name (substring, case insensitive) [optional]
uid: Filter by resource ref ID (exact match, case sensitive) [optional]
count: Limit number of results (default is 100) [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/externalprovider/resources?count=2
OUTPUT{
\"external_resources\":{
    \"external_resource\":[
     {
         \"resource_ref\":{
             \"id\":\"df67af5c-87b3-3e7a-bd50-371f76e9bdf5\",
             \"name\":\"ASG1\",
             \"type\":\"APPLICATION_SECURITY_GROUP\"
         },
         \"ips\":[
             \"2.0.0.0/15\",
             \"3.0.0.0/15\"
         ],
         \"account_ref\":{
             \"id\":\"5fcf0c94-6789-4fae-adb3-6e4226389069\",
             \"name\":\"app-group-prod-account\",
             \"cloud_vendor\":\"AZURE\"
         }
    },
    {
         \"resource_ref\":{
             \"id\":\"1cb7accb-f947-3e7f-b9b0-0b63973b2220\",
             \"name\":\"PM_ASG\",
             \"type\":\"APPLICATION_SECURITY_GROUP\"
         },
         \"ips\":[
             \"2.2.0.0/16\",
             \"3.5.0.0/16\"
         ],
         \"account_ref\":{
             \"id\":\"5fcf0c94-6789-4fae-adb3-6e4226389069\",
             \"name\":\"app-group-prod-account\",
             \"cloud_vendor\":\"AZURE\"
         }
    }
    ]
}}


Response Messages:
403: User has no permissions to view SecureCloud/Alternate provider resources
404: SecureCloud/Alternate provider disabled. Contact your administrator for assistance.
400: name and uid parameters cannot be used in same query.","folder":"2-17","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/externalprovider/resources","collectionId":"2","id":"2-17-103","method":"GET"},{"headers":"Accept: application/json\n","name":"Fetches virtual servers from SecureTrack","data":[{"value":null,"type":"text","enabled":true,"key":"ip"}],"dataMode":"params","description":"Find virtual servers matching a given IP address.
You can search for the virtual server itself of any of its members.

Parameters:
ip: ip
domainId: The unique identifier of a domain [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers?ip=2.2.2.2

Response Messages:
400: Invalid IP
400: Invalid Subnet
400: There is no domain with the specified ID.
403: Access is denied
503: Not connected to SecureTrack.","folder":"2-18","url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers","collectionId":"2","id":"2-18-104","method":"GET"},{"name":"Run Update Metadata for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"A link to the rule recertification field will returned in the location field of the header, for example: /securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/72

Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/rule_recertification/update_metadata

Response Messages:
400: Update Metadata is not defined for the requested field.
400: Update Metadata is not available for the current ticket status.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a rule recertification request field.
403: You do not have permission to update this task. Contact your administrator for assistance.","folder":"2-19","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/rule_recertification/update_metadata","collectionId":"2","id":"2-19-105","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns IDs for specified list of excluded parent management devices and child firewalls in SecureChange","description":"For example on this Panorama hierarchy:
DG1 - Excluded
  DG1.1
    FW1
    FW2
    FW3

Calling this API with false value will return only DG1���s id.
Calling this API with true value will return DG1, FW1, FW2, FW3 id���s.


Parameters:
show_all: When set to true - Displays the specified devices and all their child firewalls in the hierarchy, which will be excluded implicitly.
When set to false - Displays only the devices which were explicitly excluded.
Default value is false.
[optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=false
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=true
OUTPUT<device_ids>
    <id>33</id>
    <id>10</id>
    <id>11</id>
    <id>35</id>
    <id>29</id>
    <id>31</id>
</device_ids>

","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","collectionId":"2","id":"2-20-106","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Update the whole list of excluded devices in SecureChange","dataMode":"raw","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
BODY<device_ids>
    <id>1</id>
    <id>12</id>
</device_ids>

","folder":"2-20","rawModeData":"\n\t1\n\t12\n\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","collectionId":"2","id":"2-20-107","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get suggested targets for a given access request","data":[{"value":null,"type":"text","enabled":true,"key":"domain_name"},{"value":null,"type":"text","enabled":true,"key":"workflow_name"}],"dataMode":"raw","description":"Returns a list of suggested targets for a given access request, based on topology calculations.

Parameters:
body [optional]
domain_name: Domain Name
workflow_name: Workflow Name

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/suggest_target?domain_name=Default&workflow_name=AR
BODY{
    \"access_request\":{
        \"users\":{
            \"user\":[
                \"Any\"
            ]
        },
        \"sources\":{
            \"source\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.1.1\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"destinations\":{
            \"destination\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.20.2\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"services\":{
            \"service\":[
                {
                    \"@type\":\"ANY\",
                }
            ]
        },
        \"action\":\"Accept\",
    }
}
OUTPUT{
    \"multi_target\": {
        \"target\": {
            \"@type\": \"Object\",
            \"object_name\": \"Device-1\",
            \"object_type\": \"firewall\",
            \"object_details\": \"10.100.40.1\",
            \"management_id\": 250,
            \"management_name\": \"Panorama/Domain1\"
        }
    }
}


Response Messages:
200: Targets returned successfully
400: User does not have permissions to domain or domain does not exist
403: Access is denied","folder":"2-20","rawModeData":"{\n\t\"access_request\":{\n\t\t\"users\":{\n\t\t\t\"user\":[\n\t\t\t\t\"Any\"\n\t\t\t]\n\t\t},\n\t\t\"sources\":{\n\t\t\t\"source\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.1.1\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"destinations\":{\n\t\t\t\"destination\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.20.2\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"services\":{\n\t\t\t\"service\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"ANY\",\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"action\":\"Accept\",\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/suggest_target","collectionId":"2","id":"2-20-108","method":"POST"},{"headers":"Accept: application/json\n","name":"Get details of target devices","description":"Parameters:
name: device name or part of a name [optional]
show_targets: show_targets true: Returns the details of devices that can be selected as a target
show_targets false: Returns the details of devices with objects that can be used in tickets [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/devices?name=asa&show_targets=true

Response Messages:
404: Devices not found","folder":"2-20","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/","collectionId":"2","id":"2-20-109","method":"GET"},{"name":"Run Impact Analysis for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/impact_analysis

Response Messages:
400: Impact analysis is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/impact_analysis","collectionId":"2","id":"2-21-110","method":"PUT"},{"name":"Run server decommission designer for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/designer

Response Messages:
400: Server decommission designer is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/designer","collectionId":"2","id":"2-21-111","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get server decommission designer results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve designer results generated in R17-1 and earlier.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/designer","collectionId":"2","id":"2-21-112","method":"GET"},{"headers":"Accept: application/json\n","name":"Get verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","dataMode":"params","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/verifier","collectionId":"2","id":"2-21-113","method":"GET"},{"headers":"Accept: application/json\n","name":"Get impact analysis results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/impact_analysis

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.","dataMode":"params","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/impact_analysis","collectionId":"2","id":"2-21-114","method":"GET"},{"name":"Run Verifier for given task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/verifier

Response Messages:
400: Verifier is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance.","dataMode":"params","folder":"2-21","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/verifier","collectionId":"2","id":"2-21-115","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Modify the SecureTrack connection settings and test the connection status","dataMode":"raw","description":"Parameters:
testOnly: Test the connection status using the specified settings. The new settings are not saved. The default value is false [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"remoteHost\">
            <IP_or_hostname>192.168.11.1</IP_or_hostname>
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
        <internal_IP_of_secureChange_server>192.168.2.2</internal_IP_of_secureChange_server>
    </secureTrack_settings>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"localHost\">
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
    </secureTrack_settings>


Response Messages:
400: Invalid host name or IP address.
400: show_link_to_secureTrack is invalid. It must be 'true', 'false' or empty.","folder":"2-22","rawModeData":"\t\n\t\t \n\t\t\tadmin\n\t\t\n\t\tfalse\n\t\t30\n\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","collectionId":"2","id":"2-22-116","method":"PUT"},{"headers":"Accept: application/json\n","name":"Retrieve the SecureTrack connection settings and status","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack?testOnly=false
","folder":"2-22","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","collectionId":"2","id":"2-22-117","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Import LDAP users to SecureChange by simulating login process","dataMode":"raw","description":"This API implicitly imports LDAP users to SecureChange by simulating their login.
To explicitly import LDAP entities- both users and groups, it is recommended to use /users/import API

Parameters:
body: partyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users
BODY<user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"user\">
    <name>x</name>
    <origin_type>LDAP</origin_type>
        <ldap_configuration>
            <id>1</id>
        </ldap_configuration>
</user>


Response Messages:
403: Access is denied.
400: Name is missing.
400: Origin is missing.
400: User {login_name} already exists, with ID (id} and name {name}.
400: User {login_name} not found in LDAP.
400: Creating a user via REST API is available only if origin is LDAP.
400: Creating a user via REST API is available only if type is User.
400: Ldap configuration with ID {id} not found.","folder":"2-23","rawModeData":"\n\tx\n\tLDAP\n\t\t\n\t\t\t1\n\t\t\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","collectionId":"2","id":"2-23-118","method":"POST"},{"collectionId":"2","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","name":"Return the list of users","method":"GET","id":"2-23-119","description":"user_name: case insensitive, search mode: contains text
exact_name: when set to true, user_name search mode is case sensitive and exact text
email: case insentitive, search mode: exact match
Logical OR between user_name and email.

Parameters:
showIndirectRelation: Members that belong to the selected group only indirectly [optional]
user_name: The user's login name [optional]
email: The user's email [optional]
exact_name: Search user_name as exact match [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users?email=bob@tufin.com&user_name=bob&exact_name=true
","folder":"2-23"},{"headers":"Content-Type: application/json\n","name":"Import user / group from LDAP","dataMode":"raw","description":"The imported user / group will be visible in SecureChange GUI under users section.
In multi domain mode, imported entity will be assigned with the domains of \"any user\" group.
Only users with 'view settings tab' permission can run this API.

Parameters:
body: ldapPartyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/import
BODY{
    \"ldap_party\": {
        \"ldap_configuration_name\": \"ldap_name\",
        \"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"
    }
}


Response Messages:
400: The LDAP configuration name does not exist
400: The given ldap_dn does not exist
400: The given ldap_dn is already imported
400: Failed to create the selected user
400: Failed to create the selected group
400: Selected user already exists in SecureChange but is not synchronized with the LDAP server. Go to Settings > LDAP and synchronize with the LDAP
400: This group has a large number of users, and will not be expanded in the users console. To be able to configure roles and step participation for individual users from the group, add them explicitly.
400: Failed to update the selected group
400: Unsupported LDAP object class
400: Unable to establish a connection to server <SERVER_IP>:<SERVER_PORT> within the configured timeout of <TIMEOUT> milliseconds.
403: Access is denied","folder":"2-23","rawModeData":"{\n\t\"ldap_party\": {\n\t\t\"ldap_configuration_name\": \"ldap_name\",\n\t\t\"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/import","collectionId":"2","id":"2-23-120","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Change local group members","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Only users with 'view settings tab' permission can run this API.
Only local or imported LDAP users can be added to local groups.

Parameters:
id: Group ID
body: groupChangeDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group/1
BODY{
    \"group_change\":{
        \"member_ids_to_add\": [1,2],
        \"member_ids_to_remove\":[3,4]
    }
}    


Response Messages:
400: Exceeded limit of {MAXIMUM} group member changes
400: These user IDs do not exist: {IDs}
400: These user IDs do not exist or are not group members: {IDs}
400: Group ID {ID} is not a local group
400: Group ID {ID} does not exist
400: Cannot add a group to itself
400: Cannot add a group to a group that it already contains. Group {ID1} contains group {ID2}","folder":"2-23","rawModeData":"{\n\t\"group_change\":{\n\t\t\"member_ids_to_add\": [1,2],\n\t\t\"member_ids_to_remove\":[3,4]\n\t}\n}\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group/{{id}}","collectionId":"2","id":"2-23-121","method":"PUT"},{"name":"Delete the specified User or Group","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: User ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User with id {id} does not exist","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","collectionId":"2","id":"2-23-122","method":"DELETE"},{"name":"Return the specified user","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: User ID
showIndirectRelation: Members that belong to the selected group only indirectly [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User or group was not found.","dataMode":"params","folder":"2-23","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","collectionId":"2","id":"2-23-123","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Create local group","dataMode":"raw","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
body: CreateGroupDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group
BODY{
    \"group\": {
        \"name\": \"name1\",
        \"description\": \"description1\",
        \"email\": \"email1@tufin.com\"
    }
}    


Response Messages:
400: Input Validation Error : {field name}: {input validation error message}
400: Name already exists","folder":"2-23","rawModeData":"{\n\t\"group\": {\n\t\t\"name\": \"name1\",\n\t\t\"description\": \"description1\",\n\t\t\"email\": \"email1@tufin.com\"\n\t}\n}\t","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group","collectionId":"2","id":"2-23-124","method":"POST"},{"headers":"Accept: application/json\n","name":"Cancel a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The ID of the ticket as shown in SecureChange
requester_id: The user of the ticket's requester, when logged in user is canceling on behalf [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/cancel?requester_id=5

Response Messages:
403: Access is denied.
404: Ticket is already closed
404: Ticket ID was not found","dataMode":"params","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/cancel","collectionId":"2","id":"2-24-125","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Returns the specified ticket to the specified step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"toStepId"}],"dataMode":"raw","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
toStepId: To which step we the ticket will return
body: RedoCommentDto

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/redo/1
BODY<redo_step_comment>
    <comment>please fix source </comment>
</redo_step_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
403: User has no permissions to redo ticket steps.
404: There is no ticket with ID.
404: No entity found for query","folder":"2-24","rawModeData":"\n\tplease fix source \n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/redo/{{toStepId}}","collectionId":"2","id":"2-24-126","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change the requester of the specified ticket task to the specified user.","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"assigneeId"}],"description":"Parameters:
id: Ticket ID
assigneeId: The assignee ID
body: CommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/change_requester/4
BODY<comment>
    <comment>user was deleted moving tickets to Bob</comment>
</comment>


Response Messages:
400: The change requester comment must be set in order to change the requester the ticket.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
404: There is no ticket with ID.
404: There is no requester (User) with ID.","dataMode":"raw","folder":"2-24","rawModeData":"\n\tuser was deleted moving tickets to Bob\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/change_requester/{{assigneeId}}","collectionId":"2","id":"2-24-127","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the history of the specified ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Ticket ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/history

Response Messages:
403: User has no permissions to view ticket history
404: You do not have permission to view this task. Contact your administrator for assistance.
404: There is no ticket with ID.","dataMode":"params","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/history","collectionId":"2","id":"2-24-128","method":"GET"},{"name":"Map rules to ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Maps the rules from the ticket to the relevant rules in SecureTrack.
Adds record set entries to the relevant rules metadata.
Link to history is found in the returned location header.
Applicable only for closed tickets in the following workflows: Access Request, Access Request and Modify Group, and Clone Server Policy.
Use handler_id for running on behalf of another user.
To get handler_id, use the System Users API.

Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: Run API on behalf of defined user id [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules?handler_id=5

Response Messages:
201: Started asynchronous mapping of rules to ticket ID <ID>. Mapping status is displayed in ticket history.
400: Ticket's workflow type does not support this operation
403: Access is denied.
403: You do not have permission to access ticket <ID>
403: On behalf user do not have permission to access ticket <ID>
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.
412: Ticket is not in closed status","folder":"2-24","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/map_rules","collectionId":"2","id":"2-24-129","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Confirm the request","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Ticket ID
requester_id: The user of the ticket's requester, when logged in user is confirm on behalf [optional]
body: Confirm comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/confirm?requester_id=5
BODY<confirm_comment>
    <comment>confirmed</comment>
</confirm_comment>


Response Messages:
400: User is trying to confirm a ticket that belongs to another user
400: User is not permitted to confirm this ticket on behalf another user
400: The user can not confirm the ticket, because he is not in the domain of the ticket
403: Access is denied.
404: There is no ticket with ID .","dataMode":"raw","folder":"2-24","rawModeData":"\n\tconfirmed\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/confirm","collectionId":"2","id":"2-24-130","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Reassigns the specified ticket task to the specified user.","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"assigneeId"}],"dataMode":"raw","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
assigneeId: The assignee ID
body: ReassignTaskCommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/reassign/4
BODY<reassign_task_comment>
    <comment>Please complete the AR</comment>
</reassign_task_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
404: There is no ticket with ID.
404: No entity found for query","folder":"2-24","rawModeData":"\n\tPlease complete the AR\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/reassign/{{assigneeId}}","collectionId":"2","id":"2-24-131","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Reject a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: The user id, when logged in user is rejecting on behalf [optional]
body: Reject comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/reject?handler_id=5
BODY<reject_comment>
    <comment>rejected</comment>
</reject_comment>


Response Messages:
400: Ticket status <STATUS> is incorrect to perform this action
400: User <NAME> has no permissions to perform this action
400: Comment cannot be empty
403: User is not permitted to reject this ticket on behalf another user
403: You do not have permission to access ticket <ID>
403: On behalf user do not have permission to access ticket <ID>
403: Access is denied.
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.","dataMode":"raw","folder":"2-24","rawModeData":"\n\trejected\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/reject","collectionId":"2","id":"2-24-132","method":"PUT"},{"name":"Returns topology map image (png file) for specific verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier/topology_map

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.
404: Toplogy map was not found for this field.","dataMode":"params","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier/topology_map","collectionId":"2","id":"2-25-133","method":"GET"},{"headers":"Accept: application/json\n","name":"Get security zones according to field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve security zones for multi access result field

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/security_zones

Response Messages:
404: There is no ticket with ID <ID>.
401: Cannot update ticket because it is either closed, rejected or waiting for requester confirmation
400: Task ID <ID> cannot be found in the current step with ID <ID>.
400: You can only update the current step of the ticket. Step ID <ID> does not match the current step ID <ID>.
400: The task with ID <ID> does not contain a field with ID <ID>.
400: The task with ID <ID> does not contain a field of type <ID>.
400: Security zones tool is not enabled for the requested field.
403: You do not have permission to view this task. Contact your administrator for assistance.","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/security_zones","collectionId":"2","id":"2-25-134","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Modify the Designer suggestions for Access Request or Clone Server Policy","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"instructionId"}],"dataMode":"raw","description":" GENERAL USE
1. Create a ticket using UI/API.
2. Run the designer using UI/API.
3. Use relevent API to get the designer results.
4. Run this API to modify the required parameters.

*Note: you can modify one parameter at a time.

Change rule location use
a. Modifying the rule order places the new rule before the rule with the specified identifier (rule name or number).
b. Modifying the rule placement to \"last\" places the new rule as last rule or last pre-rule (depending on the vendor convention for the device).
c. For vendors that support \"after\" placement, modifying the rule placement allows positioning the new rule before or after the suggested rule location.
d. For Check Point R80 and above releases, the indented rule numbering format can be applied to globally assigned policies (for example, ���rule_order���: ���4.5���).

track level permitted values:
NONE, LOG, ACCOUNT, ALERT, SNMP, MAIL, USER_DEFINED, EMERGENCIES, ALERTS, CRITICAL, ERRORS, WARNINGS, NOTIFICATIONS, INFORMATIONAL, DEBUGGING, DISABLED, DEFAULT, FULL_LOG, NETWORK_LOG, USER_ALERT_1, USER_ALERT_2, USER_ALERT_3

rule placement permitted values:
BEFORE, AFTER, LAST

Parameters:
body: DesignerInstructionChangeDTO
id: Ticket ID
taskId: Task ID
instructionId: Instruction ID
force: force update when new revision available [optional]

Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196?force=true
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_name\": {\"new_value\":\"new rule name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"track_level\": {\"new_value\":\"LOG\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_name\": {\"new_value\":\"new object name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"log_forwarding_profile\": {\"new_value\":\"new log forwarding profile\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"security_profile_group\": {\"new_value\":\"new security profile group\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_replace\": {
             \"new_value\":\"new object uid\",
             \"old_value\":\"old object uid\"
    }
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_order\": {\"new_value\":\"8\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"tags\": {\"values\":[\"tag1\", \"tag2\"]}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"tags\": {\"values\":[]}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"last\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"before\"}
}


Response Messages:
200: New rule will be shadowed
200: New rule will be shadowed or break acceleration
400: Modify Designer Results API is only supported for Access Request and Clone Server Policy workflows
412: Current instruction cannot be modified because either the implementation was successful or failed irrevocably.
412: Current step does not support Designer modification action
404: A ticket with ID <ID> cannot be found.
400: Task ID <ID> cannot be found in the current step with ID <ID>.
403: Changing <TYPE> is not supported on this device
403: This Change is not supported for <INSTRUCTION TYPE> instruction type\"
403: You do not have permission to update this task. Contact your administrator for assistance.
403: New revision is available, cannot modify the Designer results
404: Specified instruction, id: <ID> was not found
404: Designer results were not found in the access request.
400: a valid object name must start with an alphanumeric character and can contain alphanumeric characters, underscore '_'. Hypen '-', dot '.' or spaces
400: For this device, the comment must be less than 100 characters per line.
400: For this device, this field must be less than <NUMBER OF CHARACTERS> characters
400: For this device, this field is required.
400: For this device, a valid object name cannot be <OBJECT NAME> because it is a reserved word
409: Rule name already exists for this device. Please give this rule a unique name.
409: Rule name <NAME> already exists in the device group hierarchy. Choose a unique name for this rule.
400: Comment contains invalid characters.
400: <DEVICE> does not support tracking level <TRACKING LEVEL>
400: <TRACKING LEVEL> is not a valid rule track level value
400: a valid object name cannot contain any of the following characters: <CHARACTERS>
400: a valid object name must be less than <NUMBER OF CHARACTERS> characters
400: a valid object name cannot be empty
400: a valid object name must conform to the following pattern: <STRING PATTERN>
409: Object already exists
400: A security profile group cannot be empty.
404: The security profile group <SECURITY PROFILE GROUP> was not found.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to validate the security profile group.
400: A log forwarding profile cannot be empty.
400: Tag list is longer than 20 items.
400: Tag list contains the same tag more than once.
400: These tags don't exist or aren't relevant to the rule on its DG location : <Tags>
404: The log forwarding profile <LOG FORWARDING PROFILE> was not found.
500: An error occurred in SecureTrack while trying to validate the log forwarding profile.
400: Object UID <OLD OBJECT UID> not found in the rule for this instruction.
400: Values of new object UID <NEW OBJECT UID> and old object UID <OLD OBJECT UID> do not match.
400: Rule placement can only be: \"before\", \"after\" or \"last\".
400: You can't change rule placement when there is no rule order. please add rule order first.
400: You can't change rule placement to \"After\" for this type of device.
400: You can't change rule placement to \"Last\" for this type of device.","folder":"2-25","rawModeData":"{\n\t\"rule_placement\": {\"new_value\":\"before\"}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/tasks/{{taskId}}/designer/instruction/{{instructionId}}","collectionId":"2","id":"2-25-135","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1
OUTPUT {
    \"ticket\": {
        \"id\": 1,
        \"subject\": \"AR-Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 11,
            \"name\": \"AR & MG\",
            \"uses_topology\": true
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 209,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 209,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": [
                                    {
                                        \"@xsi.type\": \"multi_access_request\",
                                        \"id\": 1695,
                                        \"name\": \"AR\",
                                        \"read_only\": false,
                                        \"access_request\": {
                                            \"id\": 1706,
                                            \"order\": \"AR1\",
                                            \"risk_analysis_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"verifier_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"use_topology\": true,
                                            \"targets\": {
                                                \"target\": {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1705
                                                }
                                            },
                                            \"users\": {
                                                \"user\": [
                                                    \"Any\"
                                                ]
                                            },
                                            \"sources\": {
                                                \"source\": [
                                                    {
                                                        \"@type\": \"INTERNET\",
                                                        \"id\": 1701
                                                    },
                                                    {
                                                        \"@type\": \"DNS\",
                                                        \"id\": 1702,
                                                        \"host_name\": \"www.google.com\",
                                                        \"dns_ip_addresses\": {
                                                            \"ip_address\": \"216.58.214.100\"
                                                        }
                                                    },
                                                    {
                                                        \"@type\": \"IP\",
                                                        \"id\": 1703,
                                                        \"ip_address\": \"1.1.1.1\",
                                                        \"netmask\": \"255.255.255.255\",
                                                        \"nat_ip_address\": \"4.4.4.4\",
                                                        \"nat_netmask\": \"255.255.255.255\"
                                                    }
                                                ]
                                            },
                                            \"destinations\": {
                                                \"destination\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1697
                                                    }
                                                ]
                                            },
                                            \"services\": {
                                                \"service\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1699
                                                    }
                                                ]
                                            },
                                            \"action\": \"Accept\",
                                            \"labels\": \"\"
                                        }
                                    },
                                    {
                                        \"@xsi.type\": \"multi_group_change\",
                                        \"id\": 1707,
                                        \"name\": \"MG\",
                                        \"read_only\": false,
                                        \"implementation_status\": \"NOT_SUPPORTED\"
                                    }
                                ]
                            }
                        }
                    }
                },
                {
                    \"id\": 210,
                    \"name\": \"STEP2 - auto AR with designer /update /commit\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 210,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"unlicensed_devices_for_automation\": {
                                \"unlicensed_device_for_automation\": [
                                    {
                                        \"id\": \"2\",
                                        \"name\": \"asa\"
                                    }
                                ]
                            }
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"multi_access_request\",
                                    \"id\": 1709,
                                    \"name\": \"AR\",
                                    \"read_only\": false,
                                    \"access_request\": {
                                        \"id\": 1720,
                                        \"order\": \"AR1\",
                                        \"risk_analysis_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"verifier_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"use_topology\": true,
                                        \"targets\": {
                                            \"target\": {
                                                \"@type\": \"ANY\",
                                                \"id\": 1719
                                            }
                                        },
                                        \"users\": {
                                            \"user\": [
                                                \"Any\"
                                            ]
                                        },
                                        \"sources\": {
                                            \"source\": [
                                                {
                                                    \"@type\": \"INTERNET\",
                                                    \"id\": 1721
                                                },
                                                {
                                                    \"@type\": \"DNS\",
                                                    \"id\": 1722,
                                                    \"host_name\": \"www.google.com\",
                                                    \"dns_ip_addresses\": {
                                                        \"ip_address\": \"216.58.214.100\"
                                                    }
                                                },
                                                {
                                                    \"@type\": \"IP\",
                                                    \"id\": 1723,
                                                    \"ip_address\": \"1.1.1.1\",
                                                    \"netmask\": \"255.255.255.255\",
                                                    \"nat_ip_address\": \"4.4.4.4\",
                                                    \"nat_netmask\": \"255.255.255.255\"
                                                },
                                                {
                                                    \"@type\": \"RANGE\",
                                                    \"id\": 1724,
                                                    \"range_first_ip\": \"1.1.11.1\",
                                                    \"range_last_ip\": \"1.1.11.10\"
                                                }
                                                {
                                                    \"@type\": \"EXTERNAL_RESOURCE\"\",
                                                    \"id\": 436,
                                                    \"resource_ref\": {
                                                        \"id\": \"4786115a-97c2-3a25-8e31-1d6166263fdd\",
                                                        \"name\": \"asg-web\",
                                                        \"type\": \"APPLICATION_SECURITY_GROUP\"
                                                    },
                                                    \"ips\": {
                                                        \"ip\": [
                                                            \"9.0.0.0/16\"
                                                        ]
                                                    },
                                                    \"account_ref\": {
                                                        \"cloud_vendor\": \"AZURE\",
                                                        \"id\": \"f0499890-708c-46a9-a44a-b7da0d433de3\",
                                                        \"name\": \"app-name\",
                                                    }
                                                }
                                            ]
                                        },
                                        \"destinations\": {
                                            \"destination\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1711
                                                }
                                            ]
                                        },
                                        \"services\": {
                                            \"service\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1713
                                                }
                                            ]
                                        },
                                        \"action\": \"Accept\",
                                        \"labels\": \"\"
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 210,
            \"name\": \"STEP2 - auto AR with designer /update /commit\"
        },
        \"comments\": \"\"
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2
OUTPUT {
    \"ticket\": {
        \"id\": 2,
        \"subject\": \"Clone Server Policy Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 12,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"referenced_ticket\": {
            \"id\": 1,
            \"name\": \"Ticket Subject Sample\",
            \"link\": {
                \"@href\": \"https://host/securechangeworkflow/api/securechange/tickets/1\"
            }
        },
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 109,
            \"name\": \"sc_12705\",
            \"uses_topology\": false
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 78,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 78,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 872,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 869,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 871,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                },
                {
                    \"id\": 79,
                    \"name\": \"Business Approval\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 79,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 876,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 873,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 875,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 79,
            \"name\": \"Business Approval\"
        },
        \"comments\": \"\"
    }
}


Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: No entity found for query","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}","collectionId":"2","id":"2-25-136","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change multiple field within a task of a ticket in the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_server_decommission_request\">
         <id>7591</id>
         <name>sd</name>
         <server_decommission_request>
             <id>7596</id>
             <order>DR1</order>
             <servers>
                 <server type=\"IP\">
                     <id>7593</id>
                     <ip_address>2.2.2.2</ip_address>
                     <netmask>255.255.255.255</netmask>
                 </server>
             </servers>
             <targets>
                 <target type=\"ANY\">
                     <id>7595</id>
                 </target>
             </targets>
             <comment>change ip from 1.1.1.1 to 2.2.2.2</comment>
         </server_decommission_request>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"date\">
         <id>7786</id>
         <name>date</name>
         <value>2015-12-15</value>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"time\">
         <id>7787</id>
         <name>time</name>
         <value>12:00</value>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object / device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object / device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-25","rawModeData":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields","collectionId":"2","id":"2-25-137","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket stages","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}","collectionId":"2","id":"2-25-138","method":"GET"},{"headers":"Accept: application/json\n","name":"Get designer results according to field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"Use this API to retrieve designer results generated in R17-2 and later.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request.","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer","collectionId":"2","id":"2-25-139","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Submit a new ticket to Secure Change","dataMode":"raw","description":" GENERAL USE
When posting a Modify Group ticket, group scope must be configured for FortiManager advanced and Juniper SRX devices.
Juniper SRX devices:
Global address-book will be used unless an existing address-book is given.
Ticket validation will fail in case given Address Book is not configured on the device.
FortiManager advanced devices:
'Any' zone will be used unless an existing zone is given.
Ticket validation will fail in case given zone is not configured on the device.
*Note: Zones and address-books must not be configured for other devices.

Using newly created objects from a different group in the same ticket
The user can add a newly created object from a different group to the selected group, with object_UID equal to the name of the newly created object.
For management devices with hierarchies, the newly created object does not populate other levels of the hierarchies.

Permitted values for @type
Allowed values for @type property included in DestinationDTO and SourceDTO are:
ANY
IP
DNS
Object - Device's existing object
INTERNET
LDAP (SourceDTO only) - LDAP entity

To use a service object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketDTO
closed: Cannot be done from the API [optional]
count [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>topology mode_AR1-with topology_AR2-no topology</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <domain_name>Default</domain_name>
    <workflow>
         <id>7</id>
         <name>Workflow with topology</name>
    </workflow>
    <steps>
         <step>
             <name>Open request</name>
             <tasks>
                 <task>
                     <fields>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_access_request\">
                             <name>Required Access</name>
                             <access_request>
                                 <use_topology>true</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>ASA</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>host_10.100.10.140</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
                                         <management_id>13</management_id>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>h_10.10.10.10</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"PROTOCOL\">
                                         <protocol>TCP</protocol>
                                         <port>80</port>
                                     </service>
                                     <service type=\"APPLICATION_IDENTITY\">
                                         <application_name>Gmail</application_name>
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                             <access_request>
                                 <use_topology>false</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>inside_access_in</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>1.1.1.0</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                     <source type=\"EXTERNAL_RESOURCE\">
                                         <resource_ref>
                                             <name>asg15-api-test</name>
                                         </resource_ref>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>network_regi3</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                     <destination type=\"EXTERNAL_RESOURCE\">
                                         <resource_ref>
                                             <id>916ca6a9-76e2-3d9f-a35c-134f0981791a</id>
                                         </resource_ref>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"ANY\">
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                             <name>Business Justification</name>
                             <text>I need access to ftp </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                             <name>Project Number</name>
                             <text>CR124560 </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                             <name>Hyperlink</name>
                             <url>http://192.168.1.1/ticket</url>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                             <name>Change Window</name>
                             <selection>Monday</selection>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                             <name>manager email</name>
                             <text>manager@tufin.com</text>
                         </field>
                     </fields>
                 </task>
             </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>New MG ticket</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <status>In Progress</status>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>6</id>
        <name>MG</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>72</id>
            <name>New step</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>72</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>
                    <status>ASSIGNED</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>262</id>
                            <name>MG</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>ExistingGroup</name>
                                <object_UID>{c862fb6f-1314-45da-9e01-56c9b85d001d}</object_UID>
                                <management_id>58</management_id>
                                <management_name>FMG/root</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>157</id>
                                        <name>10.100 net</name>
                                        <object_UID>{37cdc055-7aac-4385-b46b-cc54d95e4b6d}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.100.0.0/255.255.0.0</object_details>
                                        <management_id>58</management_id>
                                        <management_name>FMG/root</management_name>
                                        <status>NOT_CHANGED</status>
                                        <object_updated_status>EXISTING_EDITED</object_updated_status>
                                        <comment>new_comment</comment>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                            <group_change>
                                <name>78.45.12.0</name>
                                <object_UID>{cac64d34-a05e-4a05-b271-64642eb976ff}</object_UID>
                                <management_id>28</management_id>
                                <management_name>SRX-root-lsys</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>158</id>
                                        <name>78.45.12.1</name>
                                        <object_UID>{7912c335-6dbe-47de-b872-1322f9015b2f}</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>78.45.12.1/255.255.255.255</object_details>
                                        <management_id>28</management_id>
                                        <management_name>SRX-root-lsys</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <address_book>
                                    <name>global</name>
                                </address_book>
                            </group_change>
                            <group_change>
                                <name>10.10.0.0/16</name>
                                <object_UID>{5dff0bd8-51e4-4a83-8138-d54dd18ca52b}</object_UID>
                                <management_id>24</management_id>
                                <management_name>NSX-Distributed Firewall</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>161</id>
                                        <name>10.10.0.0/16</name>
                                        <object_UID>{5d7b826c-f053-40fd-81bd-7a6f44cf15ef}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.10.0.0/255.255.0.0</object_details>
                                        <management_id>24</management_id>
                                        <management_name>NSX-Distributed Firewall</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>test API</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>8</id>
        <name>Modify group</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>11</id>
            <name>Open request</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>11</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>                    <status>DONE</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>137</id>
                            <name>ff</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>port1Group</name>
                                <object_UID>{d5b4459b-6b27-4012-9924-b244c250520f}</object_UID>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"HOST\">
                                        <id>69</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <status>ADDED</status>
                                        <comment/>
                                        <object_updated_status>NEW</object_updated_status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                            <group_change>
                                <name>gfd</name>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>70</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <management_name>10.100.111.8/ADOM_5_2</management_name>
                                        <status>ADDED</status>
                                        <object_updated_status>EXISTING_NOT_EDITED</object_updated_status>
                                    </member>
                                </members>
                                <change_action>CREATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <current_step>
        <id>12</id>
        <name>Copy of Open request</name>
    </current_step>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"application_details\": { \"id\": \"1\" },
        \"referenced_ticket\": { \"id\": \"3\" },
        \"subject\": \"topology mode_AR1-with topology_AR2-no topology\",
        \"priority\": \"Normal\",
        \"workflow\": { \"name\": \"ar\" }
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"subject\": \"RM_EXAMPLE\",
        \"requester\": \"m\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"domain_name\": \"\",
        \"workflow\": {
            \"name\": \"RM\",
        },
        \"steps\": {
            \"step\": [
                {
                    \"tasks\": {
                        \"task\": {
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"rule_modification_field\",
                                    \"devices\": {
                                        \"device\": {
                                            \"revision_id\": 24,
                                            \"management_id\": 5,
                                            \"bindings\": {
                                                \"binding\": {
                                                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                    \"binding\": {
                                                        \"@xsi.type\": \"policy__binding\",
                                                        \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                                    },
                                                    \"rules\": {
                                                        \"rule\": {
                                                            \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                                            \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                                        }
                                                    }
                                                }
                                            }
                                        }
                                    },
                                    \"rule_modifications\": {
                                        \"rule_modification\": {
                                            \"@xsi.type\": \"modify_rule_modification\",
                                            \"rule_key\": {
                                                \"device_id\": 5,
                                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                            },
                                            \"source_modifications\": {
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                                        \"name\": \"RANGE_1\",
                                                                        \"comment\": \"EXAMPLE_RANGE\",
                                                                        \"min_ip\": \"3.3.3.3\",
                                                                        \"max_ip\": \"5.5.5.5\"
                                                                    }
                                                                ]
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                                        \"name\": \"NET_1\",
                                                                        \"comment\": \"\",
                                                                        \"ip\": \"3.3.3.3\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"destination_modifications\": {
                                                \"id\": 11,
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                                        \"name\": \"Host123\",
                                                                        \"comment\": \"cccHost\",
                                                                        \"ip\": \"1.2.3.4\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"service_modifications\": {
                                                \"id\": 9,
                                                \"service_object_cell_modifications\": {
                                                    \"service_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                                    \"name\": \"ICMP_1\",
                                                                    \"comment\": \"EXAMPLE_ICMP\",
                                                                    \"type\": {
                                                                        \"from\": 55,
                                                                        \"to\": 55
                                                                    }
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"UDP_1\",
                                                                    \"comment\": \"EXAMPLE_UDP\",
                                                                    \"port\": {
                                                                        \"from\": 3,
                                                                        \"to\": 3
                                                                    },
                                                                    \"protocol\": \"UDP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"TCP_1\",
                                                                    \"comment\": \"EXAMPLE_TCP\",
                                                                    \"port\": {
                                                                        \"from\": 1234,
                                                                        \"to\": 1234
                                                                    },
                                                                    \"protocol\": \"TCP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                                                }
                                                            }
                                                        }
                                                    ]
                                                }
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
    }
}


Response Messages:
400: Application ID is missing.
400: Create closed ticket is enabled only from SecureApp application.
400: The application was already deleted.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: You cannot open a new ticket with an empty subject.
400: Expiration field is required.
400: Submit ticket enabled only with the first step
400: First step can be only with one task
400: The specified workflow does not contain an access request field in the first step.
400: There are no changed connections that are ready for creating a ticket.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
400: Managed tasks are not initialized or done
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (Rule Modification workflow is not supported for this device)
403: You do not have permissions to edit this application.
403: Logged in user: NAME do not have permission to perform on behalf actions
403: You are not a participant in the first step of this workflow
403: UNAUTHORIZED
404: There is no application with the specified ID
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (Network object cell modification missing action)
400: Invalid value for field: <FIELD_NAME> (Network object cell modification element cannot be empty)
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
400: Workflow does not support referenced ticket
400: The referenced ticket cannot be the ticket itself
406: Invalid format detected: <subject|name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: <subject|name> - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: <subject|name> - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-25","rawModeData":"{\n\t\"ticket\": {\n\t\t\"subject\": \"RM_EXAMPLE\",\n\t\t\"requester\": \"m\",\n\t\t\"requester_id\": 4,\n\t\t\"priority\": \"Normal\",\n\t\t\"domain_name\": \"\",\n\t\t\"workflow\": {\n\t\t\t\"name\": \"RM\",\n\t\t},\n\t\t\"steps\": {\n\t\t\t\"step\": [\n\t\t\t\t{\n\t\t\t\t\t\"tasks\": {\n\t\t\t\t\t\t\"task\": {\n\t\t\t\t\t\t\t\"fields\": {\n\t\t\t\t\t\t\t\t\"field\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\t\t\t\t\t\"devices\": {\n\t\t\t\t\t\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 11,\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 9,\n\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","collectionId":"2","id":"2-25-140","method":"POST"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified tickets (max 100 tickets in a single query)","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
status: The status of the tickets [optional]
count: Tickets list max pagination length (max value is 100) [optional]
start: Offset the count starting point [optional]
desc: Get the list in descending order [optional]
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets?status=In Progress&count=10&start=3&expand_links=false

Response Messages:
400: Status is not a valid. The valid values are: TICKET_STATUSES
400: Can not fetch more than 100 tickets in 1 time
403: Access is denied","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","collectionId":"2","id":"2-25-141","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified task","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2?expand_links=true

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","collectionId":"2","id":"2-25-142","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4
BODY<task>
     <status>ASSIGNED</status>
     <fields>
         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
             <id>7599</id>
             <name>mf</name>
             <read_only>false</read_only>
             <implementation_status>NOT_STARTED</implementation_status>
             <group_change>
                        <name>ggg</name>
                        <st_uid>{A12AE330-0DBD-11E5-B841-7F0000010E0E}</st_uid>
                        <management_id>42</management_id>
                        <management_name>cp239</management_name>
                        <members>
                             <member type=\"Object\">
                                 <id>8</id>
                                 <name>yaakovs_host</name>
                                 <st_uid>{BDAA378C-C90B-4D12-B598-1AFED2D1DA14}</st_uid>
                                 <object_type>Host</object_type>
                                 <object_details>1.1.1.1/255.255.255.255</object_details>
                         <management_id>42</management_id>
                         <management_name>cp239</management_name>
                                 <status>NOT_CHANGED</status>
                             </member>
                             <member type=\"Object\">
                                 <id>9</id>
                                    <name>Avi_10.100.120.254</name>
                                    <st_uid>{8F195CDC-F426-47B6-9E8A-1FF14C17E54F}</st_uid>
                                     <object_type>Host</object_type>
                                     <object_details>10.100.120.254/255.255.255.255</object_details>
                                     <management_id>42</management_id>
                                     <management_name>cp239</management_name>
                                     <status>NOT_CHANGED</status>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>2.2.2.2/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>3.3.3.3/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                 </members>
                 <change_implementation_status>NOT_RUN</change_implementation_status>
                    </group_change>
            </field>
     </fields>
</task>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-25","rawModeData":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","collectionId":"2","id":"2-25-143","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change a field within a task of a ticket at the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/7642
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"approve_reject\">
         <id>7661</id>
         <name>approve access</name>
         <approved>true</approved>
         <reason>Request approved</reason>
    </field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-25","rawModeData":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-25-144","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change a task of a ticket at the current step","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY<task>
    <status>DONE</status>
    <fields/>
</task>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-25","rawModeData":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}","collectionId":"2","id":"2-25-145","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get commands for device from designer results of a specific field id","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
deviceId: Device ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/device/136/commands

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the access request.
404: Device with ID <ID> was not found in Designer result.
404: Device with ID <ID> does not support Commands feature.","dataMode":"params","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/device/{{deviceId}}/commands","collectionId":"2","id":"2-25-146","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of the tasks","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks","collectionId":"2","id":"2-25-147","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change multiple fields within a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_network_object\">
         <id>7885</id>
         <name>n_obj</name>
         <network_object type=\"Object\">
             <object_name>Host_10.1.1.1</object_name>
             <management_name>cp239</management_name>
         </network_object>
         <network_object type=\"Object\">
             <st_uid>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</st_uid>
             <management_id>2</management_id>
         </network_object>
         <network_object type=\"DNS\">
             <host_name>tufin.com</host_name>
         </network_object>
     <field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_service\">
         <id>7887</id>
         <name>service</name>
         <service type=\"PROTOCOL\">
             <protocol>TCP</protocol>
             <port>80</port>
         </service>
         <service type=\"Object\">
             <object_name>AOL</object_name>
             <management_name>cp239</management_name>
         </service>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-25","rawModeData":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","collectionId":"2","id":"2-25-148","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a the fields","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","collectionId":"2","id":"2-25-149","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns a list of tickets by search parameters","description":"Parameters:
parameter: Free text search parameter (Search syntax details) [optional]
start: Offset the count starting point [optional]
count: Tickets list max length (max value is 1000) [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/free_text_search/?parameter=taskstatus:ASSIGNED AND priority:High

Response Messages:
400: Can not fetch more than 1000 tickets in 1 time
403: Access is denied.
404: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED
404: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
404: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal count value entered. Max value is 1000
404: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
404: No entity found for query","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/free_text_search","collectionId":"2","id":"2-25-150","method":"GET"},{"headers":"Accept: application/json\n","name":"Get access request verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.","dataMode":"params","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier","collectionId":"2","id":"2-25-151","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rule decommision verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/rule_decommission/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type <TYPE>.
404: Verifier results were not found in the request.","dataMode":"params","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/rule_decommission/verifier","collectionId":"2","id":"2-25-152","method":"GET"},{"headers":"Accept: application/json\n","name":"Get server clone policy verifier results","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/clone_server_policy/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the server clone policy request.","dataMode":"params","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/clone_server_policy/verifier","collectionId":"2","id":"2-25-153","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Change the ticket properties","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Change the ticket properties listed in the TicketPropertiesDTO.
When specifying the notification_group property you must use the ID of the group or leave the ID empty to remove the group. This property can be updated on a closed ticket.
When specifying the referenced_ticket property you must use the ID of the ticket or leave the ID empty to remove the ticket.
When specifying the expiration_date property, you must use a yyyy-mm-dd format, or leave the value empty to remove the expiration date. To ignore the field, do not include it in the request. This property can be updated on a closed ticket.

Parameters:
body: ticketPropertiesDTO
id: The ID number of the ticket as shown in SecureChange

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <referenced_ticket>
        <id>9</id>
    </referenced_ticket>
    <notification_group>
        <id>10</id>
    </notification_group>
    <expiration_date>2022-12-10</expiration_date>
</ticket_properties>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id/>
    </notification_group>
    <referenced_ticket>
        <id/>
    </referenced_ticket>
    <expiration_date/>
</ticket_properties>


Response Messages:
400: Notification Group <ID> is a user and not a user group
400: Notification Group <ID> exceeds the configured maximum allowed number of users for notifications
400: <ID> (���Any User���) is not allowed as a Notification Group
400: Notification Group <ID> does not have permission of 'Group members can perform actions on requests submitted by other members'
400: Notification Group <ID> is not a member in the first step of the workflow
400: Notification Group is not enabled in this workflow
403: You do not have permission to change the Notification Group
404: There is no group with ID <ID>.
404: There is no ticket with ID <ID>.
400: Referenced ticket id cannot be the same as ticket id
400: invalid id format for referenced ticket
400: Cannot update properties [<Property A>, <Property B>] for ticket with status <STATUS>
403: You do not have permission to update this ticket at this stage. Contact your administrator for assistance.
403: The user is not allowed to add the specified referenced ticket.
400: Workflow does not support referenced ticket
400: Cannot delete expiration date on this workflow due to it being a mandatory field
400: Invalid date. Cannot update expiration to a date that has passed
400: Invalid value for field: expiration_date (The date format must be: yyyy-mm-dd)
400: Invalid value for field: expiration_date (The date is not valid)
400: This workflow does not support expiration dates","folder":"2-25","rawModeData":"\n\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/ticket_properties","collectionId":"2","id":"2-25-154","method":"PUT"},{"headers":"Content-Type: application/xml\n","name":"Change a field within a task of a ticket","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"raw","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields/7742
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multiple_selection\">
     <id>7742</id>
     <name>filter type</name>
     <selected_options>
         <selected_option>
             <value>FTP</value>
         </selected_option>
     </selected_options>
</field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Deleting rule recertification info is not allowed
400: Application Change field cannot be managed via this REST API
400: Rule associated with successfully updated recertification info cannot be removed
400: Rule was already updated
400: Rule does not exist
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP","folder":"2-25","rawModeData":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-25-155","method":"PUT"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified field","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
fieldId: The ID number of the field as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/229

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .
404: Field ID was not found in Task ID in Stage ID in ticket ID .","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","collectionId":"2","id":"2-25-156","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns a list of tickets by search parameters","description":"If the query is succesful but no results are found (for example, if there is no ticket for the specified Ticket ID) then the return code will be 200 and the results will be empty.

Parameters:
id: The ID number of the ticket as shown in SecureChange [optional]
subject: The subject of the ticket [optional]
requester: The requester of the ticket [optional]
group: The group handling the ticket [optional]
assigned_to: The user name of the person assigned to the ticket [optional]
priority: The priority of the ticket [optional]
status: The status of the ticket [optional]
sla_status: The SLA status of the ticket [optional]
field_name: Field name to search by [optional]
field_value: Field value to search by [optional]
current_step: Current step name [optional]
expiration_date_from: Search requests with expiration date from this date [optional]
expiration_date_to: Search requests with expiration date until this date [optional]
domain_name: The Domain of the ticket [optional]
start: Offset the count starting point [optional]
count: Ticket list length [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/search?id=1&status=IN_PROGRESS,REJECTED

Response Messages:
403: Access is denied.
400: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED, WAITING_TO_BE_ASSIGNED, ASSIGNED, WAITING_FOR_MORE_INFO, DONE, INVALID, PENDING, PENDING_LICENS
400: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
400: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
400: Cannot find specified domain <DOMAIN_NAME>","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/search","collectionId":"2","id":"2-25-157","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the results of the Commit action","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"stepId"},{"value":null,"type":"text","enabled":true,"key":"taskId"},{"value":null,"type":"text","enabled":true,"key":"fieldId"},{"value":null,"type":"text","enabled":true,"key":"managementId"}],"dataMode":"params","description":"GENERAL USE
The report returns the Commit results for the device with the specified management ID and for the devices suggested in the Designer results. The report also includes results for devices that are in the related hierarchy of these devices.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID
managementId: Management ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/commit_report/3
OUTPUT{
    \"commit_report\": {
        \"ticketId\": 27,
        \"statTime\": \"24-Oct-2018 08:55 AM\",
        \"endTime\": \"24-Oct-2018 08:56 AM\",
        \"duration\": \"00:00:30\",
        \"vendorName\": \"PALO ALTO NETWORKS\",
        \"managmentName\": \"pano211\",
        \"devices\": {
            \"device\": [
                {
                    \"name\": \"DG1.1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                },
                {
                    \"name\": \"DG1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                }
            ]
        }
    }
}


Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request.","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/commit_report/{{managementId}}","collectionId":"2","id":"2-25-158","method":"GET"},{"headers":"Accept: application/json\n","name":"Returns the details of a specified ticket stages","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found","folder":"2-25","url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps","collectionId":"2","id":"2-25-159","method":"GET"}],"order":[],"name":"Tufin Tufin SecureChange/SecureApp R21-1-RC1","id":"2","description":"Tufin Orchestration Suite - Tufin SecureChange/SecureApp APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securechangeworkflow/apidoc"} \ No newline at end of file diff --git a/Postman Format v1/R21-1 postman collection/securetrack_R21-1-RC1.json b/Postman Format v1/R21-1 postman collection/securetrack_R21-1-RC1.json new file mode 100644 index 0000000..8a24167 --- /dev/null +++ b/Postman Format v1/R21-1 postman collection/securetrack_R21-1-RC1.json @@ -0,0 +1 @@ +{"folders":[{"order":["1-1-1","1-1-2","1-1-3","1-1-4"],"collectionId":"1","name":"Additional Policy Fields","hasRequests":true,"id":"1-1"},{"order":["1-2-5","1-2-6","1-2-7","1-2-8"],"collectionId":"1","name":"Application IDs","hasRequests":true,"id":"1-2"},{"order":["1-3-9","1-3-10"],"collectionId":"1","name":"Change Authorization","hasRequests":true,"id":"1-3"},{"order":["1-4-11","1-4-12","1-4-13"],"collectionId":"1","name":"Change Windows","hasRequests":true,"id":"1-4"},{"order":["1-5-14","1-5-15","1-5-16","1-5-17","1-5-18"],"collectionId":"1","name":"Device Interfaces and Zones","hasRequests":true,"id":"1-5"},{"order":["1-6-19","1-6-20","1-6-21","1-6-22"],"collectionId":"1","name":"Domains","hasRequests":true,"id":"1-6"},{"order":["1-7-23"],"collectionId":"1","name":"General Properties","hasRequests":true,"id":"1-7"},{"order":["1-8-24","1-8-25","1-8-26","1-8-27"],"collectionId":"1","name":"IPsec VPN","hasRequests":true,"id":"1-8"},{"order":["1-9-28","1-9-29","1-9-30","1-9-31","1-9-32"],"collectionId":"1","name":"Internet Objects","hasRequests":true,"id":"1-9"},{"order":["1-10-33","1-10-34","1-10-35","1-10-36"],"collectionId":"1","name":"LDAP","hasRequests":true,"id":"1-10"},{"order":["1-11-37","1-11-38","1-11-39","1-11-40","1-11-41","1-11-42","1-11-43","1-11-44","1-11-45","1-11-46","1-11-47"],"collectionId":"1","name":"Monitored Devices","hasRequests":true,"id":"1-11"},{"order":["1-12-48","1-12-49","1-12-50"],"collectionId":"1","name":"NAT Policies","hasRequests":true,"id":"1-12"},{"order":["1-13-51","1-13-52","1-13-53","1-13-54","1-13-55","1-13-56","1-13-57"],"collectionId":"1","name":"Network Objects","hasRequests":true,"id":"1-13"},{"order":["1-14-58","1-14-59","1-14-60","1-14-61","1-14-62","1-14-63","1-14-64","1-14-65","1-14-66","1-14-67","1-14-68","1-14-69","1-14-70","1-14-71","1-14-72","1-14-73","1-14-74","1-14-75","1-14-76","1-14-77","1-14-78","1-14-79","1-14-80","1-14-81","1-14-82","1-14-83","1-14-84","1-14-85","1-14-86","1-14-87","1-14-88","1-14-89","1-14-90","1-14-91","1-14-92","1-14-93","1-14-94","1-14-95","1-14-96","1-14-97","1-14-98","1-14-99","1-14-100","1-14-101","1-14-102","1-14-103","1-14-104","1-14-105","1-14-106","1-14-107","1-14-108","1-14-109","1-14-110","1-14-111","1-14-112","1-14-113","1-14-114","1-14-115","1-14-116"],"collectionId":"1","name":"Network Topology","hasRequests":true,"id":"1-14"},{"order":["1-15-117","1-15-118","1-15-119"],"collectionId":"1","name":"Network Zone Manager - Patterns","hasRequests":true,"id":"1-15"},{"order":["1-16-120","1-16-121","1-16-122","1-16-123","1-16-124","1-16-125","1-16-126"],"collectionId":"1","name":"Network Zone Manager - Subnets","hasRequests":true,"id":"1-16"},{"order":["1-17-127","1-17-128","1-17-129","1-17-130","1-17-131","1-17-132","1-17-133","1-17-134","1-17-135","1-17-136","1-17-137","1-17-138","1-17-139","1-17-140","1-17-141","1-17-142"],"collectionId":"1","name":"Network Zone Manager - Zones","hasRequests":true,"id":"1-17"},{"order":["1-18-143","1-18-144","1-18-145","1-18-146","1-18-147","1-18-148"],"collectionId":"1","name":"Policies and Sub-Policies","hasRequests":true,"id":"1-18"},{"order":["1-19-149"],"collectionId":"1","name":"Policy Analysis","hasRequests":true,"id":"1-19"},{"order":["1-20-150","1-20-151","1-20-152","1-20-153","1-20-154","1-20-155"],"collectionId":"1","name":"Policy Browser (formerly Rule Documentation)","hasRequests":true,"id":"1-20"},{"order":["1-21-156","1-21-157","1-21-158","1-21-159","1-21-160","1-21-161","1-21-162","1-21-163"],"collectionId":"1","name":"Policy Optimization","hasRequests":true,"id":"1-21"},{"order":["1-22-164","1-22-165","1-22-166"],"collectionId":"1","name":"Revisions","hasRequests":true,"id":"1-22"},{"order":["1-23-167","1-23-168"],"collectionId":"1","name":"Rule Usage","hasRequests":true,"id":"1-23"},{"order":["1-24-169","1-24-170","1-24-171","1-24-172","1-24-173","1-24-174","1-24-175","1-24-176"],"collectionId":"1","name":"Security Rules","hasRequests":true,"id":"1-24"},{"order":["1-25-177","1-25-178","1-25-179","1-25-180","1-25-181","1-25-182","1-25-183"],"collectionId":"1","name":"Services and Ports","hasRequests":true,"id":"1-25"},{"order":["1-26-184","1-26-185","1-26-186"],"collectionId":"1","name":"Time Objects","hasRequests":true,"id":"1-26"},{"order":["1-27-187"],"collectionId":"1","name":"Traffic Policy Matcher","hasRequests":true,"id":"1-27"},{"order":["1-28-188","1-28-189","1-28-190","1-28-191","1-28-192"],"collectionId":"1","name":"Unified Security Policy - Access Request Violations","hasRequests":true,"id":"1-28"},{"order":["1-29-193","1-29-194","1-29-195","1-29-196","1-29-197"],"collectionId":"1","name":"Unified Security Policy - Alerts","hasRequests":true,"id":"1-29"},{"order":["1-30-198","1-30-199","1-30-200","1-30-201","1-30-202","1-30-203","1-30-204","1-30-205"],"collectionId":"1","name":"Unified Security Policy - Cloud Tag Policy","hasRequests":true,"id":"1-30"},{"order":["1-31-206","1-31-207","1-31-208","1-31-209","1-31-210","1-31-211","1-31-212","1-31-213"],"collectionId":"1","name":"Unified Security Policy - Exceptions","hasRequests":true,"id":"1-31"},{"order":["1-32-214","1-32-215","1-32-216","1-32-217","1-32-218","1-32-219"],"collectionId":"1","name":"Unified Security Policy - Security Zone Matrix","hasRequests":true,"id":"1-32"},{"order":["1-33-220","1-33-221"],"collectionId":"1","name":"Unified Security Policy - Violations","hasRequests":true,"id":"1-33"}],"requests":[{"headers":"Accept: application/json\n","name":"Get all URL Categories by revision.","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"}],"dataMode":"params","description":"Fetches list of URL Categories defined in a revision given by ID.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories","collectionId":"1","id":"1-1-1","method":"GET"},{"headers":"Accept: application/json\n","name":"Get additional parameters identities by revision","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"}],"dataMode":"params","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
type: Additional parameter type [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group

Response Messages:
200: Successful
400: Invalid request","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters","collectionId":"1","id":"1-1-2","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific additional parameter identity","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Additional parameter IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters/{{ids}}","collectionId":"1","id":"1-1-3","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a URL Category.","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more URL Categories.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Url Category IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760
","folder":"1-1","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories/{{ids}}","collectionId":"1","id":"1-1-4","method":"GET"},{"headers":"Accept: application/json\n","name":"Get applications identities by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of applications defined in a revision given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 1,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/applications","collectionId":"1","id":"1-2-5","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific application identity","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760
","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/applications/{{ids}}","collectionId":"1","id":"1-2-6","method":"GET"},{"headers":"Accept: application/json\n","name":"Get application identities by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of applications defined on device given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 50,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications","collectionId":"1","id":"1-2-7","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific application identity","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
Note: This API retrieves the information from the latest revision.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
id: Device ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/1/applications/701
","folder":"1-2","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications/{{ids}}","collectionId":"1","id":"1-2-8","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Compare revisions on two different devices in terms of traffic.","dataMode":"raw","description":"This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic.
The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions.
The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions.
Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared.
Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules
Note 3: The format of the result is the same as the one returned by /change_authorization
Note 4: The API accepts in request body only one pair of oldId - newId map
Note 5: The request is valid only if the mapping ids are found in the active policies

Parameters:
body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions.

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison
BODY{
    \"policy_traffic_comparison_request\": {
        \"oldVersionId\": \"234\",
        \"newVersionId\": \"179\",
        \"oldId2newIdMap\": [
            {
                \"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",
                \"newId\" : \"{00-FACED0-00}\"
            }
        ],
        \"withTraffic\": true
    }
}


Response Messages:
200: Policies diff was successfully calculated
400: Could not find the requested revisions for comparison","folder":"1-3","rawModeData":"{\n\t\"policy_traffic_comparison_request\": {\n\t\t\"oldVersionId\": \"234\",\n\t\t\"newVersionId\": \"179\",\n\t\t\"oldId2newIdMap\": [\n\t\t\t{\n\t\t\t\t\"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",\n\t\t\t\t\"newId\" : \"{00-FACED0-00}\"\n\t\t\t}\n\t\t],\n\t\t\"withTraffic\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/policyTrafficComparison","collectionId":"1","id":"1-3-9","method":"POST"},{"headers":"Accept: application/json\n","name":"Determine if changes between two revisions are authorized","data":[{"value":null,"type":"text","enabled":true,"key":"new_version"},{"value":null,"type":"text","enabled":true,"key":"old_version"}],"dataMode":"params","description":"This API checks for unauthorized changes between any two versions of a firewall policy.
The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets.
The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket.

The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove).
The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes.

Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing.
Note 2: Use the ID returned by the /revisions API for new_version and old_version.
Note 3: The default value for traffic_details and ignore_tickets is false.
Note 4: Traffic that is handled by an implicit rule will not have a rule ID.

Parameters:
new_version: New version ID
old_version: Old version ID
traffic_details: Return unauthorized traffic change details for all modified rules [optional]
ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional]

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true

Response Messages:
200: Change authorization has been successfully calculated
400: Input parameters are not valid
400: Could not find the requested revisions for comparison","folder":"1-3","url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/","collectionId":"1","id":"1-3-10","method":"GET"},{"headers":"Accept: application/json\n","name":"Get scheduling and device details for a specific change window","data":[{"value":null,"type":"text","enabled":true,"key":"uid"},{"value":null,"type":"text","enabled":true,"key":"task_id"}],"dataMode":"params","description":"Retrieves scheduling and device details for a specific change window.

Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
task_id: Task Id

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1
OUTPUT {
    \"commit_task\": {
        \"id\": 1,
        \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
        \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
        \"errors\": \"\",
        \"device_commits\": {
            \"device_commit\": [
                {
                    \"id\": 1,
                    \"result\": {
                        \"errors\": {
                            \"error\": \"got_error_from_dcs\"
                        },
                        \"device\": {
                            \"id\": 17,
                            \"status\": \"FAILURE\",
                            \"revision_id\": 1,
                            \"errors\": {
                                \"error\": \"Login error\"
                            }
                        }
                    }
                },
                {
                    \"id\": 2,
                    \"result\": {
                        \"errors\": \"\",
                        \"device\": {
                            \"id\": 19,
                            \"status\": \"SUCCESS_WITH_WARNINGS\",
                            \"revision_id\": 1,
                            \"warnings\": {
                                \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                            }
                        }
                    }
                }
            ]
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain
404: Fail to find task for change window ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks/{{task_id}}","collectionId":"1","id":"1-4-11","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a list of completed policy changes for a specific change window","data":[{"value":null,"type":"text","enabled":true,"key":"uid"}],"dataMode":"params","description":"Retrieves a list of completed policy changes for a specific change window.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
start: Starting result for query allowable value is numeric [optional]
count: Number of tasks for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true
OUTPUT {
    \"commit_tasks\": {
        \"count\": 1,
        \"total\": 1,
        \"commit_task\": {
            \"id\": 1,
            \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
            \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
            \"errors\": \"\"
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks","collectionId":"1","id":"1-4-12","method":"GET"},{"headers":"Accept: application/json\n","name":"Get name and status for all change windows","description":"Retrieves a list of all change windows.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
start: Starting result for query allowable value is numeric [optional]
count: Number of change windows for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true
OUTPUT {
    \"change_windows\": {
        \"count\": 2,
        \"total\": 2,
        \"change_window\": [
            {
                \"uuid\": \"6ae41504-a95c-4f23-98a2-f18b2efadb9d\",
                \"name\": \"cw1\",
                \"domain_id\": 1,
                \"enabled\": true
            },
            {
                \"uuid\": \"fc7b167c-29ea-49a1-9ee3-efb6d1351343\",
                \"name\": \"cw2\",
                \"domain_id\": 1,
                \"enabled\": true
            }
        ]
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context ","folder":"1-4","url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/","collectionId":"1","id":"1-4-13","method":"GET"},{"headers":"Accept: application/json\n","name":"Get device zones by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/zones
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/zones","collectionId":"1","id":"1-5-14","method":"GET"},{"headers":"Accept: application/json\n","name":"Get device zones by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/787/zones
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/zones","collectionId":"1","id":"1-5-15","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network interfaces by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/interfaces
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/interfaces","collectionId":"1","id":"1-5-16","method":"GET"},{"headers":"Accept: application/json\n","name":"Get zones and network interfaces that participate in sub-policies","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/bindable_objects
","dataMode":"params","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindable_objects","collectionId":"1","id":"1-5-17","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network interfaces by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/10/interfaces
","folder":"1-5","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/interfaces","collectionId":"1","id":"1-5-18","method":"GET"},{"headers":"Accept: application/json\n","name":"Get all domains","description":"

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
403: User not permitted to access domains","folder":"1-6","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","collectionId":"1","id":"1-6-19","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Add a domain","dataMode":"raw","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains
BODY{
    \"domain\": {
        \"name\": \"domain1\",
        \"address\": \"address\",
        \"description\": \"description\"
    }
}


Response Messages:
403: User not permitted to access domains
400: Domain with this name already exists
400: Domain name is empty","folder":"1-6","rawModeData":"{\n\t\"domain\": {\n\t\t\"name\": \"domain1\",\n\t\t\"address\": \"address\",\n\t\t\"description\": \"description\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","collectionId":"1","id":"1-6-20","method":"POST"},{"headers":"Accept: application/json\n","name":"Get domain","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Domain id

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
403: User not permitted to access domains
400: Domain with ID was not found","dataMode":"params","folder":"1-6","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","collectionId":"1","id":"1-6-21","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update a domain","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
id: Domain id
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains/2
BODY{
    \"domain\": {
        \"name\": \"edited name\",
        \"address\": \"edited address\",
        \"description\": \"edited description\"
    }
}


Response Messages:
403: User not permitted to access domains
400: Domain with ID was not found
400: Domain with this name already exists
400: Domain name is empty
400: Default domain cannot be changed","dataMode":"raw","folder":"1-6","rawModeData":"{\n\t\"domain\": {\n\t\t\"name\": \"edited name\",\n\t\t\"address\": \"edited address\",\n\t\t\"description\": \"edited description\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","collectionId":"1","id":"1-6-22","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get general properties","description":"This API requires 'Super admin' privileges



Usage Example
URLhttps://192.168.1.1/securetrack/api/properties
OUTPUT{
    \"properties\": {
        \"sc_addresses\": {
            \"sc_address\": [
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"external\"
                },
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"internal\"
                }
            ]
        }
    }
}


Response Messages:
403: User not permitted to view properties","folder":"1-7","url":"https://{{SecureTrack_IP}}/securetrack/api/properties/","collectionId":"1","id":"1-7-23","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Check Point VPN (IPSec) communities and gateways","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities.
Works on clusters and gateways, not on management servers.

Parameters:
device_id: The unique identifier of target device

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities
","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_communities","collectionId":"1","id":"1-8-24","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco IPsec policy and peers","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"outputInterfaceName"}],"dataMode":"params","description":"Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config.
You can retrieve the interface names by calling the /devices/id/interfaces API.

Parameters:
device_id: The unique identifier of target device
outputInterfaceName: Interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1
","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_tunnels","collectionId":"1","id":"1-8-25","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco cryptographic maps by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://191.168.1.1/securetrack/api/revisions/18/crypto_maps
","dataMode":"params","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/crypto_maps","collectionId":"1","id":"1-8-26","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cisco cryptographic maps by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/19/crypto_maps
","dataMode":"params","folder":"1-8","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/crypto_maps","collectionId":"1","id":"1-8-27","method":"GET"},{"name":"Get resolved Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"params","description":"The order of precedence used to resolve the Internet object is:
Step 1: Identify the Internet referral:
Search for a defined Internet referral on the specified device.
If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral.
If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2.
If an Internet referral is not found, it resolves to “Any”.
Step 2: Resolve the object by name:
Search the specified device for a defined network object that matches the name returned in Step 1.
If a matching network object is not found, an error will be returned.

Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2/object

Response Messages:
200: Resolved Internet referral object for device is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Configured object was not found on the device
403: Access is denied.","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}/object","collectionId":"1","id":"1-9-28","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"raw","description":"Updates the Internet referral configuration for the device.
If there was no previous configuration, it will be created.

Parameters:
deviceId: SecureTrack Device ID
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_10.11.73.1\"
    }
}


Response Messages:
200: Internet referral configuration was updated
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
403: Access is denied.","folder":"1-9","rawModeData":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_10.11.73.1\"\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-29","method":"PUT"},{"name":"Get Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Internet referral configuration was not found for device ID
403: Access is denied.","dataMode":"params","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-30","method":"GET"},{"name":"Delete Internet representation for device","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration was deleted
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration for device ID does not exist
403: Access is denied.","dataMode":"params","folder":"1-9","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","collectionId":"1","id":"1-9-31","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Create new Internet representation for a device","dataMode":"raw","description":"The internet referral lets you represent the Internet as an object on a device.
See REST API: /internet_referral/{deviceId:[0-9]+}/object for a description of how internet referral is resolved.

Parameters:
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_2.2.2.2\"
    }
}


Response Messages:
201: Internet referral configuration was created
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
400: Internet referral configuration for given device ID already exists
403: Access is denied.","folder":"1-9","rawModeData":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_2.2.2.2\"\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/","collectionId":"1","id":"1-9-32","method":"POST"},{"headers":"Accept: application/json\n","name":"Get LDAP entry details by DN","data":[{"value":null,"type":"text","enabled":true,"key":"dn"}],"dataMode":"params","description":"Returns the UID, DN and Name of a LDAP entry specified by the DN.

Parameters:
dn: LDAP DN

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntryByDN?dn=CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com
OUTPUT{
    \"ldap_entry\": {
        \"uid\": \"mYbWQms7p0q5YinEyW5Byw==\",
        \"dn\": \"CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com\",
        \"name\": \"Manufacturing\"
    }
}


Response Messages:
200: OK
400: Invalid DN format
404: Entry matching the DN cannot be found
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntryByDN","collectionId":"1","id":"1-10-33","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Return entries that exactly match one of the given strings","dataMode":"raw","description":"Return list of LDAP entries which match the exact given multiple search_text.

Parameters:
body: Names to search

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntriesByNames
BODY{
    \"search_by_name_criteria\": {
        \"search_texts\": {
            \"search_text\": [
                \"Finance\",
                \"Marketing\",
                \"Management\"
            ]
        },
        \"ldap_entry_types\": {
            \"ldap_entry_type\": [
                \"GROUP\"
            ]
        },
        \"max_search_result\": 20
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Finance,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"uOvJTpYRD0aTjEENA87N5A==\",
                    \"displayName\": \"Finance\"
                },
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Management,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"jdf778skfsgs730fksdHHs==\",
                    \"displayName\": \"Management\"
                }
            ]
        },
        \"has_more_results_to_return\": false
    }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal value)
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","rawModeData":"{\n\t\"search_by_name_criteria\": {\n\t\t\"search_texts\": {\n\t\t\t\"search_text\": [\n\t\t\t\t\"Finance\",\n\t\t\t\t\"Marketing\",\n\t\t\t\t\"Management\"\n\t\t\t]\n\t\t},\n\t\t\"ldap_entry_types\": {\n\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\"GROUP\"\n\t\t\t]\n\t\t},\n\t\t\"max_search_result\": 20\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntriesByNames","collectionId":"1","id":"1-10-34","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Return LDAP entries which match the given search criteria","dataMode":"raw","description":"Return list of LDAP entries which match the given search criteria according to the search mode (EXACT, CONTAINS, STARTS_WITH, ENDS_WITH).
The search is case insensitive.
The limit of max_search_result is 1000.

Parameters:
body: Search criteria

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/search
BODY{
    \"search_criteria\": {
        \"search_base_dn\": \"DC=tufintest,DC=com\",
        \"search_text\": \"test\",
        \"ldap_search_options\": {
            \"ldap_entry_types\": {
                \"ldap_entry_type\": [
                    \"OU\",
                    \"USER\"
                ]
            },
            \"search_mode\": \"CONTAINS\",
            \"max_search_result\": 3
        }
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
            {
                \"dn\": \"CN=User15ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"ZRuKW3XqIEOIxCwlfgJQYA==\",
                \"displayName\": \"User15ATTesting1\"
            },
            {
                \"dn\": \"CN=IWAM_TEST2003,CN=Users,DC=tufintest,DC=com\",
                \"uid\": \"bYVqqcZXsUSF51hiP4W7Yw==\",
                \"displayName\": \"Testing1\"
            },
            {
                \"dn\": \"CN=User1ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"2ma3TrgeHEWQDITwvcRqlg==\",
                \"displayName\": \"test\"
            }
            ]
        },
            \"has_more_results_to_return\": \"true\"
        }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal or invalid value)
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","rawModeData":"{\n\t\"search_criteria\": {\n\t\t\"search_base_dn\": \"DC=tufintest,DC=com\",\n\t\t\"search_text\": \"test\",\n\t\t\"ldap_search_options\": {\n\t\t\t\"ldap_entry_types\": {\n\t\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\t\"OU\",\n\t\t\t\t\t\"USER\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"search_mode\": \"CONTAINS\",\n\t\t\t\"max_search_result\": 3\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/search","collectionId":"1","id":"1-10-35","method":"POST"},{"headers":"Accept: application/json\n","name":"Get the base DN entry details","description":"The returned \"base DN\" is used by GetEntriesByNames API as the search start entry.



Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getBaseDNEntry
OUTPUT{
    \"ldap_entry\": {
        \"dn\": \"DC=tufintest,DC=com\",
        \"uid\": \"nABbRP/lPUKlteNRI4j6iA==\"
    }
}


Response Messages:
200: OK
404: Base Entry cannot be found
501: LDAP server is not configured
503: No connection to LDAP server","folder":"1-10","url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getBaseDNEntry","collectionId":"1","id":"1-10-36","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Add devices to SecureTrack","dataMode":"raw","description":"Use this API to add a single device or a list of devices to SecureTrack.
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
Currently supported types: CMA, SMC, ASA, Panorama NG and FortiManager.

This API verifies connection to the provided device, before adding a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be added.
Only \"live\" device with correct credentials can be added using this API.
To add Checkpoint R77 devices, use \"r80_version\" : \"false\".


Parameters:
body: device_list

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"r80_version\":\"false\"
             }
         },
         {
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"user_name\":\"admin\",
                 \"password\":\"1234\",
                 \"r80_version\":\"true\"
             }
         },
         {
             \"model\":\"ASA\",
             \"vendor\":\"Cisco\",
             \"securetrack_domain\":\"Domain-A\",
             \"display_name\":\"Ireland-ASA\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
             \"enable_virtual_contexts\":\"true\",
             \"import_all\":\"false\",
             \"import_devices\":
                     [\"VC1\",\"VC2\"],
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"collect_dynamic_topology\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"enable_password\":\"st-enable-password\"
             }
         },
         {
             \"model\":\"Panorama\",
             \"vendor\":\"PaloAltoNetworks\",
             \"display_name\":\"First-Device-example\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"model\":\"FortiManager\",
             \"vendor\":\"Fortinet\",
             \"display_name\":\"Spain-FortiManager\",
             \"securetrack_server\":\"RemoteControlServerName\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_all\": \"false\",
                 \"import_devices\": [
                         {
                 \"name\": \"AdomX\",
                 \"import_all\": \"false\",
                 \"managed_devices\": [\"FW1\"]
                        }
                    ]
                }
            }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n \t\t \"devices\": [{ \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"r80_version\":\"false\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"user_name\":\"admin\",\n \t\t\t\t \"password\":\"1234\",\n \t\t\t\t \"r80_version\":\"true\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"ASA\",\n \t\t\t \"vendor\":\"Cisco\",\n \t\t\t \"securetrack_domain\":\"Domain-A\",\n \t\t\t \"display_name\":\"Ireland-ASA\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t \"enable_virtual_contexts\":\"true\",\n \t\t\t \"import_all\":\"false\",\n \t\t\t \"import_devices\": \n \t\t\t\t\t [\"VC1\",\"VC2\"],\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"enable_password\":\"st-enable-password\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"Panorama\",\n \t\t\t \"vendor\":\"PaloAltoNetworks\",\n \t\t\t \"display_name\":\"First-Device-example\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t {\n \t\t\t \"model\":\"FortiManager\",\n \t\t\t \"vendor\":\"Fortinet\",\n \t\t\t \"display_name\":\"Spain-FortiManager\",\n \t\t\t \"securetrack_server\":\"RemoteControlServerName\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_all\": \"false\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t\t { \n \t\t\t\t \"name\": \"AdomX\",\n \t\t\t\t \"import_all\": \"false\", \n \t\t\t\t \"managed_devices\": [\"FW1\"]\n \t\t\t\t\t\t}\n \t\t\t\t\t]\n \t\t\t\t}\n \t\t\t}\n \t\t]\n \t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","collectionId":"1","id":"1-11-37","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Edit Securetrack device","dataMode":"raw","description":"Use this API to edit the settings of a management device, including changing multiple parameters in the same call.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
The following devices can be edited: Check Point CMA R77, Check Point SMC R77, Cisco ASA, Panorama NG and FortiManager.
Note: This API cannot be used to edit SecureTrack Domains and SecureTrack Servers.
This API verifies connection to the provided device, before updating a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be updated.
Only \"live\" device with correct credentials can be updated using this API.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"device_id\": 1,
             \"display_name\": \"CheckPoint-R77-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.1\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"authentication_mode\": \"LEA\",
                 \"lea_authentication_mode\": \"ssl_opsec\",
                 \"lea_authentication_port\": \"2488\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 2,
             \"display_name\": \"CheckPoint-R80-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.2\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 3,
             \"display_name\": \"Cisco-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"enable_password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 4,
             \"display_name\": \"PaloAlto-PanoramaNg-Device\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 5,
             \"display_name\": \"PaloAlto-DeviceGroup\"
         },
         {
             \"device_id\": 6,
             \"display_name\": \"PaloAlto-FireWall-Device\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         },
         {
             \"device_id\": 7,
             \"display_name\": \"Spain-FortiManager\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 8,
             \"display_name\": \"FortiManager-Adom\"
         },
         {
             \"device_id\": 9,
             \"display_name\": \"FortiManager-FireWall\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n\t\t \"devices\": [{\n\t\t\t \"device_id\": 1,\n\t\t\t \"display_name\": \"CheckPoint-R77-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.1\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"authentication_mode\": \"LEA\",\n\t\t\t\t \"lea_authentication_mode\": \"ssl_opsec\",\n\t\t\t\t \"lea_authentication_port\": \"2488\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 2,\n\t\t\t \"display_name\": \"CheckPoint-R80-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 3,\n\t\t\t \"display_name\": \"Cisco-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"enable_password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 4,\n\t\t\t \"display_name\": \"PaloAlto-PanoramaNg-Device\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 5,\n\t\t\t \"display_name\": \"PaloAlto-DeviceGroup\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 6,\n\t\t\t \"display_name\": \"PaloAlto-FireWall-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 7,\n\t\t\t \"display_name\": \"Spain-FortiManager\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 8,\n\t\t\t \"display_name\": \"FortiManager-Adom\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 9,\n\t\t\t \"display_name\": \"FortiManager-FireWall\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t }\n\t\t]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","collectionId":"1","id":"1-11-38","method":"PATCH"},{"headers":"Accept: application/json\n","name":"Get specific device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the vendor, model, name, domain and ID for the specified device.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
id: Device ID
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/60

Usage Example
https://192.168.1.1/securetrack/api/devices/20?show_os_version=true
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}","collectionId":"1","id":"1-11-39","method":"GET"},{"headers":"Accept: application/json\n","name":"Get textual configuration by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get latest revision of running configuration for a given device Id.


Parameters:
context: global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/111/config
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/config","collectionId":"1","id":"1-11-40","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Import managed devices","dataMode":"raw","description":"Use this API to import more managed devices to SecureTrack.
The following devices can be added: Device Groups (for Panorama), Administrative Domains (for FortiManager).\nCurrently supported types: Panorama, FortiManager, Cisco ASA.
Please see examples below per device id: device id 1 for Panorama, device 2 for FortiManager, device id 3 for Cisco ASA.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk/import
BODY{
     \"devices_list\":{
         \"devices\":[
         {
             \"device_id\":\"1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"device_id\":\"2\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [
                     {
                         \"name\":\"Adom1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"firewall1\", \"firewall2\"]
                     },
                     {
                         \"name\":\"Adom2\",
                         \"import_all\":\"true\"
                     }
                 ]
             }
         },
         {
             \"device_id\":\"3\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"]
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running","folder":"1-11","rawModeData":"{ \n \t \"devices_list\":{ \n \t\t \"devices\":[ \n \t\t { \n \t\t\t \"device_id\":\"1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"2\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"firewall1\", \"firewall2\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"3\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"] \n \t\t\t }\n \t\t }\n \t\t]\n \t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/import","collectionId":"1","id":"1-11-41","method":"POST"},{"headers":"Accept: application/json\n","name":"Get specific task results of bulk operations on devices","data":[{"value":null,"type":"text","enabled":true,"key":"task_uid"}],"dataMode":"params","description":"Use this API to track and display the current progress of the devices being edited or added to\nSecureTrack for a specific Task ID.
For a list of devices, the status of each device is displayed.

A device that was not added due to some reason will be added to \"failed\" list with status element containing a description.
For example:
\"description\": \"No connection to device\".

Parameters:
task_uid: Task UID

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk/tasks/d7e88799-a6e5-45da-8c72-c979a5dbe235
OUTPUT{
    \"task_result\":{
        \"total_succeeded\":\"0\",
        \"total_in_progress\":\"2\",
        \"total_failed\":\"0\",
        \"succeeded\":{
            \"count\":\"0\"
        },
        \"in_progress\":{
            \"count\":\"2\",
            \"devices\":[
                {
                    \"device_id\":\"1\",
                    \"display_name\":\"Europe-CMA\",
                    \"ip_address\":\"192.168.1.1\",
                    \"status\":{
                    }
                },
                {
                    \"device_id\":\"2\",
                    \"display_name\":\"Ireland-ASA\",
                    \"ip_address\":\"172.16.1.1\",
                    \"status\":{
                    }
                }
            ]
        },
        \"failed\":{
            \"count\":\"0\"
        }
    }
}


Response Messages:
404: The task with the given UID was not found
400: Bad request
200: Accepted
408: Request timed out
500: Internal server error","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/tasks/{{task_uid}}","collectionId":"1","id":"1-11-42","method":"GET"},{"name":"Add configuration for offline device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"configuration_file"}],"description":"Parameters:
device_id: Device ID
configuration_file: Configuration File

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"device_id=1\" https://192.168.1.1/securetrack/api/tasks/add_device_config_task

Response Messages:
200: Configuration added successfully.","dataMode":"params","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/tasks/add_device_config_task","collectionId":"1","id":"1-11-43","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Update offline device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"raw","description":"Device name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
device_id: Device ID
body: Device to be updated

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/1
BODY<device>
     <name>API OFFLINE ASA2</name>
     <topology>true</topology>
</device>

","folder":"1-11","rawModeData":"\n\t API OFFLINE ASA2\n\t true\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}","collectionId":"1","id":"1-11-44","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get devices","description":"Returns the list of devices that are configured in SecureTrack, including the vendor, model, name, domain and device ID.
The results can be sorted by ip, name, vendor and model.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
name: Device name [optional]
ip: Device IP address [optional]
vendor: Device vendor [optional]
model: Device model [optional]
sort: Sort ascending or descending allowable types are: asc or desc [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices

Usage Example
https://192.168.1.1/securetrack/api/devices?vendor=VMware

Usage Example
https://192.168.1.1/securetrack/api/devices?sort=ip:asc

Usage Example
https://192.168.1.1/securetrack/api/devices?show_os_version=true
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","collectionId":"1","id":"1-11-45","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Add offline device","dataMode":"raw","description":"You can choose to select the domain either by name or id using the domain_id or domain_name tags.\nDevice name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
body: Device to be added

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices
BODY<device>
     <model>asa</model>
     <vendor>Cisco</vendor>
     <domain_id>1</domain_id>
     <domain_name>Default</domain_name>
     <name>API OFFLINE ASA1</name>
     <offline>true</offline>
     <topology>true</topology>
</device>

","folder":"1-11","rawModeData":"\n\t asa \n\t Cisco\n\t 1\n\t Default\n\t API OFFLINE ASA1\n\t true\n\t true\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","collectionId":"1","id":"1-11-46","method":"POST"},{"headers":"Accept: application/json\n","name":"Get textual configuration by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns textual configuration for the specified revision Id.


Parameters:
context: Global MSSP context [optional]
id: Revision id

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/config
","folder":"1-11","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/config","collectionId":"1","id":"1-11-47","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches a list of NAT objects for a given revision
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Version ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects?get_total=true
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/nat_objects","collectionId":"1","id":"1-12-48","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches a list of NAT objects defined on device given by device ID
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable value is numeric [optional]
count: Starting page for query allowable value is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects?get_total=true
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_objects","collectionId":"1","id":"1-12-49","method":"GET"},{"headers":"Accept: application/json\n","name":"Get NAT rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of NAT rules for device given by device ID

input_interface and output_interface are not supported for Panorama running in Advanced management mode
nat_stage is supported for Netscreen and JunOS
nat_type is supported for FortiManager
Note: For Check Point, NAT rules are available from the modules (not managements)
Note: For Palo Alto, filtering NAT rules by interface is only available for firewall devices

Parameters:
context: Global MSSP context [optional]
id: Device ID
input_interface: Input interface for NAT rules, \"any\" for all interfaces [optional]
output_interface: output interface for NAT rules, \"any\" for all interfaces [optional]
nat_stage: NAT stage for NAT rules allowable values: \"pre_policy\" , \"post_policy\" or \"both\" [optional]
nat_type: NAT stage for NAT rules allowable values: \"vip\" or \"reverse_vip\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/10/nat_rules/bindings?input_interface=Any
","folder":"1-12","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_rules/bindings","collectionId":"1","id":"1-12-50","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network groups containing specified network object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns groups that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.

Usage Example
https://192.168.1.1/securetrack/api/network_objects/69577/groups
","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/groups","collectionId":"1","id":"1-13-51","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules containing specified network object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the security rules that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.
include_groups: You can add \"include_groups\" to find rules that include the network object and rules that include the groups that include the network object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/65078/rules?include_groups=true
","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/rules","collectionId":"1","id":"1-13-52","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of network objects defined on device given by ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]
add_parent_objects: Panorama only: Get objects from parent DGs (default true) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169178,
                \"name\": \"Access_role\",
                \"display_name\": \"Access_role\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": false,
                \"comment\": \"\",
                \"uid\": \"{FC267948-DA8C-4FB6-A736-76B5254BF825}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14320,
                        \"name\": \"ad_group_auto_30K_grp1\",
                        \"display_name\": \"auto_30K_grp1\",
                        \"class_name\": \"ad_group\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{CAB92DCC-CF63-4E47-B8E3-1E1231996D5E}\",
                        \"dn\": \"CN=auto_30K_grp1,OU=OU_30K_Groups,DC=rnd,DC=local\"
                    }
                }
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/network_objects","collectionId":"1","id":"1-13-53","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of network objects from specific revision
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]
add_parent_objects: Panorama only: Get objects from parent DGs (default true) [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169183,
                \"name\": \"Access role 1\",
                \"display_name\": \"Access role 1\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": true,
                \"comment\": \"\",
                \"uid\": \"{1E4C35A0-1FE4-4101-8A38-FDE656BCDCFB}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14346,
                        \"name\": \"all identified\",
                        \"display_name\": \"all identified\",
                        \"class_name\": \"all_identified\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{17A972AC-4B4A-4715-859F-867128707F59}\",
                        \"dn\": \"\"
                    }
                }
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/network_objects","collectionId":"1","id":"1-13-54","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific network objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches a single or partial list of the network objects for a given revision.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects/69547?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169185,
            \"name\": \"Access_Role_Domain Controllers\",
            \"display_name\": \"Access_Role_Domain Controllers\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{140B8F32-188D-414C-A7BE-F4A7D7E9A169}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14237,
                    \"name\": \"ad_group_Domain_Controllers\",
                    \"display_name\": \"Domain Controllers\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{0A8A459E-58E8-45DC-981E-16BBF2BD1922}\",
                    \"dn\": \"CN=Domain Controllers,CN=Users,DC=rnd,DC=local\"
                }
            }
        }
    }
}

","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/network_objects/{{ids}}","collectionId":"1","id":"1-13-55","method":"GET"},{"headers":"Accept: application/json\n","name":"Get network objects matching specified criteria","data":[{"value":null,"type":"text","enabled":true,"key":"filter"}],"dataMode":"params","description":"You can search for network objects where the IP address, name or comment fields have a specified text string,
or you can search for network objects that have an IP address that matches, contains or is contained in a specified IP subnet,
or you can search for network objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns network objects where the IP address, name or comment fields have a specified text string. “subnet” filter returns network objects that have an IP address that matches, contains or is contained in a specified IP subnet. “uid“ filter returns network objects with the specified uid. If no filter is specified, the “text” filter is used.
device_id: Returns network objects belonging to the specified device_id. [optional]
ip: (For “text” filter) You can specify \"ip\" to find network objects with the specified text in the IP address field. [optional]
name: (For “text” filter) You can specify \"name\" to find network objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find network objects with the specified text in the comment field. [optional]
any_field: (For “text” filter) You can specify \"any_field\" to find network objects with the specified text in the IP address, name or comment fields. [optional]
exact_match: (For “text” filter) You can add \"exact_match=true\" to find network objects with the specified text in the comment field. If this field is not specified, the query uses \"exact_match=false\". [optional]
contained_in: (For “subnet” filter) You can specify \"contained_in\" to find network objects that are contained in the specified IP subnet. For example, 10.1.0.0 is contained in 10.0.0.0. [optional]
contains: (For “subnet” filter) You can specify \"contains\" to find network objects that contain the specified IP subnet. For example, 10.0.0.0 contains 10.1.0.0. [optional]
exact_subnet: (For “subnet” filter) You can specify \"exact_subnet\" to find network objects that have the specified IP address. [optional]
uid: (for “uid“ filter) Returns network objects with the specified uid. [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: You can specify \"typeOnDevice\" to find network object groups that are EDL. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=host&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&any_field=host&count=10&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&contains=10.1.1.0

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&count=10&exact_subnet=1.1.1.1

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191&device_id=4

Usage Example
URLhttps://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=Access_Role&identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1,
        \"total\": 1,
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169197,
            \"name\": \"Access_Role_aaa\",
            \"display_name\": \"Access_Role_aaa\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14317,
                    \"name\": \"ad_group_aaa\",
                    \"display_name\": \"aaa\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{5D16859C-0256-4673-A402-4254588B8F40}\",
                    \"dn\": \"CN=aaa,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}


Response Messages:
400: The typeOnDevice value is not valid.Use edl_ip_list as value to search EDL groups.","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/search","collectionId":"1","id":"1-13-56","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific network object","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches a single or partial list of the network objects for a given device ID.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects/169184?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169184,
            \"name\": \"Access_Role_@grp\",
            \"display_name\": \"Access_Role_@grp\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{1870612C-0922-4AEE-81FF-5472DB7C32E1}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14338,
                    \"name\": \"ad_group_grp\",
                    \"display_name\": \"@grp\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{C5740C23-F36E-4D2E-8B17-1F99C239C12A}\",
                    \"dn\": \"CN=@grp,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}

","folder":"1-13","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/network_objects/{{ids}}","collectionId":"1","id":"1-13-57","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic devices that are configured in ST","description":"Returns a list of the generic devices included in all the domains that the user has permission to.
Use context and/or name optional parameters to get more specific results.
To get context optional parameter, you can call /domains/ API and use the id included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
name: Generic device name [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","collectionId":"1","id":"1-14-58","method":"GET"},{"name":"Add generic device to Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"configuration_file"}],"dataMode":"params","description":"Upload a configuration file that will be used to add a generic device to the Topology model.
The context field is the domain ID to which the generic device is added: If not provided, the device is added to the global domain.
configuration_file must include a valid generic device configuration.
The specified path must point to a file on the computer being sue to make the REST API call.
If update update_topology = true, then the Topology model will be updated immediately after the device is added.
For maximum efficiency, if you are adding multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.Default value for update_topology = true.
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
body: Generic device to be added
configuration_file: Configuration File for generic device
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"my_generic_device\", \"customer_id\": 1}};type=application/json' -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices\n

Response Messages:
201: The generic device was created successfully
403: User is not permitted to access the specified domain
400: Failed to create generic device ","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","collectionId":"1","id":"1-14-59","method":"POST"},{"headers":"Accept: application/json\n","name":"Get topology subnets","description":"Returns a list of the topology subnets for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology subnet names that match the search criteria provided, as follows:
1. If you provide only a mask, then an exact match search is done on the mask portion of the name
e.g. if name=/2, the results will include 1.2.3.4/2, but not 1.2.3.4/22
2. If you provide only a partial or complete IP address, then a contains search is done in the IPv4 block portion of the name
e.g. name=32, the results will include 192.168.205.32/24 and 55.192.32.22/16, but will not include 55.168.205.5/32
3. If you provide both an IPv4 address (either partial or complete) and a mask, then an exact match search is done
e.g. if name=23.4/2, then the results will include 192.168.23.4/2, but will not include 192.168.23.4/23 or 23.4.192.168/2

Use the optional ip parameter to restrict the results to topology subnets that contain this ip, see example below.

User can use ip or name parameter, not both.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
name: Subnet name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]
ip: Ip host [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=10.27
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.20/32\",
                \"ip\": \"10.27.122.20\",
                \"mask\": \"255.255.255.255\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 616,
                \"name\": \"10.27.122.60/32\",
                \"ip\": \"10.27.122.60\",
                \"mask\": \"255.255.255.255\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 619,
                \"name\": \"10.27.122.0/30\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 620,
                \"name\": \"10.27.122.4/30\",
                \"ip\": \"10.27.122.4\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=144/30
OUTPUT{
    \"topology_subnets\": {
        \"count\": 2,
        \"total\": 2,
        \"subnets\": [
            {
                \"id\": 773,
                \"name\": \"10.13.64.144/30\",
                \"ip\": \"10.13.64.144\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 825,
                \"name\": \"10.15.64.144/30\",
                \"ip\": \"10.15.64.144\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?ip=10.27.122.3
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.0/24\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.0\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 616,
                \"name\": \"10.27.0.0/16\",
                \"ip\": \"10.27.0.0\",
                \"mask\": \"255.255.0.0\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 619,
                \"name\": \"10.0.0.0/8\",
                \"ip\": \"10.0.0.0\",
                \"mask\": \"255.0.0.0\",
                \"domainIdTag\": 1
            },
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
403: Using name and ip parameters is not allowed
403: Using Ipv6 in ip parameter is not supported
403: Ip parameter is not valid","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets","collectionId":"1","id":"1-14-60","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology generic VPN connections","description":"Returns a list of the generic vpn connections in the Topology map, for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology generic vpn connections that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
is_generic: Get generic devices [optional]
device_id: Device id [optional]
name: VPN connection name (accepts '*', '?' as wildcards) [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns
OUTPUT{
    \"generic_vpns\": {
        \"count\": 3,
        \"total\": 3,
        \"generic_vpn\": [
            {
                \"device_id\": 222,
                \"generic\": false,
                \"id\": 3,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.155\",
                \"tunnel_src_ip\": \"84.200.6.1\",
                \"vpn_name\": \"Palo_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns?is_generic=true
OUTPUT{
    \"generic_vpns\": {
        \"count\": 2,
        \"total\": 2,
        \"generic_vpn\": [
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic_vpns{device_id:(/device_id)?}","collectionId":"1","id":"1-14-61","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Cloud Internal Networks","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the internal networks for the specified Cloud management id.
This API requires 'Super admin' privileges.

Parameters:
id: Cloud management id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_internal_networks/20
OUTPUT{
    \"network_list\":
    {
        \"count\": 3,
        \"total\": 3,
        \"network\":
        {
            \"ip\": \"10.27.122.20\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.60\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.4\",
            \"mask\": \"255.255.255.252\"
        }
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for NSX with id ID
403: Device ID specified is not supported
404: The specified device ID was not found
404: The specified device ID was not found in Topology","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_internal_networks/{{id}}","collectionId":"1","id":"1-14-62","method":"GET"},{"headers":"Accept: application/json\n","name":"Get most specific network interfaces from which a host IP is accessible","data":[{"value":null,"type":"text","enabled":true,"key":"host"}],"description":"Parameters:
context: Global MSSP context [optional]
host: IP address of device for a query

Usage Example
https://192.168.1.1/securetrack/api/devices/interfaces/last_hop?host=192.168.1.66
","dataMode":"params","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/interfaces/last_hop","collectionId":"1","id":"1-14-63","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Vpns","dataMode":"raw","description":"Create generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","collectionId":"1","id":"1-14-64","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Vpns","dataMode":"raw","description":"Update generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"id\": 24,
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"new33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"id\": 25,
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"new111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Vpn/Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"id\": 24,\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"new33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"id\": 25,\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"new111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","collectionId":"1","id":"1-14-65","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get Specific topology subnet","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the subnet for the specified id, including information regarding attached devices and join candidates.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the subnet resides.

Parameters:
id: Subnet id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets/20
OUTPUT{
    \"subnet\": {
        \"id\": 18,
        \"name\": \"90.0.0.0/24\",
        \"ip\": \"90.0.0.0\",
        \"mask\": \"255.255.255.0\",
        \"attached_devices\": {
            \"attached_device\": [
                {
                    \"is_generic\": false,
                    \"id\": 10,
                    \"name\": \"srx\",
                    \"interface_id\": 4,
                    \"interface_name\": \"eth0\",
                    \"interface_ip\": \"90.0.0.1\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 13,
                    \"name\": \"ZBFW\",
                    \"interface_id\": 5,
                    \"interface_name\": \"eth1\",
                    \"interface_ip\": \"90.0.0.124\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 85,
                    \"name\": \"netscreen\",
                    \"interface_id\": 6,
                    \"interface_name\": \"eth2\",
                    \"interface_ip\": \"90.0.0.50\"
                }
            ]
        },
        \"join_candidates\": {
            \"join_candidate\": {
                \"is_generic\": false,
                \"id\": 72,
                \"name\": \"CP25\",
                \"interface_id\": 14,
                \"interface_name\": \"eth24/1\",
                \"interface_ip\": \"90.0.0.83\"
            }
        }
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for subnet with id ID
404: No subnet was found for the provided ID","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets/{{id}}","collectionId":"1","id":"1-14-66","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Routes","dataMode":"raw","description":"Create generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"mgmtId\": 1,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"mgmtId\": 2,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","collectionId":"1","id":"1-14-67","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Routes","dataMode":"raw","description":"Update generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"id\": 29,
        \"mgmtId\": 3,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"id\": 30,
        \"mgmtId\": 3,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Interface/Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"id\": 29,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"id\": 30,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","collectionId":"1","id":"1-14-68","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get cloud information","dataMode":"raw","description":"Returns information about all clouds in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
context: Global MSSP context [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions
BODY{
    \"suggested_clouds\": {
        \"count\": 2,
        \"total\": 2,
        \"cloud\": [
            {
                \"management_name\": \"FW1\",
                \"management_id\": 20,
                \"cloud_name\": \"Cloud 10.100.0.1\",
                \"cloud_id\": 120,
                \"vertex_id\": 250,
                \"ip\": \"10.100.0.1\",
                \"routes_count\": 5,
                \"is_parent\": false
            },
            {
                \"management_name\": \"FW2\",
                \"management_id\": 21,
                \"cloud_name\": \"Cloud 172.16.0.1\",
                \"cloud_id\": 125,
                \"vertex_id\": 270,
                \"ip\": \"172.16.0.1\",
                \"routes_count\": 7,
                \"is_parent\": false,
                \"parent_vertex_id\": 40
                \"parent_cloud_id\": 45
                \"parent_cloud_name\": \"Cloud 172.16.0.1\",
            }
        ]
    }
}


Response Messages:
202: Accepted
403: User is not permitted to access the specified domain","folder":"1-14","rawModeData":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 2,\n\t\t\"total\": 2,\n\t\t\"cloud\": [\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW1\",\n\t\t\t\t\"management_id\": 20,\n\t\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\t\"cloud_id\": 120,\n\t\t\t\t\"vertex_id\": 250,\n\t\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\t\"routes_count\": 5,\n\t\t\t\t\"is_parent\": false\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW2\",\n\t\t\t\t\"management_id\": 21,\n\t\t\t\t\"cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t\t\"cloud_id\": 125,\n\t\t\t\t\"vertex_id\": 270,\n\t\t\t\t\"ip\": \"172.16.0.1\",\n\t\t\t\t\"routes_count\": 7,\n\t\t\t\t\"is_parent\": false,\n\t\t\t\t\"parent_vertex_id\": 40\n\t\t\t\t\"parent_cloud_id\": 45\n\t\t\t\t\"parent_cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t}\n\t\t]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions","collectionId":"1","id":"1-14-69","method":"GET"},{"name":"Update an existing generic device in the Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Modify an existing generic device by uploading a new configuration file and/or specifying a new name.
If name field is specified, the generic device will be renamed.
configuration_file is optional, if provided it must include a valid generic device configuration.
The specified path points to a file in the client machine.
If a generic device name is changed and a new configuration file is not provided, topology will not be synchronized (update_topology flag is ignored).
Default value for update_topology = true.
To save time when there are several consecutive api calls: For the last call, set update_topology = true (for all other calls, update_topology = false).
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
id: Generic device id
body: Generic device to be updated [optional]
configuration_file: Configuration File for generic device [optional]
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices/24

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"new_generic_device_name\"}};type=application/json' -F \"update_topology=false\" https://192.168.1.1/securetrack/api/generic_devices/72

Response Messages:
204: The generic device was updated successfully.
400: A new name or a new configuration file must be indicated in order to update generic device with id {}
400: Failed to update generic device with id {}
404: A 'Generic Device' with the specified ID was not found","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","collectionId":"1","id":"1-14-70","method":"PUT"},{"name":"Delete generic device from Topology model","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete a generic device from the Topology model.
The ID must be for a valid generic device listed in the Topology Model.
If update update_topology = true, then the Topology model will be updated immediately after the device is deleted.
For maximum efficiency, if you are deleting multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.
Default value for update_topology = true.

Parameters:
id: Generic device id
update_topology: Synchronize And Update Topology [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/1

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/10?update_topology=false

Response Messages:
204: Generic Device deleted successfully.
400: Failed to delete generic device with id {}
404: A 'Generic Device' with the specified ID was not found","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","collectionId":"1","id":"1-14-71","method":"DELETE"},{"name":"Get path image for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns an image containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=netobj:422:GW_123.120&dst=netobj:483:uni/tn-common/out-CommonL3Out/lnodep-LNP&service=any
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_image","collectionId":"1","id":"1-14-72","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic Route","description":"Get a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/30
OUTPUT{
    GenericRoute: {
        id: 30,
        mgmtId: 2,
        destination: \"222.100.10.22\",
        mask: \"255.255.0.0\",
        interfaceName: \"catch22\",
        nextHop: \"100.100.10.10\",
        nextHopType: \"IP\",
        vrf: \"V102-YO\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Route Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","collectionId":"1","id":"1-14-73","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Route","description":"Delete a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Route Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","collectionId":"1","id":"1-14-74","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create generic Interfaces","dataMode":"raw","description":"Create generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"mgmtId\": 1,
        \"name\": \"Bob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-PA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    },
    {
        \"mgmtId\": 2,
        \"name\": \"Bob2\",
        \"ip\": \"100.100.45.66\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-BA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"Bob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-PA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"Bob2\",\n\t\t\"ip\": \"100.100.45.66\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-BA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","collectionId":"1","id":"1-14-75","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update generic Interfaces","dataMode":"raw","description":"Update generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"id\": 204,
        \"mgmtId\": 1,
        \"name\": \"NewBob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": null
    },
    {
        \"id\": 205,
        \"mgmtId\": 2,
        \"name\": \"NewBob2\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Interface/Management Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"id\": 204,\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"NewBob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": null\n\t},\n\t{\n\t\t\"id\": 205,\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"NewBob2\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","collectionId":"1","id":"1-14-76","method":"PUT"},{"headers":"Accept: application/json\n","name":"Delete generic Interfaces","description":"Delete all generic Interfaces from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/mgmt/2\n

Response Messages:
200: 11 Generic Interfaces were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-77","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Interfaces","description":"Get generic Interfaces of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/mgmt/1
OUTPUT{
    GenericInterfaces: [
    {
        id: 206,
        mgmtId: 1,
        name: \"newApo3\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    },
    {
        id: 208,
        mgmtId: 1,
        name: \"newApo4\",
        ip: \"100.103.33.34\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"internal\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-78","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic Interface","description":"Get a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/212
OUTPUT{
    GenericInterface: {
        id: 212,
        mgmtId: 1,
        name: \"newApo5\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PAL\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Interface Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","collectionId":"1","id":"1-14-79","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Interface","description":"Delete a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Interface Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","collectionId":"1","id":"1-14-80","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Update a cloud","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Modify the name of a topology cloud, and add/remove members of a joined cloud.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain context of the joined cloud, and any members specified in the body.
To change the name of a topology cloud, enter a value in the name field of the body.
To add/remove members of a joined cloud, specify the action and specify the clouds in the members list of the body.
The action is used only if the body contains a members list. If a members list is provided but no actions is specified, then the default action is ‘add’.
When adding cloud members, clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
When removing cloud members, if only zero or one member remains in the joined cloud, it will be deleted from the Interactive Map.

Parameters:
id: cloud id
action: action [optional]
body: Cloud data
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLfor renaming of any cloud - https://192.168.1.1/securetrack/api/topology/clouds/436
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\"
    }
}


Usage Example
URLfor renaming and members updating of a joined cloud - https://192.168.1.1/securetrack/api/topology/clouds/436?action=remove
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
204: Cloud updated successfully
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: Cloud with id ID is a not joined cloud
412: Cloud id: cloudId does not belong to domain: Context
412: Provided clouds don't belongs to the same domain
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud
412: Member cloud with id ID cannot be removed - it is not a member of a joined cloud","folder":"1-14","rawModeData":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"new cloud\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","collectionId":"1","id":"1-14-81","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get Specific topology cloud","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the topology cloud data for the specified id.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the cloud resides.

Parameters:
id: Cloud id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/48
OUTPUT{
    \"topology_cloud\": {
        \"id\": 48,
        \"name\": \"Cloud 69.70.120.155\",
        \"domain\": 1,
        \"type\": \"NON_JOINED\",
        \"ip\": \"69.70.120.155\"
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/66
OUTPUT{
    \"topology_cloud\": {
        \"id\": 66,
        \"name\": \"Cloud 10.100.10.14\",
        \"domain\": 1,
        \"type\": \"JOINED\",
        \"members\": [
            {
                \"id\": 50,
                \"ip\": \"10.100.6.238\",
                \"name\": \"Cloud 10.100.6.238\"
            },
            {
                \"id\": 73,
                \"ip\": \"10.100.10.14\",
                \"name\": \"Cloud 10.100.10.14\"
            },
            {
                \"id\": 74,
                \"ip\": \"10.100.9.9\",
                \"name\": \"Cloud 10.100.9.9\"
            }
        ]
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: No cloud was found for the provided ID","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","collectionId":"1","id":"1-14-82","method":"GET"},{"headers":"Accept: application/json\n","name":"Get generic Routes","description":"Get generic Routes of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/mgmt/2
OUTPUT{
    GenericRoutes: [
    {
        id: 27,
        mgmtId: 2,
        destination: \"10.4.4.4\",
        mask: \"255.0.0.0\",
        interfaceName: \"\",
        nextHop: \"AA\",
        nextHopType: \"VR\",
        vrf: \"V102-YO\"
    },
    {
        id: 28,
        mgmtId: 2,
        destination: \"10.4.5.5\",
        mask: \"255.0.0.0\",
        interfaceName: \"eeee\",
        nextHop: \"\",
        nextHopType: \"IP\",
        vrf: \"V101-PA\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-83","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Routes","description":"Delete all generic Routes from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/mgmt/2\n

Response Messages:
200: 11 Generic Routes were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-84","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get path domains for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns one or more domain entries for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_domains?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path_domains?src=10.0.2.1&dst=10.0.1.1&service=Facebook,tcp:80
OUTPUT {
    \"path_domain_entries\": {
        \"path_domain_entry\": [
                {
                        \"domainId\": \"1\",
                        \"vertex\": \"Subnet 10.0.2.0/24\",
                        \"entryType\": \"STARTING_POINT\",
                }
                {
                        \"domainId\": \"1\",
                        \"vertex\": \"Subnet 10.0.1.0/24\",
                        \"entryType\": \"ENDING_POINT\",
                }
    ]
}

","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_domains","collectionId":"1","id":"1-14-85","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update manual Interface CustomerTags","dataMode":"raw","description":"Update manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"id\": 73,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port5\",
            \"customerId\": 2
        },
        {
            \"id\": 74,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
403: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"id\": 73,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port5\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"id\": 74,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","collectionId":"1","id":"1-14-86","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create manual Interface CustomerTags","dataMode":"raw","description":"Create manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port4\",
            \"customerId\": 2
        },
        {
            \"generic\": false,
            \"deviceId\": 6,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
403: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port4\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 6,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","collectionId":"1","id":"1-14-87","method":"POST"},{"headers":"Accept: application/json\n","name":"Delete Transparent Firewall","description":"Delete Transparent Firewall by Id.

Parameters:
layer2DataId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/17\n

Response Messages:
200: layer2DataId 17 deleted.
400: Bad Request.
403: Access is denied.
404: Layer2Data Id 17 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/{{layer2DataId}}","collectionId":"1","id":"1-14-88","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Delete Ignored Interfaces.","description":"Delete Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10\n

Response Messages:
200: 2 entries deleted where mgmtId = 10
400: Bad Request.
403: Access is denied.
404: Management Id 10 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-89","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get Ignored Interfaces.","description":"Get Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10
OUTPUT{
    IgnoredInterfaces: [
        {
            interfaceName: \"eth2\",
            mgmtId: 10,
            ip: \"0.0.0.0\"
        },
        {
            interfaceName: \"loopback100\",
            mgmtId: 10,
            ip: \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","collectionId":"1","id":"1-14-90","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete manual Interface CustomerTags","description":"Delete all manual Interface CustomerTags from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/6?generic=false\n

Response Messages:
200: 2 Interface Customers were deleted from deviceId 6.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","collectionId":"1","id":"1-14-91","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get manual Interface CustomerTags","description":"Get manual Interface CustomerTags of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/5?generic=false
OUTPUT{
    InterfaceCustomerTags: [
        {
            id: 73,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4\",
            customerId: 2
        },
        {
            id: 74,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4.1\",
            customerId: 3
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","collectionId":"1","id":"1-14-92","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Transparent Firewalls","dataMode":"raw","description":"Create Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback0\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Device Id 23 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback0\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","collectionId":"1","id":"1-14-93","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update Transparent Firewalls","dataMode":"raw","description":"Update Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"id\" : 25,
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback2\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"id\" : 27,
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt2\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Device Id 23 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"id\" : 25,\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"id\" : 27,\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","collectionId":"1","id":"1-14-94","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Ignored Interfaces.","dataMode":"raw","description":"Create Ignored Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface
BODY{
    \"IgnoredInterfaces\":
    [
        {
            \"interfaceName\" : \"eth2\",
            \"mgmtId\" : 10,
            \"ip\" : \"0.0.0.0\"
        },
        {
            \"interfaceName\" : \"loopback100\",
            \"mgmtId\" : 10,
            \"ip\" : \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Id 10 not found.
500: General error occurred.","folder":"1-14","rawModeData":"{\n\t\"IgnoredInterfaces\": \n\t[\n\t\t{\n\t\t\t\"interfaceName\" : \"eth2\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"0.0.0.0\"\n\t\t},\n\t\t{\n\t\t\t\"interfaceName\" : \"loopback100\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"34.34.34.34\"\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface","collectionId":"1","id":"1-14-95","method":"POST"},{"headers":"Accept: application/json\n","name":"Delete manual Interface CustomerTag","description":"Delete a manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/66\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: InterfaceCustomer Id 66 not found
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","collectionId":"1","id":"1-14-96","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get manual Interface CustomerTag","description":"Get manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/74
OUTPUT{
    InterfaceCustomerTag: {
        id: 74,
        generic: false,
        deviceId: 5,
        interfaceName: \"port4.1\",
        customerId: 3
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: InterfaceCustomer Id 74 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","collectionId":"1","id":"1-14-97","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology routing tables for a given device","data":[{"value":null,"type":"text","enabled":true,"key":"mgmtId"}],"dataMode":"params","description":"The returned routing tables are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=1&is_generic=true
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_routes","collectionId":"1","id":"1-14-98","method":"GET"},{"headers":"Accept: application/json\n","name":"Get topology network interfaces by device","data":[{"value":null,"type":"text","enabled":true,"key":"mgmtId"}],"dataMode":"params","description":"The returned interfaces are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
context: Global MSSP context [optional]
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=1&is_generic=true
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_interfaces","collectionId":"1","id":"1-14-99","method":"GET"},{"headers":"Accept: application/json\n","name":"Get path for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path?src=29.29.29.1&dst=25.25.25.1&service=Facebook,tcp:80
OUTPUT {
    \"path_calc_results\": {
        \"traffic_allowed\": false,
        \"device_info\": {
            \"id\": \"17\",
            \"name\": \"PA-VM-111.6 (Cluster)\",
            \"type\": \"mgmt\",
            \"vendor\": \"Palo Alto Networks\",
            \"incomingInterfaces\": {
                \"incomingVrf\": \"default\",
                \"ip\": \"29.29.29.1/255.255.255.252\",
                \"name\": \"tunnel.11\"
            },
            \"nextDevices\": {
                \"name\": \"DIRECTLY_CONNECTED\",
                \"routes\": {
                    \"outgoingInterfaceName\": \"ethernet1/5\",
                    \"outgoingVrf\": \"default\",
                    \"routeDestination\": \"25.25.25.1/255.255.255.0\"
                }
            },
            \"bindings\": {
                \"name\": \"\",
                \"rules\": [
                    {
                        \"action\": \"Accept\",
                        \"applications\": \"facebook\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 43,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    },
                    {
                        \"action\": \"Deny\",
                        \"applications\": \"Any\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 62,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    }
                ]
            }
        }
    }
}


Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=netobj:422:GW_123.120&dst=netobj:483:uni/tn-common/out-CommonL3Out/lnodep-LNP&service=any
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path","collectionId":"1","id":"1-14-100","method":"GET"},{"headers":"Accept: application/json\n","name":"Get Join Cloud","description":"Get Join Cloud by Id.

Parameters:
cloudId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds/67
OUTPUT{
    id: 67,
    name: \"Yami\",
    clouds: [
        1,
        2,
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","collectionId":"1","id":"1-14-101","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Join Cloud","description":"Delete Join Cloud by Id.

Parameters:
cloudId [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
https://{st_host}/securetrack/api/topology/join/clouds/67\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","collectionId":"1","id":"1-14-102","method":"DELETE"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get cloud information","data":[{"value":null,"type":"text","enabled":true,"key":"cloud_id"}],"dataMode":"raw","description":"Returns information about a specific cloud in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
cloud_id: cloud id
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions/120
BODY{
    \"suggested_clouds\": {
        \"count\": 1,
        \"total\": 1,
        \"cloud\": {
            \"management_name\": \"FW1\",
            \"management_id\": 20,
            \"cloud_name\": \"Cloud 10.100.0.1\",
            \"cloud_id\": 120,
            \"vertex_id\": 250,
            \"ip\": \"10.100.0.1\",
            \"routes_count\": 5,
            \"is_parent\": false
        }
    }
}


Response Messages:
202: Accepted
403: User is not permitted to access the specified domain","folder":"1-14","rawModeData":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"cloud\": {\n\t\t\t\"management_name\": \"FW1\",\n\t\t\t\"management_id\": 20,\n\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\"cloud_id\": 120,\n\t\t\t\"vertex_id\": 250,\n\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\"routes_count\": 5,\n\t\t\t\"is_parent\": false\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions/{{cloud_id}}","collectionId":"1","id":"1-14-103","method":"GET"},{"name":"Get path pdf report for specified traffic","data":[{"value":null,"type":"text","enabled":true,"key":"src"},{"value":null,"type":"text","enabled":true,"key":"dst"},{"value":null,"type":"text","enabled":true,"key":"service"}],"dataMode":"params","description":"Returns an pdf report containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
pathIds parameter default value is empty, which means that all paths would be exported to the report.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]
pathIds: Path Ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/export_path_results.pdf?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/export_path_results.pdf?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80&pathIds=1,3

Usage Example
https://192.168.1.1/securetrack/api/topology/export_path_results.pdf?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80&pathIds=3

Usage Example
https://192.168.1.1/securetrack/api/topology/export_path_results.pdf?src=netobj:422:GW_123.120&dst=netobj:483:uni/tn-common/out-CommonL3Out/lnodep-LNP&service=any
","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/export_path_results.pdf","collectionId":"1","id":"1-14-104","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete Transparent Firewalls.","description":"Delete Transparent Firewalls for participated layer 2 deviceId

Parameters:
deviceId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/device/9\n

Response Messages:
200: 4 entries deleted where layer2 deviceId = 9
400: Bad Request.
403: Access is denied.
404: DeviceId 9 not found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","collectionId":"1","id":"1-14-105","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get Transparent Firewalls","description":"Get Transparent Firewalls for participated managed/generic DeviceId

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw/device/9?generic=false
OUTPUT{
    TransparentFirewalls: [
        {
            id: 17,
            outputL3DeviceId: 22,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet0/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 1,
            inputL3IsGenericDevice: true,
            inputL3InterfaceName: \"interface2\"
        },
        {
            id: 23,
            outputL3DeviceId: 23,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet2/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 17,
            inputL3IsGenericDevice: false,
            inputL3InterfaceName: \"mgmt\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","collectionId":"1","id":"1-14-106","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Create a joined topology cloud","dataMode":"raw","description":"Create a new topology cloud in the Interactive Map by joining existing clouds together.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
The body must include at least two topology cloud ids that are on a single domain.
If the context parameter is not provided, then the API will use the context id of the first member of the members list in the body.
Clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
If the provided body does not specify a joined cloud name, the newly created topology cloud will be given the name of the first member of the members list in the body.


Parameters:
context: Global MSSP context [optional]
body: Cloud data
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"optional new cloud name\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
201: Joined cloud created successfully
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: You must provide 2 or more clouds
412: Cloud id: cloudId does not belong to domain: Context
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud","folder":"1-14","rawModeData":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"optional new cloud name\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","collectionId":"1","id":"1-14-107","method":"POST"},{"headers":"Accept: application/json\n","name":"Get topology clouds","description":"Returns a list of the topology clouds for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology clouds that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
type: Required clouds type [optional]
name: Cloud name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
OUTPUT{
    \"topology_clouds\": {
        \"count\": 3,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"MEMBER\",
                \"ip\": \"10.100.6.238\"
            },
            {
                \"id\": 66,
                \"name\": \"Cloud 10.100.10.14\",
                \"domain\": 1,
                \"type\": \"JOINED\",
                \"members\": [
                    {
                        \"id\": 50,
                        \"ip\": \"10.100.6.238\",
                        \"name\": \"Cloud 10.100.6.238\"
                    },
                    {
                        \"id\": 73,
                        \"ip\": \"10.100.10.14\",
                        \"name\": \"Cloud 10.100.10.14\"
                    },
                    {
                        \"id\": 74,
                        \"ip\": \"10.100.9.9\",
                        \"name\": \"Cloud 10.100.9.9\"
                    }
                ]
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds?type=non-joined
OUTPUT{
    \"topology_clouds\": {
        \"count\": 2,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"10.100.6.238\"
            }
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","collectionId":"1","id":"1-14-108","method":"GET"},{"headers":"Accept: application/json\n","name":"Synchronize the Topology model","description":"Invoke of the Topology Model Synchronization.
full_sync=false - Builds the topology model from the information stored in the Tufin database.
full_sync=true - Retrieves the current data from devices and builds the topology model.
Default value for full_sync = false.

Parameters:
full_sync: Perform full sync [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize?full_sync=true

Response Messages:
200: The topology synchronization was invoked successfully.
403: Access is denied
500: Error Synchronizing Topology Model
503: Service unavailable, Graph builder is currently running","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize","collectionId":"1","id":"1-14-109","method":"POST"},{"headers":"Accept: application/json\n","name":"Get Topology Synchronization status","description":"Returns the progress status of the Topology Model Synchronization.



Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize/status

Response Messages:
200: The topology synchronization was invoked successfully.
403: Access is denied
500: Error getting synchronize progress","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize/status","collectionId":"1","id":"1-14-110","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create Join Cloud","dataMode":"raw","description":"Create Join Cloud.

Parameters:
body [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"name\" : \"Yami\",
        \"clouds\" : [1, 2]
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"name\" : \"Yami\",\n\t\t\"clouds\" : [1, 2]\n\t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","collectionId":"1","id":"1-14-111","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Update Join Cloud","dataMode":"raw","description":"Update Join Clouds.

Parameters:
body [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"id\" : 67,
        \"name\" : \"Yamile\",
        \"clouds\" : [1, 2, 57]
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred.","folder":"1-14","rawModeData":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"id\" : 67,\n\t\t\"name\" : \"Yamile\",\n\t\t\"clouds\" : [1, 2, 57]\n\t}\n} ","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","collectionId":"1","id":"1-14-112","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get generic Vpn","description":"Get a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/18
OUTPUT{
    GenericVpn: {
        id: 18,
        generic: false,
        deviceId: 2,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.77\",
        tunnelDestIpAddr: \"1.1.1.88\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","collectionId":"1","id":"1-14-113","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete generic Vpn","description":"Delete a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","collectionId":"1","id":"1-14-114","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Delete generic Vpns","description":"Delete all generic Vpns from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/device/2?generic=false\n

Response Messages:
200: 4 Generic Vpns were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","collectionId":"1","id":"1-14-115","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get generic Vpns","description":"Get generic Vpns of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/device/3?generic=true
OUTPUT{
    GenericVpns: [
    {
        id: 17,
        generic: true,
        deviceId: 3,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.177\",
        tunnelDestIpAddr: \"1.1.1.188\"
    },
    {
        id: 22,
        generic: true,
        deviceId: 3,
        interfaceName: \"111\",
        tunnelSourceIpAddr: \"1.1.1.188\",
        tunnelDestIpAddr: \"1.1.1.177\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred.","folder":"1-14","url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","collectionId":"1","id":"1-14-116","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create a zone pattern entry in a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"}],"dataMode":"raw","description":"Create a zone pattern entry in a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone pattern entry.
body: The zone pattern entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<create_pattern_match_entry>
    <pattern_match_entry>
        <id>1</id>
        <zone_id>2</zone_id>
        <domain>
            <id>1</id>
            <name>Default</name>
        </domain>
        <pattern>WEB</pattern>
        <type>security_group_by_name</type>
        <comment>This is a comment</comment>
    </pattern_match_entry>
</create_pattern_match_entry>


Response Messages:
201: The zone pattern entry was created successfully.
403: User is not permitted to access the specified domain
400: Some of pattern entry parameters were invalid or missing
404: A zone with the specified identifier was not found.","folder":"1-15","rawModeData":"\n\n\t\n\t\t1\n\t\t2\n\t\t\n\t\t\t1\n\t\t\tDefault\n\t\t\n\t\tWEB\n\t\tsecurity_group_by_name\n\t\tThis is a comment\n\t\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries","collectionId":"1","id":"1-15-117","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get all pattern entries for specific zones","dataMode":"raw","description":"Get the list of zone pattern entries for specific zones by identifiers

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the pattern entry results. [optional]
pattern: Filter by pattern string for the zone entry results. [optional]
name: Filter by zone name for the pattern entry results. [optional]
comment: Filter by comment for the pattern entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/1,2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entries_find_result>
    <paging_info>
        <start>0</start>
        <count>2</count>
        <total>2</total>
    </paging_info>
    <pattern_match_entries>
        <pattern_match_entry>
            <id>2</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEB</pattern>
            <zone_id>1</zone_id>
        </pattern_match_entry>
        <pattern_match_entry>
            <id>3</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEo</pattern>
            <zone_id>2</zone_id>
        </pattern_match_entry>
    </pattern_match_entries>
</pattern_match_entries_find_result>


Response Messages:
200: The zone pattern entries were successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-15","rawModeData":"\n\n\t\n\t\t0\n\t\t2\n\t\t2\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEB\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEo\n\t\t\t2\n\t\t\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/pattern-entries","collectionId":"1","id":"1-15-118","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get a specific zone pattern entry for a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Get a specific zone pattern entry for a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone entry.
id: Identifier of the zone pattern entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/75/pattern-entries/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entry>
    <id>2</id>    <type>security_group_by_name</type>
    <comment>This is a comment</comment>
    <pattern>WEB</pattern>
    <zone_id>75</zone_id>
    <zone_name>Zone_10_0_0_1</zone_name>
    <domain>
        <address>koko</address>
        <description>bobo</description>
        <id>1</id>
        <name>Default</name>
    </domain>
</pattern_match_entry>


Response Messages:
200: The zone pattern entry was successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified identifier was not found.
404: A zone pattern entry with the specified identifier was not found.","folder":"1-15","rawModeData":"\n\n\t2\tsecurity_group_by_name\n\tThis is a comment\n\tWEB\n\t75\n\tZone_10_0_0_1\n\t\n\t\t
koko
\n\t\tbobo\n\t\t1\n\t\tDefault\n\t
\n
\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries/{{id}}","collectionId":"1","id":"1-15-119","method":"GET"},{"headers":"Accept: application/json\n","name":"Get entries for a zone","description":"Get the list of zone entries for a zone.

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the zone entry results. [optional]
name: Filter by name for the zone entry results. [optional]
ip: Filter by IP for the zone entry results. [optional]
netmask: Filter by netmask for the zone entry results. [optional]
prefix: Filter by prefix for the zone entry results. [optional]
comment: Filter by comment for the zone entry results. [optional]
group: Filter by device group for the zone entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries

Response Messages:
200: The zone entries were successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/entries","collectionId":"1","id":"1-16-120","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a specific zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get a specific zone entry by ID for a zone.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/123

Response Messages:
200: The zone entry was successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-121","method":"GET"},{"name":"Delete zone entries","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete existing zone entries.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/10

Response Messages:
200: The zone entry was deleted successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-122","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Create a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
body: The zone entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
201: The zone entry was created successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries","collectionId":"1","id":"1-16-123","method":"POST"},{"headers":"Content-Type: application/json\n","name":"Modify multiple existing zone entries","data":[{"value":null,"type":"text","enabled":true,"key":"zone_ids"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix.
For IPv6 provide IP and prefix only, netmask is not allowed.
new_zone_id is not optional, it may be the same as the present zoneId.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entries.
ids: The ID(s) of the zone entries to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/85,98/entries/120,139
BODY{
\"zone_entries\" : {
        \"zone_entry\": [
            {
                \"id\": 120,
                \"ip\": \"3.3.3.3\",
                \"prefix\": 32,
                \"new_zone_id\": 85
            },
            {
                \"id\": 139,
                \"ip\": \"1b98:c72:1f00:0001::\",
                \"prefix\": \"52\",
                \"new_zone_id\": 98
            }
        ]
}
}


Response Messages:
200: The zone entry was modified successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entries\" : {\n\t\t\"zone_entry\": [\n\t\t\t{\n\t\t\t\t\"id\": 120,\n\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\"prefix\": 32,\n\t\t\t\t\"new_zone_id\": 85\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"id\": 139,\n\t\t\t\t\"ip\": \"1b98:c72:1f00:0001::\",\n\t\t\t\t\"prefix\": \"52\",\n\t\t\t\t\"new_zone_id\": 98\n\t\t\t}\n\t\t]\n}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","collectionId":"1","id":"1-16-124","method":"PUT"},{"name":"Modify a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_ids"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Modify an existing zone entry.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entry.
ids: The ID(s) of the zone entries to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/entries/10,20

Response Messages:
200: The zone entry was deleted successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","collectionId":"1","id":"1-16-125","method":"DELETE"},{"headers":"Content-Type: application/json\n","name":"Modify a zone entry","data":[{"value":null,"type":"text","enabled":true,"key":"zone_id"},{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.
body: The modified zone entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
200: The zone entry was modified successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found.","folder":"1-16","rawModeData":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","collectionId":"1","id":"1-16-126","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get all zones","description":"Gets a list of all zones.

Parameters:
context: Global MSSP context. [optional]
name: Filter by zone name for the zone results. [optional]
comment: Filter by zone comment for the zone results. [optional]
imported: List domains that imported zones. [optional]
includeInternet: Include the Internet zone. [optional]
includeImported: Include imported zones. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
200: The zones were retrieved successfully.
403: User is not permitted to access the specified domain","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","collectionId":"1","id":"1-17-127","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Create a zone","dataMode":"raw","description":"Create a zone.

Parameters:
context: Global MSSP context. [optional]
body: The zone to add.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <name>DMZ</name>
    <comment>All DMZ addresses</comment>
    <shared>false</shared>
</zone>


Response Messages:
201: The zone was created successfully.
403: User is not permitted to access the specified domain
400: The zone parameters were invalid","folder":"1-17","rawModeData":"\n\n\tDMZ\n\tAll DMZ addresses\n\tfalse\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","collectionId":"1","id":"1-17-128","method":"POST"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","name":"Delete all zones","method":"DELETE","id":"1-17-129","description":"Delete all existing zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
204: All zones were successfully deleted.
403: User is not permitted to access the specified domain","folder":"1-17"},{"headers":"Accept: application/json\n","name":"Get ancestor zones for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of ancestor zones for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for ancestor zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/123,234/ancestors

Response Messages:
200: The zone ancestors were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/ancestors","collectionId":"1","id":"1-17-130","method":"GET"},{"headers":"Accept: application/json\n","name":"Get configuration usages for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of configuration usages for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for configuration dependencies.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/dependencies

Response Messages:
200: The zone dependencies were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/dependencies","collectionId":"1","id":"1-17-131","method":"GET"},{"name":"Add a zone as an ancestor to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"child_id"},{"value":null,"type":"text","enabled":true,"key":"parent_ids"}],"dataMode":"params","description":"Add a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to add ancestors zone(s).
parent_ids: The ID(s) of the zones to add as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was added as an ancestor successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","collectionId":"1","id":"1-17-132","method":"PUT"},{"name":"Remove a zone as an ancestor to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"child_id"},{"value":null,"type":"text","enabled":true,"key":"parent_ids"}],"dataMode":"params","description":"Remove a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to remove ancestors zone(s).
parent_ids: The ID(s) of the zones to remove as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was removed as an ancestor successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","collectionId":"1","id":"1-17-133","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get shared zones","description":"Get a list of shared zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/shared

Response Messages:
200: The list of shared zones was retrieved successfully.
403: User is not permitted to access the specified domain","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/shared","collectionId":"1","id":"1-17-134","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Map network elements to security zones","dataMode":"raw","description":"This API maps each network element in the AccessRequestNetworkListDTO (such as IP address, IP address range, object, or group) to all matching Tufin security zones. If the network element is a group, then each zone also identifies all matching group members. The internet referral object can be included in the list, and will always map to the predefined Internet security zone. If the 'Any' element is included in the list it will map to all zones.
Note: if multi-domain mode is enabled, the API calls only checks zones that are in the “Default” domain.

Parameters:
body: AccessRequestNetworkListDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_zones
BODY<network_objects>
     <network_object xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"ip_network\">
         <network xsi:type=\"raw_network_subnet\">
         <ip>10.8.8.0</ip>
         <mask>255.255.255.0</mask>
         </network>
     </network_object>
</network_objects>


Response Messages:
200: Returns mapping of network elements to security zones
400: Access Request Network List is malformed.
403: Access is denied.","folder":"1-17","rawModeData":"\n\t \n\t\t \n\t\t 10.8.8.0\n\t\t 255.255.255.0\n\t\t \n\t \n","url":"https://{{SecureTrack_IP}}/securetrack/api/security_zones/","collectionId":"1","id":"1-17-135","method":"POST"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/import/{{ids}}","name":"Import a zone","method":"POST","id":"1-17-136","description":"Import a shared zone into the specified domain

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones to import. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/import/10,20

Response Messages:
200: The zone was imported successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17"},{"headers":"Content-Type: application/xml\n","name":"Modify a zone","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"raw","description":"Modify an existing zone.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <id>2</id>
    <name>DMZ</name>
    <comment>All DMZ hosts</comment>
    <shared>false</shared>
    <internet>false</internet>
    <user_networks>false</user_networks>
    <unassociated_networks>false</unassociated_networks>
</zone>


Response Messages:
204: The specified zone was successfully modified.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
400: The zone parameters were invalid","folder":"1-17","rawModeData":"\n\n\t2\n\tDMZ\n\tAll DMZ hosts\n\tfalse\n\tfalse\n\tfalse\n\tfalse\n","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","collectionId":"1","id":"1-17-137","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get a specific zone","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Get the zone with the specified ID.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to get.
imported: List domains that imported zones. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2

Response Messages:
200: The zone was retrieved successfully.
403: User is not permitted to access the specified domain
403: A zone with the specified ID does not exist.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","collectionId":"1","id":"1-17-138","method":"GET"},{"headers":"Accept: application/json\n","name":"Get descendant zones for a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Get a list of zones descended from the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for descendant zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/10,20/descendants

Response Messages:
200: The zone descendants were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/descendants","collectionId":"1","id":"1-17-139","method":"GET"},{"name":"Remove a zone as an descendants to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"parent_id"},{"value":null,"type":"text","enabled":true,"key":"child_ids"}],"dataMode":"params","description":"Remove a zone(s) as an descendants to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to remove descendant zone(s).
child_ids: The ID(s) of the zone to remove as a descendant.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was removed as an descendant successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","collectionId":"1","id":"1-17-140","method":"DELETE"},{"name":"Add a zone as a descendant to a zone","data":[{"value":null,"type":"text","enabled":true,"key":"parent_id"},{"value":null,"type":"text","enabled":true,"key":"child_ids"}],"dataMode":"params","description":"Add a zone(s) as a descendant to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to add descendant zone(s).
child_ids: The ID(s) of the zones to add as descendants.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was added as an descendant successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","collectionId":"1","id":"1-17-141","method":"PUT"},{"name":"Delete a zone","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Delete an existing zone.

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zone to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/1,2

Response Messages:
204: The specified zone was successfully deleted.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.","folder":"1-17","url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}","collectionId":"1","id":"1-17-142","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get policies by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of policies defined on a given revision ID

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/policies
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/policies","collectionId":"1","id":"1-18-143","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by input and output interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"description":"Parameters:
device_id: The unique identifier of target device
inputInterfaceName: Input interface name [optional]
outputInterfaceName: Output interface name [optional]
isIpv6: Is ipv6 policy [optional]

Usage Example
https://192.168.1.1/securetrack/api/bindings/2/topology_interfaces?inputInterfaceName=ethernet1/1&outputInterfaceName=ethernet1/2
","dataMode":"params","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/topology_interfaces","collectionId":"1","id":"1-18-144","method":"GET"},{"headers":"Accept: application/json\n","name":"Get policies by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of policies defined on a given device ID.
Supported devices: CheckPoint, Panorama Advanced, FortiManager Basic and Advanced, FMC and NSX.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/policies
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/policies","collectionId":"1","id":"1-18-145","method":"GET"},{"headers":"Accept: application/json\n","name":"Get list of sub-policies (bindings) with input and/or output interfaces","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"supremum_version_id"},{"value":null,"type":"text","enabled":true,"key":"inputInterfaceName"},{"value":null,"type":"text","enabled":true,"key":"outputInterfaceName"}],"dataMode":"params","description":"Retrieve list of bindings of input and/or output interfaces

Parameters:
device_id: The unique identifier of target device
supremum_version_id: The unique identifier of target revision
inputInterfaceName: Input interface name
outputInterfaceName: Output interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/binding_query?supremum_version_id=785&inputInterfaceName=Any&outputInterfaceName=Any
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/binding_query","collectionId":"1","id":"1-18-146","method":"GET"},{"headers":"Accept: application/json\n","name":"Get sub-policies (bindings) by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the subpolicies (bindings) for a given revision.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Revision ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/bindings","collectionId":"1","id":"1-18-147","method":"GET"},{"headers":"Accept: application/json\n","name":"Get sub-policies (bindings) by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the subpolicies (bindings) for a given device.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Device ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
","folder":"1-18","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindings","collectionId":"1","id":"1-18-148","method":"GET"},{"headers":"Accept: application/json\n","name":"Run Policy Analysis query","data":[{"value":null,"type":"text","enabled":true,"key":"device_ids"},{"value":null,"type":"text","enabled":true,"key":"sources"},{"value":null,"type":"text","enabled":true,"key":"destinations"},{"value":null,"type":"text","enabled":true,"key":"services"}],"description":"Parameters:
device_ids: Device ids
sources: Source list
destinations: Destination list
services: Service list
exclude_any: Exclude any in the specified, comma-separated fields of source, destination or service. For example: exclude_any = destination,service [optional]
action: Action [optional]

Usage Example
https://192.168.1.1/securetrack/api/policy_analysis/query/matching_rules?device_ids=41&sources=33.33.33.0:24,113.113.113.100&destinations=114.1.1.0:24&services=tcp:80&exclude_any=source,destination

Response Messages:
200: Returns request results.
400: Error in request syntax.","dataMode":"params","folder":"1-19","url":"https://{{SecureTrack_IP}}/securetrack/api/policy_analysis/query/matching_rules","collectionId":"1","id":"1-19-149","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Fetches rule documentation for a single rule given by revision ID and rule ID.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the requested rule

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-150","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Modify specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"raw","description":"Modify rule documentation for a single rule identified by revision ID and rule ID.
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If no rule documentation exists for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If rule documentation already exists for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.
Record set entries that are automatically created or calculated, for example automatic mapping to a SecureChange ticket, cannot be modified.
The following fields are automatically calculated, and cannot be modified:
Permissiveness, Violations, Last Hit, Last Modified, Shadowing Status, Certification Status, Certification Date, Certification Expiration Date, Application Name, Application Owner

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the changed rule
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>172</id>
         <ticketCr>789111</ticketCr>
     </record_set>
</rule_documentation>

","folder":"1-20","rawModeData":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 172\n\t\t 789111\n\t \n","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-151","method":"PUT"},{"name":"Delete specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Delete rule documentation for a single rule given by revision ID and rule ID.
If the rule has automatic mapping to a ticket, the record is not deleted.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Rule id

Usage Example
https://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-152","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Fetches rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16373/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-153","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Modify specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"raw","description":"Modify rule documentation for a single rule given by device ID and rule ID
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If there is no existing rule documentation for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If there is existing rule documentation for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>173</id>
         <ticketCr>789112</ticketCr>
     </record_set>
</rule_documentation>

","folder":"1-20","rawModeData":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 173\n\t\t 789112\n\t \n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-154","method":"PUT"},{"name":"Delete specific rule documentation","data":[{"value":null,"type":"text","enabled":true,"key":"id"},{"value":null,"type":"text","enabled":true,"key":"rule_id"}],"dataMode":"params","description":"Delete rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
","folder":"1-20","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","collectionId":"1","id":"1-20-155","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get cleanups results","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/","collectionId":"1","id":"1-21-156","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the specific objects or rules identified for the cleanup results","data":[{"value":null,"type":"text","enabled":true,"key":"cleanup_id"}],"description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/instances
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/instances","collectionId":"1","id":"1-21-157","method":"GET"},{"headers":"Accept: application/json\n","name":"Get risks results","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/","collectionId":"1","id":"1-21-158","method":"GET"},{"headers":"Accept: application/json\n","name":"Get cleanups by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"code"}],"dataMode":"params","description":"Fetches set of Cleanup calculation results for a device given by ID.
Only fully shadowed rules (cleanup code C01) are supported.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
code: Cleanup category code
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query result allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/cleanups?code=C01
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/cleanups","collectionId":"1","id":"1-21-159","method":"GET"},{"headers":"Accept: application/json\n","name":"Get devices in cleanup results","data":[{"value":null,"type":"text","enabled":true,"key":"cleanup_id"}],"description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/devices
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/devices","collectionId":"1","id":"1-21-160","method":"GET"},{"headers":"Accept: application/json\n","name":"Get devices in risk results","data":[{"value":null,"type":"text","enabled":true,"key":"risk_id"}],"description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id

Usage Example
https://192.168.1.1/securetrack/api/risk/1/devices
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/devices","collectionId":"1","id":"1-21-161","method":"GET"},{"headers":"Accept: application/json\n","name":"Get shadowing rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"shadowed_uids"}],"dataMode":"params","description":"Find shadowing rules for given shadowed rules of a specific device

Parameters:
device_id: Device ID
shadowed_uids: UIDs of shadowed rules separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/31/shadowing_rules?shadowed_uids=78786a0d-b9cc-478e-b7a2-dea953c976c7
","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/shadowing_rules","collectionId":"1","id":"1-21-162","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the specific objects or rules identified for the risk results","data":[{"value":null,"type":"text","enabled":true,"key":"risk_id"}],"description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk/1/instances
","dataMode":"params","folder":"1-21","url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/instances","collectionId":"1","id":"1-21-163","method":"GET"},{"headers":"Accept: application/json\n","name":"Get revisions by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches revisions for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/105/revisions
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/revisions","collectionId":"1","id":"1-22-164","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific revision","data":[{"value":null,"type":"text","enabled":true,"key":"revId"}],"dataMode":"params","description":"Fetches a revision specified by revision Id.
To get revId for this API, use the 'id' property of RevisionDTO that is returned by 'Get revisions by device' or 'Get latest revision by device' APIs

Parameters:
context: Global MSSP context [optional]
revId: Id of fetched revision

Usage Example
https://192.168.1.1/securetrack/api/revisions/785
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revId}}","collectionId":"1","id":"1-22-165","method":"GET"},{"headers":"Accept: application/json\n","name":"Get latest revision by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches latest revision for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/105/latest_revision
","folder":"1-22","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/latest_revision","collectionId":"1","id":"1-22-166","method":"GET"},{"headers":"Accept: application/json\n","name":"Get last hit for a specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"rule_uid"}],"dataMode":"params","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.
The rule_uid is the value from the uid field returned by the /rules API: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Parameters:
device_id: device_id
rule_uid: rule_uid

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find/20/ea9db13e-d058-45c6-a2f0-cd731027c22b
","folder":"1-23","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find/{{device_id}}/{{rule_uid}}","collectionId":"1","id":"1-23-167","method":"GET"},{"headers":"Accept: application/json\n","name":"Get last hits for all rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.

Parameters:
device_id: device id

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find_all/20
","folder":"1-23","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find_all/{{device_id}}","collectionId":"1","id":"1-23-168","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Returns a list of rules by device ID, rule IDs and additional criteria.
Note: This API retrieves the information from the latest revision.


Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Rule IDs
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16370
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/rules/{{ids}}","collectionId":"1","id":"1-24-169","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the security rules for the specified device.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.
For Cisco ASA devices, when applying a filter you must also add the direction.


Parameters:
context: Global MSSP context [optional]
id: Device ID
policyId: Policy ID [optional]
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Show rules grouping criteria. Can be set only to \"bindings\". Output will be grouped by bindings and section header for Check Point devices, ACL for Cisco devices, and Zones for Juniper, Palo Alto, and Fortinet device [optional]
with_zb: Include zone based rules, values can be 'true' or 'false' [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?subpolicy_name=layer1&is_global=true

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?interface=Loopback99:INSIDE
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules","collectionId":"1","id":"1-24-170","method":"GET"},{"headers":"Accept: application/json\n","name":"Get a specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"ruleId"}],"description":"Parameters:
ruleId: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/rules/60
","dataMode":"params","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rules/{{ruleId}}","collectionId":"1","id":"1-24-171","method":"GET"},{"headers":"Accept: application/json\n","name":"Find rules","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"}],"dataMode":"params","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.To get more information regarding objects included in the returned rules (like src_network or dst_network) use their uid, as the objects’ ID might change.
\n By default, if there are less than 3,000 rules - the API will return all the rules.\nIn case there are more than 3,000 rules the API will return an error code 413 with the error message “There are more than 3000 rules, you must use pagination”
“display_rule_number” should return only for Check Point R80 and higher devices.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
device_id: Device id
start: The starting rule to include in the returned results [optional]
count: Number of rules to include in the results [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/31?search_text=source:Sales_192.168.2.60 fromzone:sales tozone:External

Usage Example
https://192.168.1.1/securetrack/api/rule_search/20?search_text=Mobile Access hascomment:false

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=web_server&start=0&count=10

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search/59?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT {
    \"rules\":{
        \"count\":1,
        \"total\":1,
        \"rule\":{
            \"@xsi.type\":\"securityRuleDTO\",
            \"id\":21,
            \"cp_uid\":\"\",
            \"uid\":\"{9259f6ee-47a0-4996-a214-ab7edc14a916}\",
            \"order\":2,
            \"binding\":{
                \"default\":true,
                \"policy\":{
                    \"@xsi.type\":\"managementDomainPolicyDTO\",
                    \"id\":2,
                    \"name\":\"Standard\",
                    \"installable_targets\":\"\"
                },
                \"rule_count\":19,
                \"security_rule_count\":19,
                \"uid\":\"{00-FACED0-00}\"
                },
            \"acceleration_breaker\":false,
            \"action\":\"Accept\",
            \"application\":{
                \"id\":4735,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
            },
            \"authentication_rule\":false,
            \"comment\":\"DO NOT DELETE OR EDIT\",
            \"dst_network\":{
                \"id\":39,
                \"display_name\":\"Net_10.110.65.0\",
                \"name\":\"Net_10.110.65.0\"
                \"uid\":\"{1290f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_networks_negated\":false,
            \"dst_service\":{
                \"id\":7420,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
                \"uid\":\"{2904f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_services_negated\":false,
            \"dst_zone\":\"any\",
            \"disabled\":false,
            \"external\":false,
            \"implicit\":false,
            \"dst_zone_any\":true,
            \"src_zone_any\":true,
            \"name\":\"Accept SSHG\",
            \"option\":\"LOG_SESSION\",
            \"documentation\":{
                \"permissiveness_level\":\"LOW\",
                \"shadowed\":\"Not shadowed\",
                \"last_modified\":\"Today\",
                \"last_hit\":\"N/A\",
                \"violations\":\"\"
            },
            \"rule_location\":\"Shared\",
            \"rule_location_display\":\"Shared - Pre Rule\",
            \"rule_number\":2,
            \"display_rule_number\":\"2.1\",
            \"rule_type\":\"universal\",
            \"src_zone\":\"any\",
            \"src_network\":{
                \"id\":38,
                \"display_name\":\"Net_10.110.64.0\",
                \"name\":\"Net_10.110.64.0\"
                \"uid\":\"{4934f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"src_networks_negated\":false,
            \"src_services_negated\":false,
            \"track\":{
                \"level\":\"LOG\"
            },
            \"type\":\"rule\",
            \"users\":{
                \"id\":5,
                \"display_name\":\"tufin\\\\regina\",
                \"name\":\"tufin\\\\regina@ldap\"
            }
        }
    }
}


Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid
413: Max supported count is 3000
413: There are more than 3000 rules, you must use pagination","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/{{device_id}}","collectionId":"1","id":"1-24-172","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific rule","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Returns a list of rules by revision ID, rule IDs and additional criteria

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \\\"documentation\\\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \\\"bindings\\\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16370
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/rules/{{ids}}","collectionId":"1","id":"1-24-173","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a list of all of the security rules for the specified revision.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.
For Cisco ASA devices, when applying a filter you must also add the direction.


Parameters:
context: Global MSSP context [optional]
id: Revision id
policyId: Policy id [optional]
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]
with_zb: Include zone-based rules [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]
fetchMigratedCalculations [optional]
is_alternate_order: OrderBy alternate order, for display Aci rules by contracts [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?subpolicy_name=layer1&is_global=true

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?interface=Loopback99:INSIDE
","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules","collectionId":"1","id":"1-24-174","method":"GET"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/export","name":"Create a CSV file for rules search results","method":"GET","id":"1-24-175","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is : for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API exports the results data as a CSV file in the SecureTrack Reports Repository.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export?search_text=shadowed:true
","folder":"1-24"},{"headers":"Accept: application/json\n","name":"Get rule count per device","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API will return a list of all the devices, the devices that has rules that match the search criteria will have rule_count that is bigger than 0

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=ICMP application:facebook

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT{
    \"device_list\":{
        \"device\":[
            {
                \"device_id\":512,
                \"revision_id\":6864,
                \"rule_count\":1
            },
            {
                \"device_id\":59,
                \"revision_id\":543,
                \"rule_count\":0
            }
        ]
    }
}

","folder":"1-24","url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/","collectionId":"1","id":"1-24-176","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get services objects matching specified criteria","data":[{"value":null,"type":"text","enabled":true,"key":"filter"}],"dataMode":"raw","description":"You can search for service objects where the name or comment fields have a specified text string,
or you can search for service objects that have an Port or protocol that matches,
or you can search for service objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns service objects where the name or comment fields have a specified text string. \n“protocol” filter returns service objects that have a protocol that matches specified IP protocol number.\n“port” filter returns service objects that have a port that matches specified port number.\n “uid“ filter returns service objects with the specified uid.\n If no filter is specified, the “text” filter is used.
device_id: Returns service objects belonging to the specified device_id. [optional]
name: (For “text” filter) You can specify \"name\" to find service objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find service objects with the specified text in the comment field. [optional]
protocol: Specify Protocolto find service objects that have the specified IP Protocol. [optional]
port: Specify Portto find service objects that have the specified Port. [optional]
uid: (for “uid“ filter) Returns service objects with the specified uid. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=protocol&protocol=6&device_id=68

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=port&port=80

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
URLhttps://192.168.1.1/securetrack/api/services/search?filter=text&name=tcp_10
BODY{
    \"services\": {
        \"count\": 1,
        \"total\": 1,
        \"service:\": {
            \"id\": 169197,
            \"name\": \"tcp_10\",
            \"display_name\": \"tcp_10\",
            \"class_name\": \"access_role\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"max\": false,
            \"min\": false,
            \"protocol\": 6,
            \"timeout\": \"\",
            \"type\": \"tcp_service\",
            }
        }
    }
}

","folder":"1-25","rawModeData":"{\n\t\"services\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"service:\": {\n\t\t\t\"id\": 169197,\n\t\t\t\"name\": \"tcp_10\",\n\t\t\t\"display_name\": \"tcp_10\",\n\t\t\t\"class_name\": \"access_role\",\n\t\t\t\"global\": false,\n\t\t\t\"device_id\": 158,\n\t\t\t\"comment\": \"\",\n\t\t\t\"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",\n\t\t\t\"implicit\": false,\n\t\t\t\"max\": false,\n\t\t\t\"min\": false,\n\t\t\t\"protocol\": 6,\n\t\t\t\"timeout\": \"\",\n\t\t\t\"type\": \"tcp_service\",\n\t\t\t}\n\t\t}\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/services/search","collectionId":"1","id":"1-25-177","method":"GET"},{"headers":"Accept: application/json\n","name":"Get rules containing specified service object","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the security rules that contain the specified service object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.
include_groups: You can add \"include_groups\" to find rules that include the service object and rules that include the groups that include the service object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/65078/rules?include_groups=true
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/rules","collectionId":"1","id":"1-25-178","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific service","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of specific service objects defined in revision given by revision ID and specified by their IDs

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/services/959888
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/services/{{ids}}","collectionId":"1","id":"1-25-179","method":"GET"},{"headers":"Accept: application/json\n","name":"Get service groups containing specified service objects","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns groups that contain the specified service objects


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.

Usage Example
https://192.168.1.1/securetrack/api/services/69577/groups
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/groups","collectionId":"1","id":"1-25-180","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific service","data":[{"value":null,"type":"text","enabled":true,"key":"device_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of specific service objects defined in device given by device ID and specified by their IDs.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Service object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/services/959888,959966
","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/services/{{ids}}","collectionId":"1","id":"1-25-181","method":"GET"},{"headers":"Accept: application/json\n","name":"Get services by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of service objects defined on device given by device ID.
The default value for get_total is false. For APIF calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric between 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]
add_parent_objects: Panorama only: Get objects from parent DGs (default true) [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/services","collectionId":"1","id":"1-25-182","method":"GET"},{"headers":"Accept: application/json\n","name":"Get services by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Fetches list of service objects defined in revision given by revision ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric betweenm 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]
add_parent_objects: Panorama only: Get objects from parent DGs (default true) [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/785/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

","folder":"1-25","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/services","collectionId":"1","id":"1-25-183","method":"GET"},{"headers":"Accept: application/json\n","name":"Get specific time object","data":[{"value":null,"type":"text","enabled":true,"key":"revision_id"},{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Fetches list of time objects by revision ID and rule ID

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Rule IDs

Usage Example
https://192.168.1.1/securetrack/api/revisions/7/time_objects/9
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/time_objects/{{ids}}","collectionId":"1","id":"1-26-184","method":"GET"},{"headers":"Accept: application/json\n","name":"Get time objects by device","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the time objects used in the specified device.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Starting page for query allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/time_objects
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/time_objects","collectionId":"1","id":"1-26-185","method":"GET"},{"headers":"Accept: application/json\n","name":"Get time objects by revision","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns the time objects used in the specified revision.

Parameters:
context: Global MSSP context [optional]
id: Revision ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/time_objects
","folder":"1-26","url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/time_objects","collectionId":"1","id":"1-26-186","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Get policy relevance metrics for traffic","dataMode":"raw","description":"The response lists all the relevant security groups, tags, relevant instances, and count of unrelated instances for each Amazon VPC in the specified traffic path.
A relevant security group contains at least one instance including either the source or destination IP address.
An unrelated instance is included in the security group but not part of the specified traffic path.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is used only if MSSP mode is enabled. If MSSP mode is disabled context is ignored.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
body: Relevance metrics request

Usage Example
URLhttps://192.168.1.1/securetrack/api/traffic_policy
BODY{
    \"relevance_metrics\": {
        \"source_ips\": {
            \"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]
        },
        \"dest_ips\": {
            \"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]
        },
        \"targets\": {
            \"target\": [4, 10]
        }
    }
}


Response Messages:
200: Successful
403: Insufficient user permissions
404: Device not found
400: Invalid parameters","folder":"1-27","rawModeData":"{\n\t\"relevance_metrics\": {\n\t\t\"source_ips\": {\n\t\t\t\"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"dest_ips\": {\n\t\t\t\"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"targets\": {\n\t\t\t\"target\": [4, 10]\n\t\t}\n\t}\n}\n","url":"https://{{SecureTrack_IP}}/securetrack/api/traffic_policy/","collectionId":"1","id":"1-27-187","method":"POST"},{"headers":"Accept: application/json\n","name":"Get violation task status","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Get access requests violations task status.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task status was received.
403: Access is denied.
404: Access request violations task status was not found.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/status/{{taskId}}","collectionId":"1","id":"1-28-188","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/xml\n","name":"Get violations for an access request","dataMode":"raw","description":"Calculate the violations for the given access request.
Note: this API may take a while to complete.
See the asynchronous API /violations/access_request/task as an alternative.

Parameters:
body: AccessRequestListDTO
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request supports multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/sync?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
         </service>
     </access_request_service>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <service>
             <predefined>false</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <access_request_application xsi:type=\"access_request_application_identity\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>Gmail</name>
     </access_request_application>
     <access_request_application xsi:type=\"access_request_application_identity\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>CustomApp</name>
         <application_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
             <service>
                 <predefined>false</predefined>
                 <min_protocol>6</min_protocol>
                 <max_protocol>6</max_protocol>
                 <min_port>80</min_port>
                 <max_port>80</max_port>
                 <negate>false</negate>
             </service>
         </application_service>
     </access_request_application>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
200: Access request violations were calculated.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination).
403: Access is denied.
400: Custom applications must have their services configured.","folder":"1-28","rawModeData":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t \n\t \n\t \n\t\t \n\t\t\t false\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t \n\t\t Gmail\n\t \n\t \n\t\t CustomApp\n\t\t \n\t\t\t \n\t\t\t\t false\n\t\t\t\t 6\n\t\t\t\t 6\n\t\t\t\t 80\n\t\t\t\t 80\n\t\t\t\t false\n\t\t\t \n\t\t \n\t \n\t ACCEPT\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/sync","collectionId":"1","id":"1-28-189","method":"POST"},{"name":"Cancel violation task","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Delete an access request violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/task/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Access request violations task has been aborted successfully.
403: Access is denied.
404: Access request violations task was not found.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task/{{taskId}}","collectionId":"1","id":"1-28-190","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get violation task results","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"dataMode":"params","description":"Get result of access requests violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task results were received.
403: Access is denied.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet.","folder":"1-28","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/result/{{taskId}}","collectionId":"1","id":"1-28-191","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Start a task to calculate violations for an access request","dataMode":"raw","description":"Create a calculation task to find access requests violations.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
body [optional]
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request uses resources from multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/task?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
         </service>
     </access_request_service>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <service>
             <predefined>false</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <access_request_application xsi:type=\"access_request_application_identity\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>Gmail</name>
     </access_request_application>
     <access_request_application xsi:type=\"access_request_application_identity\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>CustomApp</name>
         <application_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
             <service>
                 <predefined>false</predefined>
                 <min_protocol>6</min_protocol>
                 <max_protocol>6</max_protocol>
                 <min_port>80</min_port>
                 <max_port>80</max_port>
                 <negate>false</negate>
             </service>
         </application_service>
     </access_request_application>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
202: Access request violations task was accepted.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination)
400: No network source were specified.
400: No network destination were specified.
403: Access is denied.
503: Access request violations task was rejected.
400: Custom applications must have their services configured.","folder":"1-28","rawModeData":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t \n\t \n\t \n\t\t \n\t\t\t false\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t \n\t\t Gmail\n\t \n\t \n\t\t CustomApp\n\t\t \n\t\t\t \n\t\t\t\t false\n\t\t\t\t 6\n\t\t\t\t 6\n\t\t\t\t 80\n\t\t\t\t 80\n\t\t\t\t false\n\t\t\t \n\t\t \n\t \n\t ACCEPT\n\t\n\n","url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task","collectionId":"1","id":"1-28-192","method":"POST"},{"headers":"Accept: application/json\n","name":"Get a specific alert","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Returns a specified alert.
If the alert_id does not exist, an error message is returned.

Parameters:
context: MSSP context [optional]
id: The alert Id

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/1

Response Messages:
403: Alert ID does not exist","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","collectionId":"1","id":"1-29-193","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Update an alert","dataMode":"raw","description":"Update an alert for unified security policies.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
id: The alert ID for updating [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts/1
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": [
                \"moshe\",
                \"admin\"
                ]
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
204: Alert ID: 'alertId' was updated successfully
404: Alert ID: 'alertId' does not exist
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
403: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain","folder":"1-29","rawModeData":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": [\n\t\t\t\t\"moshe\",\n\t\t\t\t\"admin\"\n\t\t\t\t]\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","collectionId":"1","id":"1-29-194","method":"PUT"},{"headers":"Accept: application/json\n","name":"Get alerts","data":[{"value":null,"type":"text","enabled":true,"key":"start"},{"value":null,"type":"text","enabled":true,"key":"count"}],"dataMode":"params","description":"Returns a list of all alerts. If an empty list is returned, it implies that there are no configured alerts for that context.
You must set start and count parameters to limit the number of returned alerts.
Start is zero based - to start from the second rule use start=1, to get rules 51-60 use start=50 and count=10.

Parameters:
context: MSSP context [optional]
start: Returns the results beginning with the specified result number
count: Returns the specified number of results

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts?start=10&count=25

Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","collectionId":"1","id":"1-29-195","method":"GET"},{"headers":"Content-Type: application/json\n","name":"Create an alert","dataMode":"raw","description":"Create an alert for unified security policies.
Returns location with the alert id to get the alert.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": [
                \"moshe\",
                \"admin\"
                ]
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
201: Security policy alert id :|'alertId'| , name : 'alertName'
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
403: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain","folder":"1-29","rawModeData":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": [\n\t\t\t\t\"moshe\",\n\t\t\t\t\"admin\"\n\t\t\t\t]\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","collectionId":"1","id":"1-29-196","method":"POST"},{"name":"Delete alerts by ids","data":[{"value":null,"type":"text","enabled":true,"key":"ids"}],"dataMode":"params","description":"Delete specified alerts by IDs
To delete multiple alert_ids, use a comma between each ID

Parameters:
context: Delete alerts in the specified domain ID. [optional]
ids: The alert Ids for deletion

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/87

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/86,87,88

Response Messages:
200:
403: Security Policy Alert Ids: :|'alert ids'| don't exist","folder":"1-29","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{ids}}","collectionId":"1","id":"1-29-197","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Delete cloud tag policy","description":"Delete the cloud tag policy specified by policyId.

If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Delete policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT {
        \"status\": \"OK\",
        \"policy_name\": \"myPolicyName\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-198","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get cloud tag policy","description":"This API retrieves the details of the cloud tag policy specified by policyId.

User must have admin permissions to the policy affiliated domain. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicyName\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryTagsRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-199","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Replace a cloud tag policy","dataMode":"raw","description":"Replace the cloud tag policy specified by policyID with the new policy attributes.

Use PATCH in order to partially modify a policy. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Replace policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}

","folder":"1-30","rawModeData":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-200","method":"PUT"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Modify a cloud tag policy","dataMode":"raw","description":"Partially modify a cloud tag policy by stating the modified attributes. Providing requirements replaces the entire list.

Specifying an empty requirement list is not permitted. Modify some attributes of the cloud tag policy specified by policyID with the attributes provided. If one or more \"requirement\" objects is provided, the exsiting \"requirement\" objects will be deleted and replaced with the new objetcs. Specifying an empty requirement list is not permitted.If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Rename policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found","folder":"1-30","rawModeData":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","collectionId":"1","id":"1-30-201","method":"PATCH"},{"headers":"Accept: application/json\n","name":"Get all cloud tag policies","description":"This API returns the details of all the tag policies.

Results are filtered according to user domain permissions and request context. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicy1\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                },
                {
                        \"policy_id\": \"tp-102\",
                        \"policy_name\": \"myPolicy2\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","collectionId":"1","id":"1-30-202","method":"GET"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Create a cloud tag policy","dataMode":"raw","description":"Create a new cloud tag policy. The policyName field specified in the TagPolicyDTO must be unique. Define the requirements enforced by the cloud tag policy in the requirements field of the TagPolicyDTO. The supported value for the \"requirement_type\" field are \"mandatory_tags\" and \"valid_values\"If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Create policy for the specified domain ID [optional]
body: cloud tag policy DTO [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
BODY {
    \"policy_name\": \"Production-VPC-Tag-Policy\",
    \"policy_description\": \"Instances tags in production\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_financial_tags\",
            \"requirement_severity\": \"HIGH\",
            \"tags\": [
                \"Owner\",
                \"Budget\"
            ]
        },
        {
            \"requirement_type\": \"valid_values\",
            \"requirement_name\": \"budget_valid_values\",
            \"requirement_severity\": \"CRITICAL\",
            \"tag\": \"Budget\",
            \"values\": [
                \"Corporate\",
                \"Dev\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
409: Policy name already exists","folder":"1-30","rawModeData":" {\n\t\"policy_name\": \"Production-VPC-Tag-Policy\",\n\t\"policy_description\": \"Instances tags in production\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_financial_tags\",\n\t\t\t\"requirement_severity\": \"HIGH\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Budget\"\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"requirement_type\": \"valid_values\",\n\t\t\t\"requirement_name\": \"budget_valid_values\",\n\t\t\t\"requirement_severity\": \"CRITICAL\",\n\t\t\t\"tag\": \"Budget\",\n\t\t\t\"values\": [\n\t\t\t\t\"Corporate\",\n\t\t\t\t\"Dev\"\n\t\t\t]\n\t\t}\n\t]\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","collectionId":"1","id":"1-30-203","method":"POST"},{"headers":"Accept: application/json\nContent-Type: application/json\n","name":"Check if tags are compliant with cloud tag policies","data":[{"value":null,"type":"text","enabled":true,"key":"policy_external_id"}],"dataMode":"raw","description":"Check if the tags of a cloud resource are compliant with the specified cloud tag policy. Specify the tag policy to validate in the TagPolicyViolationsCheckRequestDTO. The tags of a cloud resource are specified as a json object with the attribute 'tags' at the root level. 'tags' attributes can be a list of tag names or a map including both the tag name and value. If no tags are specified or if the tag is specified incorrectly, The compliance check will treat the resource as if it has no tags. If no cloud tag policy violations are found the API returns an empty violations list.

Parameters:
context: Returns results for the specified domain ID [optional]
policy_external_id: Tag policy external identifier
body: Tag policy violation check request

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/violation_check?policy_external_id=policyId
BODY {
    \"type\": \"vm\",
    \"name\": \"CRM-FE\",
    \"os\": \"ubuntu14.4\",
    \"image\": \"AMI-12345\",
    \"tags\": {
        \"Role\": \"webserver\",
        \"Budget\": \"corporate\",
        \"Owner\": \"Steve.Smith\"
    }
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found","folder":"1-30","rawModeData":" {\n\t\"type\": \"vm\",\n\t\"name\": \"CRM-FE\",\n\t\"os\": \"ubuntu14.4\",\n\t\"image\": \"AMI-12345\",\n\t\"tags\": {\n\t\t\"Role\": \"webserver\",\n\t\t\"Budget\": \"corporate\",\n\t\t\"Owner\": \"Steve.Smith\"\n\t}\n}","url":"https://{{SecureTrack_IP}}/securetrack/api/violation_check/","collectionId":"1","id":"1-30-204","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all cloud tag policy violations for a VPC","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"severity"}],"dataMode":"params","description":"Retrieve all cloud tag policy violations for the specified VPC and severity level.

Parameters:
context: Global MSSP context. [optional]
deviceId: The device ID for which to get violations
severity: Return only violations of this severity
resourceId: The id of the VM instance [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses \"count=100\". [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tag_violations?deviceId=123&severity=CRITICAL
OUTPUT<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<tag_policy_device_violations>
    <violating_resources_count>2</violating_resources_count>
    <device_name>Amazon Test VPC </device_name>
    <severity>critical</severity>
    <violating_resources>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Name' value 'email server' is not valid. Valid values are [R&D, HR]</violation_message>
                    <policy_id>tp-100</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>validValue_constraint2</requirement_name>
                    <requirement_severity>high</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"valid_values\">
                        <tag>Name</tag>
                        <valid_values>
                            <valid_value>R&D</valid_value>
                            <valid_value>HR</valid_value>
                        </valid_values>
                        <invalid_value>email server</invalid_value>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-abc12345</resource_id>
            <resource_name>email server</resource_name>
        </violating_resource>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Application' is missing</violation_message>
                    <policy_id>tp-105</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>mandatory_constraint1</requirement_name>
                    <requirement_severity>critical</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"mandatory_tags\">
                        <missing_tag>Application</missing_tag>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-12345678</resource_id>
            <resource_name>Violations tests server</resource_name>
        </violating_resource>
    </violating_resources>
</tag_policy_device_violations>


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: A device with the specified ID was not found","folder":"1-30","url":"https://{{SecureTrack_IP}}/securetrack/api/tag_violations/","collectionId":"1","id":"1-30-205","method":"GET"},{"headers":"Accept: application/json\n","name":"Delete an exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Delete the specific unified security policy exceptions

Parameters:
exceptionId: The ID of the exception to delete.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
404: The security policy with the specified ID does not exist
403: Not permitted to access this context.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","collectionId":"1","id":"1-31-206","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get a specific exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Gets a specific exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
exceptionId: The ID of the exception to get.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
403: Not permitted to access this context.
404: A security policy exception with the specified ID was not found.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","collectionId":"1","id":"1-31-207","method":"GET"},{"headers":"Accept: application/json\n","name":"Get matching rules task status","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task status was received.
403: Not permitted to Security policy exceptions.
404: Matching rules task status was not found.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/status/{{taskId}}","collectionId":"1","id":"1-31-208","method":"GET"},{"name":"Start a task to calculate matching rules for an exception","data":[{"value":null,"type":"text","enabled":true,"key":"exceptionId"}],"dataMode":"params","description":"Create a calculation task to find matching rules.
The results will be on the relevant devices for each access.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
exceptionId: Security policy Exception ID on which to run the API.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/1/matching_rules/start

Response Messages:
403: Not permitted to Security policy exceptions.
404: A security policy exception with the specified ID was not found.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}/matching_rules/start","collectionId":"1","id":"1-31-209","method":"POST"},{"headers":"Content-Type: application/xml\n","name":"Create an exception","dataMode":"raw","description":"Create an exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/exceptions
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<security_policy_exception>
    <approved_by>admin</approved_by>
    <created_by>st_user</created_by>
    <creation_date>2015-01-01</creation_date>
    <description>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</description>
    <exempted_traffic_list>
        <exempted_traffic>
            <comment>Creating USP exception for ticket 123</comment>
            <dest_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.2</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </dest_network_collection>
            <security_requirements>
                <zone_to_zone_security_requirement>
                    <from_zone>LAN</from_zone>
                    <policy_name>corporate security policy</policy_name>
                    <to_zone>DMZ</to_zone>
                </zone_to_zone_security_requirement>
            </security_requirements>
            <service_collection>
                <service_items>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"custom\">
                        <port>4321</port>
                        <protocol>tcp</protocol>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"device_service\">
                        <mgmt_id>1</mgmt_id>
                        <service_uid>{5aa1c104-bd4d-4635-a281-b3a5442639ba}</service_uid>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"predefined\">
                        <predefined_service_name>http</predefined_service_name>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"range_service\">
                        <minProtocol>10</minProtocol>
                        <maxProtocol>20</maxProtocol>
                    </service_item>
                </service_items>
            </service_collection>
            <source_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.1</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </source_network_collection>
        </exempted_traffic>
    </exempted_traffic_list>
    <expiration_date>2025-01-01</expiration_date>
    <name>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</name>
    <requested_by>admin</requested_by>
    <ticket_id>123</ticket_id>
</security_policy_exception>


Response Messages:
400: The specified network item is not valid.
400: The specified zone name does not exist.
400: The security policy with the specified name does not exist
400: The security policy 'created by' user is not valid.
400: The security policy with the specified name already exists.
400: Network Object of device id =|device_id| , with uid = |domain_id| does not exist
400: The from zone name = |from_zone_name| does not exist
400: The to zone name = |to_zone_name| does not exist
400: The security policy name = |security_policy_name| does not exist
400: The security policy 'created by' user = |user_name| is not valid
400: The security policy exception cannot be created
403: Not permitted to access this context.
401: The user does not have permission to this action.","folder":"1-31","rawModeData":"\n\n\tadmin\n\tst_user\n\t2015-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\t\n\t\t\n\t\t\tCreating USP exception for ticket 123\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.2\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tLAN\n\t\t\t\t\tcorporate security policy\n\t\t\t\t\tDMZ\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4321\n\t\t\t\t\t\ttcp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t1\n\t\t\t\t\t\t{5aa1c104-bd4d-4635-a281-b3a5442639ba}\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\thttp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t10\n\t\t\t\t\t\t20\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.1\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t2025-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\tadmin\n\t123\n","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","collectionId":"1","id":"1-31-210","method":"POST"},{"headers":"Accept: application/json\n","name":"Get all exceptions","description":"Gets a list of all unified security policy exceptions.

Parameters:
context: Global MSSP context [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions?context=1&start=0&count=1

Response Messages:
403: Not permitted to access this context.","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","collectionId":"1","id":"1-31-211","method":"GET"},{"headers":"Accept: application/json\n","name":"Get matching rules task results","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task results were received.
403: Not permitted to Security policy exceptions.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/result/{{taskId}}","collectionId":"1","id":"1-31-212","method":"GET"},{"name":"Cancel Matching rules task","data":[{"value":null,"type":"text","enabled":true,"key":"taskId"}],"description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Matching rules task has been aborted successfully.
403: Not permitted to Security policy exceptions.
404: Matching rules task was not found.","dataMode":"params","folder":"1-31","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/{{taskId}}","collectionId":"1","id":"1-31-213","method":"DELETE"},{"name":"Delete unified security policy","data":[{"value":null,"type":"text","enabled":true,"key":"id"}],"dataMode":"params","description":"Delete a Security Policy Matrix

Parameters:
context: Returns results for the specified domain ID. [optional]
id: The unique identifier of the security policy matrix to delete
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1
","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}","collectionId":"1","id":"1-32-214","method":"DELETE"},{"headers":"Accept: application/json\n","name":"Get global unified security policies","description":"Fetches the global security zone matrices defined under Unified Security Policy.

Parameters:
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/global

Response Messages:
403: User not permitted to access global security policies","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/global","collectionId":"1","id":"1-32-215","method":"GET"},{"headers":"Accept: application/json\n","name":"Get zone to interface mapping","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"params","description":"Fetches mapping of SecureTrack zones to device interfaces

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID

Usage Example
https://127.0.0.1/securetrack/api/security_policies/9/mapping

Response Messages:
200: Successful
400: This device does not support zone to interface mapping
403: User not permitted to access the specified domain
404: Device ID: <deviceId> does not exist
404: Access denied for device with ID: <deviceId>","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/mapping","collectionId":"1","id":"1-32-216","method":"GET"},{"headers":"Content-Type: application/xml\n","name":"Set manual device mapping","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"dataMode":"raw","description":"Add or remove a zone on a device interface

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID
body: InterfacesManualMappingsDTO

Usage Example
URLhttps://127.0.0.1/securetrack/api/security_policies/10/manual_mapping
BODY<interfaces_manual_mappings>
<interface_manual_mapping>
<interface_name>Vlan_30</interface_name>
<zones_user_actions>
<zone_user_action>
<zoneId>10</zoneId>
<action>add</action>
</zone_user_action>
</zones_user_actions>
</interface_manual_mapping>
</interfaces_manual_mappings>


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Not found error
404: User action not valid (only add/remove)
404: No interface with name for device with id
404: No zone with id
404: No revision for device with id
404: Device ID: <deviceId> does not exist
404: Access denied for device with ID: <deviceId>
404: InterfacesManualMappingsDTO is empty
404: Error on updating security_policy_interface_zone_mapping_user_action table for device with ID","folder":"1-32","rawModeData":"\n \n Vlan_30\n \n \n 10\n add\n \n \n \n\n ","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/manual_mapping","collectionId":"1","id":"1-32-217","method":"POST"},{"collectionId":"1","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}/export","name":"Get unified security policy as CSV","method":"GET","id":"1-32-218","description":"Exports a Security Policy in CSV format

Parameters:
context: Returns results for the specified domain ID. [optional]
id: ID of the security policy. [optional]
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1/export

Response Messages:
403: User not permitted to access the specified domain
404: Security Policy does not exist","folder":"1-32"},{"headers":"Accept: application/json\n","name":"Get unified security policies","description":"Fetches the security zone matrices defined under Unified Security Policy.

Parameters:
context: Returns results for the specified domain ID. [optional]
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies

Response Messages:
403: User not permitted to access the specified domain","folder":"1-32","url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/","collectionId":"1","id":"1-32-219","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the violating rules for the specified device.","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"},{"value":null,"type":"text","enabled":true,"key":"severity"},{"value":null,"type":"text","enabled":true,"key":"type"}],"dataMode":"params","description":"policyName is supported for management devices running in Advanced management mode.

Parameters:
deviceId: The device ID for which to get violations
policyName: Return only violations that match this policy [optional]
severity: Return only violations of this severity
type: Return only violations of this type
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/device_violations?policyName=policy_name&type=SECURITY_POLICY&severity=MEDIUM

Response Messages:
200: The violations were successfully retrieved
400: The specified value for the violation severity is invalid
400: The specified value for the violation type is invalid
400: You cannot specify a policyName because the device is not running in Advanced management mode
404: A device with the specified ID was not found
404: A policy with the specified policyName was not found for this device","folder":"1-33","url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/device_violations","collectionId":"1","id":"1-33-220","method":"GET"},{"headers":"Accept: application/json\n","name":"Get the amount of violating rules for the specified device.","data":[{"value":null,"type":"text","enabled":true,"key":"deviceId"}],"description":"Parameters:
deviceId: The device ID for which to get violations.
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/count

Response Messages:
200: The violation count was successfully retrieved
404: Device with id: <deviceId> doesn't exist","dataMode":"params","folder":"1-33","url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/count","collectionId":"1","id":"1-33-221","method":"GET"}],"order":[],"name":"Tufin Tufin SecureTrack R21-1-RC1","id":"1","description":"Tufin Orchestration Suite - Tufin SecureTrack APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securetrack/apidoc"} \ No newline at end of file diff --git a/Postman Format v1/R21-1 postman collection/tufin.postman_environment b/Postman Format v1/R21-1 postman collection/tufin.postman_environment new file mode 100644 index 0000000..c031d2b --- /dev/null +++ b/Postman Format v1/R21-1 postman collection/tufin.postman_environment @@ -0,0 +1 @@ +{"name":"Tufin environment","values":[{"type":"text","key":"SecureApp_IP"},{"type":"text","key":"SecureChange_IP"},{"type":"text","key":"SecureTrack_IP"},{"type":"text","key":"applicationId"},{"type":"text","key":"applicationInterfaceId"},{"type":"text","key":"application_id"},{"type":"text","key":"application_pack_id"},{"type":"text","key":"assigneeId"},{"type":"text","key":"child_id"},{"type":"text","key":"child_ids"},{"type":"text","key":"cleanup_id"},{"type":"text","key":"cloudId"},{"type":"text","key":"cloud_id"},{"type":"text","key":"connectionId"},{"type":"text","key":"connectionInterfaceId"},{"type":"text","key":"connectionToApplicationId"},{"type":"text","key":"connection_id"},{"type":"text","key":"connection_to_application_pack_id"},{"type":"text","key":"customer_id"},{"type":"text","key":"deviceId"},{"type":"text","key":"device_id"},{"type":"text","key":"domainId"},{"type":"text","key":"exceptionId"},{"type":"text","key":"fieldId"},{"type":"text","key":"id"},{"type":"text","key":"ids"},{"type":"text","key":"inId"},{"type":"text","key":"instructionId"},{"type":"text","key":"interfaceCustomerId"},{"type":"text","key":"layer2DataId"},{"type":"text","key":"managementId"},{"type":"text","key":"mgmtId"},{"type":"text","key":"parent_id"},{"type":"text","key":"parent_ids"},{"type":"text","key":"policyId"},{"type":"text","key":"requestId"},{"type":"text","key":"revId"},{"type":"text","key":"revision_id"},{"type":"text","key":"risk_id"},{"type":"text","key":"routeId"},{"type":"text","key":"ruleId"},{"type":"text","key":"rule_id"},{"type":"text","key":"rule_uid"},{"type":"text","key":"serverId"},{"type":"text","key":"serviceId"},{"type":"text","key":"sourceApplicationId"},{"type":"text","key":"stepId"},{"type":"text","key":"tag_id"},{"type":"text","key":"targetApplicationId"},{"type":"text","key":"taskId"},{"type":"text","key":"task_id"},{"type":"text","key":"task_uid"},{"type":"text","key":"toStepId"},{"type":"text","key":"uid"},{"type":"text","key":"userId"},{"type":"text","key":"vpnId"},{"type":"text","key":"zone_id"},{"type":"text","key":"zone_ids"}]} \ No newline at end of file diff --git a/Postman Format v2/R19-3 postman collection/securechangeworkflow_R19-3-GA-v2.json b/Postman Format v2/R19-3 postman collection/securechangeworkflow_R19-3-GA-v2.json new file mode 100644 index 0000000..5d24c19 --- /dev/null +++ b/Postman Format v2/R19-3 postman collection/securechangeworkflow_R19-3-GA-v2.json @@ -0,0 +1 @@ +{"info":{"_postman_id":"2","name":"Tufin Tufin SecureChange/SecureApp R19-3-GA","description":"Tufin Orchestration Suite - Tufin SecureChange/SecureApp APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securechangeworkflow/apidoc","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json"},"item":[{"name":"Access Portal","item":[{"name":"Retrieve an existing application access request by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"requestId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","description":"Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Access request with id ID was not found in application with id ID"},"response":[]},{"name":"Update an application access request","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tAPPROVE\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1
BODY<application_access_request>
    <action>APPROVE</action>
</application_access_request>


Response Messages:
200: Application access request was updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve existing application access requests","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Update application access requests","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tAPPROVE\n\t\n\t\n\t\t2\n\t\tREJECT\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
body: application access requests

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_requests>
    <application_access_request>
        <id>1</id>
        <action>APPROVE</action>
    </application_access_request>
    <application_access_request>
        <id>2</id>
        <action>REJECT</action>
    </application_access_request>
</application_access_requests>


Response Messages:
200: Application access requests were updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Create application access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t1\n\t1.1.1.1\n\tRequest to join the WebServers server group\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Parameters:
applicationId: The unique identifier of the application
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_request>
    <server_group_id>1</server_group_id>
    <server_ip>1.1.1.1</server_ip>
    <comment>Request to join the WebServers server group</comment>
</application_access_request>


Response Messages:
201: Application access request was submitted.
400: The application was already deleted.
400: Server id cannot be empty.
400: Hostname or IP cannot be empty.
400: The provided server does not exist in application.
400: The provided server is not allowed to access.
400: Request already created
400: Requester cannot be null
400: Group cannot be empty
400: Invalid ip
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Connections","item":[{"name":"Retrieve existing connections, with extended resources information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_extended","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]
start: Return results starting only from the specified index; 0-based index; default value = 0 [optional]
count: Return the specified number of results. Returns all results if no value specified [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name&start=50&count=100

Response Messages:
400: Start value cannot be a negative number.
400: Count value must be greater than 0.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied.
404: There is no application with the specified ID.
404: There are no connections with the name NAME."},"response":[]},{"name":"Create a ticket to repair a connection","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tRepair connection 2\n\tu1\n\tNormal\n\t\n\t\tWorkflow with topology\n\t\n\t\n\t\t\n\t\t\tOpen request\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBusiness Justification\n\t\t\t\t\t\t\tI need access to ftp \n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tProject Number\n\t\t\t\t\t\t\tCR124560\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tHyperlink\n\t\t\t\t\t\t\thttp://192.168.1.1/ticket\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tChange Window\n\t\t\t\t\t\t\tMonday\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tmanager email\n\t\t\t\t\t\t\tmanager@tufin.com\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connections/{{connection_id}}/repair","description":"Parameters:
application_id: The application ID
connection_id: The connection ID
body: Ticket

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/2/repair
BODY<ticket>
    <subject>Repair connection 2</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <workflow>
        <name>Workflow with topology</name>
    </workflow>
    <steps>
        <step>
            <name>Open request</name>
            <tasks>
                <task>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                            <name>Business Justification</name>
                            <text>I need access to ftp </text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                            <name>Project Number</name>
                            <text>CR124560</text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                            <name>Hyperlink</name>
                            <url>http://192.168.1.1/ticket</url>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                            <name>Change Window</name>
                            <selection>Monday</selection>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                            <name>manager email</name>
                            <text>manager@tufin.com</text>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Response Messages:
201: Ticket was created.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set.
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: Expiration field is required.
400: Submit ticket enabled only with the first step.
400: First step can be only with one task.
400: The specified workflow does not contain an access request field in the first step.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
401: Logged in user: NAME do not have permission to perform on behalf actions.
401: You are not a participant in the first step of this workflow.
401: Access is denied.
401: To create a ticket you must purchase a valid SecureChange license.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: Cannot create a ticket to repair this connection because the connection status is not disconnected.
403: Cannot create a ticket to repair this connection because the connection was edited but a ticket has not been created yet.
403: Cannot create a ticket to repair this connection because there are other open tickets for an application that includes this connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections?name=Connection Name

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no connections with the name NAME."},"response":[]},{"name":"Create connections","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t Connection B\n\t \n\t \n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
body: The list of the connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <name>Connection B</name>
     </connection>
     <connection>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were created.
201: Connection was created.
400: There are no items to add.
400: You cannot add to application NAME because it was decommissioned.
400: Connection name already exists.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Update connections","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 1\n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t 2\n\t\t Connection B\n\t \n\t \n\t\t 3\n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
body: List of connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <id>1</id>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <id>2</id>
         <name>Connection B</name>
     </connection>
     <connection>
         <id>3</id>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application that contains the server ID
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Retrieve an existing connection by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Update a connection","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":" \n\t Connection A\n\t Connection A comment\n\t \n\t\t \n\t\t\t 2\n\t\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n "},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection
body: Connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections/1
BODY <connection>
     <name>Connection A</name>
     <comment>Connection A comment</comment>
     <sources>
         <source>
             <id>2</id>
         </source>
         <source>
             <id>3</id>
         </source>
     </sources>
     <services>
         <service>
             <id>1</id>
         </service>
     </services>
     <destinations>
         <destination>
             <id>1</id>
         </destination>
     </destinations>
</connection>


Response Messages:
200: Connection was modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application that contains the server ID
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Delete connection","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
200: Connection was deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]}]},{"name":"Application Identities","item":[{"name":"Fetches application identities","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/application_identities","description":"Fetches the list of pre-defined application identities (like facebook) that can be used in a connection.

Parameters:
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities?name=facebook

Response Messages:
404: There are no application identities with the name NAME.
401: Access is denied."},"response":[]}]},{"name":"Application Interfaces","item":[{"name":"Retrieve existing interface connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
name: The name of the interface connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections?name=Connection 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no connection interfaces with the name NAME.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Create interface connections","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tConnection 1\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\t\n\t\t\t\tFacebook\n\t\t\t\n\t\t\n\t\tNew connection\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
body: The interface connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections
BODY<interface_connections>
    <interface_connection>
        <name>Connection 1</name>
        <sources>
            <source>
                <id>3</id>
            </source>
        </sources>
        <services>
            <service>
                <id>3</id>
            </service>
            <service>
                <id>Facebook</id>
            </service>
        </services>
        <comment>New connection</comment>
    </interface_connection>
</interface_connections>


Response Messages:
200: Interface connections were created.
201: Interface connection was created.
400: There are no items to add.
400: Cannot create interface connection without a name.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
401: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve an existing interface connection by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"},{"value":null,"type":"text","key":"connectionInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Delete interface connection","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"},{"value":null,"type":"text","key":"connectionInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
200: Interface connection was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Update an interface connection","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\t\n\t\t\n\t\t\t19\n\t\t\n\t\n\t\n\t\t\n\t\t\t9\n\t\t\n\t\n\tUpdated connection\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection
body: The interface connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1
BODY<interface_connection>
    <name>Updated name</name>
    <sources>
        <source>
            <id>19</id>
        </source>
    </sources>
    <services>
        <service>
            <id>9</id>
        </service>
    </services>
    <comment>Updated connection</comment>
</interface_connection>


Response Messages:
200: Interface connection was modified.
400: Interface connection name cannot be empty.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
401: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Update a connection to application","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated connection to application\n\t\n\t\t\n\t\t\t4\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1
BODY<connection_to_application>
    <name>Updated name</name>
    <comment>Updated connection to application</comment>
    <servers>
        <server>
            <id>4</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
200: Connection to application was modified.
400: Name cannot be empty.
400: Name already exists.
400: Reference to source/destination with ID is invalid.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve an existing connection to application by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionToApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Delete connection to application","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionToApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
200: Connection to application was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Create application interface","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tInterface to Application 1\n\tNew application interface\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","description":"Parameters:
applicationId: The unique identifier of the application
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces
BODY<application_interface>
    <name>Interface to Application 1</name>
    <comment>New application interface</comment>
</application_interface>


Response Messages:
201: Application interface was created.
400: You cannot add to application NAME because it was decommissioned.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing application interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","description":"To improve response time, set 'calculateIsPublished = false' to avoid calculating 'is_published'.

Parameters:
applicationId: The unique identifier of the application
name: The name of the application interface [optional]
calculateIsPublished: Should calculate is_published value [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces?name=Interface to Application 1

Response Messages:
400: There is no application with the specified ID.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no application interfaces with the name NAME."},"response":[]},{"name":"Delete application interface","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
200: Application interface was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Update an application interface","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tupdated name\n\tUpdated application interface\n\ttrue\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Update the application interface properties. If is_published is set to true, the application interface is published for use by other users.

Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of The application interface
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1
BODY<application_interface>
    <name>updated name</name>
    <comment>Updated application interface</comment>
    <is_published>true</is_published>
</application_interface>


Response Messages:
200: Application interface was modified.
400: Application interface is not complete for publish.
400: Name cannot be empty.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve an existing application interface by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing connections to application","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection to application [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications?name=Connection to Application 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Create connection to application","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tConnection to Application 1\n\tNew connection to application\n\t1\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","description":"Create a connection from this application to an application interface.

Parameters:
applicationId: The unique identifier of the application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications
BODY<connection_to_application>
    <name>Connection to Application 1</name>
    <comment>New connection to application</comment>
    <application_interface_id>1</application_interface_id>
    <servers>
        <server>
            <id>3</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
201: Connection to application was created.
400: You cannot add to application NAME because it was decommissioned.
400: The selected interface cannot be used more than once in the application.
400: Name cannot be empty.
400: Cannot create from local interface.
400: ApplicationInterface didn't got published.
400: Name already exists.
400: Cannot create connection to application without servers, there should be at least one server.
400: Reference to source/destination with ID is invalid.
400: You can use only interface from the same customer.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found."},"response":[]}]},{"name":"Application Migration","item":[{"name":"Update connection to application mappings for source and target applications","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","description":"Use id=-1 for target_application_interface if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The interface instance mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping
BODY<connections_to_applications_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>1</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>4</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>2</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>-1</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>3</id>
        </source_connection_to_application>
    </connection_to_application_mapping>
</connections_to_applications_mapping>


Response Messages:
200: Connection to application mappings were modified.
400: Source interface instance cannot be empty.
400: Source interface instance object is not valid
400: Target application interface is not valid
400: Connection to application with ID: ID was not found.
400: Interface with ID: ID was not found.
400: Cannot remove mapping of instance with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map instance to interface with ID ID because the interface exists in target application.
400: Cannot map to duplicate application interfaces
400: Application interface didn't got published
400: Connection to application with id: ID must used by source application
400: You cannot map connection to application ID, because it is contained in a connection to application pack.
400: Application interface ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve connection to application mappings for source and target applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping

Response Messages:
400: Cannot get mappings between application to itself.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Copy application servers and connections to another application.","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}","description":"This API can be used to:
1. Create applications based on a blueprint (template).
2. Copy applications between environments (dev, test, prod).
3. Migrate applications between data-centers.

Before migrating make sure to map servers and connections to applications (if any exist).\nThis migration uses the configuration specified in the other API calls.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2

Response Messages:
200: Application was migrated.
400: Cannot migrate a decommissioned application.
400: Cannot migrate to a decommissioned application.
400: Cannot migrate an application to itself.
400: Cannot edit target DEVICE application.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
400: The source application has no connections to migrate.
409: You cannot migrate the application because not all servers are mapped.
409: You cannot migrate the application because not all connections to application are mapped.
409: You cannot migrate the application because one of the interfaces in the original application has been changed and has not been published."},"response":[]},{"name":"Update server mappings for source and target applications","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t6\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","description":"Use id=-1 for target_network_object if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The server mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping
BODY<servers_mapping>
    <server_mapping>
        <source_network_object>
            <id>3</id>
        </source_network_object>
        <target_network_object>
            <id>4</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>5</id>
        </source_network_object>
        <target_network_object>
            <id>-1</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>6</id>
        </source_network_object>
    </server_mapping>
</servers_mapping>


Response Messages:
200: Server mappings were modified.
400: Source network object cannot be empty.
400: Source network object is not valid
400: Target network object is not valid
400: Source and target network objects must be internal or external both.
400: Cannot use DEVICE application resources as external network objects.
400: Source network object with ID must be used by any connection.
400: Cannot remove mapping of network object with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map to ANY network object.
400: Cannot map Internet network object.
400: Cannot map to Internet network object.
400: Target network object ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found."},"response":[]},{"name":"Retrieve server mappings for source and target applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
search_servers_type: Search server type [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping?search_servers_type=EXTERNAL

Response Messages:
400: Search migrated servers type parameter must be either internal, external or both.
400: Cannot get mappings between application to itself.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application with ID
401: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Packs","item":[{"name":"Update an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated application pack\n\t\n\t\t4\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\n\ttrue\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Update the application pack properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1
BODY<application_pack>
    <name>Updated name</name>
    <comment>Updated application pack</comment>
    <owner>
        <id>4</id>
    </owner>
    <editors>
        <editor>
            <id>3</id>
        </editor>
    </editors>
    <viewers>
        <viewer>
            <id>5</id>
        </viewer>
    </viewers>
    <is_published>true</is_published>
</application_pack>


Response Messages:
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
401: Access is denied
401: You do not have permission to access application that contains the interface ID
401: You do not have permissions to edit this application pack.
401: You do not have permissions to change the owner of application pack ID.
401: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Delete application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
200: Application pack wes deleted.
401: You do not have permissions to delete this application pack.
400: There is no application pack with the specified ID.
400: Customer with ID doesn't own an application pack with ID.
400: Application Pack ID cannot be deleted. It is in use by applications IDs."},"response":[]},{"name":"Retrieve an existing application pack by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
401: Access is denied
401: You do not have permission to access application pack with ID
404: Application pack with ID was not found for customer with ID."},"response":[]},{"name":"Update application interfaces and tag mapping","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","description":"Add application interfaces to application pack, and map a tag to the application interface. If a tag is not specified for the interface, the tag will be set to “No Tag”.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: List of interface tag mapping to be added or modified

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces
BODY<application_interface_tags>
    <application_interface_tag>
        <application_interface>
            <id>1</id>
        </application_interface>
        <tag>
            <id>3</id>
        </tag>
    </application_interface_tag>
    <application_interface_tag>
        <application_interface>
            <id>2</id>
        </application_interface>
    </application_interface_tag>
</application_interface_tags>


Response Messages:
401: Access is denied
404: There are no application packs with the NAME in customer with ID.
401: You do not have permissions to edit this application pack.
401: You do not have permission to access application that contains the interface ID
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Application Interface can't be null.
400: Empty interface ID is not valid."},"response":[]},{"name":"Remove application interfaces from application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"application_interface_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
application_interface_id: IDs of application interfaces to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces?application_interface_id=1&application_interface_id=2

Response Messages:
200: Application Interface was deleted.
401: Access is denied
401: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Application interface ID was not found in application pack ID."},"response":[]},{"name":"List all application pack tags","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags

Response Messages:
401: Access is denied
404: There is no application pack with the ID."},"response":[]},{"name":"Modify tags of an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tTag 1\n\t\n\t\n\t\t2\t\n\t\tTag 2\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Tags to modify

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <id>1</id>
        <name>Tag 1</name>
    </tag>
    <tag>
        <id>2</id>    
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
401: Access is denied
401: You do not have permissions to edit this application pack.
404: Customer with ID was not found.
404: There is no application pack with the ID in customer with ID.
400: Tag with NAME already exists in application pack ID.
400: Updated tag ID can't be empty
400: Updated Tag ID doesn't exist on application pack ID."},"response":[]},{"name":"Create new Tag under an application pack ","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tTag 1\n\t\n\t\n\t\tTag 2\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
body: List of tags

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <name>Tag 1</name>
    </tag>
    <tag>
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
401: Access is denied
404: There is no application pack with the ID in customer with ID.
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Tag name must contain at least 2 and no more than 160 characters.
400: Tag with NAME already exists in application pack ID."},"response":[]},{"name":"Delete tags from application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"tag_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
tag_id: IDs of tags to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/21/tags?tag_id=1&tag_id=2

Response Messages:
200: Tags were deleted.
401: Access is denied
401: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Tag ID was not found in application pack ID.
404: Tag ID is in use so can't be deleted.
404: Removed tag ID can't be empty."},"response":[]},{"name":"Delete a connection to application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"connection_to_application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
400: Connection to application pack with ID was not found for application with ID.
400: The connection to application pack was already deleted.
401: Access is denied.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed."},"response":[]},{"name":"Retrieve an existing connection to application pack by ID.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"connection_to_application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
404: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID."},"response":[]},{"name":"Update an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated Connection to application pack\n\t\n\t\t\n\t\t\t\n\t\t\t\t1\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTag 1\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to update
body: Connection to application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1
BODY<connection_to_application_pack>
    <name>Updated name</name>
    <comment>Updated Connection to application pack</comment>
    <tags_servers>
        <tag_servers>
            <tag>
                <id>1</id>
            </tag>
            <servers>
                <server>
                    <id>3</id>
                </server>
            </servers>
        </tag_servers>
        <tag_servers>
            <tag>
                <name>Tag 1</name>
            </tag>
            <servers>
            </servers>
        </tag_servers>
    </tags_servers>
</connection_to_application_pack>


Response Messages:
400: There is no application with the specified ID.
400: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is required.
400: Tag with Name was not found.
400: Server ID cannot be empty.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
401: Access is denied.
401: You do not have permission to access application that contains the server ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed."},"response":[]},{"name":"Update application packs","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tUpdated name\n\t\tUpdated application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\tfalse\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Update the application packs properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <id>1</id>
        <name>Updated name</name>
        <comment>Updated application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <is_published>false</is_published>
    </application_pack>
</application_packs>


Response Messages:
400: There are no application packs to edit.
400: Application pack ID cannot be empty.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
401: Access is denied
401: You do not have permission to access application that contains the interface ID
401: You do not have permissions to edit this application pack.
401: You do not have permissions to change the owner of application pack ID.
401: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"List all application packs","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Parameters:
customer_id: The unique identifier of customer
name: The name of the application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs?name=Application pack 1

Response Messages:
401: Access is denied
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Create new application packs","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tApplication pack 1\n\t\tNew application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t5\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <name>Application pack 1</name>
        <comment>New application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <viewers>
            <viewer>
                <id>5</id>
            </viewer>
        </viewers>
    </application_pack>
</application_packs>


Response Messages:
401: Access is denied
401: You do not have permission to access application that contains the interface ID
400: There are no application packs to add.
400: Application pack can be created only in meshed domain mode.
404: Customer with ID was not found.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: The owner NAME does not have permission to access applications.
400: Application pack was already saved.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned."},"response":[]},{"name":"Get tag by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"tag_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags/{{tag_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
tag_id: The unique identifier of a tag

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags/1

Response Messages:
401: Access is denied
404: There is no tag with ID.
404: Customer with ID doesn't own a tag with ID.
404: Application Pack with ID doesn't own a tag with ID."},"response":[]},{"name":"Create new connection to application packs","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tConnection to application pack 1\n\t\tNew Connection to application pack\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t3\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tTag 1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","description":"Parameters:
application_id: The unique identifier of application
body: List of connection to application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs
BODY<connection_to_application_packs>
    <connection_to_application_pack>
        <name>Connection to application pack 1</name>
        <comment>New Connection to application pack</comment>
        <application_pack>
            <id>1</id>
        </application_pack>
        <tags_servers>
            <tag_servers>
                <tag>
                    <id>1</id>
                </tag>
                <servers>
                    <server>
                        <id>3</id>
                    </server>
                </servers>
            </tag_servers>
            <tag_servers>
                <tag>
                    <name>Tag 1</name>
                </tag>
                <servers>
                    <server>
                        <id>4</id>
                    </server>
                </servers>
            </tag_servers>
        </tags_servers>
    </connection_to_application_pack>
</connection_to_application_packs>


Response Messages:
400: There are no connection to application packs to add.
400: Application pack ID cannot be empty.
400: Application with ID was not found.
400: There is no application with the specified ID.
400: There is no application pack with the specified ID.
400: Application pack with ID was decommissioned.
400: Application pack with ID was not published.
400: Connection to application pack cannot be created in the domain of the application pack.
400: The application pack cannot be used more than once in the application.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is missing.
400: Tag ID does not exist.
400: Server ID does not exist.
400: Tag ID is not in use in connection to application pack ID, so it cannot be updated.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
401: Access is denied.
401: You do not have permission to access application that contains the server ID
401: You do not have permission to access application pack with ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Tag with NAME was not found."},"response":[]},{"name":"Retrieve a list of all connection to application pack by application ID.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","description":"Parameters:
application_id: The unique identifier of application
name: The name of the connection to application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs?name=Connection to application pack 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
404: There are no connection to application pack with the NAME in application with ID."},"response":[]}]},{"name":"Application Pending Changes","item":[{"name":"Retrieve existing access rules","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/access_requests","description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/87/access_requests

Response Messages:
400: The application was already deleted.
400: There are no changed connections that are ready for creating a ticket.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
400: Application with ID ID was not found."},"response":[]}]},{"name":"Application Servers (across all applications)","item":[{"name":"Fetches servers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects","description":"Parameters:
name: The name of the servers [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?name=server1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: Server with name NAME was not found.
400: Parameter typeOnDevice is not valid.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no servers with the name NAME
404: There are no servers with the typeOnDevice TYPEONDEVICE "},"response":[]},{"name":"Fetches server by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects/{{serverId}}","description":"Parameters:
serverId: The ID of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects/87

Response Messages:
400: Server with id ID was not found.
400: Application with ID ID was not found.
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance."},"response":[]}]},{"name":"Application Servers (by application)","item":[{"name":"Retrieve existing servers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the server [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?name=ServerName

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: The application was already deleted.
400: Parameter typeOnDevice is not valid.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no servers with the name NAME.
404: There are no servers with the typeOnDevice TYPEONDEVICE "},"response":[]},{"name":"Update servers","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 1\n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t\t host\n\t \n\t \n\t\t 2\n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n\t\t 2.2.2.22\n\t\t range\n\t \n\t \n\t\t 3\n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t\t subnet\n\t \n\t \n\t\t 4\n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t\t virtual-server\n\t \n\t \n\t\t 5\n\t\t vm1\n\t\t vm instance comment\n\t\t vm_instance\n\t \n\t \n\t\t 6\n\t\t group comment\n\t\t group1\n\t\t true\n\t\t group\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <id>1</id>
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
         <type>host</type>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <id>2</id>
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
         <type>range</type>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <id>3</id>
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
         <type>subnet</type>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <id>4</id>
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
         <type>virtual-server</type>
     </network_object>
     <network_object xsi:type=\"vmInstanceDTO\">
         <id>5</id>
         <name>vm1</name>
         <comment>vm instance comment</comment>
         <type>vm_instance</type>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <id>6</id>
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <type>group</type>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: The application was already deleted.
400: You cannot update a predefined object.
400: Invalid type in server with id ID.
400: Invalid member with id ID
400: Invalid ID
400: Invalid uid
400: Invalid network object type NAME
400: Cannot update user
400: Network object is new
400: Name cannot be empty
400: Server is in discovery
400: Ip is missing
400: Mask is missing
400: Invalid ip
400: Invalid mask
400: Max ip is missing
400: Min ip is missing
400: Invalid min ip
400: Invalid max ip
400: Min ip cannot be larger than max ip
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Server with NAME already exists.
400: Invalid device ID
400: The type_on_device value is not valid
400: An EDL group can not be modified to a regular group
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: DTO type used for server id ID is incompatible with this vendor.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Virtual server was not found in ST.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
503: Not connected to SecureTrack."},"response":[]},{"name":"Create servers","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t \n\t \n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n \t\t 2.2.2.22\n\t \n\t \n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t \n\t \n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t \n\t \n\t\t group comment\n\t\t group1\n\t\t true\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: There are no items to add.
400: The application was already deleted.
400: You cannot add to application NAME because it was decommissioned.
400: Network object was already saved
400: Name cannot be empty
400: Server with NAME already exists.
400: IP is missing
400: Mask is missing
400: Invalid IP
400: Invalid mask
400: Max IP is missing
400: Min IP is missing
400: Invalid min IP
400: Invalid max IP
400: Min IP cannot be larger than max IP
400: Invalid network object type CLASS_NAME.
400: Invalid uid
400: Invalid device ID
400: Virtual server does not exist in SecureTrack
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Cannot save the server because the virtual server does not exist.
400: Cannot save the server because an error occurred
400: The type_on_device value is not valid
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
404: Virtual server was not found in SecureTrack.
503: Not connected to SecureTrack."},"response":[]},{"name":"Delete server","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","description":"To decommission a serer use force=true.

Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4?force=true

Response Messages:
400: The application was already deleted.
400: You cannot delete a predefined object.
400: Cannot delete an object that is being referenced by other objects
400: Cannot delete a predefined object.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID."},"response":[]},{"name":"Retrieve an existing server by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","description":"Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/3

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID."},"response":[]},{"name":"If the identified server is a group, return a list of its members. When the media type is 'text/plain' (default), print each member on a separate line.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/members","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/members

Response Messages:
400: Server with ID is not of type group
401: Access is denied
401: You do not have permissions to view this application
403: No available licenses. Ask your SecureApp administrator for assistance
404: There is no application with the specified ID
404: Server with ID was not found"},"response":[]},{"name":"Move server","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"server_id"},{"value":null,"type":"text","key":"target_application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/move_server","description":"Parameters:
application_id: The unique identifier of the application
server_id: The unique identifier of the server
target_application_id: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/move_server?server_id=5&target_application_id=3

Response Messages:
400: Server ID is missing.
400: Target application ID is missing.
400: You cannot move a predefined object.
400: Server with ID is already associated to application with ID.
400: Cannot move server to a different customer.
400: The application was already deleted.
400: You cannot add to application APPLICATION_NAME because it was decommissioned.
400: Group/Server cannot be moved because there is no other application to move it to.
400: Group/Server cannot be moved because it or at least one of its group members is part of these groups: GROUPS_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is locked for discovery.
400: Group/Server cannot be moved because it or at least one of its group members is used in these application interfaces: APPLICATION_INTERFACE_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is used in these connections with another external resource: CONNECTION_NAME
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Export Server Impact Analysis to a CSV file.","request":{"method":"GET","header":[],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/impact_analysis_csv","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/impact_analysis_csv

Response Messages:
400: Server with ID was not found.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Services (global)","item":[{"name":"Modify unused and non predefined global services","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Service is new.
400: You cannot update a predefined object.
400: Name <span style=\"font-style: italic\">NAME</span> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot update a global service that is being referenced by other objects.
400: Cannot update an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Group cannot contain itself as a member.
400: Application identity cannot be a member of a group.
401: Access is denied."},"response":[]},{"name":"Delete unused and non predefined global service by name","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"name"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
name: The name of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=Global service

Response Messages:
200: Service was deleted.
404: Service name has not been provided.
404: There are no services with the name NAME.
400: Cannot delete ANY.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
401: Access is denied."},"response":[]},{"name":"Fetches services","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
globals_only: get only globals [optional]
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=AH

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true&name=AH

Response Messages:
404: There are no services with the name NAME.
401: Access is denied."},"response":[]},{"name":"Create global services","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.
400: Invalid service type <span style=\"font-style: italic\">TYPE</span>
400: Name <span style=\"font-style: italic\">NAME</span> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Application identity cannot be a member of a group.
401: Access is denied."},"response":[]},{"name":"Fetches service by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/2

Response Messages:
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.
401: Access is denied."},"response":[]},{"name":"Delete unused and non predefined global service","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/260

Response Messages:
200: Service was deleted.
404: Global Service with ID was not found.
400: Cannot delete an object that is being referenced by other objects.
400: You cannot delete a predefined object.
401: Access is denied."},"response":[]}]},{"name":"Application Services (local)","item":[{"name":"Retrieve existing services","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services?name=Local service

Response Messages:
400: The application was already deleted.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no services with the name NAME."},"response":[]},{"name":"Create services","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
400: Invalid service type <span style=\"font-style: italic\">TYPE</span>
400: Name <span style=\"font-style: italic\">NAME</span> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Cannot have members from different applications.
400: Can not have application identity in group
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found.
404: There is no application with the specified ID."},"response":[]},{"name":"Update services","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t255\n\t\tService Group 2 updated\n\t\tUpdated comment\n\t\tgroup\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>255</id>
        <name>Service Group 2 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Local service must be associated with an application.
400: Service is locked for discovery.
400: Service is new.
400: Name <span style=\"font-style: italic\">NAME</span> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Application identity cannot be a member of a group.
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <span style=\"font-style: italic\">ID</span> was not found."},"response":[]},{"name":"Delete service","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","description":"Use force=true to delete a service with decommission.

Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250?force=true

Response Messages:
400: The application was already deleted.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Service with ID <span style=\"font-style: italic\">SERVICE_ID</span> was not found in application with id <span style=\"font-style: italic\">APPLICATION_ID</span>"},"response":[]},{"name":"Retrieve an existing service by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","description":"Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Response Messages:
400: The application was already deleted.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Service with ID was not found."},"response":[]}]},{"name":"Application Users","item":[{"name":"Fetches users","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","description":"Parameters:
name: The name of the user [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users?name=Local user 1

Response Messages:
404: There are no users with the name NAME.
401: Access is denied."},"response":[]},{"name":"Create users","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tLocal user 1\n\t\tNew local user\n\t\t8.8.8.8\n\t\n\t\n\t\tLdap user 1\n\t\tNew ldap user\n\t\n\t\n\t\tUser group 1\n\t\tNew user group\n\t\t\n\t\t\t14\n\t\t\n\t\t\n\t\t\t15\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","description":"Parameters:
body: List of users

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/users
BODY<users>
    <user>
        <name>Local user 1</name>
        <comment>New local user</comment>
        <ip>8.8.8.8</ip>
    </user>
    <user>
        <name>Ldap user 1</name>
        <comment>New ldap user</comment>
    </user>
    <user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"userObjectGroupDTO\">
        <name>User group 1</name>
        <comment>New user group</comment>
        <member>
            <id>14</id>
        </member>
        <member>
            <id>15</id>
        </member>
    </user>
</users>


Response Messages:
201: User was created.
200: Users were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: User with id <span style=\"font-style: italic\">ID</span> was not found.
400: Invalid user type <span style=\"font-style: italic\">TYPE</span>
400: Name cannot be empty.
400: User with name <span style=\"font-style: italic\">NAME</span> already exists.
400: Invalid ip
401: Access is denied."},"response":[]},{"name":"Fetches user by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"userId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
404: User with ID <span style=\"font-style: italic\">ID</span> was not found.
401: Access is denied."},"response":[]},{"name":"Delete unused user","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"userId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
200: User was deleted.
404: User with ID <span style=\"font-style: italic\">ID</span> was not found.
400: Cannot delete an object that is being referenced by other objects.
401: Access is denied."},"response":[]}]},{"name":"Applications","item":[{"name":"Retrieve security policy violations from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/compliance_violations","description":"Parameters:
applicationId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/compliance_violations

Response Messages:
400: No valid connections found in APPLICATION.
400: Security policy compliance check is not available because a security policy has not been defined.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
503: Cannot connect to SecureTrack.
503: Timeout occurred while waiting for response from SecureTrack.
500: An error occurred in SecureTrack when running the security compliance check."},"response":[]},{"name":"List all applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"Parameters:
userId: Applications by user ID, if not given the default is logged in user id [optional]
name: The name of the application [optional]
app_permissions: Filter applications by the given permissions (separated with commas):\napp_owner - returns applications where the user is the owner\napp_editor - returns applications where the user has been explicitly added as an editor\napp_viewer - returns applications where the user has been explicitly added as a viewer\napp_adminonly - returns applications where the user only has editor access because user has “edit all applications” permission [note: documentation needs to explain that this list does NOT include apps listed in app_editor] [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?userId=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?app_permissions=app_owner,app_editor,app_viewer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App&app_permissions=app_adminonly

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications

Response Messages:
400: Invalid app_permissions value: 'appPermissions'.
401: Access is denied
401: You can't use the parameter 'userId' because you don't have 'View all applications' permission.
404: There are no applications matching your filter.
404: User with ID 'userId' was not found."},"response":[]},{"name":"Create new applications","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t AppName\n\t\t Comment\n\t\t \n\t\t\t 3\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 4\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t\t \n\t\t\t 24\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"Parameters:
body: List all applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <name>AppName</name>
         <comment>Comment</comment>
         <owner>
             <id>3</id>
         </owner>
         <editors>
             <editor>
                 <id>4</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
         <customer>
             <id>24</id>
         </customer>
     </application>
</applications>


Response Messages:
400: There are no items to add.
400: Application was already saved.
400: Application name must contain at least 2 and no more than 160 characters.
400: Owner cannot be empty.
400: The specified owner does not exist.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
400: Application with NAME already exists.
400: Application owner is missing.
400: Reference to owner ID is invalid.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to customer ID is invalid.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: The specified customer does not exist.
400: There is an editor without an ID or name.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no editor with the name NAME."},"response":[]},{"name":"Update applications","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 140\n\t\t App1\n\t\t true\n\t\t \n\t\t\t 4\n\t\t \n\t \n\t \n\t\t 139\n\t\t UpdatedAppName\n\t\t Updated Comment\n\t\t \n\t\t\t 4\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
body: List of applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <id>140</id>
         <name>App1</name>
         <decommissioned>true</decommissioned>
         <owner>
             <id>4</id>
         </owner>
     </application>
     <application>
         <id>139</id>
         <name>UpdatedAppName</name>
         <comment>Updated Comment</comment>
         <owner>
             <id>4</id>
         </owner>
         <editors>
             <editor>
                 <id>3</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
     </application>
</applications>


Response Messages:
400: Application ID is missing.
400: Application ID is invalid
400: The application was already deleted.
400: You must include the owner field.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
401: Access is denied
401: You do not have permissions to change the owner of application ID.
401: You do not have permissions to change the editors and a viewer of application ID.
401: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Delete an application","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"Parameters:
applicationId: The unique identifier of the application to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
400: The resources of application NAME are used in connections for other applications.
400: You cannot delete application NAME because its application interfaces are used in other applications.
400: You cannot delete application NAME because its application interfaces are used in other application packs.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
400: Application with ID ID was not found.
400: You cannot delete application NAME because there are connection changes pending a ticket in other application."},"response":[]},{"name":"Retrieve an existing application by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"Parameters:
applicationId: The unique identifier of an application to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID."},"response":[]},{"name":"Change an application","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t 139\n\t UpdatedAppName\n\t UpdatedComment\n\t false\n\t \n\t\t 4\n\t \n\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 5\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
applicationId: The unique identifier of an application to change
body: Application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/139
BODY<application>
     <id>139</id>
     <name>UpdatedAppName</name>
     <comment>UpdatedComment</comment>
     <decommissioned>false</decommissioned>
     <owner>
         <id>4</id>
     </owner>
     <editors>
         <editor>
             <id>3</id>
         </editor>
     </editors>
     <viewers>
         <viewer>
             <id>5</id>
         </viewer>
     </viewers>
</application>


Response Messages:
400: The application was already deleted.
400: Application owner is missing.
400: Owner cannot be empty.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
401: Access is denied
401: You do not have permissions to change the owner of application ID.
401: You do not have permissions to change the editors and a viewer of application ID.
401: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Export application history to PDF","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/history/export_pdf","description":"Parameters:
application_id: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History max rows [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&count=2

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?count=2

Response Messages:
401: Access is denied.
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date"},"response":[]},{"name":"Move applications to another customer","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t \n\t\t\t1\n\t\t \n\t\t \n\t\t\t 2\n\t\t \n\t \n\t \n\t\t \n\t\t\t2\n\t\t \n\t\t \n\t\t\tDefault\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/move_applications","description":"Parameters:
body: List of applications and customers [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/move_applications
BODY<move_applications>
     <move_application>
         <application>
            <id>1</id>
         </application>
         <customer>
             <id>2</id>
         </customer>
     </move_application>
     <move_application>
         <application>
            <id>2</id>
         </application>
         <customer>
            <name>Default</name>
         </customer>
     </move_application>
</move_applications>


Response Messages:
200: Applications were moved successfully.
400: Multi-Customer mode is not enabled.
400: You cannot move an application pack to a different customer.
400: Reference to application is invalid.
400: APPLICATION already exists in CUSTOMER.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: Reference to CUSTOMER is invalid.
400: CUSTOMER is not imported to SecureApp.
400: CUSTOMER was decommissioned.
400: You must delete virtual servers from CUSTOMER before you move APPLICATION to another customer.
400: You must remove virtual servers from the INTERFACE and publish it before you move APPLICATION to another customer.
400: You cannot move APPLICATION to CUSTOMER because the connection to application pack and the application pack cannot be in the same customer.
400: You cannot move APPLICATION to a different customer because the application interface and the application pack must be in the same customer.
400: You must remove INTERFACE from APPLICATION PACK and publish it before you can move APPLICATION to another customer.
400: CONNECTION TO APPLICATION from APPLICATION must use interface from CUSTOMER.
400: Sources in CONNECTION from APPLICATION must all be from applications in the same customer.
400: Destinations in CONNECTION in APPLICATION must all be from applications in the same customer.
400: Servers in CONNECTION from APPLICATION must all be from CUSTOMER.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from applications in the same customer.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from CUSTOMER.
400: Application or application pack with NAME already exists in CUSTOMER.
400: There are no applications to move.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve application history","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/history","description":"Parameters:
applicationId: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History list length [optional]
start: Offset the count starting point [optional]
type: States the history type to fetch [optional]
user: The username of the user made the changes [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start=0&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?type=SERVER

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?user=Jack

Response Messages:
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date
400: Count parameter must be a number
400: Start parameter must be a number
400: Start parameter must be less than total
400: Type parameter must be either server, server_group, connection, application, application_interface, connection_interface or connection_to_application
400: User not found
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Export Impact Analysis to a CSV file.","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/impact_analysis_csv","description":"To prevent a CSV injection attack when exporting Impact Analysis to a CSV file, if a special character ( = - + @ ) appears at the beginning of any field, a single quote (') is added before the character.

Parameters:
application_id: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/impact_analysis_csv

Response Messages:
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Cloud Console","item":[{"name":"Auto associate cloud servers from SecureTrack with an application","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tApplication\n\ttrue\n\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule","description":"When auto-associate is enabled, user must enter key value

Parameters:
body: Auto association rule

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule
BODY<auto_association_rule>
    <key>Application</key>
    <enabled>true</enabled>
</auto_association_rule>


Response Messages:
200: Auto association rule is saved.
400: Enabled rule requires key value.
401: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers."},"response":[]},{"name":"Retrieve cloud server listing from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"vendor"},{"value":null,"type":"text","key":"search_string"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","description":"Parameters:
customer_id: Customer ID to be filtered by. [optional]
vendor: Vendor to be filtered by.
search_string: Search text.
start: Returning matching result starting from this element in the array (0-based). [optional]
count: Total number of matching servers to return. [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=WebServe

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=\"WebServer1\"

Response Messages:
401: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.
400: Illegal search string.
400: Start is bigger then possible result count.
400: Start and count cannot hold negative values.
400: Vendor query param is required.
400: Vendor should be one of the following: Amazon.
400: Search string query param is required.
400: Customer with ID does not exist in SecureApp
400: Customer with ID was decommissioned."},"response":[]},{"name":"Associate cloud servers from SecureTrack with an application","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t9\n\t\t\n\t\t\t{b503916e-4468-4dc8-981b-2ec534587352}\n\t\t\t{0cc947a5-276f-4a4a-9d12-df5284fce609}\n\t\t\n\t\n\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","description":"Parameters:
application_id: The ID of the application
body: List of device IDs and cloud server UIDs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?application_id=87
BODY<devices_to_uids>
    <device_to_uids>
        <device_id>9</device_id>
        <uids>
            <uid>{b503916e-4468-4dc8-981b-2ec534587352}</uid>
            <uid>{0cc947a5-276f-4a4a-9d12-df5284fce609}</uid>
        </uids>
    </device_to_uids>
</devices_to_uids>


Response Messages:
201: Servers were imported to SecureApp.
401: Access is denied
400: There is no application with the specified ID.
401: No available licenses. Ask your SecureApp administrator for assistance.
400: You do not have permissions to edit this application.
400: You cannot associate servers with this application, because the application has been decommissioned.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to add cloud servers.
403: UID does not exist in device ID.
403: Device with ID does not exist.
403: Device with ID does not exist in DOMAIN.
403: The AWS instance with UID and device ID has already been imported to application NAME. You cannot import the same instance multiple times."},"response":[]}]},{"name":"Customers","item":[{"name":"import customers","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t2\n\t\n\t\n\t\t3\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/import","description":"Parameters:
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/import
BODY<customers>
    <customer>
        <id>2</id>
    </customer>
    <customer>
        <id>3</id>
    </customer>
</customers>


Response Messages:
400: Not available in single-customer mode.
400: ID can not be empty.
400: There are some id's that doesn't exist.
401: Access is denied
503: Not connected to SecureTrack."},"response":[]},{"name":"List all customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/","description":"Parameters:
name: The name of the customer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers?name=Customer 1

Response Messages:
400: Not available in single-customer mode.
404: There are no customers with the name NAME."},"response":[]},{"name":"Retrieve existing applications for specific domain","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}/applications","description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/2/applications

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
401: Access is denied"},"response":[]},{"name":"List all imported customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/imported","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/imported

Response Messages:
400: Not available in single-customer mode."},"response":[]},{"name":"Fetches customer by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/1

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found."},"response":[]},{"name":"Update a customer","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tNOT_IMPORTED\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","description":"Parameters:
customer_id: The ID of the customer
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/2
BODY<customer>
    <usage_mode>NOT_IMPORTED</usage_mode>
</customer>


Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
400: Can not update Default customer.
400: This customer is already not imported.
400: USAGE_MODE is not a valid state. The valid values are: USAGE_MODES
401: Access is denied
500: This customer is not imported.
400: You cannot delete this customer because there are connection changes pending a ticket in another customer.You must decommission this customer first, and then delete it."},"response":[]},{"name":"List all non-imported customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/not_imported","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/not_imported

Response Messages:
400: Not available in single-customer mode.
503: Not connected to SecureTrack."},"response":[]}]},{"name":"Domains","item":[{"name":"synchronize domains","request":{"method":"PUT","header":[],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/synchronize","description":"Retrieves all the domains lists in ST , for use by SC. If a domain was deleted in ST, then it will be removed from SC



Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/domains/synchronize

Response Messages:
500: Multi-Domain mode is disabled in SecureChange. Unable to synchronize with SecureTrack domains"},"response":[]},{"name":"List all domains","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/","description":"Parameters:
name: The name of the domain [optional]

Usage Example


Response Messages:
404: There are no domains with the name NAME."},"response":[]},{"name":"Fetches domain by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"domainId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/{{domainId}}","description":"Parameters:
domainId: The ID of the domain

Usage Example


Response Messages:
400: Domain with id ID was not found."},"response":[]}]},{"name":"Load Balancers","item":[{"name":"Fetches virtual servers from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ip"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers","description":"Find virtual servers matching a given IP address.
You can search for the virtual server itself of any of its members.

Parameters:
ip: ip
domainId: The unique identifier of a domain [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers?ip=2.2.2.2

Response Messages:
400: Invalid IP
400: Invalid Subnet
400: There is no domain with the specified ID.
401: Access is denied
503: Not connected to SecureTrack."},"response":[]}]},{"name":"SecureChange Devices","item":[{"name":"Returns the details of the devices that you can select as a target in SecureChange","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/","description":"Parameters:
name: device name or part of a name [optional]
show_targets: show devices as targets [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/devices?name=asa&show_targets=true

Response Messages:
404: Devices not found"},"response":[]},{"name":"Get suggested targets for a given access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"access_request\":{\n\t\t\"users\":{\n\t\t\t\"user\":[\n\t\t\t\t\"Any\"\n\t\t\t]\n\t\t},\n\t\t\"sources\":{\n\t\t\t\"source\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.1.1\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"destinations\":{\n\t\t\t\"destination\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.20.2\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"services\":{\n\t\t\t\"service\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"ANY\",\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"action\":\"Accept\",\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/suggest_target","description":"Returns a list of suggested targets for a given access request, based on topology calculations.

Parameters:
body [optional]
domain_name: Domain Name
workflow_name: Workflow Name

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/suggest_target?domain_name=Default&workflow_name=AR
BODY{
    \"access_request\":{
        \"users\":{
            \"user\":[
                \"Any\"
            ]
        },
        \"sources\":{
            \"source\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.1.1\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"destinations\":{
            \"destination\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.20.2\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"services\":{
            \"service\":[
                {
                    \"@type\":\"ANY\",
                }
            ]
        },
        \"action\":\"Accept\",
    }
}
OUTPUT{
    \"multi_target\": {
        \"target\": {
            \"@type\": \"Object\",
            \"object_name\": \"Device-1\",
            \"object_type\": \"firewall\",
            \"object_details\": \"10.100.40.1\",
            \"management_id\": 250,
            \"management_name\": \"Panorama/Domain1\"
        }
    }
}


Response Messages:
200: Targets returned successfully
400: User does not have permissions to domain or domain does not exist
401: Access is denied"},"response":[]},{"name":"Update the whole list of excluded devices in SecureChange","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t1\n\t12\n\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
BODY<device_ids>
    <id>1</id>
    <id>12</id>
</device_ids>

"},"response":[]},{"name":"Returns IDs for specified list of excluded parent management devices and child firewalls in SecureChange","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","description":"For example on this Panorama hierarchy:
DG1 - Excluded
  DG1.1
    FW1
    FW2
    FW3

Calling this API with false value will return only DG1’s id.
Calling this API with true value will return DG1, FW1, FW2, FW3 id’s.


Parameters:
show_all: When set to true - Displays the specified devices and all their child firewalls in the hierarchy, which will be excluded implicitly.
When set to false - Displays only the devices which were explicitly excluded.
Default value is false.
[optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=false
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=true
OUTPUT<device_ids>
    <id>33</id>
    <id>10</id>
    <id>11</id>
    <id>35</id>
    <id>29</id>
    <id>31</id>
</device_ids>

"},"response":[]}]},{"name":"Server Decommissioning","item":[{"name":"Run server decommission designer for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/designer","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/designer

Response Messages:
400: Server decommission designer is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Run Impact Analysis for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/impact_analysis","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/impact_analysis

Response Messages:
400: Impact analysis is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Get impact analysis results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/impact_analysis","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/impact_analysis

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Run Verifier for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/verifier","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/verifier

Response Messages:
400: Verifier is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Get verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Get server decommission designer results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/designer","description":"Use this API to retrieve designer results generated in R17-1 and earlier.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]}]},{"name":"System Configuration","item":[{"name":"Modify the SecureTrack connection settings and test the connection status","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\t\n\t\t \n\t\t\t192.168.11.1\n\t\t\tadmin\n\t\t\n\t\tfalse\n\t\t30\n\t\t192.168.2.2\n\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","description":"Parameters:
testOnly: Test the connection status using the specified settings. The new settings are not saved. The default value is false [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"remoteHost\">
            <IP_or_hostname>192.168.11.1</IP_or_hostname>
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
        <internal_IP_of_secureChange_server>192.168.2.2</internal_IP_of_secureChange_server>
    </secureTrack_settings>


Response Messages:
400: Invalid host name or IP address.
400: show_link_to_secureTrack is invalid. It must be 'true', 'false' or empty."},"response":[]},{"name":"Retrieve the SecureTrack connection settings and status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack?testOnly=false
"},"response":[]}]},{"name":"System Users","item":[{"name":"Import user from LDAP","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tx\n\tLDAP\n\t\t\n\t\t\t1\n\t\t\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","description":"Parameters:
body: partyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users
BODY<user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"user\">
    <name>x</name>
    <origin_type>LDAP</origin_type>
        <ldap_configuration>
            <id>1</id>
        </ldap_configuration>
</user>


Response Messages:
401: Access is denied.
400: Name is missing.
400: Origin is missing.
400: User {login_name} already exists, with ID (id} and name {name}.
400: User {login_name} not found in LDAP.
400: Creating a user via REST API is available only if origin is LDAP.
400: Creating a user via REST API is available only if type is User.
400: Ldap configuration with ID {id} not found."},"response":[]},{"name":"Return the list of users","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","description":"user_name: case insensitive, search mode: contains text
exact_name: when set to true, user_name search mode is case sensitive and exact text
email: case insentitive, search mode: exact match
Logical OR between user_name and email.

Parameters:
showIndirectRelation: Members that belong to the selected group only indirectly [optional]
user_name: The user's login name [optional]
email: The user's email [optional]
exact_name: Search user_name as exact match [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users?email=bob@tufin.com&user_name=bob&exact_name=true
"},"response":[]},{"name":"Return the specified user","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","description":"Parameters:
id: The user's ID
showIndirectRelation: Members that belong to the selected group only indirectly [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User or group was not found."},"response":[]}]},{"name":"Ticket Lifecycle","item":[{"name":"Reject a ticket","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\trejected\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/reject","description":"Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: The user id, when logged in user is rejecting on behalf [optional]
body: Reject comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/reject?handler_id=5
BODY<reject_comment>
    <comment>rejected</comment>
</reject_comment>


Response Messages:
400: Ticket status <STATUS> is incorrect to perform this action
400: User <NAME> has no permissions to perform this action
400: Comment cannot be empty
401: User is not permitted to reject this ticket on behalf another user
401: You do not have permission to access ticket <ID>
401: On behalf user do not have permission to access ticket <ID>
401: Access is denied.
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>."},"response":[]},{"name":"Map rules to ticket","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/map_rules","description":"Maps the rules from the ticket to the relevant rules in SecureTrack.
Adds record set entries to the relevant rules metadata.
Link to history is found in the returned location header.
Applicable only for closed tickets in the following workflows: Access Request, Access Request and Modify Group, and Clone Server Policy.
Use handler_id for running on behalf of another user.
To get handler_id, use the System Users API.

Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: Run API on behalf of defined user id [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules?handler_id=5

Response Messages:
201: Started asynchronous mapping of rules to ticket ID <ID>. Mapping status is displayed in ticket history.
400: Ticket's workflow type does not support this operation
401: Access is denied.
401: You do not have permission to access ticket <ID>
401: On behalf user do not have permission to access ticket <ID>
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.
412: Ticket is not in closed status"},"response":[]},{"name":"Reassigns the specified ticket task to the specified user.","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tPlease complete the AR\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/reassign/{{assigneeId}}","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
assigneeId: The assignee ID
body: ReassignTaskCommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/reassign/4
BODY<reassign_task_comment>
    <comment>Please complete the AR</comment>
</reassign_task_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
404: There is no ticket with ID.
404: No entity found for query"},"response":[]},{"name":"Confirm the request","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tconfirmed\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/confirm","description":"Parameters:
id: Ticket ID
requester_id: The user of the ticket's requester, when logged in user is confirm on behalf [optional]
body: Confirm comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/confirm?requester_id=5
BODY<confirm_comment>
    <comment>confirmed</comment>
</confirm_comment>


Response Messages:
400: User is trying to confirm a ticket that belongs to another user
400: User is not permitted to confirm this ticket on behalf another user
400: The user can not confirm the ticket, because he is not in the domain of the ticket
401: Access is denied.
404: There is no ticket with ID ."},"response":[]},{"name":"Change the requester of the specified ticket task to the specified user.","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tuser was deleted moving tickets to Bob\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/change_requester/{{assigneeId}}","description":"Parameters:
id: Ticket ID
assigneeId: The assignee ID
body: CommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/change_requester/4
BODY<comment>
    <comment>user was deleted moving tickets to Bob</comment>
</comment>


Response Messages:
400: The change requester comment must be set in order to change the requester the ticket.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
404: There is no ticket with ID.
404: There is no requester (User) with ID."},"response":[]},{"name":"Returns the specified ticket to the specified step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tplease fix source \n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/redo/{{toStepId}}","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
toStepId: To which step we the ticket will return
body: RedoCommentDto

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/redo/1
BODY<redo_step_comment>
    <comment>please fix source </comment>
</redo_step_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
401: User has no permissions to redo ticket steps.
404: There is no ticket with ID.
404: No entity found for query"},"response":[]},{"name":"Returns the history of the specified ticket","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/history","description":"Parameters:
id: Ticket ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/history

Response Messages:
401: User has no permissions to view ticket history
404: You do not have permission to view this task. Contact your administrator for assistance.
404: There is no ticket with ID."},"response":[]},{"name":"Cancel a ticket","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/cancel","description":"Parameters:
id: The ID of the ticket as shown in SecureChange
requester_id: The user of the ticket's requester, when logged in user is canceling on behalf [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/cancel?requester_id=5

Response Messages:
401: Access is denied.
404: Ticket is already closed
404: Ticket ID was not found"},"response":[]}]},{"name":"Tickets","item":[{"name":"Returns the details of a the fields","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID ."},"response":[]},{"name":"Change multiple fields within a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"fields\": {\n\t\t\"field\": {\n\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\"id\": 71,\n\t\t\t\"name\": \"Fire Wall Rule\",\n\t\t\t\"read_only\": false,\n\t\t\t\"devices\": {\n\t\t\t\t\"device\": {\n\t\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\t\"management_id\": 4,\n\t\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"rule_modifications\": {\n\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\"id\": 10,\n\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t\t},\n\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\"id\": 20,\n\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"9b9062a0-228a-4543-bbd4-9fda5c76573b\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"986c68ab-b5b5-478d-9300-bc0cacc06dfe\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"1073dad5-4dc9-4392-8b42-f32de2937657\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\"id\": 19,\n\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"e52c07fc-dffb-4c77-a656-40d1b1322e77\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"fa681c9b-8c4f-449d-9b31-108a399902f5\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"2b8eaa1a-f4ea-4c39-b89e-361af89a308e\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"88efeaad-cfb4-41c4-b14c-fff104c24e52\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"designer_result\": {\n\t\t\t\t\"status\": \"not run\"\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_network_object\">
         <id>7885</id>
         <name>n_obj</name>
         <network_object type=\"Object\">
             <object_name>Host_10.1.1.1</object_name>
             <management_name>cp239</management_name>
         </network_object>
         <network_object type=\"Object\">
             <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
             <management_id>2</management_id>
         </network_object>
         <network_object type=\"DNS\">
             <host_name>tufin.com</host_name>
         </network_object>
     <field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_service\">
         <id>7887</id>
         <name>service</name>
         <service type=\"PROTOCOL\">
             <protocol>TCP</protocol>
             <port>80</port>
         </service>
         <service type=\"Object\">
             <object_name>AOL</object_name>
             <management_name>cp239</management_name>
         </service>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
    \"fields\": {
        \"field\": {
            \"@xsi.type\": \"rule_modification_field\",
            \"id\": 71,
            \"name\": \"Fire Wall Rule\",
            \"read_only\": false,
            \"devices\": {
                \"device\": {
                    \"revision_id\": 4,
                    \"management_name\": \"Panorama/DG_1\",
                    \"management_id\": 4,
                    \"management_ip\": \"10.100.111.120\",
                    \"revision_number\": 1,
                    \"number_of_rules\": 1,
                    \"bindings\": {
                        \"binding\": {
                            \"binding_uid\": \"{00-FACED0-00}\",
                            \"binding\": {
                                \"@xsi.type\": \"policy__binding\",
                                \"policy_name\": \"Standard\"
                            },
                            \"rules\": {
                                \"rule\": {
                                    \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                    \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                    \"name\": \"Application test\",
                                    \"is_disabled\": false,
                                    \"ruleNumber\": 13,
                                    \"from_zone\": \"any\",
                                    \"to_zone\": \"any\",
                                    \"sourceNetworks\": {
                                        \"@xsi.type\": \"host_network_object\",
                                        \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                        \"name\": \"H_5.3.2.5\",
                                        \"display_name\": \"H_5.3.2.5\",
                                        \"class_name\": \"host_plain\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"comment\",
                                        \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                        \"version_id\": 4,
                                        \"device_type\": \"PaloAltoNetworks\",
                                        \"ip_type\": \"IPV4\",
                                        \"referenced\": \"UNKNOWN\",
                                        \"installable_target\": false,
                                        \"ip\": \"5.3.2.5\",
                                        \"subnet_mask\": \"255.255.255.255\"
                                    },
                                    \"destinationNetworks\": {
                                        \"@xsi.type\": \"host_network_object\",
                                        \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                        \"name\": \"22.22.2.2\",
                                        \"display_name\": \"22.22.2.2\",
                                        \"class_name\": \"host_plain\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"\",
                                        \"id\": \"5df1f2a5e9023c311ae4a016\",
                                        \"version_id\": 4,
                                        \"device_type\": \"PaloAltoNetworks\",
                                        \"ip_type\": \"IPV4\",
                                        \"referenced\": \"UNKNOWN\",
                                        \"installable_target\": false,
                                        \"ip\": \"22.22.2.2\",
                                        \"subnet_mask\": \"255.255.255.255\"
                                    },
                                    \"destinationServices\": {
                                        \"@xsi.type\": \"transport_service\",
                                        \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                        \"name\": \"TCP82\",
                                        \"display_name\": \"TCP82\",
                                        \"class_name\": \"tcp_service\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"TCP82\",
                                        \"id\": \"5df1f2a5e9023c311ae4a018\",
                                        \"version_id\": 4,
                                        \"referenced\": \"UNKNOWN\",
                                        \"type_on_device\": \"\",
                                        \"negate\": false,
                                        \"match_for_any\": false,
                                        \"timeout\": 0,
                                        \"protocol\": 6,
                                        \"min_port\": 82,
                                        \"max_port\": 82
                                    },
                                    \"applications\": {
                                        \"@xsi.type\": \"single_application\",
                                        \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                        \"name\": \"web-browsing\",
                                        \"display_name\": \"web-browsing\",
                                        \"class_name\": \"application_object\",
                                        \"origin\": \"DEVICE_PREDEFINED\",
                                        \"global\": true,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"\",
                                        \"service\": [
                                            {
                                                \"@xsi.type\": \"transport_service\",
                                                \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                                \"name\": \"st_implicit_app_web-browsing\",
                                                \"display_name\": \"st_implicit_app_web-browsing\",
                                                \"class_name\": \"tcp_service\",
                                                \"origin\": \"DEVICE\",
                                                \"global\": false,
                                                \"implicit\": true,
                                                \"shared\": false,
                                                \"comment\": \"\",
                                                \"id\": \"5df1f2a5e9023c311ae4a014\",
                                                \"version_id\": 4,
                                                \"referenced\": \"UNKNOWN\",
                                                \"type_on_device\": \"\",
                                                \"negate\": false,
                                                \"match_for_any\": false,
                                                \"timeout\": 0,
                                                \"protocol\": 6,
                                                \"min_port\": 80,
                                                \"max_port\": 80
                                            }
                                        ]
                                    },
                                    \"action\": \"ACCEPT\",
                                    \"additional_parameters\": \"\",
                                    \"options\": {
                                        \"option\": \"LOG_SESSION\"
                                    },
                                    \"rule_location\": \"DG_1\",
                                    \"users\": {
                                        \"user\": [
                                            {
                                                \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                                \"name\": \"Any\",
                                                \"class_name\": \"any_object\",
                                                \"displayName\": \"Any\"
                                            }
                                        ]
                                    },
                                    \"track\": {
                                        \"track_level\": \"LOG\"
                                    },
                                    \"install_ons\": \"\",
                                    \"communities\": \"\",
                                    \"times\": \"\",
                                    \"rule_metadata\": {
                                        \"permissiveness_level\": \"LOW\",
                                        \"violations\": \"\",
                                        \"last_hit\": \"No hits\",
                                        \"shadowed_status\": \"FALSE\",
                                        \"ticket_ids\": \"\",
                                        \"business_owners\": \"\",
                                        \"expirations\": \"\",
                                        \"applications\": \"\",
                                        \"last_modified\": \"Today\"
                                    }
                                }
                            }
                        }
                    }
                }
            },
            \"rule_modifications\": {
                \"rule_modification\": {
                    \"@xsi.type\": \"modify_rule_modification\",
                    \"id\": 10,
                    \"rule_key\": {
                        \"device_id\": 4,
                        \"binding_uid\": \"{00-FACED0-00}\",
                        \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                    },
                    \"source_modifications\": {
                        \"id\": 20,
                        \"network_object_cell_modifications\": {
                            \"network_object_cell_modification\": [
                                {
                                    \"id\": 69,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 65,
                                        \"uid\": \"9b9062a0-228a-4543-bbd4-9fda5c76573b\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 65,
                                                \"name\": \"My New Host\",
                                                \"comment\": \"some comment\",
                                                \"ip\": \"192.168.0.10\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 68,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 64,
                                        \"uid\": \"986c68ab-b5b5-478d-9300-bc0cacc06dfe\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                \"id\": 64,
                                                \"name\": \"My New Address Ragne\",
                                                \"comment\": \"some comment\",
                                                \"min_ip\": \"192.168.0.1\",
                                                \"max_ip\": \"192.168.0.254\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 70,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 68,
                                        \"uid\": \"1073dad5-4dc9-4392-8b42-f32de2937657\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                \"id\": 68,
                                                \"name\": \"My New Network\",
                                                \"comment\": \"some comment\",
                                                \"ip\": \"192.168.0.0\",
                                                \"netmask\": \"255.255.255.0\"
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    },
                    \"destination_modifications\": {
                        \"id\": 19,
                        \"network_object_cell_modifications\": {
                            \"network_object_cell_modification\": [
                                {
                                    \"id\": 66,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 67,
                                        \"uid\": \"e52c07fc-dffb-4c77-a656-40d1b1322e77\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                \"id\": 67,
                                                \"name\": \"Range-Test\",
                                                \"comment\": \"\",
                                                \"min_ip\": \"1.1.2.0\",
                                                \"max_ip\": \"1.1.2.55\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 67,
                                    \"action\": \"REMOVE\",
                                    \"device_network_object\": {
                                        \"id\": 66,
                                        \"uid\": \"fa681c9b-8c4f-449d-9b31-108a399902f5\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 66,
                                                \"name\": \"22.22.2.2\",
                                                \"comment\": \"\",
                                                \"ip\": \"22.22.2.2\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 65,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 70,
                                        \"uid\": \"2b8eaa1a-f4ea-4c39-b89e-361af89a308e\",
                                        \"device_id\": 2,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                \"id\": 70,
                                                \"name\": \"Net_10.108.151.0\",
                                                \"comment\": \"\",
                                                \"ip\": \"10.108.151.0\",
                                                \"netmask\": \"255.255.255.0\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 64,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 69,
                                        \"uid\": \"88efeaad-cfb4-41c4-b14c-fff104c24e52\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 69,
                                                \"name\": \"Host_10.10.10.10\",
                                                \"comment\": \"\",
                                                \"ip\": \"10.10.10.10\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    }
                }
            },
            \"designer_result\": {
                \"status\": \"not run\"
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object"},"response":[]},{"name":"Get commands for device from designer results of a specific field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/device/{{deviceId}}/commands","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
deviceId: Device ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/device/136/commands

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the access request.
404: Device with ID <ID> was not found in Designer result.
404: Device with ID <ID> does not support Commands feature."},"response":[]},{"name":"Change the ticket properties","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/ticket_properties","description":"Change the ticket properties listed in the TicketPropertiesDTO.
When specifying the notification_group property you must use the ID of the group or leave the ID empty to remove the group.

Parameters:
body: ticketPropertiesDTO
id: The ID number of the ticket as shown in SecureChange

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id>10</id>
    </notification_group>
</ticket_properties>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id/>
    </notification_group>
</ticket_properties>


Response Messages:
400: Notification Group <ID> is a user and not a user group
400: Notification Group <ID> exceeds the configured maximum allowed number of users for notifications
400: <ID> (“Any User”) is not allowed as a Notification Group
400: Notification Group <ID> does not have permission of 'Group members can perform actions on requests submitted by other members'
400: Notification Group <ID> is not a member in the first step of the workflow
400: Notification Group is not enabled in this workflow
401: You do not have permission to change the Notification Group
404: There is no group with ID <ID>.
404: There is no ticket with ID <ID>."},"response":[]},{"name":"Change a task of a ticket at the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"task\": {\n\t\t\"id\": 4,\n\t\t\"assignee_id\": 4,\n\t\t\"assignee\": \"a\",\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 71,\n\t\t\t\t\"name\": \"Fire Wall Rule\",\n\t\t\t\t\"read_only\": false,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\t\t\"management_id\": 4,\n\t\t\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"id\": 13,\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"id\": 26,\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"e7e4ac52-2fe4-49f7-8071-9638817a7434\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"13556e3e-1f93-4f95-939c-428a58001615\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"1ecb9679-4da4-4fc5-9382-00f5fa455295\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"id\": 25,\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"50f35caf-3f13-4961-9ccd-055e1703592a\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"21342c9a-3974-4bd3-b74b-b142e43ed39a\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"8fff4c36-da34-4945-be33-ffd5d4d444e2\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"35ec73ed-e0fa-4690-9570-00b417b63ae6\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"designer_result\": {\n\t\t\t\t\t\"status\": \"not run\"\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY<task>
    <status>DONE</status>
    <fields/>
</task>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/
BODY{
    \"task\": {
        \"id\": 4,
        \"assignee_id\": 4,
        \"assignee\": \"a\",
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 71,
                \"name\": \"Fire Wall Rule\",
                \"read_only\": false,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 4,
                        \"management_name\": \"Panorama/DG_1\",
                        \"management_id\": 4,
                        \"management_ip\": \"10.100.111.120\",
                        \"revision_number\": 1,
                        \"number_of_rules\": 1,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{00-FACED0-00}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"Standard\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                        \"name\": \"Application test\",
                                        \"is_disabled\": false,
                                        \"ruleNumber\": 13,
                                        \"from_zone\": \"any\",
                                        \"to_zone\": \"any\",
                                        \"sourceNetworks\": {
                                            \"@xsi.type\": \"host_network_object\",
                                            \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                            \"name\": \"H_5.3.2.5\",
                                            \"display_name\": \"H_5.3.2.5\",
                                            \"class_name\": \"host_plain\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"comment\",
                                            \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                            \"version_id\": 4,
                                            \"device_type\": \"PaloAltoNetworks\",
                                            \"ip_type\": \"IPV4\",
                                            \"referenced\": \"UNKNOWN\",
                                            \"installable_target\": false,
                                            \"ip\": \"5.3.2.5\",
                                            \"subnet_mask\": \"255.255.255.255\"
                                        },
                                        \"destinationNetworks\": {
                                            \"@xsi.type\": \"host_network_object\",
                                            \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                            \"name\": \"22.22.2.2\",
                                            \"display_name\": \"22.22.2.2\",
                                            \"class_name\": \"host_plain\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"id\": \"5df1f2a5e9023c311ae4a016\",
                                            \"version_id\": 4,
                                            \"device_type\": \"PaloAltoNetworks\",
                                            \"ip_type\": \"IPV4\",
                                            \"referenced\": \"UNKNOWN\",
                                            \"installable_target\": false,
                                            \"ip\": \"22.22.2.2\",
                                            \"subnet_mask\": \"255.255.255.255\"
                                        },
                                        \"destinationServices\": {
                                            \"@xsi.type\": \"transport_service\",
                                            \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                            \"name\": \"TCP82\",
                                            \"display_name\": \"TCP82\",
                                            \"class_name\": \"tcp_service\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"TCP82\",
                                            \"id\": \"5df1f2a5e9023c311ae4a018\",
                                            \"version_id\": 4,
                                            \"referenced\": \"UNKNOWN\",
                                            \"type_on_device\": \"\",
                                            \"negate\": false,
                                            \"match_for_any\": false,
                                            \"timeout\": 0,
                                            \"protocol\": 6,
                                            \"min_port\": 82,
                                            \"max_port\": 82
                                        },
                                        \"applications\": {
                                            \"@xsi.type\": \"single_application\",
                                            \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                            \"name\": \"web-browsing\",
                                            \"display_name\": \"web-browsing\",
                                            \"class_name\": \"application_object\",
                                            \"origin\": \"DEVICE_PREDEFINED\",
                                            \"global\": true,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"service\": [
                                                {
                                                    \"@xsi.type\": \"transport_service\",
                                                    \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                                    \"name\": \"st_implicit_app_web-browsing\",
                                                    \"display_name\": \"st_implicit_app_web-browsing\",
                                                    \"class_name\": \"tcp_service\",
                                                    \"origin\": \"DEVICE\",
                                                    \"global\": false,
                                                    \"implicit\": true,
                                                    \"shared\": false,
                                                    \"comment\": \"\",
                                                    \"id\": \"5df1f2a5e9023c311ae4a014\",
                                                    \"version_id\": 4,
                                                    \"referenced\": \"UNKNOWN\",
                                                    \"type_on_device\": \"\",
                                                    \"negate\": false,
                                                    \"match_for_any\": false,
                                                    \"timeout\": 0,
                                                    \"protocol\": 6,
                                                    \"min_port\": 80,
                                                    \"max_port\": 80
                                                }
                                            ]
                                        },
                                        \"action\": \"ACCEPT\",
                                        \"additional_parameters\": \"\",
                                        \"options\": {
                                            \"option\": \"LOG_SESSION\"
                                        },
                                        \"rule_location\": \"DG_1\",
                                        \"users\": {
                                            \"user\": [
                                                {
                                                    \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                                    \"name\": \"Any\",
                                                    \"class_name\": \"any_object\",
                                                    \"displayName\": \"Any\"
                                                }
                                            ]
                                        },
                                        \"track\": {
                                            \"track_level\": \"LOG\"
                                        },
                                        \"install_ons\": \"\",
                                        \"communities\": \"\",
                                        \"times\": \"\",
                                        \"rule_metadata\": {
                                            \"permissiveness_level\": \"LOW\",
                                            \"violations\": \"\",
                                            \"last_hit\": \"No hits\",
                                            \"shadowed_status\": \"FALSE\",
                                            \"ticket_ids\": \"\",
                                            \"business_owners\": \"\",
                                            \"expirations\": \"\",
                                            \"applications\": \"\",
                                            \"last_modified\": \"Today\"
                                        }
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"id\": 13,
                        \"rule_key\": {
                            \"device_id\": 4,
                            \"binding_uid\": \"{00-FACED0-00}\",
                            \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                        },
                        \"source_modifications\": {
                            \"id\": 26,
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"id\": 89,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 88,
                                            \"uid\": \"e7e4ac52-2fe4-49f7-8071-9638817a7434\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 88,
                                                    \"name\": \"My New Host\",
                                                    \"comment\": \"some comment\",
                                                    \"ip\": \"192.168.0.10\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 91,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 89,
                                            \"uid\": \"13556e3e-1f93-4f95-939c-428a58001615\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"id\": 89,
                                                    \"name\": \"My New Address Ragne\",
                                                    \"comment\": \"some comment\",
                                                    \"min_ip\": \"192.168.0.1\",
                                                    \"max_ip\": \"192.168.0.254\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 90,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 87,
                                            \"uid\": \"1ecb9679-4da4-4fc5-9382-00f5fa455295\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"id\": 87,
                                                    \"name\": \"My New Network\",
                                                    \"comment\": \"some comment\",
                                                    \"ip\": \"192.168.0.0\",
                                                    \"netmask\": \"255.255.255.0\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"id\": 25,
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"id\": 88,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 91,
                                            \"uid\": \"50f35caf-3f13-4961-9ccd-055e1703592a\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 91,
                                                    \"name\": \"Host_10.10.10.10\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"10.10.10.10\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 85,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 90,
                                            \"uid\": \"21342c9a-3974-4bd3-b74b-b142e43ed39a\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"id\": 90,
                                                    \"name\": \"Range-Test\",
                                                    \"comment\": \"\",
                                                    \"min_ip\": \"1.1.2.0\",
                                                    \"max_ip\": \"1.1.2.55\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 86,
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"id\": 86,
                                            \"uid\": \"8fff4c36-da34-4945-be33-ffd5d4d444e2\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 86,
                                                    \"name\": \"22.22.2.2\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"22.22.2.2\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 87,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 85,
                                            \"uid\": \"35ec73ed-e0fa-4690-9570-00b417b63ae6\",
                                            \"device_id\": 2,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"id\": 85,
                                                    \"name\": \"Net_10.108.151.0\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"10.108.151.0\",
                                                    \"netmask\": \"255.255.255.0\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        }
                    }
                },
                \"designer_result\": {
                    \"status\": \"not run\"
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object"},"response":[]},{"name":"Returns the details of a specified field","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
fieldId: The ID number of the field as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/229

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .
404: Field ID was not found in Task ID in Stage ID in ticket ID ."},"response":[]},{"name":"Change a field within a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"rule_modification_field\": {\n\t\t\"id\": 71,\n\t\t\"name\": \"Fire Wall Rule\",\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\"management_id\": 4,\n\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"id\": 12,\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"id\": 24,\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\t\"uid\": \"cd555580-3dd2-4830-86c6-260f9783569c\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\t\"uid\": \"fb534919-e43f-42c9-a7e3-cb00f6b9aaac\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\t\"uid\": \"b76a4265-dc2d-43c7-a3f2-dfe434f6a034\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"id\": 23,\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\t\"uid\": \"314933de-5b19-4d70-8712-576a0919285e\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\t\"uid\": \"de5a9ef7-a1f0-463c-bf64-9acacbfdb119\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\t\"uid\": \"822004d2-05bc-492b-96d5-6180b998fbc5\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\t\"uid\": \"714dd5f3-976d-4880-b3cb-e45382ddb8ae\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"designer_result\": {\n\t\t\t\"status\": \"not run\"\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields/7742
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multiple_selection\">
     <id>7742</id>
     <name>filter type</name>
     <selected_options>
         <selected_option>
             <value>FTP</value>
         </selected_option>
     </selected_options>
</field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"id\": 71,
        \"name\": \"Fire Wall Rule\",
        \"devices\": {
            \"device\": {
                \"revision_id\": 4,
                \"management_name\": \"Panorama/DG_1\",
                \"management_id\": 4,
                \"management_ip\": \"10.100.111.120\",
                \"revision_number\": 1,
                \"number_of_rules\": 1,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{00-FACED0-00}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"Standard\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                \"name\": \"Application test\",
                                \"is_disabled\": false,
                                \"ruleNumber\": 13,
                                \"from_zone\": \"any\",
                                \"to_zone\": \"any\",
                                \"sourceNetworks\": {
                                    \"@xsi.type\": \"host_network_object\",
                                    \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                    \"name\": \"H_5.3.2.5\",
                                    \"display_name\": \"H_5.3.2.5\",
                                    \"class_name\": \"host_plain\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"comment\",
                                    \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                    \"version_id\": 4,
                                    \"device_type\": \"PaloAltoNetworks\",
                                    \"ip_type\": \"IPV4\",
                                    \"referenced\": \"UNKNOWN\",
                                    \"installable_target\": false,
                                    \"ip\": \"5.3.2.5\",
                                    \"subnet_mask\": \"255.255.255.255\"
                                },
                                \"destinationNetworks\": {
                                    \"@xsi.type\": \"host_network_object\",
                                    \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                    \"name\": \"22.22.2.2\",
                                    \"display_name\": \"22.22.2.2\",
                                    \"class_name\": \"host_plain\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"\",
                                    \"id\": \"5df1f2a5e9023c311ae4a016\",
                                    \"version_id\": 4,
                                    \"device_type\": \"PaloAltoNetworks\",
                                    \"ip_type\": \"IPV4\",
                                    \"referenced\": \"UNKNOWN\",
                                    \"installable_target\": false,
                                    \"ip\": \"22.22.2.2\",
                                    \"subnet_mask\": \"255.255.255.255\"
                                },
                                \"destinationServices\": {
                                    \"@xsi.type\": \"transport_service\",
                                    \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                    \"name\": \"TCP82\",
                                    \"display_name\": \"TCP82\",
                                    \"class_name\": \"tcp_service\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"TCP82\",
                                    \"id\": \"5df1f2a5e9023c311ae4a018\",
                                    \"version_id\": 4,
                                    \"referenced\": \"UNKNOWN\",
                                    \"type_on_device\": \"\",
                                    \"negate\": false,
                                    \"match_for_any\": false,
                                    \"timeout\": 0,
                                    \"protocol\": 6,
                                    \"min_port\": 82,
                                    \"max_port\": 82
                                },
                                \"applications\": {
                                    \"@xsi.type\": \"single_application\",
                                    \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                    \"name\": \"web-browsing\",
                                    \"display_name\": \"web-browsing\",
                                    \"class_name\": \"application_object\",
                                    \"origin\": \"DEVICE_PREDEFINED\",
                                    \"global\": true,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"\",
                                    \"service\": [
                                        {
                                            \"@xsi.type\": \"transport_service\",
                                            \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                            \"name\": \"st_implicit_app_web-browsing\",
                                            \"display_name\": \"st_implicit_app_web-browsing\",
                                            \"class_name\": \"tcp_service\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": true,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"id\": \"5df1f2a5e9023c311ae4a014\",
                                            \"version_id\": 4,
                                            \"referenced\": \"UNKNOWN\",
                                            \"type_on_device\": \"\",
                                            \"negate\": false,
                                            \"match_for_any\": false,
                                            \"timeout\": 0,
                                            \"protocol\": 6,
                                            \"min_port\": 80,
                                            \"max_port\": 80
                                        }
                                    ]
                                },
                                \"action\": \"ACCEPT\",
                                \"additional_parameters\": \"\",
                                \"options\": {
                                    \"option\": \"LOG_SESSION\"
                                },
                                \"rule_location\": \"DG_1\",
                                \"users\": {
                                    \"user\": [
                                        {
                                            \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                            \"name\": \"Any\",
                                            \"class_name\": \"any_object\",
                                            \"displayName\": \"Any\"
                                        }
                                    ]
                                },
                                \"track\": {
                                    \"track_level\": \"LOG\"
                                },
                                \"install_ons\": \"\",
                                \"communities\": \"\",
                                \"times\": \"\",
                                \"rule_metadata\": {
                                    \"permissiveness_level\": \"LOW\",
                                    \"violations\": \"\",
                                    \"last_hit\": \"No hits\",
                                    \"shadowed_status\": \"FALSE\",
                                    \"ticket_ids\": \"\",
                                    \"business_owners\": \"\",
                                    \"expirations\": \"\",
                                    \"applications\": \"\",
                                    \"last_modified\": \"Today\"
                                }
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"id\": 12,
                \"rule_key\": {
                    \"device_id\": 4,
                    \"binding_uid\": \"{00-FACED0-00}\",
                    \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                },
                \"source_modifications\": {
                    \"id\": 24,
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"id\": 84,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 81,
                                    \"uid\": \"cd555580-3dd2-4830-86c6-260f9783569c\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"id\": 81,
                                            \"name\": \"My New Address Ragne\",
                                            \"comment\": \"some comment\",
                                            \"min_ip\": \"192.168.0.1\",
                                            \"max_ip\": \"192.168.0.254\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 83,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 80,
                                    \"uid\": \"fb534919-e43f-42c9-a7e3-cb00f6b9aaac\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"id\": 80,
                                            \"name\": \"My New Network\",
                                            \"comment\": \"some comment\",
                                            \"ip\": \"192.168.0.0\",
                                            \"netmask\": \"255.255.255.0\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 82,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 79,
                                    \"uid\": \"b76a4265-dc2d-43c7-a3f2-dfe434f6a034\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 79,
                                            \"name\": \"My New Host\",
                                            \"comment\": \"some comment\",
                                            \"ip\": \"192.168.0.10\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"id\": 23,
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"id\": 80,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 82,
                                    \"uid\": \"314933de-5b19-4d70-8712-576a0919285e\",
                                    \"device_id\": 2,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"id\": 82,
                                            \"name\": \"Net_10.108.151.0\",
                                            \"comment\": \"\",
                                            \"ip\": \"10.108.151.0\",
                                            \"netmask\": \"255.255.255.0\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 81,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 78,
                                    \"uid\": \"de5a9ef7-a1f0-463c-bf64-9acacbfdb119\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 78,
                                            \"name\": \"Host_10.10.10.10\",
                                            \"comment\": \"\",
                                            \"ip\": \"10.10.10.10\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 79,
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"id\": 83,
                                    \"uid\": \"822004d2-05bc-492b-96d5-6180b998fbc5\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 83,
                                            \"name\": \"22.22.2.2\",
                                            \"comment\": \"\",
                                            \"ip\": \"22.22.2.2\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 78,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 84,
                                    \"uid\": \"714dd5f3-976d-4880-b3cb-e45382ddb8ae\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"id\": 84,
                                            \"name\": \"Range-Test\",
                                            \"comment\": \"\",
                                            \"min_ip\": \"1.1.2.0\",
                                            \"max_ip\": \"1.1.2.55\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            }
        },
        \"designer_result\": {
            \"status\": \"not run\"
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Deleting rule recertification info is not allowed
400: Application Change field cannot be managed via this REST API
400: Rule associated with successfully updated recertification info cannot be removed
400: Rule was already updated
400: Rule does not exist
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object"},"response":[]},{"name":"Get rule decommision verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/rule_decommission/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/rule_decommission/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type <TYPE>.
404: Verifier results were not found in the request."},"response":[]},{"name":"Get designer results according to field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer","description":"Use this API to retrieve designer results generated in R17-2 and later.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request."},"response":[]},{"name":"Returns the results of the Commit action","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"},{"value":null,"type":"text","key":"managementId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/commit_report/{{managementId}}","description":"GENERAL USE
The report returns the Commit results for the device with the specified management ID and for the devices suggested in the Designer results. The report also includes results for devices that are in the related hierarchy of these devices.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID
managementId: Management ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/commit_report/3
OUTPUT{
    \"commit_report\": {
        \"ticketId\": 27,
        \"statTime\": \"24-Oct-2018 08:55 AM\",
        \"endTime\": \"24-Oct-2018 08:56 AM\",
        \"duration\": \"00:00:30\",
        \"vendorName\": \"PALO ALTO NETWORKS\",
        \"managmentName\": \"pano211\",
        \"devices\": {
            \"device\": [
                {
                    \"name\": \"DG1.1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                },
                {
                    \"name\": \"DG1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                }
            ]
        }
    }
}


Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request."},"response":[]},{"name":"Returns the details of a specified ticket stages","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found"},"response":[]},{"name":"Change a field within a task of a ticket at the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"rule_modification_field\": {\n\t\t\"id\": 71,\n\t\t\"name\": \"Fire Wall Rule\",\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\"management_id\": 4,\n\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"id\": 12,\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"id\": 24,\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\t\"uid\": \"cd555580-3dd2-4830-86c6-260f9783569c\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\t\"uid\": \"fb534919-e43f-42c9-a7e3-cb00f6b9aaac\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\t\"uid\": \"b76a4265-dc2d-43c7-a3f2-dfe434f6a034\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"id\": 23,\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 80,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\t\"uid\": \"314933de-5b19-4d70-8712-576a0919285e\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 82,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 81,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\t\"uid\": \"de5a9ef7-a1f0-463c-bf64-9acacbfdb119\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 79,\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\t\"uid\": \"822004d2-05bc-492b-96d5-6180b998fbc5\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 83,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"id\": 78,\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\t\"uid\": \"714dd5f3-976d-4880-b3cb-e45382ddb8ae\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 84,\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"designer_result\": {\n\t\t\t\"status\": \"not run\"\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields/{{fieldId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/7642
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"approve_reject\">
         <id>7661</id>
         <name>approve access</name>
         <approved>true</approved>
         <reason>Request approved</reason>
    </field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"id\": 71,
        \"name\": \"Fire Wall Rule\",
        \"devices\": {
            \"device\": {
                \"revision_id\": 4,
                \"management_name\": \"Panorama/DG_1\",
                \"management_id\": 4,
                \"management_ip\": \"10.100.111.120\",
                \"revision_number\": 1,
                \"number_of_rules\": 1,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{00-FACED0-00}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"Standard\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                \"name\": \"Application test\",
                                \"is_disabled\": false,
                                \"ruleNumber\": 13,
                                \"from_zone\": \"any\",
                                \"to_zone\": \"any\",
                                \"sourceNetworks\": {
                                    \"@xsi.type\": \"host_network_object\",
                                    \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                    \"name\": \"H_5.3.2.5\",
                                    \"display_name\": \"H_5.3.2.5\",
                                    \"class_name\": \"host_plain\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"comment\",
                                    \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                    \"version_id\": 4,
                                    \"device_type\": \"PaloAltoNetworks\",
                                    \"ip_type\": \"IPV4\",
                                    \"referenced\": \"UNKNOWN\",
                                    \"installable_target\": false,
                                    \"ip\": \"5.3.2.5\",
                                    \"subnet_mask\": \"255.255.255.255\"
                                },
                                \"destinationNetworks\": {
                                    \"@xsi.type\": \"host_network_object\",
                                    \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                    \"name\": \"22.22.2.2\",
                                    \"display_name\": \"22.22.2.2\",
                                    \"class_name\": \"host_plain\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"\",
                                    \"id\": \"5df1f2a5e9023c311ae4a016\",
                                    \"version_id\": 4,
                                    \"device_type\": \"PaloAltoNetworks\",
                                    \"ip_type\": \"IPV4\",
                                    \"referenced\": \"UNKNOWN\",
                                    \"installable_target\": false,
                                    \"ip\": \"22.22.2.2\",
                                    \"subnet_mask\": \"255.255.255.255\"
                                },
                                \"destinationServices\": {
                                    \"@xsi.type\": \"transport_service\",
                                    \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                    \"name\": \"TCP82\",
                                    \"display_name\": \"TCP82\",
                                    \"class_name\": \"tcp_service\",
                                    \"origin\": \"DEVICE\",
                                    \"global\": false,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"TCP82\",
                                    \"id\": \"5df1f2a5e9023c311ae4a018\",
                                    \"version_id\": 4,
                                    \"referenced\": \"UNKNOWN\",
                                    \"type_on_device\": \"\",
                                    \"negate\": false,
                                    \"match_for_any\": false,
                                    \"timeout\": 0,
                                    \"protocol\": 6,
                                    \"min_port\": 82,
                                    \"max_port\": 82
                                },
                                \"applications\": {
                                    \"@xsi.type\": \"single_application\",
                                    \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                    \"name\": \"web-browsing\",
                                    \"display_name\": \"web-browsing\",
                                    \"class_name\": \"application_object\",
                                    \"origin\": \"DEVICE_PREDEFINED\",
                                    \"global\": true,
                                    \"implicit\": false,
                                    \"shared\": false,
                                    \"comment\": \"\",
                                    \"service\": [
                                        {
                                            \"@xsi.type\": \"transport_service\",
                                            \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                            \"name\": \"st_implicit_app_web-browsing\",
                                            \"display_name\": \"st_implicit_app_web-browsing\",
                                            \"class_name\": \"tcp_service\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": true,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"id\": \"5df1f2a5e9023c311ae4a014\",
                                            \"version_id\": 4,
                                            \"referenced\": \"UNKNOWN\",
                                            \"type_on_device\": \"\",
                                            \"negate\": false,
                                            \"match_for_any\": false,
                                            \"timeout\": 0,
                                            \"protocol\": 6,
                                            \"min_port\": 80,
                                            \"max_port\": 80
                                        }
                                    ]
                                },
                                \"action\": \"ACCEPT\",
                                \"additional_parameters\": \"\",
                                \"options\": {
                                    \"option\": \"LOG_SESSION\"
                                },
                                \"rule_location\": \"DG_1\",
                                \"users\": {
                                    \"user\": [
                                        {
                                            \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                            \"name\": \"Any\",
                                            \"class_name\": \"any_object\",
                                            \"displayName\": \"Any\"
                                        }
                                    ]
                                },
                                \"track\": {
                                    \"track_level\": \"LOG\"
                                },
                                \"install_ons\": \"\",
                                \"communities\": \"\",
                                \"times\": \"\",
                                \"rule_metadata\": {
                                    \"permissiveness_level\": \"LOW\",
                                    \"violations\": \"\",
                                    \"last_hit\": \"No hits\",
                                    \"shadowed_status\": \"FALSE\",
                                    \"ticket_ids\": \"\",
                                    \"business_owners\": \"\",
                                    \"expirations\": \"\",
                                    \"applications\": \"\",
                                    \"last_modified\": \"Today\"
                                }
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"id\": 12,
                \"rule_key\": {
                    \"device_id\": 4,
                    \"binding_uid\": \"{00-FACED0-00}\",
                    \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                },
                \"source_modifications\": {
                    \"id\": 24,
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"id\": 84,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 81,
                                    \"uid\": \"cd555580-3dd2-4830-86c6-260f9783569c\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"id\": 81,
                                            \"name\": \"My New Address Ragne\",
                                            \"comment\": \"some comment\",
                                            \"min_ip\": \"192.168.0.1\",
                                            \"max_ip\": \"192.168.0.254\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 83,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 80,
                                    \"uid\": \"fb534919-e43f-42c9-a7e3-cb00f6b9aaac\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"id\": 80,
                                            \"name\": \"My New Network\",
                                            \"comment\": \"some comment\",
                                            \"ip\": \"192.168.0.0\",
                                            \"netmask\": \"255.255.255.0\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 82,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 79,
                                    \"uid\": \"b76a4265-dc2d-43c7-a3f2-dfe434f6a034\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 79,
                                            \"name\": \"My New Host\",
                                            \"comment\": \"some comment\",
                                            \"ip\": \"192.168.0.10\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"id\": 23,
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"id\": 80,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 82,
                                    \"uid\": \"314933de-5b19-4d70-8712-576a0919285e\",
                                    \"device_id\": 2,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"id\": 82,
                                            \"name\": \"Net_10.108.151.0\",
                                            \"comment\": \"\",
                                            \"ip\": \"10.108.151.0\",
                                            \"netmask\": \"255.255.255.0\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 81,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 78,
                                    \"uid\": \"de5a9ef7-a1f0-463c-bf64-9acacbfdb119\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 78,
                                            \"name\": \"Host_10.10.10.10\",
                                            \"comment\": \"\",
                                            \"ip\": \"10.10.10.10\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 79,
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"id\": 83,
                                    \"uid\": \"822004d2-05bc-492b-96d5-6180b998fbc5\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"id\": 83,
                                            \"name\": \"22.22.2.2\",
                                            \"comment\": \"\",
                                            \"ip\": \"22.22.2.2\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"id\": 78,
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"id\": 84,
                                    \"uid\": \"714dd5f3-976d-4880-b3cb-e45382ddb8ae\",
                                    \"device_id\": 4,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"id\": 84,
                                            \"name\": \"Range-Test\",
                                            \"comment\": \"\",
                                            \"min_ip\": \"1.1.2.0\",
                                            \"max_ip\": \"1.1.2.55\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            }
        },
        \"designer_result\": {
            \"status\": \"not run\"
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object"},"response":[]},{"name":"Change multiple field within a task of a ticket in the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"fields\": {\n\t\t\"field\": {\n\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\"id\": 71,\n\t\t\t\"name\": \"Fire Wall Rule\",\n\t\t\t\"read_only\": false,\n\t\t\t\"devices\": {\n\t\t\t\t\"device\": {\n\t\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\t\"management_id\": 4,\n\t\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"rule_modifications\": {\n\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\"id\": 10,\n\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t\t},\n\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\"id\": 20,\n\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"9b9062a0-228a-4543-bbd4-9fda5c76573b\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"986c68ab-b5b5-478d-9300-bc0cacc06dfe\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"1073dad5-4dc9-4392-8b42-f32de2937657\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 68,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t},\n\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\"id\": 19,\n\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"e52c07fc-dffb-4c77-a656-40d1b1322e77\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 67,\n\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"fa681c9b-8c4f-449d-9b31-108a399902f5\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 66,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 65,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"2b8eaa1a-f4ea-4c39-b89e-361af89a308e\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 70,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\"id\": 64,\n\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"88efeaad-cfb4-41c4-b14c-fff104c24e52\",\n\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 69,\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t]\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t},\n\t\t\t\"designer_result\": {\n\t\t\t\t\"status\": \"not run\"\n\t\t\t}\n\t\t}\n\t}\n}}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_server_decommission_request\">
         <id>7591</id>
         <name>sd</name>
         <server_decommission_request>
             <id>7596</id>
             <order>DR1</order>
             <servers>
                 <server type=\"IP\">
                     <id>7593</id>
                     <ip_address>2.2.2.2</ip_address>
                     <netmask>255.255.255.255</netmask>
                 </server>
             </servers>
             <targets>
                 <target type=\"ANY\">
                     <id>7595</id>
                 </target>
             </targets>
             <comment>change ip from 1.1.1.1 to 2.2.2.2</comment>
         </server_decommission_request>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"date\">
         <id>7786</id>
         <name>date</name>
         <value>2015-12-15</value>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"time\">
         <id>7787</id>
         <name>time</name>
         <value>12:00</value>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
    \"fields\": {
        \"field\": {
            \"@xsi.type\": \"rule_modification_field\",
            \"id\": 71,
            \"name\": \"Fire Wall Rule\",
            \"read_only\": false,
            \"devices\": {
                \"device\": {
                    \"revision_id\": 4,
                    \"management_name\": \"Panorama/DG_1\",
                    \"management_id\": 4,
                    \"management_ip\": \"10.100.111.120\",
                    \"revision_number\": 1,
                    \"number_of_rules\": 1,
                    \"bindings\": {
                        \"binding\": {
                            \"binding_uid\": \"{00-FACED0-00}\",
                            \"binding\": {
                                \"@xsi.type\": \"policy__binding\",
                                \"policy_name\": \"Standard\"
                            },
                            \"rules\": {
                                \"rule\": {
                                    \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                    \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                    \"name\": \"Application test\",
                                    \"is_disabled\": false,
                                    \"ruleNumber\": 13,
                                    \"from_zone\": \"any\",
                                    \"to_zone\": \"any\",
                                    \"sourceNetworks\": {
                                        \"@xsi.type\": \"host_network_object\",
                                        \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                        \"name\": \"H_5.3.2.5\",
                                        \"display_name\": \"H_5.3.2.5\",
                                        \"class_name\": \"host_plain\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"comment\",
                                        \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                        \"version_id\": 4,
                                        \"device_type\": \"PaloAltoNetworks\",
                                        \"ip_type\": \"IPV4\",
                                        \"referenced\": \"UNKNOWN\",
                                        \"installable_target\": false,
                                        \"ip\": \"5.3.2.5\",
                                        \"subnet_mask\": \"255.255.255.255\"
                                    },
                                    \"destinationNetworks\": {
                                        \"@xsi.type\": \"host_network_object\",
                                        \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                        \"name\": \"22.22.2.2\",
                                        \"display_name\": \"22.22.2.2\",
                                        \"class_name\": \"host_plain\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"\",
                                        \"id\": \"5df1f2a5e9023c311ae4a016\",
                                        \"version_id\": 4,
                                        \"device_type\": \"PaloAltoNetworks\",
                                        \"ip_type\": \"IPV4\",
                                        \"referenced\": \"UNKNOWN\",
                                        \"installable_target\": false,
                                        \"ip\": \"22.22.2.2\",
                                        \"subnet_mask\": \"255.255.255.255\"
                                    },
                                    \"destinationServices\": {
                                        \"@xsi.type\": \"transport_service\",
                                        \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                        \"name\": \"TCP82\",
                                        \"display_name\": \"TCP82\",
                                        \"class_name\": \"tcp_service\",
                                        \"origin\": \"DEVICE\",
                                        \"global\": false,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"TCP82\",
                                        \"id\": \"5df1f2a5e9023c311ae4a018\",
                                        \"version_id\": 4,
                                        \"referenced\": \"UNKNOWN\",
                                        \"type_on_device\": \"\",
                                        \"negate\": false,
                                        \"match_for_any\": false,
                                        \"timeout\": 0,
                                        \"protocol\": 6,
                                        \"min_port\": 82,
                                        \"max_port\": 82
                                    },
                                    \"applications\": {
                                        \"@xsi.type\": \"single_application\",
                                        \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                        \"name\": \"web-browsing\",
                                        \"display_name\": \"web-browsing\",
                                        \"class_name\": \"application_object\",
                                        \"origin\": \"DEVICE_PREDEFINED\",
                                        \"global\": true,
                                        \"implicit\": false,
                                        \"shared\": false,
                                        \"comment\": \"\",
                                        \"service\": [
                                            {
                                                \"@xsi.type\": \"transport_service\",
                                                \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                                \"name\": \"st_implicit_app_web-browsing\",
                                                \"display_name\": \"st_implicit_app_web-browsing\",
                                                \"class_name\": \"tcp_service\",
                                                \"origin\": \"DEVICE\",
                                                \"global\": false,
                                                \"implicit\": true,
                                                \"shared\": false,
                                                \"comment\": \"\",
                                                \"id\": \"5df1f2a5e9023c311ae4a014\",
                                                \"version_id\": 4,
                                                \"referenced\": \"UNKNOWN\",
                                                \"type_on_device\": \"\",
                                                \"negate\": false,
                                                \"match_for_any\": false,
                                                \"timeout\": 0,
                                                \"protocol\": 6,
                                                \"min_port\": 80,
                                                \"max_port\": 80
                                            }
                                        ]
                                    },
                                    \"action\": \"ACCEPT\",
                                    \"additional_parameters\": \"\",
                                    \"options\": {
                                        \"option\": \"LOG_SESSION\"
                                    },
                                    \"rule_location\": \"DG_1\",
                                    \"users\": {
                                        \"user\": [
                                            {
                                                \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                                \"name\": \"Any\",
                                                \"class_name\": \"any_object\",
                                                \"displayName\": \"Any\"
                                            }
                                        ]
                                    },
                                    \"track\": {
                                        \"track_level\": \"LOG\"
                                    },
                                    \"install_ons\": \"\",
                                    \"communities\": \"\",
                                    \"times\": \"\",
                                    \"rule_metadata\": {
                                        \"permissiveness_level\": \"LOW\",
                                        \"violations\": \"\",
                                        \"last_hit\": \"No hits\",
                                        \"shadowed_status\": \"FALSE\",
                                        \"ticket_ids\": \"\",
                                        \"business_owners\": \"\",
                                        \"expirations\": \"\",
                                        \"applications\": \"\",
                                        \"last_modified\": \"Today\"
                                    }
                                }
                            }
                        }
                    }
                }
            },
            \"rule_modifications\": {
                \"rule_modification\": {
                    \"@xsi.type\": \"modify_rule_modification\",
                    \"id\": 10,
                    \"rule_key\": {
                        \"device_id\": 4,
                        \"binding_uid\": \"{00-FACED0-00}\",
                        \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                    },
                    \"source_modifications\": {
                        \"id\": 20,
                        \"network_object_cell_modifications\": {
                            \"network_object_cell_modification\": [
                                {
                                    \"id\": 69,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 65,
                                        \"uid\": \"9b9062a0-228a-4543-bbd4-9fda5c76573b\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 65,
                                                \"name\": \"My New Host\",
                                                \"comment\": \"some comment\",
                                                \"ip\": \"192.168.0.10\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 68,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 64,
                                        \"uid\": \"986c68ab-b5b5-478d-9300-bc0cacc06dfe\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                \"id\": 64,
                                                \"name\": \"My New Address Ragne\",
                                                \"comment\": \"some comment\",
                                                \"min_ip\": \"192.168.0.1\",
                                                \"max_ip\": \"192.168.0.254\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 70,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 68,
                                        \"uid\": \"1073dad5-4dc9-4392-8b42-f32de2937657\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"new\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                \"id\": 68,
                                                \"name\": \"My New Network\",
                                                \"comment\": \"some comment\",
                                                \"ip\": \"192.168.0.0\",
                                                \"netmask\": \"255.255.255.0\"
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    },
                    \"destination_modifications\": {
                        \"id\": 19,
                        \"network_object_cell_modifications\": {
                            \"network_object_cell_modification\": [
                                {
                                    \"id\": 66,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 67,
                                        \"uid\": \"e52c07fc-dffb-4c77-a656-40d1b1322e77\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                \"id\": 67,
                                                \"name\": \"Range-Test\",
                                                \"comment\": \"\",
                                                \"min_ip\": \"1.1.2.0\",
                                                \"max_ip\": \"1.1.2.55\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 67,
                                    \"action\": \"REMOVE\",
                                    \"device_network_object\": {
                                        \"id\": 66,
                                        \"uid\": \"fa681c9b-8c4f-449d-9b31-108a399902f5\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 66,
                                                \"name\": \"22.22.2.2\",
                                                \"comment\": \"\",
                                                \"ip\": \"22.22.2.2\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 65,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 70,
                                        \"uid\": \"2b8eaa1a-f4ea-4c39-b89e-361af89a308e\",
                                        \"device_id\": 2,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                \"id\": 70,
                                                \"name\": \"Net_10.108.151.0\",
                                                \"comment\": \"\",
                                                \"ip\": \"10.108.151.0\",
                                                \"netmask\": \"255.255.255.0\"
                                            }
                                        ]
                                    }
                                },
                                {
                                    \"id\": 64,
                                    \"action\": \"ADD\",
                                    \"device_network_object\": {
                                        \"id\": 69,
                                        \"uid\": \"88efeaad-cfb4-41c4-b14c-fff104c24e52\",
                                        \"device_id\": 4,
                                        \"status\": {
                                            \"@xsi.type\": \"existing\",
                                            \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                        },
                                        \"network_object\": [
                                            {
                                                \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                \"id\": 69,
                                                \"name\": \"Host_10.10.10.10\",
                                                \"comment\": \"\",
                                                \"ip\": \"10.10.10.10\",
                                                \"netmask\": \"255.255.255.255\"
                                            }
                                        ]
                                    }
                                }
                            ]
                        }
                    }
                }
            },
            \"designer_result\": {
                \"status\": \"not run\"
            }
        }
    }
}}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object"},"response":[]},{"name":"Modify the Designer suggestions for Access Request or Clone Server Policy","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"rule_placement\": {\"new_value\":\"before\"}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/tasks/{{taskId}}/designer/instruction/{{instructionId}}","description":" GENERAL USE
1. Create a ticket using UI/API.
2. Run the designer using UI/API.
3. Use relevent API to get the designer results.
4. Run this API to modify the required parameters.

*Note: you can modify one parameter at a time.

Change rule location use
a. Modifying the rule order places the new rule before the rule with the specified identifier (rule name or number).
b. Modifying the rule placement to \"last\" places the new rule as last rule or last pre-rule (depending on the vendor convention for the device).
c. For vendors that support \"after\" placement, modifying the rule placement allows positioning the new rule before or after the suggested rule location.

track level permitted values:
NONE, LOG, ACCOUNT, ALERT, SNMP, MAIL, USER_DEFINED, EMERGENCIES, ALERTS, CRITICAL, ERRORS, WARNINGS, NOTIFICATIONS, INFORMATIONAL, DEBUGGING, DISABLED, DEFAULT, FULL_LOG, NETWORK_LOG, USER_ALERT_1, USER_ALERT_2, USER_ALERT_3

rule placement permitted values:
BEFORE, AFTER, LAST

Parameters:
body: DesignerInstructionChangeDTO
id: Ticket ID
taskId: Task ID
instructionId: Instruction ID
force: force update when new revision available [optional]

Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196?force=true
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_name\": {\"new_value\":\"new rule name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"track_level\": {\"new_value\":\"LOG\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_name\": {\"new_value\":\"new object name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"log_forwarding_profile\": {\"new_value\":\"new log forwarding profile\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"security_profile_group\": {\"new_value\":\"new security profile group\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_replace\": {
             \"new_value\":\"new object uid\",
             \"old_value\":\"old object uid\"
    }
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_order\": {\"new_value\":\"8\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"last\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"before\"}
}


Response Messages:
200: New rule will be shadowed
200: New rule will be shadowed or break acceleration
400: Modify Designer Results API is only supported for Access Request and Clone Server Policy workflows
412: Current instruction cannot be modified because either the implementation was successful or failed irrevocably.
412: Current step does not support Designer modification action
400: A ticket with ID <ID> cannot be found.
400: Task ID <ID> cannot be found in the current step with ID <ID>.
403: Changing <TYPE> is not supported on this device
403: This Change is not supported for <INSTRUCTION TYPE> instruction type\"
401: You do not have permission to update this task. Contact your administrator for assistance.
403: New revision is available, cannot modify the Designer results
404: Specified instruction, id: <ID> was not found
404: Designer results were not found in the access request.
400: a valid object name must start with an alphanumeric character and can contain alphanumeric characters, underscore '_'. Hypen '-', dot '.' or spaces
400: For this device, the comment must be less than 100 characters per line.
400: For this device, this field must be less than <NUMBER OF CHARACTERS> characters
400: For this device, this field is required.
409: Rule name already exists for this device. Please give this rule a unique name.
409: Rule name <NAME> already exists in the device group hierarchy. Choose a unique name for this rule.
400: Comment contains invalid characters.
400: <DEVICE> does not support tracking level <TRACKING LEVEL>
400: <TRACKING LEVEL> is not a valid rule track level value
400: a valid object name cannot contain any of the following characters: <CHARACTERS>
400: a valid object name must be less than <NUMBER OF CHARACTERS> characters
400: a valid object name cannot be empty
400: a valid object name must conform to the following pattern: <STRING PATTERN>
409: Object already exists
400: A security profile group cannot be empty.
404: The security profile group <SECURITY PROFILE GROUP> was not found.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to validate the security profile group.
400: A log forwarding profile cannot be empty.
404: The log forwarding profile <LOG FORWARDING PROFILE> was not found.
500: An error occurred in SecureTrack while trying to validate the log forwarding profile.
400: Object UID <OLD OBJECT UID> not found in the rule for this instruction.
400: Values of new object UID <NEW OBJECT UID> and old object UID <OLD OBJECT UID> do not match.
400: Rule placement can only be: \"before\", \"after\" or \"last\".
400: You can't change rule placement when there is no rule order. please add rule order first.
400: You can't change rule placement to \"After\" for this type of device.
400: You can't change rule placement to \"Last\" for this type of device."},"response":[]},{"name":"Returns the details of a specified ticket stages","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID."},"response":[]},{"name":"Returns a list of tickets by search parameters","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/free_text_search","description":"Parameters:
parameter: Free text search parameter (Search syntax details) [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/free_text_search/?parameter=taskstatus:ASSIGNED AND priority:High

Response Messages:
400: Can not fetch more than 100 tickets in 1 time
401: Access is denied.
404: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED
404: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
404: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
404: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
404: No entity found for query"},"response":[]},{"name":"Get server clone policy verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/clone_server_policy/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/clone_server_policy/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the server clone policy request."},"response":[]},{"name":"Returns the details of a specified ticket","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1
OUTPUT {
    \"ticket\": {
        \"id\": 1,
        \"subject\": \"AR-Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 11,
            \"name\": \"AR & MG\",
            \"uses_topology\": true
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 209,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 209,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": [
                                    {
                                        \"@xsi.type\": \"multi_access_request\",
                                        \"id\": 1695,
                                        \"name\": \"AR\",
                                        \"read_only\": false,
                                        \"access_request\": {
                                            \"id\": 1706,
                                            \"order\": \"AR1\",
                                            \"risk_analysis_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"verifier_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"use_topology\": true,
                                            \"targets\": {
                                                \"target\": {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1705
                                                }
                                            },
                                            \"users\": {
                                                \"user\": [
                                                    \"Any\"
                                                ]
                                            },
                                            \"sources\": {
                                                \"source\": [
                                                    {
                                                        \"@type\": \"INTERNET\",
                                                        \"id\": 1701
                                                    },
                                                    {
                                                        \"@type\": \"DNS\",
                                                        \"id\": 1702,
                                                        \"host_name\": \"www.google.com\",
                                                        \"dns_ip_addresses\": {
                                                            \"ip_address\": \"216.58.214.100\"
                                                        }
                                                    },
                                                    {
                                                        \"@type\": \"IP\",
                                                        \"id\": 1703,
                                                        \"ip_address\": \"1.1.1.1\",
                                                        \"netmask\": \"255.255.255.255\",
                                                        \"nat_ip_address\": \"4.4.4.4\",
                                                        \"nat_netmask\": \"255.255.255.255\"
                                                    }
                                                ]
                                            },
                                            \"destinations\": {
                                                \"destination\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1697
                                                    }
                                                ]
                                            },
                                            \"services\": {
                                                \"service\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1699
                                                    }
                                                ]
                                            },
                                            \"action\": \"Accept\",
                                            \"labels\": \"\"
                                        }
                                    },
                                    {
                                        \"@xsi.type\": \"multi_group_change\",
                                        \"id\": 1707,
                                        \"name\": \"MG\",
                                        \"read_only\": false,
                                        \"implementation_status\": \"NOT_SUPPORTED\"
                                    }
                                ]
                            }
                        }
                    }
                },
                {
                    \"id\": 210,
                    \"name\": \"STEP2 - auto AR with designer /update /commit\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 210,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"unlicensed_devices_for_automation\": {
                                \"unlicensed_device_for_automation\": [
                                    {
                                        \"id\": \"2\",
                                        \"name\": \"asa\"
                                    }
                                ]
                            }
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"multi_access_request\",
                                    \"id\": 1709,
                                    \"name\": \"AR\",
                                    \"read_only\": false,
                                    \"access_request\": {
                                        \"id\": 1720,
                                        \"order\": \"AR1\",
                                        \"risk_analysis_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"verifier_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"use_topology\": true,
                                        \"targets\": {
                                            \"target\": {
                                                \"@type\": \"ANY\",
                                                \"id\": 1719
                                            }
                                        },
                                        \"users\": {
                                            \"user\": [
                                                \"Any\"
                                            ]
                                        },
                                        \"sources\": {
                                            \"source\": [
                                                {
                                                    \"@type\": \"INTERNET\",
                                                    \"id\": 1721
                                                },
                                                {
                                                    \"@type\": \"DNS\",
                                                    \"id\": 1722,
                                                    \"host_name\": \"www.google.com\",
                                                    \"dns_ip_addresses\": {
                                                        \"ip_address\": \"216.58.214.100\"
                                                    }
                                                },
                                                {
                                                    \"@type\": \"IP\",
                                                    \"id\": 1723,
                                                    \"ip_address\": \"1.1.1.1\",
                                                    \"netmask\": \"255.255.255.255\",
                                                    \"nat_ip_address\": \"4.4.4.4\",
                                                    \"nat_netmask\": \"255.255.255.255\"
                                                },
                                                {
                                                    \"@type\": \"RANGE\",
                                                    \"id\": 1724,
                                                    \"range_first_ip\": \"1.1.11.1\",
                                                    \"range_last_ip\": \"1.1.11.10\"
                                                }
                                            ]
                                        },
                                        \"destinations\": {
                                            \"destination\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1711
                                                }
                                            ]
                                        },
                                        \"services\": {
                                            \"service\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1713
                                                }
                                            ]
                                        },
                                        \"action\": \"Accept\",
                                        \"labels\": \"\"
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 210,
            \"name\": \"STEP2 - auto AR with designer /update /commit\"
        },
        \"comments\": \"\"
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2
OUTPUT {
    \"ticket\": {
        \"id\": 2,
        \"subject\": \"Clone Server Policy Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 12,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 109,
            \"name\": \"sc_12705\",
            \"uses_topology\": false
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 78,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 78,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 872,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 869,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 871,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                },
                {
                    \"id\": 79,
                    \"name\": \"Business Approval\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 79,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 876,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 873,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 875,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 79,
            \"name\": \"Business Approval\"
        },
        \"comments\": \"\"
    }
}


Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: No entity found for query"},"response":[]},{"name":"Submit a new ticket to Secure Change","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"ticket\": {\n\t\t\"application_details\": { \"id\": \"1\" },\n\t\t\"subject\": \"topology mode_AR1-with topology_AR2-no topology\",\n\t\t\"priority\": \"Normal\",\n\t\t\"workflow\": { \"name\": \"ar\" }\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","description":" GENERAL USE
When posting a Modify Group ticket, group scope must be configured for FortiManager advanced and Juniper SRX devices.
Juniper SRX devices:
Global address-book will be used unless an existing address-book is given.
Ticket validation will fail in case given Address Book is not configured on the device.
FortiManager advanced devices:
'Any' zone will be used unless an existing zone is given.
Ticket validation will fail in case given zone is not configured on the device.
*Note: Zones and address-books must not be configured for other devices.

Using newly created objects from a different group in the same ticket
The user can add a newly created object from a different group to the selected group, with object_UID equal to the name of the newly created object.
For management devices with hierarchies, the newly created object does not populate other levels of the hierarchies.

Permitted values for @type
Allowed values for @type property included in DestinationDTO and SourceDTO are:
ANY
IP
DNS
Object - Device's existing object
INTERNET
LDAP (SourceDTO only) - LDAP entity

To use a service object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketDTO
closed: Cannot be done from the API [optional]
count [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>topology mode_AR1-with topology_AR2-no topology</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <domain_name>Default</domain_name>
    <workflow>
         <id>7</id>
         <name>Workflow with topology</name>
    </workflow>
    <steps>
         <step>
             <name>Open request</name>
             <tasks>
                 <task>
                     <fields>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_access_request\">
                             <name>Required Access</name>
                             <access_request>
                                 <use_topology>true</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>ASA</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>host_10.100.10.140</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
                                         <management_id>13</management_id>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>h_10.10.10.10</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"PROTOCOL\">
                                         <protocol>TCP</protocol>
                                         <port>80</port>
                                     </service>
                                     <service type=\"APPLICATION_IDENTITY\">
                                         <application_name>Gmail</application_name>
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                             <access_request>
                                 <use_topology>false</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>inside_access_in</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>1.1.1.0</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>network_regi3</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"ANY\">
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                             <name>Business Justification</name>
                             <text>I need access to ftp </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                             <name>Project Number</name>
                             <text>CR124560 </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                             <name>Hyperlink</name>
                             <url>http://192.168.1.1/ticket</url>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                             <name>Change Window</name>
                             <selection>Monday</selection>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                             <name>manager email</name>
                             <text>manager@tufin.com</text>
                         </field>
                     </fields>
                 </task>
             </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>New MG ticket</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <status>In Progress</status>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>6</id>
        <name>MG</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>72</id>
            <name>New step</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>72</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>
                    <status>ASSIGNED</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>262</id>
                            <name>MG</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>ExistingGroup</name>
                                <object_UID>{c862fb6f-1314-45da-9e01-56c9b85d001d}</object_UID>
                                <management_id>58</management_id>
                                <management_name>FMG/root</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>157</id>
                                        <name>10.100 net</name>
                                        <object_UID>{37cdc055-7aac-4385-b46b-cc54d95e4b6d}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.100.0.0/255.255.0.0</object_details>
                                        <management_id>58</management_id>
                                        <management_name>FMG/root</management_name>
                                        <status>NOT_CHANGED</status>
                                        <object_updated_status>EXISTING_EDITED</object_updated_status>
                                        <comment>new_comment</comment>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                            <group_change>
                                <name>78.45.12.0</name>
                                <object_UID>{cac64d34-a05e-4a05-b271-64642eb976ff}</object_UID>
                                <management_id>28</management_id>
                                <management_name>SRX-root-lsys</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>158</id>
                                        <name>78.45.12.1</name>
                                        <object_UID>{7912c335-6dbe-47de-b872-1322f9015b2f}</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>78.45.12.1/255.255.255.255</object_details>
                                        <management_id>28</management_id>
                                        <management_name>SRX-root-lsys</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <address_book>
                                    <name>global</name>
                                </address_book>
                            </group_change>
                            <group_change>
                                <name>10.10.0.0/16</name>
                                <object_UID>{5dff0bd8-51e4-4a83-8138-d54dd18ca52b}</object_UID>
                                <management_id>24</management_id>
                                <management_name>NSX-Distributed Firewall</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>161</id>
                                        <name>10.10.0.0/16</name>
                                        <object_UID>{5d7b826c-f053-40fd-81bd-7a6f44cf15ef}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.10.0.0/255.255.0.0</object_details>
                                        <management_id>24</management_id>
                                        <management_name>NSX-Distributed Firewall</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>test API</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>8</id>
        <name>Modify group</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>11</id>
            <name>Open request</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>11</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>                    <status>DONE</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>137</id>
                            <name>ff</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>port1Group</name>
                                <object_UID>{d5b4459b-6b27-4012-9924-b244c250520f}</object_UID>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"HOST\">
                                        <id>69</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <status>ADDED</status>
                                        <comment/>
                                        <object_updated_status>NEW</object_updated_status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                            <group_change>
                                <name>gfd</name>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>70</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <management_name>10.100.111.8/ADOM_5_2</management_name>
                                        <status>ADDED</status>
                                        <object_updated_status>EXISTING_NOT_EDITED</object_updated_status>
                                    </member>
                                </members>
                                <change_action>CREATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <current_step>
        <id>12</id>
        <name>Copy of Open request</name>
    </current_step>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"application_details\": { \"id\": \"1\" },
        \"subject\": \"topology mode_AR1-with topology_AR2-no topology\",
        \"priority\": \"Normal\",
        \"workflow\": { \"name\": \"ar\" }
    }
}


Response Messages:
400: Application ID is missing.
400: Create closed ticket is enabled only from SecureApp application.
400: The application was already deleted.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: You cannot open a new ticket with an empty subject.
400: Expiration field is required.
400: Submit ticket enabled only with the first step
400: First step can be only with one task
400: The specified workflow does not contain an access request field in the first step.
400: There are no changed connections that are ready for creating a ticket.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
400: Managed tasks are not initialized or done
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (Rule Modification workflow is not supported for this device)
401: You do not have permissions to edit this application.
401: Logged in user: NAME do not have permission to perform on behalf actions
401: You are not a participant in the first step of this workflow
401: UNAUTHORIZED
404: There is no application with the specified ID
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object"},"response":[]},{"name":"Returns the details of a specified tickets (max 100 tickets in a single query)","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
status: The status of the tickets [optional]
count: Tickets list max pagination length (max value is 100) [optional]
start: Offset the count starting point [optional]
desc: Get the list in descending order [optional]
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets?status=In Progress&count=10&start=3&expand_links=false

Response Messages:
400: Status is not a valid. The valid values are: TICKET_STATUSES
400: Can not fetch more than 100 tickets in 1 time
401: Access is denied"},"response":[]},{"name":"Returns a list of tickets by search parameters","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/search","description":"If the query is succesful but no results are found (for example, if there is no ticket for the specified Ticket ID) then the return code will be 200 and the results will be empty.

Parameters:
id: The ID number of the ticket as shown in SecureChange [optional]
subject: The subject of the ticket [optional]
requester: The requester of the ticket [optional]
group: The group handling the ticket [optional]
assigned_to: The user name of the person assigned to the ticket [optional]
priority: The priority of the ticket [optional]
status: The status of the ticket [optional]
sla_status: The SLA status of the ticket [optional]
field_name: Field name to search by [optional]
field_value: Field value to search by [optional]
current_step: Current step name [optional]
expiration_date_from: Search requests with expiration date from this date [optional]
expiration_date_to: Search requests with expiration date until this date [optional]
domain_name: The Domain of the ticket [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/search?id=1&status=IN_PROGRESS,REJECTED

Response Messages:
401: Access is denied.
400: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED, WAITING_TO_BE_ASSIGNED, ASSIGNED, WAITING_FOR_MORE_INFO, DONE, INVALID, PENDING, PENDING_LICENS
400: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
400: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
400: Cannot find specified domain <DOMAIN_NAME>"},"response":[]},{"name":"Returns topology map image (png file) for specific verifier results","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier/topology_map","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier/topology_map

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.
404: Toplogy map was not found for this field."},"response":[]},{"name":"Get access request verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request."},"response":[]},{"name":"Returns the details of a specified task","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2?expand_links=true

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID ."},"response":[]},{"name":"Change a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"task\": {\n\t\t\"id\": 4,\n\t\t\"assignee_id\": 4,\n\t\t\"assignee\": \"a\",\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 71,\n\t\t\t\t\"name\": \"Fire Wall Rule\",\n\t\t\t\t\"read_only\": false,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 4,\n\t\t\t\t\t\t\"management_name\": \"Panorama/DG_1\",\n\t\t\t\t\t\t\"management_id\": 4,\n\t\t\t\t\t\t\"management_ip\": \"10.100.111.120\",\n\t\t\t\t\t\t\"revision_number\": 1,\n\t\t\t\t\t\t\"number_of_rules\": 1,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"Standard\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"Application test\",\n\t\t\t\t\t\t\t\t\t\t\"is_disabled\": false,\n\t\t\t\t\t\t\t\t\t\t\"ruleNumber\": 13,\n\t\t\t\t\t\t\t\t\t\t\"from_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\t\"to_zone\": \"any\",\n\t\t\t\t\t\t\t\t\t\t\"sourceNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"H_5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"comment\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a01a\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"5.3.2.5\",\n\t\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"destinationNetworks\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"host_plain\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a016\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"device_type\": \"PaloAltoNetworks\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip_type\": \"IPV4\",\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"installable_target\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\"subnet_mask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"destinationServices\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"TCP82\",\n\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a018\",\n\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 82,\n\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 82\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"applications\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"single_application\",\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"application_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE_PREDEFINED\",\n\t\t\t\t\t\t\t\t\t\t\t\"global\": true,\n\t\t\t\t\t\t\t\t\t\t\t\"implicit\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"service\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"display_name\": \"st_implicit_app_web-browsing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"tcp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"origin\": \"DEVICE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"global\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"implicit\": true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"shared\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": \"5df1f2a5e9023c311ae4a014\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"version_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"referenced\": \"UNKNOWN\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"type_on_device\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"negate\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"match_for_any\": false,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"timeout\": 0,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": 6,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_port\": 80,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_port\": 80\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ACCEPT\",\n\t\t\t\t\t\t\t\t\t\t\"additional_parameters\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"options\": {\n\t\t\t\t\t\t\t\t\t\t\t\"option\": \"LOG_SESSION\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"rule_location\": \"DG_1\",\n\t\t\t\t\t\t\t\t\t\t\"users\": {\n\t\t\t\t\t\t\t\t\t\t\t\"user\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Any\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"class_name\": \"any_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"displayName\": \"Any\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"track\": {\n\t\t\t\t\t\t\t\t\t\t\t\"track_level\": \"LOG\"\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"install_ons\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"communities\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"times\": \"\",\n\t\t\t\t\t\t\t\t\t\t\"rule_metadata\": {\n\t\t\t\t\t\t\t\t\t\t\t\"permissiveness_level\": \"LOW\",\n\t\t\t\t\t\t\t\t\t\t\t\"violations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"last_hit\": \"No hits\",\n\t\t\t\t\t\t\t\t\t\t\t\"shadowed_status\": \"FALSE\",\n\t\t\t\t\t\t\t\t\t\t\t\"ticket_ids\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"business_owners\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"expirations\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"applications\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"last_modified\": \"Today\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"id\": 13,\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\"binding_uid\": \"{00-FACED0-00}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"id\": 26,\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"e7e4ac52-2fe4-49f7-8071-9638817a7434\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Host\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"13556e3e-1f93-4f95-939c-428a58001615\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 89,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Address Ragne\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"192.168.0.1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"192.168.0.254\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"1ecb9679-4da4-4fc5-9382-00f5fa455295\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"My New Network\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"some comment\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"192.168.0.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"id\": 25,\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 88,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"50f35caf-3f13-4961-9ccd-055e1703592a\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 91,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host_10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.10.10.10\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"21342c9a-3974-4bd3-b74b-b142e43ed39a\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 90,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Range-Test\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"1.1.2.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"1.1.2.55\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"8fff4c36-da34-4945-be33-ffd5d4d444e2\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 4,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 86,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"22.22.2.2\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"id\": 87,\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"35ec73ed-e0fa-4690-9570-00b417b63ae6\",\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 2,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 85,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Net_10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"10.108.151.0\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.0\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"designer_result\": {\n\t\t\t\t\t\"status\": \"not run\"\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4
BODY<task>
     <status>ASSIGNED</status>
     <fields>
         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
             <id>7599</id>
             <name>mf</name>
             <read_only>false</read_only>
             <implementation_status>NOT_STARTED</implementation_status>
             <group_change>
                        <name>ggg</name>
                        <object_UID>{A12AE330-0DBD-11E5-B841-7F0000010E0E}</object_UID>
                        <management_id>42</management_id>
                        <management_name>cp239</management_name>
                        <members>
                             <member type=\"Object\">
                                 <id>8</id>
                                 <name>yaakovs_host</name>
                                 <object_UID>{BDAA378C-C90B-4D12-B598-1AFED2D1DA14}</object_UID>
                                 <object_type>Host</object_type>
                                 <object_details>1.1.1.1/255.255.255.255</object_details>
                         <management_id>42</management_id>
                         <management_name>cp239</management_name>
                                 <status>NOT_CHANGED</status>
                             </member>
                             <member type=\"Object\">
                                 <id>9</id>
                                    <name>Avi_10.100.120.254</name>
                                    <object_UID>{8F195CDC-F426-47B6-9E8A-1FF14C17E54F}</object_UID>
                                     <object_type>Host</object_type>
                                     <object_details>10.100.120.254/255.255.255.255</object_details>
                                     <management_id>42</management_id>
                                     <management_name>cp239</management_name>
                                     <status>NOT_CHANGED</status>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>2.2.2.2/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>3.3.3.3/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                 </members>
                 <change_implementation_status>NOT_RUN</change_implementation_status>
                    </group_change>
            </field>
     </fields>
</task>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/
BODY{
    \"task\": {
        \"id\": 4,
        \"assignee_id\": 4,
        \"assignee\": \"a\",
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 71,
                \"name\": \"Fire Wall Rule\",
                \"read_only\": false,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 4,
                        \"management_name\": \"Panorama/DG_1\",
                        \"management_id\": 4,
                        \"management_ip\": \"10.100.111.120\",
                        \"revision_number\": 1,
                        \"number_of_rules\": 1,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{00-FACED0-00}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"Standard\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\",
                                        \"name\": \"Application test\",
                                        \"is_disabled\": false,
                                        \"ruleNumber\": 13,
                                        \"from_zone\": \"any\",
                                        \"to_zone\": \"any\",
                                        \"sourceNetworks\": {
                                            \"@xsi.type\": \"host_network_object\",
                                            \"uid\": \"{534DF349-DCDE-0662-C056-58BBB6F0AE7B}\",
                                            \"name\": \"H_5.3.2.5\",
                                            \"display_name\": \"H_5.3.2.5\",
                                            \"class_name\": \"host_plain\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"comment\",
                                            \"id\": \"5df1f2a5e9023c311ae4a01a\",
                                            \"version_id\": 4,
                                            \"device_type\": \"PaloAltoNetworks\",
                                            \"ip_type\": \"IPV4\",
                                            \"referenced\": \"UNKNOWN\",
                                            \"installable_target\": false,
                                            \"ip\": \"5.3.2.5\",
                                            \"subnet_mask\": \"255.255.255.255\"
                                        },
                                        \"destinationNetworks\": {
                                            \"@xsi.type\": \"host_network_object\",
                                            \"uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\",
                                            \"name\": \"22.22.2.2\",
                                            \"display_name\": \"22.22.2.2\",
                                            \"class_name\": \"host_plain\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"id\": \"5df1f2a5e9023c311ae4a016\",
                                            \"version_id\": 4,
                                            \"device_type\": \"PaloAltoNetworks\",
                                            \"ip_type\": \"IPV4\",
                                            \"referenced\": \"UNKNOWN\",
                                            \"installable_target\": false,
                                            \"ip\": \"22.22.2.2\",
                                            \"subnet_mask\": \"255.255.255.255\"
                                        },
                                        \"destinationServices\": {
                                            \"@xsi.type\": \"transport_service\",
                                            \"uid\": \"{021A32BC-7393-A469-FF24-94822DF3B959}\",
                                            \"name\": \"TCP82\",
                                            \"display_name\": \"TCP82\",
                                            \"class_name\": \"tcp_service\",
                                            \"origin\": \"DEVICE\",
                                            \"global\": false,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"TCP82\",
                                            \"id\": \"5df1f2a5e9023c311ae4a018\",
                                            \"version_id\": 4,
                                            \"referenced\": \"UNKNOWN\",
                                            \"type_on_device\": \"\",
                                            \"negate\": false,
                                            \"match_for_any\": false,
                                            \"timeout\": 0,
                                            \"protocol\": 6,
                                            \"min_port\": 82,
                                            \"max_port\": 82
                                        },
                                        \"applications\": {
                                            \"@xsi.type\": \"single_application\",
                                            \"uid\": \"{D72A6495-E024-B4B8-07A0-A897EE460782}\",
                                            \"name\": \"web-browsing\",
                                            \"display_name\": \"web-browsing\",
                                            \"class_name\": \"application_object\",
                                            \"origin\": \"DEVICE_PREDEFINED\",
                                            \"global\": true,
                                            \"implicit\": false,
                                            \"shared\": false,
                                            \"comment\": \"\",
                                            \"service\": [
                                                {
                                                    \"@xsi.type\": \"transport_service\",
                                                    \"uid\": \"{8E62C531-577F-B589-BB84-549FAAF13FEC}\",
                                                    \"name\": \"st_implicit_app_web-browsing\",
                                                    \"display_name\": \"st_implicit_app_web-browsing\",
                                                    \"class_name\": \"tcp_service\",
                                                    \"origin\": \"DEVICE\",
                                                    \"global\": false,
                                                    \"implicit\": true,
                                                    \"shared\": false,
                                                    \"comment\": \"\",
                                                    \"id\": \"5df1f2a5e9023c311ae4a014\",
                                                    \"version_id\": 4,
                                                    \"referenced\": \"UNKNOWN\",
                                                    \"type_on_device\": \"\",
                                                    \"negate\": false,
                                                    \"match_for_any\": false,
                                                    \"timeout\": 0,
                                                    \"protocol\": 6,
                                                    \"min_port\": 80,
                                                    \"max_port\": 80
                                                }
                                            ]
                                        },
                                        \"action\": \"ACCEPT\",
                                        \"additional_parameters\": \"\",
                                        \"options\": {
                                            \"option\": \"LOG_SESSION\"
                                        },
                                        \"rule_location\": \"DG_1\",
                                        \"users\": {
                                            \"user\": [
                                                {
                                                    \"uid\": \"{3800615a-09b6-498f-ad55-4e71a0663ccc}\",
                                                    \"name\": \"Any\",
                                                    \"class_name\": \"any_object\",
                                                    \"displayName\": \"Any\"
                                                }
                                            ]
                                        },
                                        \"track\": {
                                            \"track_level\": \"LOG\"
                                        },
                                        \"install_ons\": \"\",
                                        \"communities\": \"\",
                                        \"times\": \"\",
                                        \"rule_metadata\": {
                                            \"permissiveness_level\": \"LOW\",
                                            \"violations\": \"\",
                                            \"last_hit\": \"No hits\",
                                            \"shadowed_status\": \"FALSE\",
                                            \"ticket_ids\": \"\",
                                            \"business_owners\": \"\",
                                            \"expirations\": \"\",
                                            \"applications\": \"\",
                                            \"last_modified\": \"Today\"
                                        }
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"id\": 13,
                        \"rule_key\": {
                            \"device_id\": 4,
                            \"binding_uid\": \"{00-FACED0-00}\",
                            \"rule_uid\": \"{A72BF9D8-BA2B-A7BF-6A74-B548FD5C91AE}\"
                        },
                        \"source_modifications\": {
                            \"id\": 26,
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"id\": 89,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 88,
                                            \"uid\": \"e7e4ac52-2fe4-49f7-8071-9638817a7434\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 88,
                                                    \"name\": \"My New Host\",
                                                    \"comment\": \"some comment\",
                                                    \"ip\": \"192.168.0.10\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 91,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 89,
                                            \"uid\": \"13556e3e-1f93-4f95-939c-428a58001615\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"id\": 89,
                                                    \"name\": \"My New Address Ragne\",
                                                    \"comment\": \"some comment\",
                                                    \"min_ip\": \"192.168.0.1\",
                                                    \"max_ip\": \"192.168.0.254\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 90,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 87,
                                            \"uid\": \"1ecb9679-4da4-4fc5-9382-00f5fa455295\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"id\": 87,
                                                    \"name\": \"My New Network\",
                                                    \"comment\": \"some comment\",
                                                    \"ip\": \"192.168.0.0\",
                                                    \"netmask\": \"255.255.255.0\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"id\": 25,
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"id\": 88,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 91,
                                            \"uid\": \"50f35caf-3f13-4961-9ccd-055e1703592a\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{5A4CC65A-0A28-64F6-D6C3-96978A2517D0}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 91,
                                                    \"name\": \"Host_10.10.10.10\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"10.10.10.10\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 85,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 90,
                                            \"uid\": \"21342c9a-3974-4bd3-b74b-b142e43ed39a\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{D651F4C0-C477-0D75-F8AE-54ED12889B45}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"id\": 90,
                                                    \"name\": \"Range-Test\",
                                                    \"comment\": \"\",
                                                    \"min_ip\": \"1.1.2.0\",
                                                    \"max_ip\": \"1.1.2.55\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 86,
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"id\": 86,
                                            \"uid\": \"8fff4c36-da34-4945-be33-ffd5d4d444e2\",
                                            \"device_id\": 4,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{E6ECCD48-D14F-F166-7579-59F453F0C552}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"id\": 86,
                                                    \"name\": \"22.22.2.2\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"22.22.2.2\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"id\": 87,
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"id\": 85,
                                            \"uid\": \"35ec73ed-e0fa-4690-9570-00b417b63ae6\",
                                            \"device_id\": 2,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{B64A7266-1BEC-61E5-6B27-C992026613BB}\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"id\": 85,
                                                    \"name\": \"Net_10.108.151.0\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"10.108.151.0\",
                                                    \"netmask\": \"255.255.255.0\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        }
                    }
                },
                \"designer_result\": {
                    \"status\": \"not run\"
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: The new network object (<name>): device ID (<id>) does not match the rule key device ID (<id>). The device IDs must be the same.
400: Device ID is required for a new device network object
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <name>
400: Network Object appears more than once in same rule modification action: Check <source / destination> for <st_uid>
400: <cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty.
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (Device ID is required for an existing device network object)
400: Invalid value for field: <FIELD_NAME> (ST UID is required for an existing device network object
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Status is required for a device network object"},"response":[]},{"name":"Returns the details of the tasks","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID."},"response":[]}]}]} \ No newline at end of file diff --git a/Postman Format v2/R19-3 postman collection/securetrack_R19-3-GA-v2.json b/Postman Format v2/R19-3 postman collection/securetrack_R19-3-GA-v2.json new file mode 100644 index 0000000..f9b5f91 --- /dev/null +++ b/Postman Format v2/R19-3 postman collection/securetrack_R19-3-GA-v2.json @@ -0,0 +1 @@ +{"info":{"_postman_id":"1","name":"Tufin Tufin SecureTrack R19-3-GA","description":"Tufin Orchestration Suite - Tufin SecureTrack APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securetrack/apidoc","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json"},"item":[{"name":"Additional Policy Fields","item":[{"name":"Get all URL Categories by revision.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories","description":"Fetches list of URL Categories defined in a revision given by ID.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories
"},"response":[]},{"name":"Get additional parameters identities by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
type: Additional parameter type [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group

Response Messages:
200: Successful
400: Invalid request"},"response":[]},{"name":"Get specific additional parameter identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters/{{ids}}","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Additional parameter IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760
"},"response":[]},{"name":"Get a URL Category.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories/{{ids}}","description":"Fetches one or more URL Categories.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Url Category IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760
"},"response":[]}]},{"name":"Application IDs","item":[{"name":"Get specific application identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications/{{ids}}","description":"Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
Note: This API retrieves the information from the latest revision.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
id: Device ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/1/applications/701
"},"response":[]},{"name":"Get application identities by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications","description":"Fetches list of applications defined on device given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 50,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

"},"response":[]},{"name":"Get specific application identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/applications/{{ids}}","description":"Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760
"},"response":[]},{"name":"Get applications identities by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/applications","description":"Fetches list of applications defined in a revision given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 1,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

"},"response":[]}]},{"name":"Change Authorization","item":[{"name":"Determine if changes between two revisions are authorized","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"new_version"},{"value":null,"type":"text","key":"old_version"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/","description":"This API checks for unauthorized changes between any two versions of a firewall policy.
The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets.
The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket.

The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove).
The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes.

Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing.
Note 2: Use the ID returned by the /revisions API for new_version and old_version.
Note 3: The default value for traffic_details and ignore_tickets is false.
Note 4: Traffic that is handled by an implicit rule will not have a rule ID.

Parameters:
new_version: New version ID
old_version: Old version ID
traffic_details: Return unauthorized traffic change details for all modified rules [optional]
ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional]

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true

Response Messages:
200: Change authorization has been successfully calculated
400: Input parameters are not valid
400: Could not find the requested revisions for comparison"},"response":[]},{"name":"Compare revisions on two different devices in terms of traffic.","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_traffic_comparison_request\": {\n\t\t\"oldVersionId\": \"234\",\n\t\t\"newVersionId\": \"179\",\n\t\t\"oldId2newIdMap\": [\n\t\t\t{\n\t\t\t\t\"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",\n\t\t\t\t\"newId\" : \"{00-FACED0-00}\"\n\t\t\t}\n\t\t],\n\t\t\"withTraffic\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/policyTrafficComparison","description":"This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic.
The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions.
The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions.
Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared.
Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules
Note 3: The format of the result is the same as the one returned by /change_authorization
Note 4: The API accepts in request body only one pair of oldId - newId map
Note 5: The request is valid only if the mapping ids are found in the active policies

Parameters:
body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions.

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison
BODY{
    \"policy_traffic_comparison_request\": {
        \"oldVersionId\": \"234\",
        \"newVersionId\": \"179\",
        \"oldId2newIdMap\": [
            {
                \"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",
                \"newId\" : \"{00-FACED0-00}\"
            }
        ],
        \"withTraffic\": true
    }
}


Response Messages:
200: Policies diff was successfully calculated
400: Could not find the requested revisions for comparison"},"response":[]}]},{"name":"Change Windows","item":[{"name":"Get name and status for all change windows","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/","description":"Retrieves a list of all change windows.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
start: Starting result for query allowable value is numeric [optional]
count: Number of change windows for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true
OUTPUT {
    \"change_windows\": {
        \"count\": 2,
        \"total\": 2,
        \"change_window\": [
            {
                \"uuid\": \"6ae41504-a95c-4f23-98a2-f18b2efadb9d\",
                \"name\": \"cw1\",
                \"domain_id\": 1,
                \"enabled\": true
            },
            {
                \"uuid\": \"fc7b167c-29ea-49a1-9ee3-efb6d1351343\",
                \"name\": \"cw2\",
                \"domain_id\": 1,
                \"enabled\": true
            }
        ]
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context "},"response":[]},{"name":"Get scheduling and device details for a specific change window","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"uid"},{"value":null,"type":"text","key":"task_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks/{{task_id}}","description":"Retrieves scheduling and device details for a specific change window.

Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
task_id: Task Id

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1
OUTPUT {
    \"commit_task\": {
        \"id\": 1,
        \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
        \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
        \"errors\": \"\",
        \"device_commits\": {
            \"device_commit\": [
                {
                    \"id\": 1,
                    \"result\": {
                        \"errors\": {
                            \"error\": \"got_error_from_dcs\"
                        },
                        \"device\": {
                            \"id\": 17,
                            \"status\": \"FAILURE\",
                            \"revision_id\": 1,
                            \"errors\": {
                                \"error\": \"Login error\"
                            }
                        }
                    }
                },
                {
                    \"id\": 2,
                    \"result\": {
                        \"errors\": \"\",
                        \"device\": {
                            \"id\": 19,
                            \"status\": \"SUCCESS_WITH_WARNINGS\",
                            \"revision_id\": 1,
                            \"warnings\": {
                                \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                            }
                        }
                    }
                }
            ]
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain
404: Fail to find task for change window "},"response":[]},{"name":"Get a list of completed policy changes for a specific change window","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks","description":"Retrieves a list of completed policy changes for a specific change window.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
start: Starting result for query allowable value is numeric [optional]
count: Number of tasks for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true
OUTPUT {
    \"commit_tasks\": {
        \"count\": 1,
        \"total\": 1,
        \"commit_task\": {
            \"id\": 1,
            \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
            \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
            \"errors\": \"\"
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain "},"response":[]}]},{"name":"Device Interfaces and Zones","item":[{"name":"Get network interfaces by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/interfaces","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/10/interfaces
"},"response":[]},{"name":"Get network interfaces by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/interfaces","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/interfaces
"},"response":[]},{"name":"Get device zones by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/zones","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/787/zones
"},"response":[]},{"name":"Get zones and network interfaces that participate in sub-policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindable_objects","description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/bindable_objects
"},"response":[]},{"name":"Get device zones by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/zones","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/zones
"},"response":[]}]},{"name":"Domains","item":[{"name":"Get domain","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","description":"Parameters:
context: Global MSSP context [optional]
id: Domain id

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
401: User not permitted to access domains
400: Domain with ID was not found"},"response":[]},{"name":"Update a domain","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","description":"Parameters:
id: Domain id
body [optional]

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
401: User not permitted to access domains
400: Domain with ID was not found
400: Domain with this name already exists
400: Domain name is empty
400: Default domain cannot be changed"},"response":[]},{"name":"Get all domains","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","description":"

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
401: User not permitted to access domains"},"response":[]},{"name":"Add a domain","request":{"method":"POST","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","description":"Parameters:
body [optional]

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
401: User not permitted to access domains
400: Domain with this name already exists
400: Domain name is empty"},"response":[]}]},{"name":"General Properties","item":[{"name":"Get general properties","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/properties/","description":"

Usage Example
URLhttps://192.168.1.1/securetrack/api/properties
OUTPUT{
    \"properties\": {
        \"sc_addresses\": {
            \"sc_address\": [
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"external\"
                },
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"internal\"
                }
            ]
        }
    }
}


Response Messages:
401: User not permitted to view properties"},"response":[]}]},{"name":"IPsec VPN","item":[{"name":"Get Cisco cryptographic maps by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/crypto_maps","description":"Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://191.168.1.1/securetrack/api/revisions/18/crypto_maps
"},"response":[]},{"name":"Get Cisco IPsec policy and peers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"outputInterfaceName"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_tunnels","description":"Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config.
You can retrieve the interface names by calling the /devices/id/interfaces API.

Parameters:
device_id: The unique identifier of target device
outputInterfaceName: Interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1
"},"response":[]},{"name":"Get Check Point VPN (IPSec) communities and gateways","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_communities","description":"Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities.
Works on clusters and gateways, not on management servers.

Parameters:
device_id: The unique identifier of target device

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities
"},"response":[]},{"name":"Get Cisco cryptographic maps by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/crypto_maps","description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/19/crypto_maps
"},"response":[]}]},{"name":"Internet Objects","item":[{"name":"Create new Internet representation for a device","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_2.2.2.2\"\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/","description":"The internet referral lets you represent the Internet as an object on a device.
See REST API: /internet_referral/{deviceId:[0-9]+}/object for a description of how internet referral is resolved.

Parameters:
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_2.2.2.2\"
    }
}


Response Messages:
201: Internet referral configuration was created
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
400: Internet referral configuration for given device ID already exists
401: Access is denied."},"response":[]},{"name":"Delete Internet representation for device","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration was deleted
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration for device ID does not exist
401: Access is denied."},"response":[]},{"name":"Get Internet representation for device","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Internet referral configuration was not found for device ID
401: Access is denied."},"response":[]},{"name":"Update Internet representation for device","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_10.11.73.1\"\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Updates the Internet referral configuration for the device.
If there was no previous configuration, it will be created.

Parameters:
deviceId: SecureTrack Device ID
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_10.11.73.1\"
    }
}


Response Messages:
200: Internet referral configuration was updated
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
401: Access is denied."},"response":[]},{"name":"Get resolved Internet representation for device","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}/object","description":"The order of precedence used to resolve the Internet object is:
Step 1: Identify the Internet referral:
Search for a defined Internet referral on the specified device.
If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral.
If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2.
If an Internet referral is not found, it resolves to “Any”.
Step 2: Resolve the object by name:
Search the specified device for a defined network object that matches the name returned in Step 1.
If a matching network object is not found, an error will be returned.

Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2/object

Response Messages:
200: Resolved Internet referral object for device is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Configured object was not found on the device
401: Access is denied."},"response":[]}]},{"name":"LDAP","item":[{"name":"Get the base DN entry details","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getBaseDNEntry","description":"The returned \"base DN\" is used by GetEntriesByNames API as the search start entry.



Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getBaseDNEntry
OUTPUT{
    \"ldap_entry\": {
        \"dn\": \"DC=tufintest,DC=com\",
        \"uid\": \"nABbRP/lPUKlteNRI4j6iA==\"
    }
}


Response Messages:
200: OK
404: Base Entry cannot be found
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Return LDAP entries which match the given search criteria","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"search_criteria\": {\n\t\t\"search_base_dn\": \"DC=tufintest,DC=com\",\n\t\t\"search_text\": \"test\",\n\t\t\"ldap_search_options\": {\n\t\t\t\"ldap_entry_types\": {\n\t\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\t\"OU\",\n\t\t\t\t\t\"USER\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"search_mode\": \"CONTAINS\",\n\t\t\t\"max_search_result\": 3\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/search","description":"Return list of LDAP entries which match the given search criteria according to the search mode (EXACT, CONTAINS, STARTS_WITH, ENDS_WITH).
The search is case insensitive.
The limit of max_search_result is 1000.

Parameters:
body: Search criteria

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/search
BODY{
    \"search_criteria\": {
        \"search_base_dn\": \"DC=tufintest,DC=com\",
        \"search_text\": \"test\",
        \"ldap_search_options\": {
            \"ldap_entry_types\": {
                \"ldap_entry_type\": [
                    \"OU\",
                    \"USER\"
                ]
            },
            \"search_mode\": \"CONTAINS\",
            \"max_search_result\": 3
        }
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
            {
                \"dn\": \"CN=User15ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"ZRuKW3XqIEOIxCwlfgJQYA==\",
                \"displayName\": \"User15ATTesting1\"
            },
            {
                \"dn\": \"CN=IWAM_TEST2003,CN=Users,DC=tufintest,DC=com\",
                \"uid\": \"bYVqqcZXsUSF51hiP4W7Yw==\",
                \"displayName\": \"Testing1\"
            },
            {
                \"dn\": \"CN=User1ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"2ma3TrgeHEWQDITwvcRqlg==\",
                \"displayName\": \"test\"
            }
            ]
        },
            \"has_more_results_to_return\": \"true\"
        }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal or invalid value)
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Return entries that exactly match one of the given strings","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"search_by_name_criteria\": {\n\t\t\"search_texts\": {\n\t\t\t\"search_text\": [\n\t\t\t\t\"Finance\",\n\t\t\t\t\"Marketing\",\n\t\t\t\t\"Management\"\n\t\t\t]\n\t\t},\n\t\t\"ldap_entry_types\": {\n\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\"GROUP\"\n\t\t\t]\n\t\t},\n\t\t\"max_search_result\": 20\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntriesByNames","description":"Return list of LDAP entries which match the exact given multiple search_text.

Parameters:
body: Names to search

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntriesByNames
BODY{
    \"search_by_name_criteria\": {
        \"search_texts\": {
            \"search_text\": [
                \"Finance\",
                \"Marketing\",
                \"Management\"
            ]
        },
        \"ldap_entry_types\": {
            \"ldap_entry_type\": [
                \"GROUP\"
            ]
        },
        \"max_search_result\": 20
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Finance,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"uOvJTpYRD0aTjEENA87N5A==\",
                    \"displayName\": \"Finance\"
                },
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Management,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"jdf778skfsgs730fksdHHs==\",
                    \"displayName\": \"Management\"
                }
            ]
        },
        \"has_more_results_to_return\": false
    }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal value)
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Get LDAP entry details by DN","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"dn"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntryByDN","description":"Returns the UID, DN and Name of a LDAP entry specified by the DN.

Parameters:
dn: LDAP DN

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntryByDN?dn=CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com
OUTPUT{
    \"ldap_entry\": {
        \"uid\": \"mYbWQms7p0q5YinEyW5Byw==\",
        \"dn\": \"CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com\",
        \"name\": \"Manufacturing\"
    }
}


Response Messages:
200: OK
400: Invalid DN format
404: Entry matching the DN cannot be found
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]}]},{"name":"Monitored Devices","item":[{"name":"Get textual configuration by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/config","description":"Returns textual configuration for the specified revision Id.


Parameters:
context: Global MSSP context [optional]
id: Revision id

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/config
"},"response":[]},{"name":"Get devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","description":"Returns the list of devices that are configured in SecureTrack, including the vendor, model, name, domain and device ID.
The results can be sorted by ip, name, vendor and model.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
name: Device name [optional]
ip: Device IP address [optional]
vendor: Device vendor [optional]
model: Device model [optional]
sort: Sort ascending or descending allowable types are: asc or desc [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices

Usage Example
https://192.168.1.1/securetrack/api/devices?vendor=VMware

Usage Example
https://192.168.1.1/securetrack/api/devices?sort=ip:asc

Usage Example
https://192.168.1.1/securetrack/api/devices?show_os_version=true
"},"response":[]},{"name":"Add offline device","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t asa \n\t Cisco\n\t 1\n\t Default\n\t API OFFLINE ASA1\n\t true\n\t true\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","description":"You can choose to select the domain either by name or id using the domain_id or domain_name tags.\nDevice name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
body: Device to be added

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices
BODY<device>
     <model>asa</model>
     <vendor>Cisco</vendor>
     <domain_id>1</domain_id>
     <domain_name>Default</domain_name>
     <name>API OFFLINE ASA1</name>
     <offline>true</offline>
     <topology>true</topology>
</device>

"},"response":[]},{"name":"Get textual configuration by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/config","description":"Get latest revision of running configuration for a given device Id.


Parameters:
context: global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/111/config
"},"response":[]},{"name":"Edit Securetrack device","request":{"method":"PATCH","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n\t\t \"devices\": [{\n\t\t\t \"device_id\": 1,\n\t\t\t \"display_name\": \"CheckPoint-R77-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.1\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"authentication_mode\": \"LEA\",\n\t\t\t\t \"lea_authentication_mode\": \"ssl_opsec\",\n\t\t\t\t \"lea_authentication_port\": \"2488\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 2,\n\t\t\t \"display_name\": \"CheckPoint-R80-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 3,\n\t\t\t \"display_name\": \"Cisco-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"enable_password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 4,\n\t\t\t \"display_name\": \"PaloAlto-PanoramaNg-Device\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 5,\n\t\t\t \"display_name\": \"PaloAlto-DeviceGroup\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 6,\n\t\t\t \"display_name\": \"PaloAlto-FireWall-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 7,\n\t\t\t \"display_name\": \"Spain-FortiManager\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 8,\n\t\t\t \"display_name\": \"FortiManager-Adom\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 9,\n\t\t\t \"display_name\": \"FortiManager-FireWall\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t }\n\t\t]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","description":"Use this API to edit the settings of a management device, including changing multiple parameters in the same call.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
Note: This API cannot be used to edit SecureTrack Domains and SecureTrack Servers.
This API verifies connection to the provided device, before updating a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be updated.
Only \"live\" device with correct credentials can be updated using this API.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"device_id\": 1,
             \"display_name\": \"CheckPoint-R77-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.1\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"authentication_mode\": \"LEA\",
                 \"lea_authentication_mode\": \"ssl_opsec\",
                 \"lea_authentication_port\": \"2488\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 2,
             \"display_name\": \"CheckPoint-R80-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.2\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 3,
             \"display_name\": \"Cisco-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"enable_password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 4,
             \"display_name\": \"PaloAlto-PanoramaNg-Device\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 5,
             \"display_name\": \"PaloAlto-DeviceGroup\"
         },
         {
             \"device_id\": 6,
             \"display_name\": \"PaloAlto-FireWall-Device\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         },
         {
             \"device_id\": 7,
             \"display_name\": \"Spain-FortiManager\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 8,
             \"display_name\": \"FortiManager-Adom\"
         },
         {
             \"device_id\": 9,
             \"display_name\": \"FortiManager-FireWall\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Add devices to SecureTrack","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n \t\t \"devices\": [{ \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"r80_version\":\"false\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"user_name\":\"admin\",\n \t\t\t\t \"password\":\"1234\",\n \t\t\t\t \"r80_version\":\"true\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"ASA\",\n \t\t\t \"vendor\":\"Cisco\",\n \t\t\t \"securetrack_domain\":\"Domain-A\",\n \t\t\t \"display_name\":\"Ireland-ASA\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t \"enable_virtual_contexts\":\"true\",\n \t\t\t \"import_all\":\"false\",\n \t\t\t \"import_devices\": \n \t\t\t\t\t [\"VC1\",\"VC2\"],\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"enable_password\":\"st-enable-password\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"Panorama\",\n \t\t\t \"vendor\":\"PaloAltoNetworks\",\n \t\t\t \"display_name\":\"First-Device-example\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t {\n \t\t\t \"model\":\"FortiManager\",\n \t\t\t \"vendor\":\"Fortinet\",\n \t\t\t \"display_name\":\"Spain-FortiManager\",\n \t\t\t \"securetrack_server\":\"RemoteControlServerName\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_all\": \"false\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t\t { \n \t\t\t\t \"name\": \"AdomX\",\n \t\t\t\t \"import_all\": \"false\", \n \t\t\t\t \"managed_devices\": [\"FW1\"]\n \t\t\t\t\t\t}\n \t\t\t\t\t]\n \t\t\t\t}\n \t\t\t}\n \t\t]\n \t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","description":"Use this API to add a single device or a list of devices to SecureTrack.
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
Currently supported types: CMA, SMC, ASA, Panorama NG and FortiManager.

This API verifies connection to the provided device, before adding a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be added.
Only \"live\" device with correct credentials can be added using this API.
To add Checkpoint R77 devices, use \"r80_version\" : \"false\".


Parameters:
body: device_list

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"r80_version\":\"false\"
             }
         },
         {
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"user_name\":\"admin\",
                 \"password\":\"1234\",
                 \"r80_version\":\"true\"
             }
         },
         {
             \"model\":\"ASA\",
             \"vendor\":\"Cisco\",
             \"securetrack_domain\":\"Domain-A\",
             \"display_name\":\"Ireland-ASA\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
             \"enable_virtual_contexts\":\"true\",
             \"import_all\":\"false\",
             \"import_devices\":
                     [\"VC1\",\"VC2\"],
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"collect_dynamic_topology\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"enable_password\":\"st-enable-password\"
             }
         },
         {
             \"model\":\"Panorama\",
             \"vendor\":\"PaloAltoNetworks\",
             \"display_name\":\"First-Device-example\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"model\":\"FortiManager\",
             \"vendor\":\"Fortinet\",
             \"display_name\":\"Spain-FortiManager\",
             \"securetrack_server\":\"RemoteControlServerName\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_all\": \"false\",
                 \"import_devices\": [
                         {
                 \"name\": \"AdomX\",
                 \"import_all\": \"false\",
                 \"managed_devices\": [\"FW1\"]
                        }
                    ]
                }
            }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Import managed devices","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n \t\t \"devices\":[ \n \t\t { \n \t\t\t \"device_id\":\"1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"2\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"firewall1\", \"firewall2\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"3\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"] \n \t\t\t }\n \t\t }\n \t\t]\n \t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/import","description":"Use this API to import more managed devices to SecureTrack.
The following devices can be added: Device Groups (for Panorama), Administrative Domains (for FortiManager).\nCurrently supported types: Panorama, FortiManager, Cisco ASA.
Please see examples below per device id: device id 1 for Panorama, device 2 for FortiManager, device id 3 for Cisco ASA.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk/import
BODY{
     \"devices_list\":{
         \"devices\":[
         {
             \"device_id\":\"1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"device_id\":\"2\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [
                     {
                         \"name\":\"Adom1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"firewall1\", \"firewall2\"]
                     },
                     {
                         \"name\":\"Adom2\",
                         \"import_all\":\"true\"
                     }
                 ]
             }
         },
         {
             \"device_id\":\"3\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"]
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Get specific task results of bulk operations on devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"task_uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/tasks/{{task_uid}}","description":"Use this API to track and display the current progress of the devices being edited or added to\nSecureTrack for a specific Task ID.
For a list of devices, the status of each device is displayed.

A device that was not added due to some reason will be added to \"failed\" list with status element containing a description.
For example:
\"description\": \"No connection to device\".

Parameters:
task_uid: Task UID

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk/tasks/d7e88799-a6e5-45da-8c72-c979a5dbe235
OUTPUT{
    \"task_result\":{
        \"total_succeeded\":\"0\",
        \"total_in_progress\":\"2\",
        \"total_failed\":\"0\",
        \"succeeded\":{
            \"count\":\"0\"
        },
        \"in_progress\":{
            \"count\":\"2\",
            \"devices\":[
                {
                    \"device_id\":\"1\",
                    \"display_name\":\"Europe-CMA\",
                    \"ip_address\":\"192.168.1.1\",
                    \"status\":{
                    }
                },
                {
                    \"device_id\":\"2\",
                    \"display_name\":\"Ireland-ASA\",
                    \"ip_address\":\"172.16.1.1\",
                    \"status\":{
                    }
                }
            ]
        },
        \"failed\":{
            \"count\":\"0\"
        }
    }
}


Response Messages:
404: The task with the given UID was not found
400: Bad request
200: Accepted
408: Request timed out
500: Internal server error"},"response":[]},{"name":"Add configuration for offline device","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"configuration_file"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/tasks/add_device_config_task","description":"Parameters:
device_id: Device ID
configuration_file: Configuration File

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"device_id=1\" https://192.168.1.1/securetrack/api/tasks/add_device_config_task

Response Messages:
200: Configuration added successfully."},"response":[]},{"name":"Get specific device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}","description":"Returns the vendor, model, name, domain and ID for the specified device.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
id: Device ID
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/60

Usage Example
https://192.168.1.1/securetrack/api/devices/20?show_os_version=true
"},"response":[]},{"name":"Update offline device","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t API OFFLINE ASA2\n\t true\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}","description":"Device name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
device_id: Device ID
body: Device to be updated

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/1
BODY<device>
     <name>API OFFLINE ASA2</name>
     <topology>true</topology>
</device>

"},"response":[]}]},{"name":"NAT Policies","item":[{"name":"Get NAT objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_objects","description":"Fetches a list of NAT objects defined on device given by device ID
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable value is numeric [optional]
count: Starting page for query allowable value is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects?get_total=true
"},"response":[]},{"name":"Get NAT rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_rules/bindings","description":"Fetches list of NAT rules for device given by device ID

input_interface and output_interface are not supported for Panorama running in Advanced management mode
nat_stage is supported for Netscreen and JunOS
nat_type is supported for FortiManager
Note: For Check Point, NAT rules are available from the modules (not managements)
Note: For Palo Alto, filtering NAT rules by interface is only available for firewall devices

Parameters:
context: Global MSSP context [optional]
id: Device ID
input_interface: Input interface for NAT rules, \"any\" for all interfaces [optional]
output_interface: output interface for NAT rules, \"any\" for all interfaces [optional]
nat_stage: NAT stage for NAT rules allowable values: \"pre_policy\" , \"post_policy\" or \"both\" [optional]
nat_type: NAT stage for NAT rules allowable values: \"vip\" or \"reverse_vip\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/10/nat_rules/bindings?input_interface=Any
"},"response":[]},{"name":"Get NAT objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/nat_objects","description":"Fetches a list of NAT objects for a given revision
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Version ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects?get_total=true
"},"response":[]}]},{"name":"Network Objects","item":[{"name":"Get network objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/network_objects","description":"Fetches list of network objects defined on device given by ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169178,
                \"name\": \"Access_role\",
                \"display_name\": \"Access_role\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": false,
                \"comment\": \"\",
                \"uid\": \"{FC267948-DA8C-4FB6-A736-76B5254BF825}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14320,
                        \"name\": \"ad_group_auto_30K_grp1\",
                        \"display_name\": \"auto_30K_grp1\",
                        \"class_name\": \"ad_group\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{CAB92DCC-CF63-4E47-B8E3-1E1231996D5E}\",
                        \"dn\": \"CN=auto_30K_grp1,OU=OU_30K_Groups,DC=rnd,DC=local\"
                    }
                }
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid"},"response":[]},{"name":"Get specific network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/network_objects/{{ids}}","description":"Fetches a single or partial list of the network objects for a given device ID.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects/169184?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169184,
            \"name\": \"Access_Role_@grp\",
            \"display_name\": \"Access_Role_@grp\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{1870612C-0922-4AEE-81FF-5472DB7C32E1}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14338,
                    \"name\": \"ad_group_grp\",
                    \"display_name\": \"@grp\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{C5740C23-F36E-4D2E-8B17-1F99C239C12A}\",
                    \"dn\": \"CN=@grp,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}

"},"response":[]},{"name":"Get network groups containing specified network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/groups","description":"Returns groups that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.

Usage Example
https://192.168.1.1/securetrack/api/network_objects/69577/groups
"},"response":[]},{"name":"Get network objects matching specified criteria","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"filter"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/search","description":"You can search for network objects where the IP address, name or comment fields have a specified text string,
or you can search for network objects that have an IP address that matches, contains or is contained in a specified IP subnet,
or you can search for network objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns network objects where the IP address, name or comment fields have a specified text string. “subnet” filter returns network objects that have an IP address that matches, contains or is contained in a specified IP subnet. “uid“ filter returns network objects with the specified uid. If no filter is specified, the “text” filter is used.
device_id: Returns network objects belonging to the specified device_id. [optional]
ip: (For “text” filter) You can specify \"ip\" to find network objects with the specified text in the IP address field. [optional]
name: (For “text” filter) You can specify \"name\" to find network objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find network objects with the specified text in the comment field. [optional]
any_field: (For “text” filter) You can specify \"any_field\" to find network objects with the specified text in the IP address, name or comment fields. [optional]
exact_match: (For “text” filter) You can add \"exact_match=true\" to find network objects with the specified text in the comment field. If this field is not specified, the query uses \"exact_match=false\". [optional]
contained_in: (For “subnet” filter) You can specify \"contained_in\" to find network objects that are contained in the specified IP subnet. For example, 10.1.0.0 is contained in 10.0.0.0. [optional]
contains: (For “subnet” filter) You can specify \"contains\" to find network objects that contain the specified IP subnet. For example, 10.0.0.0 contains 10.1.0.0. [optional]
exact_subnet: (For “subnet” filter) You can specify \"exact_subnet\" to find network objects that have the specified IP address. [optional]
uid: (for “uid“ filter) Returns network objects with the specified uid. [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: You can specify \"typeOnDevice\" to find network object groups that are EDL. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=host&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&any_field=host&count=10&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&contains=10.1.1.0

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&count=10&exact_subnet=1.1.1.1

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191&device_id=4

Usage Example
URLhttps://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=Access_Role&identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1,
        \"total\": 1,
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169197,
            \"name\": \"Access_Role_aaa\",
            \"display_name\": \"Access_Role_aaa\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14317,
                    \"name\": \"ad_group_aaa\",
                    \"display_name\": \"aaa\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{5D16859C-0256-4673-A402-4254588B8F40}\",
                    \"dn\": \"CN=aaa,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}


Response Messages:
400: The typeOnDevice value is not valid.Use edl_ip_list as value to search EDL groups."},"response":[]},{"name":"Get specific network objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/network_objects/{{ids}}","description":"Fetches a single or partial list of the network objects for a given revision.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects/69547?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169185,
            \"name\": \"Access_Role_Domain Controllers\",
            \"display_name\": \"Access_Role_Domain Controllers\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{140B8F32-188D-414C-A7BE-F4A7D7E9A169}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14237,
                    \"name\": \"ad_group_Domain_Controllers\",
                    \"display_name\": \"Domain Controllers\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{0A8A459E-58E8-45DC-981E-16BBF2BD1922}\",
                    \"dn\": \"CN=Domain Controllers,CN=Users,DC=rnd,DC=local\"
                }
            }
        }
    }
}

"},"response":[]},{"name":"Get network objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/network_objects","description":"Fetches list of network objects from specific revision
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169183,
                \"name\": \"Access role 1\",
                \"display_name\": \"Access role 1\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": true,
                \"comment\": \"\",
                \"uid\": \"{1E4C35A0-1FE4-4101-8A38-FDE656BCDCFB}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14346,
                        \"name\": \"all identified\",
                        \"display_name\": \"all identified\",
                        \"class_name\": \"all_identified\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{17A972AC-4B4A-4715-859F-867128707F59}\",
                        \"dn\": \"\"
                    }
                }
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid"},"response":[]},{"name":"Get rules containing specified network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/rules","description":"Returns the security rules that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.
include_groups: You can add \"include_groups\" to find rules that include the network object and rules that include the groups that include the network object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/65078/rules?include_groups=true
"},"response":[]}]},{"name":"Network Topology","item":[{"name":"Add generic device to Topology model","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"configuration_file"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","description":"Upload a configuration file that will be used to add a generic device to the Topology model.
The context field is the domain ID to which the generic device is added: If not provided, the device is added to the global domain.
configuration_file must include a valid generic device configuration.
The specified path must point to a file on the computer being sue to make the REST API call.
If update update_topology = true, then the Topology model will be updated immediately after the device is added.
For maximum efficiency, if you are adding multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.Default value for update_topology = true.
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
body: Generic device to be added
configuration_file: Configuration File for generic device
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"my_generic_device\", \"customer_id\": 1}};type=application/json' -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices\n

Response Messages:
201: The generic device was created successfully
401: User is not permitted to access the specified domain
400: Failed to create generic device "},"response":[]},{"name":"Get generic devices that are configured in ST","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","description":"Returns a list of the generic devices included in all the domains that the user has permission to.
Use context and/or name optional parameters to get more specific results.
To get context optional parameter, you can call /domains/ API and use the id included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
name: Generic device name [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices
"},"response":[]},{"name":"Get path image for specified traffic","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_image","description":"Returns an image containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80
"},"response":[]},{"name":"Get topology clouds","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","description":"Returns a list of the topology clouds for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology clouds that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
type: Required clouds type [optional]
name: Cloud name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
OUTPUT{
    \"topology_clouds\": {
        \"count\": 3,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"MEMBER\",
                \"ip\": \"10.100.6.238\"
            },
            {
                \"id\": 66,
                \"name\": \"Cloud 10.100.10.14\",
                \"domain\": 1,
                \"type\": \"JOINED\",
                \"members\": [
                    {
                        \"id\": 50,
                        \"ip\": \"10.100.6.238\",
                        \"name\": \"Cloud 10.100.6.238\"
                    },
                    {
                        \"id\": 73,
                        \"ip\": \"10.100.10.14\",
                        \"name\": \"Cloud 10.100.10.14\"
                    },
                    {
                        \"id\": 74,
                        \"ip\": \"10.100.9.9\",
                        \"name\": \"Cloud 10.100.9.9\"
                    }
                ]
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds?type=non-joined
OUTPUT{
    \"topology_clouds\": {
        \"count\": 2,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"10.100.6.238\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined"},"response":[]},{"name":"Create a joined topology cloud","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"optional new cloud name\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","description":"Create a new topology cloud in the Interactive Map by joining existing clouds together.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
The body must include at least two topology cloud ids that are on a single domain.
If the context parameter is not provided, then the API will use the context id of the first member of the members list in the body.
Clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
If the provided body does not specify a joined cloud name, the newly created topology cloud will be given the name of the first member of the members list in the body.


Parameters:
context: Global MSSP context [optional]
body: Cloud data

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"optional new cloud name\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
201: Joined cloud created successfully
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: You must provide 2 or more clouds
412: Cloud id: cloudId does not belong to domain: Context
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud"},"response":[]},{"name":"Get path for specified traffic","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path","description":"Returns one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path?src=29.29.29.1&dst=25.25.25.1&service=Facebook,tcp:80
OUTPUT {
    \"path_calc_results\": {
        \"traffic_allowed\": false,
        \"device_info\": {
            \"id\": \"17\",
            \"name\": \"PA-VM-111.6 (Cluster)\",
            \"type\": \"mgmt\",
            \"vendor\": \"Palo Alto Networks\",
            \"incomingInterfaces\": {
                \"incomingVrf\": \"default\",
                \"ip\": \"29.29.29.1/255.255.255.252\",
                \"name\": \"tunnel.11\"
            },
            \"nextDevices\": {
                \"name\": \"DIRECTLY_CONNECTED\",
                \"routes\": {
                    \"outgoingInterfaceName\": \"ethernet1/5\",
                    \"outgoingVrf\": \"default\",
                    \"routeDestination\": \"25.25.25.1/255.255.255.0\"
                }
            },
            \"bindings\": {
                \"name\": \"\",
                \"rules\": [
                    {
                        \"action\": \"Accept\",
                        \"applications\": \"facebook\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 43,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    },
                    {
                        \"action\": \"Deny\",
                        \"applications\": \"Any\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 62,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    }
                ]
            }
        }
    }
}

"},"response":[]},{"name":"Get Specific topology subnet","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets/{{id}}","description":"Returns the subnet for the specified id, including information regarding attached devices and join candidates.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the subnet resides.

Parameters:
id: Subnet id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets/20
OUTPUT{
    \"subnet\": {
        \"id\": 18,
        \"name\": \"90.0.0.0/24\",
        \"ip\": \"90.0.0.0\",
        \"mask\": \"255.255.255.0\",
        \"attached_devices\": {
            \"attached_device\": [
                {
                    \"is_generic\": false,
                    \"id\": 10,
                    \"name\": \"srx\",
                    \"interface_id\": 4,
                    \"interface_name\": \"eth0\",
                    \"interface_ip\": \"90.0.0.1\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 13,
                    \"name\": \"ZBFW\",
                    \"interface_id\": 5,
                    \"interface_name\": \"eth1\",
                    \"interface_ip\": \"90.0.0.124\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 85,
                    \"name\": \"netscreen\",
                    \"interface_id\": 6,
                    \"interface_name\": \"eth2\",
                    \"interface_ip\": \"90.0.0.50\"
                }
            ]
        },
        \"join_candidates\": {
            \"join_candidate\": {
                \"is_generic\": false,
                \"id\": 72,
                \"name\": \"CP25\",
                \"interface_id\": 14,
                \"interface_name\": \"eth24/1\",
                \"interface_ip\": \"90.0.0.83\"
            }
        }
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for subnet with id ID
404: No subnet was found for the provided ID"},"response":[]},{"name":"Get topology subnets","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets","description":"Returns a list of the topology subnets for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology subnet names that match the search criteria provided, as follows:
1. If you provide only a mask, then an exact match search is done on the mask portion of the name
e.g. if name=/2, the results will include 1.2.3.4/2, but not 1.2.3.4/22
2. If you provide only a partial or complete IP address, then a contains search is done in the IPv4 block portion of the name
e.g. name=32, the results will include 192.168.205.32/24 and 55.192.32.22/16, but will not include 55.168.205.5/32
3. If you provide both an IPv4 address (either partial or complete) and a mask, then an exact match search is done
e.g. if name=23.4/2, then the results will include 192.168.23.4/2, but will not include 192.168.23.4/23 or 23.4.192.168/2

The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
name: Subnet name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=10.27
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.20/32\",
                \"ip\": \"10.27.122.20\",
                \"mask\": \"255.255.255.255\"
            },
            {
                \"id\": 616,
                \"name\": \"10.27.122.60/32\",
                \"ip\": \"10.27.122.60\",
                \"mask\": \"255.255.255.255\"
            },
            {
                \"id\": 619,
                \"name\": \"10.27.122.0/30\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.252\"
            },
            {
                \"id\": 620,
                \"name\": \"10.27.122.4/30\",
                \"ip\": \"10.27.122.4\",
                \"mask\": \"255.255.255.252\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=144/30
OUTPUT{
    \"topology_subnets\": {
        \"count\": 2,
        \"total\": 2,
        \"subnets\": [
            {
                \"id\": 773,
                \"name\": \"10.13.64.144/30\",
                \"ip\": \"10.13.64.144\",
                \"mask\": \"255.255.255.252\"
            },
            {
                \"id\": 825,
                \"name\": \"10.15.64.144/30\",
                \"ip\": \"10.15.64.144\",
                \"mask\": \"255.255.255.252\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId"},"response":[]},{"name":"Get Specific topology cloud","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","description":"Returns the topology cloud data for the specified id.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the cloud resides.

Parameters:
id: Cloud id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/48
OUTPUT{
    \"topology_cloud\": {
        \"id\": 48,
        \"name\": \"Cloud 69.70.120.155\",
        \"domain\": 1,
        \"type\": \"NON_JOINED\",
        \"ip\": \"69.70.120.155\"
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/66
OUTPUT{
    \"topology_cloud\": {
        \"id\": 66,
        \"name\": \"Cloud 10.100.10.14\",
        \"domain\": 1,
        \"type\": \"JOINED\",
        \"members\": [
            {
                \"id\": 50,
                \"ip\": \"10.100.6.238\",
                \"name\": \"Cloud 10.100.6.238\"
            },
            {
                \"id\": 73,
                \"ip\": \"10.100.10.14\",
                \"name\": \"Cloud 10.100.10.14\"
            },
            {
                \"id\": 74,
                \"ip\": \"10.100.9.9\",
                \"name\": \"Cloud 10.100.9.9\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: No cloud was found for the provided ID"},"response":[]},{"name":"Update a cloud","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"new cloud\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","description":"Modify the name of a topology cloud, and add/remove members of a joined cloud.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain context of the joined cloud, and any members specified in the body.
To change the name of a topology cloud, enter a value in the name field of the body.
To add/remove members of a joined cloud, specify the action and specify the clouds in the members list of the body.
The action is used only if the body contains a members list. If a members list is provided but no actions is specified, then the default action is ‘add’.
When adding cloud members, clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
When removing cloud members, if only zero or one member remains in the joined cloud, it will be deleted from the Interactive Map.

Parameters:
id: cloud id
action: action [optional]
body: Cloud data

Usage Example
URLfor renaming of any cloud - https://192.168.1.1/securetrack/api/topology/clouds/436
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\"
    }
}


Usage Example
URLfor renaming and members updating of a joined cloud - https://192.168.1.1/securetrack/api/topology/clouds/436?action=remove
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
204: Cloud updated successfully
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: Cloud with id ID is a not joined cloud
412: Cloud id: cloudId does not belong to domain: Context
412: Provided clouds don't belongs to the same domain
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud
412: Member cloud with id ID cannot be removed - it is not a member of a joined cloud"},"response":[]},{"name":"Get cloud information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"cloud\": {\n\t\t\t\"management_name\": \"FW1\",\n\t\t\t\"management_id\": 20,\n\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\"cloud_id\": 120,\n\t\t\t\"vertex_id\": 250,\n\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\"routes_count\": 5,\n\t\t\t\"is_parent\": false\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions/{{cloud_id}}","description":"Returns information about a specific cloud in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
cloud_id: cloud id
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions/120
BODY{
    \"suggested_clouds\": {
        \"count\": 1,
        \"total\": 1,
        \"cloud\": {
            \"management_name\": \"FW1\",
            \"management_id\": 20,
            \"cloud_name\": \"Cloud 10.100.0.1\",
            \"cloud_id\": 120,
            \"vertex_id\": 250,
            \"ip\": \"10.100.0.1\",
            \"routes_count\": 5,
            \"is_parent\": false
        }
    }
}


Response Messages:
202: Accepted
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Get Cloud Internal Networks","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_internal_networks/{{id}}","description":"Returns the internal networks for the specified Cloud management id.
This API requires 'Super admin' privileges.

Parameters:
id: Cloud management id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_internal_networks/20
OUTPUT{
    \"network_list\":
    {
        \"count\": 3,
        \"total\": 3,
        \"network\":
        {
            \"ip\": \"10.27.122.20\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.60\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.4\",
            \"mask\": \"255.255.255.252\"
        }
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for NSX with id ID
401: Device ID specified is not supported
404: The specified device ID was not found
404: The specified device ID was not found in Topology"},"response":[]},{"name":"Get Topology Synchronization status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize/status","description":"Returns the progress status of the Topology Model Synchronization.



Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize/status

Response Messages:
200: The topology synchronization was invoked successfully.
401: Access is denied
500: Error getting synchronize progress"},"response":[]},{"name":"Get most specific network interfaces from which a host IP is accessible","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"host"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/interfaces/last_hop","description":"Parameters:
context: Global MSSP context [optional]
host: IP address of device for a query

Usage Example
https://192.168.1.1/securetrack/api/devices/interfaces/last_hop?host=192.168.1.66
"},"response":[]},{"name":"Get cloud information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 2,\n\t\t\"total\": 2,\n\t\t\"cloud\": [\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW1\",\n\t\t\t\t\"management_id\": 20,\n\t\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\t\"cloud_id\": 120,\n\t\t\t\t\"vertex_id\": 250,\n\t\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\t\"routes_count\": 5,\n\t\t\t\t\"is_parent\": false\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW2\",\n\t\t\t\t\"management_id\": 21,\n\t\t\t\t\"cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t\t\"cloud_id\": 125,\n\t\t\t\t\"vertex_id\": 270,\n\t\t\t\t\"ip\": \"172.16.0.1\",\n\t\t\t\t\"routes_count\": 7,\n\t\t\t\t\"is_parent\": false,\n\t\t\t\t\"parent_vertex_id\": 40\n\t\t\t\t\"parent_cloud_id\": 45\n\t\t\t\t\"parent_cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t}\n\t\t]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions","description":"Returns information about all clouds in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
context: Global MSSP context [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions
BODY{
    \"suggested_clouds\": {
        \"count\": 2,
        \"total\": 2,
        \"cloud\": [
            {
                \"management_name\": \"FW1\",
                \"management_id\": 20,
                \"cloud_name\": \"Cloud 10.100.0.1\",
                \"cloud_id\": 120,
                \"vertex_id\": 250,
                \"ip\": \"10.100.0.1\",
                \"routes_count\": 5,
                \"is_parent\": false
            },
            {
                \"management_name\": \"FW2\",
                \"management_id\": 21,
                \"cloud_name\": \"Cloud 172.16.0.1\",
                \"cloud_id\": 125,
                \"vertex_id\": 270,
                \"ip\": \"172.16.0.1\",
                \"routes_count\": 7,
                \"is_parent\": false,
                \"parent_vertex_id\": 40
                \"parent_cloud_id\": 45
                \"parent_cloud_name\": \"Cloud 172.16.0.1\",
            }
        ]
    }
}


Response Messages:
202: Accepted
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Get topology network interfaces by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"mgmtId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_interfaces","description":"The returned interfaces are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
context: Global MSSP context [optional]
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=1&is_generic=true
"},"response":[]},{"name":"Get topology routing tables for a given device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"mgmtId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_routes","description":"The returned routing tables are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=1&is_generic=true
"},"response":[]},{"name":"Get topology generic VPN connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":{"raw":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic_vpns{device_id:(/device_id)?}","protocol":"https","host":["{{SecureTrack_IP}}"],"path":["securetrack","api","topology","generic_vpns{device_id:(","device_id)"],"query":[{"key":"}","value":null}]},"description":"Returns a list of the generic vpn connections in the Topology map, for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology generic vpn connections that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
is_generic: Get generic devices [optional]
device_id: Device id [optional]
name: VPN connection name (accepts '*', '?' as wildcards) [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns
OUTPUT{
    \"generic_vpns\": {
        \"count\": 3,
        \"total\": 3,
        \"generic_vpn\": [
            {
                \"device_id\": 222,
                \"generic\": false,
                \"id\": 3,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.155\",
                \"tunnel_src_ip\": \"84.200.6.1\",
                \"vpn_name\": \"Palo_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns?is_generic=true
OUTPUT{
    \"generic_vpns\": {
        \"count\": 2,
        \"total\": 2,
        \"generic_vpn\": [
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined"},"response":[]},{"name":"Delete generic device from Topology model","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","description":"Delete a generic device from the Topology model.
The ID must be for a valid generic device listed in the Topology Model.
If update update_topology = true, then the Topology model will be updated immediately after the device is deleted.
For maximum efficiency, if you are deleting multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.
Default value for update_topology = true.

Parameters:
id: Generic device id
update_topology: Synchronize And Update Topology [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/1

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/10?update_topology=false

Response Messages:
204: Generic Device deleted successfully.
400: Failed to delete generic device with id {}
404: A 'Generic Device' with the specified ID was not found"},"response":[]},{"name":"Update an existing generic device in the Topology model","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","description":"Modify an existing generic device by uploading a new configuration file and/or specifying a new name.
If name field is specified, the generic device will be renamed.
configuration_file is optional, if provided it must include a valid generic device configuration.
The specified path points to a file in the client machine.
If a generic device name is changed and a new configuration file is not provided, topology will not be synchronized (update_topology flag is ignored).
Default value for update_topology = true.
To save time when there are several consecutive api calls: For the last call, set update_topology = true (for all other calls, update_topology = false).
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
id: Generic device id
body: Generic device to be updated [optional]
configuration_file: Configuration File for generic device [optional]
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices/24

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"new_generic_device_name\"}};type=application/json' -F \"update_topology=false\" https://192.168.1.1/securetrack/api/generic_devices/72

Response Messages:
204: The generic device was updated successfully.
400: A new name or a new configuration file must be indicated in order to update generic device with id {}
400: Failed to update generic device with id {}
404: A 'Generic Device' with the specified ID was not found"},"response":[]},{"name":"Synchronize the Topology model","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize","description":"Invoke of the Topology Model Synchronization.
full_sync=false - Builds the topology model from the information stored in the Tufin database.
full_sync=true - Retrieves the current data from devices and builds the topology model.
Default value for full_sync = false.

Parameters:
full_sync: Perform full sync [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize?full_sync=true

Response Messages:
200: The topology synchronization was invoked successfully.
401: Access is denied
500: Error Synchronizing Topology Model"},"response":[]}]},{"name":"Network Zone Manager - Patterns","item":[{"name":"Get all pattern entries for specific zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t\n\t\t0\n\t\t2\n\t\t2\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEB\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEo\n\t\t\t2\n\t\t\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/pattern-entries","description":"Get the list of zone pattern entries for specific zones by identifiers

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the pattern entry results. [optional]
pattern: Filter by pattern string for the zone entry results. [optional]
name: Filter by zone name for the pattern entry results. [optional]
comment: Filter by comment for the pattern entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/1,2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entries_find_result>
    <paging_info>
        <start>0</start>
        <count>2</count>
        <total>2</total>
    </paging_info>
    <pattern_match_entries>
        <pattern_match_entry>
            <id>2</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEB</pattern>
            <zone_id>1</zone_id>
        </pattern_match_entry>
        <pattern_match_entry>
            <id>3</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEo</pattern>
            <zone_id>2</zone_id>
        </pattern_match_entry>
    </pattern_match_entries>
</pattern_match_entries_find_result>


Response Messages:
200: The zone pattern entries were successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Create a zone pattern entry in a specific zone","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t\n\t\t1\n\t\t2\n\t\t\n\t\t\t1\n\t\t\tDefault\n\t\t\n\t\tWEB\n\t\tsecurity_group_by_name\n\t\tThis is a comment\n\t\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries","description":"Create a zone pattern entry in a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone pattern entry.
body: The zone pattern entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<create_pattern_match_entry>
    <pattern_match_entry>
        <id>1</id>
        <zone_id>2</zone_id>
        <domain>
            <id>1</id>
            <name>Default</name>
        </domain>
        <pattern>WEB</pattern>
        <type>security_group_by_name</type>
        <comment>This is a comment</comment>
    </pattern_match_entry>
</create_pattern_match_entry>


Response Messages:
201: The zone pattern entry was created successfully.
401: User is not permitted to access the specified domain
400: Some of pattern entry parameters were invalid or missing
404: A zone with the specified identifier was not found."},"response":[]},{"name":"Get a specific zone pattern entry for a specific zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t2\tsecurity_group_by_name\n\tThis is a comment\n\tWEB\n\t75\n\tZone_10_0_0_1\n\t\n\t\t
koko
\n\t\tbobo\n\t\t1\n\t\tDefault\n\t
\n
\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries/{{id}}","description":"Get a specific zone pattern entry for a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone entry.
id: Identifier of the zone pattern entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/75/pattern-entries/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entry>
    <id>2</id>    <type>security_group_by_name</type>
    <comment>This is a comment</comment>
    <pattern>WEB</pattern>
    <zone_id>75</zone_id>
    <zone_name>Zone_10_0_0_1</zone_name>
    <domain>
        <address>koko</address>
        <description>bobo</description>
        <id>1</id>
        <name>Default</name>
    </domain>
</pattern_match_entry>


Response Messages:
200: The zone pattern entry was successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified identifier was not found.
404: A zone pattern entry with the specified identifier was not found."},"response":[]}]},{"name":"Network Zone Manager - Subnets","item":[{"name":"Modify multiple existing zone entries","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entries\" : {\n\t\t\"zone_entry\": [\n\t\t\t{\n\t\t\t\t\"id\": 120,\n\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\"prefix\": 32,\n\t\t\t\t\"new_zone_id\": 85\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"id\": 139,\n\t\t\t\t\"ip\": \"1b98:c72:1f00:0001::\",\n\t\t\t\t\"prefix\": \"52\",\n\t\t\t\t\"new_zone_id\": 98\n\t\t\t}\n\t\t]\n}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","description":"For IPv4 entry provide IP and netmask/prefix.
For IPv6 provide IP and prefix only, netmask is not allowed.
new_zone_id is not optional, it may be the same as the present zoneId.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entries.
ids: The ID(s) of the zone entries to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/85,98/entries/120,139
BODY{
\"zone_entries\" : {
        \"zone_entry\": [
            {
                \"id\": 120,
                \"ip\": \"3.3.3.3\",
                \"prefix\": 32,
                \"new_zone_id\": 85
            },
            {
                \"id\": 139,
                \"ip\": \"1b98:c72:1f00:0001::\",
                \"prefix\": \"52\",
                \"new_zone_id\": 98
            }
        ]
}
}


Response Messages:
200: The zone entry was modified successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Create a zone entry","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
body: The zone entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
201: The zone entry was created successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found."},"response":[]},{"name":"Modify a zone entry","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.
body: The modified zone entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
200: The zone entry was modified successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Get a specific zone entry","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_id"},{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"Get a specific zone entry by ID for a zone.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/123

Response Messages:
200: The zone entry was successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Delete zone entries","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_id"},{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"Delete existing zone entries.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/10

Response Messages:
200: The zone entry was deleted successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Get entries for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/entries","description":"Get the list of zone entries for a zone.

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the zone entry results. [optional]
name: Filter by name for the zone entry results. [optional]
ip: Filter by IP for the zone entry results. [optional]
netmask: Filter by netmask for the zone entry results. [optional]
prefix: Filter by prefix for the zone entry results. [optional]
comment: Filter by comment for the zone entry results. [optional]
group: Filter by device group for the zone entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries

Response Messages:
200: The zone entries were successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Modify a zone entry","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_ids"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","description":"Modify an existing zone entry.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entry.
ids: The ID(s) of the zone entries to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/entries/10,20

Response Messages:
200: The zone entry was deleted successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]}]},{"name":"Network Zone Manager - Zones","item":[{"name":"Delete a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}","description":"Delete an existing zone.

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zone to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/1,2

Response Messages:
204: The specified zone was successfully deleted.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get descendant zones for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/descendants","description":"Get a list of zones descended from the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for descendant zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/10,20/descendants

Response Messages:
200: The zone descendants were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get ancestor zones for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/ancestors","description":"Get a list of ancestor zones for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for ancestor zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/123,234/ancestors

Response Messages:
200: The zone ancestors were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get shared zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/shared","description":"Get a list of shared zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/shared

Response Messages:
200: The list of shared zones was retrieved successfully.
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Import a zone","request":{"method":"POST","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/import/{{ids}}","description":"Import a shared zone into the specified domain

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones to import. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/import/10,20

Response Messages:
200: The zone was imported successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Remove a zone as an descendants to a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"parent_id"},{"value":null,"type":"text","key":"child_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","description":"Remove a zone(s) as an descendants to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to remove descendant zone(s).
child_ids: The ID(s) of the zone to remove as a descendant.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was removed as an descendant successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Add a zone as a descendant to a zone","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"parent_id"},{"value":null,"type":"text","key":"child_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","description":"Add a zone(s) as a descendant to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to add descendant zone(s).
child_ids: The ID(s) of the zones to add as descendants.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was added as an descendant successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get configuration usages for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/dependencies","description":"Get a list of configuration usages for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for configuration dependencies.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/dependencies

Response Messages:
200: The zone dependencies were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Create a zone","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\tDMZ\n\tAll DMZ addresses\n\tfalse\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Create a zone.

Parameters:
context: Global MSSP context. [optional]
body: The zone to add.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <name>DMZ</name>
    <comment>All DMZ addresses</comment>
    <shared>false</shared>
</zone>


Response Messages:
201: The zone was created successfully.
401: User is not permitted to access the specified domain
400: The zone parameters were invalid"},"response":[]},{"name":"Delete all zones","request":{"method":"DELETE","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Delete all existing zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
204: All zones were successfully deleted.
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Get all zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Gets a list of all zones.

Parameters:
context: Global MSSP context. [optional]
name: Filter by zone name for the zone results. [optional]
comment: Filter by zone comment for the zone results. [optional]
imported: List domains that imported zones. [optional]
includeInternet: Include the Internet zone. [optional]
includeImported: Include imported zones. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
200: The zones were retrieved successfully.
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Map network elements to security zones","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t \n\t\t 10.8.8.0\n\t\t 255.255.255.0\n\t\t \n\t \n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_zones/","description":"This API maps each network element in the AccessRequestNetworkListDTO (such as IP address, IP address range, object, or group) to all matching Tufin security zones. If the network element is a group, then each zone also identifies all matching group members. The internet referral object can be included in the list, and will always map to the predefined Internet security zone. If the 'Any' element is included in the list it will map to all zones.
Note: if multi-domain mode is enabled, the API calls only checks zones that are in the “Default” domain.

Parameters:
body: AccessRequestNetworkListDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_zones
BODY<network_objects>
     <network_object xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"ip_network\">
         <network xsi:type=\"raw_network_subnet\">
         <ip>10.8.8.0</ip>
         <mask>255.255.255.0</mask>
         </network>
     </network_object>
</network_objects>


Response Messages:
200: Returns mapping of network elements to security zones
400: Access Request Network List is malformed.
401: Access is denied."},"response":[]},{"name":"Get a specific zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","description":"Get the zone with the specified ID.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to get.
imported: List domains that imported zones. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2

Response Messages:
200: The zone was retrieved successfully.
401: User is not permitted to access the specified domain
401: A zone with the specified ID does not exist."},"response":[]},{"name":"Modify a zone","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t2\n\tDMZ\n\tAll DMZ hosts\n\tfalse\n\tfalse\n\tfalse\n\tfalse\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","description":"Modify an existing zone.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <id>2</id>
    <name>DMZ</name>
    <comment>All DMZ hosts</comment>
    <shared>false</shared>
    <internet>false</internet>
    <user_networks>false</user_networks>
    <unassociated_networks>false</unassociated_networks>
</zone>


Response Messages:
204: The specified zone was successfully modified.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
400: The zone parameters were invalid"},"response":[]},{"name":"Remove a zone as an ancestor to a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"child_id"},{"value":null,"type":"text","key":"parent_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","description":"Remove a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to remove ancestors zone(s).
parent_ids: The ID(s) of the zones to remove as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was removed as an ancestor successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Add a zone as an ancestor to a zone","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"child_id"},{"value":null,"type":"text","key":"parent_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","description":"Add a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to add ancestors zone(s).
parent_ids: The ID(s) of the zones to add as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was added as an ancestor successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]}]},{"name":"Policies and Sub-Policies","item":[{"name":"Get rules by input and output interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/topology_interfaces","description":"Parameters:
device_id: The unique identifier of target device
inputInterfaceName: Input interface name [optional]
outputInterfaceName: Output interface name [optional]

Usage Example
https://192.168.1.1/securetrack/api/bindings/2/topology_interfaces?inputInterfaceName=ethernet1/1&outputInterfaceName=ethernet1/2
"},"response":[]},{"name":"Get sub-policies (bindings) by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindings","description":"Returns a list of all of the subpolicies (bindings) for a given device.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Device ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
"},"response":[]},{"name":"Get policies by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/policies","description":"Fetches list of policies defined on a given revision ID

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/policies
"},"response":[]},{"name":"Get list of sub-policies (bindings) with input and/or output interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"supremum_version_id"},{"value":null,"type":"text","key":"inputInterfaceName"},{"value":null,"type":"text","key":"outputInterfaceName"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/binding_query","description":"Retrieve list of bindings of input and/or output interfaces

Parameters:
device_id: The unique identifier of target device
supremum_version_id: The unique identifier of target revision
inputInterfaceName: Input interface name
outputInterfaceName: Output interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/binding_query?supremum_version_id=785&inputInterfaceName=Any&outputInterfaceName=Any
"},"response":[]},{"name":"Get sub-policies (bindings) by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/bindings","description":"Returns a list of all of the subpolicies (bindings) for a given revision.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Revision ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
"},"response":[]},{"name":"Get policies by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/policies","description":"Fetches list of policies defined on a given device ID.
Supported devices: CheckPoint, Panorama Advanced, FortiManager Basic and Advanced, FMC and NSX.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/policies
"},"response":[]}]},{"name":"Policy Analysis","item":[{"name":"Run Policy Analysis query","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_ids"},{"value":null,"type":"text","key":"sources"},{"value":null,"type":"text","key":"destinations"},{"value":null,"type":"text","key":"services"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/policy_analysis/query/matching_rules","description":"Parameters:
device_ids: Device ids
sources: Source list
destinations: Destination list
services: Service list
exclude_any: Exclude any in the specified, comma-separated fields of source, destination or service. For example: exclude_any = destination,service [optional]
action: Action [optional]

Usage Example
https://192.168.1.1/securetrack/api/policy_analysis/query/matching_rules?device_ids=41&sources=33.33.33.0:24,113.113.113.100&destinations=114.1.1.0:24&services=tcp:80&exclude_any=source,destination

Response Messages:
200: Returns request results.
400: Error in request syntax."},"response":[]}]},{"name":"Policy Browser (formerly Rule Documentation)","item":[{"name":"Get specific rule documentation","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Fetches rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16373/documentation
"},"response":[]},{"name":"Modify specific rule documentation","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 173\n\t\t 789112\n\t \n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Modify rule documentation for a single rule given by device ID and rule ID
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If there is no existing rule documentation for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If there is existing rule documentation for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>173</id>
         <ticketCr>789112</ticketCr>
     </record_set>
</rule_documentation>

"},"response":[]},{"name":"Delete specific rule documentation","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Delete rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
"},"response":[]},{"name":"Delete specific rule documentation","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Delete rule documentation for a single rule given by revision ID and rule ID.
If the rule has automatic mapping to a ticket, the record is not deleted.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Rule id

Usage Example
https://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
"},"response":[]},{"name":"Modify specific rule documentation","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 172\n\t\t 789111\n\t \n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Modify rule documentation for a single rule identified by revision ID and rule ID.
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If no rule documentation exists for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If rule documentation already exists for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.
Record set entries that are automatically created or calculated, for example automatic mapping to a SecureChange ticket, cannot be modified.
The following fields are automatically calculated, and cannot be modified:
Permissiveness, Violations, Last Hit, Last Modified, Shadowing Status, Certification Status, Certification Date, Certification Expiration Date, Application Name, Application Owner

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the changed rule
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>172</id>
         <ticketCr>789111</ticketCr>
     </record_set>
</rule_documentation>

"},"response":[]},{"name":"Get specific rule documentation","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Fetches rule documentation for a single rule given by revision ID and rule ID.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the requested rule

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16373/documentation
"},"response":[]}]},{"name":"Policy Optimization","item":[{"name":"Get cleanups by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"code"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/cleanups","description":"Fetches set of Cleanup calculation results for a device given by ID.
Only fully shadowed rules (cleanup code C01) are supported.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
code: Cleanup category code
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query result allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/cleanups?code=C01
"},"response":[]},{"name":"Get risks results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk
"},"response":[]},{"name":"Get devices in cleanup results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"cleanup_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/devices","description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/devices
"},"response":[]},{"name":"Get the specific objects or rules identified for the cleanup results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"cleanup_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/instances","description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/instances
"},"response":[]},{"name":"Get devices in risk results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"risk_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/devices","description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id

Usage Example
https://192.168.1.1/securetrack/api/risk/1/devices
"},"response":[]},{"name":"Get the specific objects or rules identified for the risk results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"risk_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/instances","description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk/1/instances
"},"response":[]},{"name":"Get shadowing rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"shadowed_uids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/shadowing_rules","description":"Find shadowing rules for given shadowed rules of a specific device

Parameters:
device_id: Device ID
shadowed_uids: UIDs of shadowed rules separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/31/shadowing_rules?shadowed_uids=78786a0d-b9cc-478e-b7a2-dea953c976c7
"},"response":[]},{"name":"Get cleanups results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup
"},"response":[]}]},{"name":"Revisions","item":[{"name":"Get specific revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revId}}","description":"Fetches a revision specified by revision Id.
To get revId for this API, use the 'id' property of RevisionDTO that is returned by 'Get revisions by device' or 'Get latest revision by device' APIs

Parameters:
context: Global MSSP context [optional]
revId: Id of fetched revision

Usage Example
https://192.168.1.1/securetrack/api/revisions/785
"},"response":[]},{"name":"Get latest revision by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/latest_revision","description":"Fetches latest revision for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/105/latest_revision
"},"response":[]},{"name":"Get revisions by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/revisions","description":"Fetches revisions for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/105/revisions
"},"response":[]}]},{"name":"Rule Usage","item":[{"name":"Get last hits for all rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find_all/{{device_id}}","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.

Parameters:
device_id: device id

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find_all/20
"},"response":[]},{"name":"Get last hit for a specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"rule_uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find/{{device_id}}/{{rule_uid}}","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.
The rule_uid is the value from the uid field returned by the /rules API: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Parameters:
device_id: device_id
rule_uid: rule_uid

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find/20/ea9db13e-d058-45c6-a2f0-cd731027c22b
"},"response":[]}]},{"name":"Security Rules","item":[{"name":"Get rules by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules","description":"Returns a list of all of the security rules for the specified revision.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.


Parameters:
context: Global MSSP context [optional]
id: Revision id
policyId: Policy id [optional]
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]
with_zb: Include zone-based rules [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]
is_alternate_order: OrderBy alternate order, for display Aci rules by contracts [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?subpolicy_name=layer1&is_global=true
"},"response":[]},{"name":"Get specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/rules/{{ids}}","description":"Returns a list of rules by device ID, rule IDs and additional criteria.
Note: This API retrieves the information from the latest revision.


Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Rule IDs
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16370
"},"response":[]},{"name":"Get specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/rules/{{ids}}","description":"Returns a list of rules by revision ID, rule IDs and additional criteria

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \\\"documentation\\\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \\\"bindings\\\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16370
"},"response":[]},{"name":"Get rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules","description":"Returns a list of all of the security rules for the specified device.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.


Parameters:
context: Global MSSP context [optional]
id: Device ID
policyId: Policy ID [optional]
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Show rules grouping criteria. Can be set only to \"bindings\". Output will be grouped by bindings and section header for Check Point devices, ACL for Cisco devices, and Zones for Juniper, Palo Alto, and Fortinet device [optional]
with_zb: Include zone based rules, values can be 'true' or 'false' [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?subpolicy_name=layer1&is_global=true
"},"response":[]},{"name":"Get rule count per device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API will return a list of all the devices, the devices that has rules that match the search criteria will have rule_count that is bigger than 0

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=ICMP application:facebook

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT{
    \"device_list\":{
        \"device\":[
            {
                \"device_id\":512,
                \"revision_id\":6864,
                \"rule_count\":1
            },
            {
                \"device_id\":59,
                \"revision_id\":543,
                \"rule_count\":0
            }
        ]
    }
}

"},"response":[]},{"name":"Find rules","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/{{device_id}}","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.To get more information regarding objects included in the returned rules (like src_network or dst_network) use their uid, as the objects’ ID might change.
\n By default, if there are less than 3,000 rules - the API will return all the rules.\nIn case there are more than 3,000 rules the API will return an error code 413 with the error message “There are more than 3000 rules, you must use pagination”

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
device_id: Device id
start: The starting rule to include in the returned results [optional]
count: Number of rules to include in the results [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/31?search_text=source:Sales_192.168.2.60 fromzone:sales tozone:External

Usage Example
https://192.168.1.1/securetrack/api/rule_search/20?search_text=Mobile Access hascomment:false

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=web_server&start=0&count=10

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search/59?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT {
    \"rules\":{
        \"count\":1,
        \"total\":1,
        \"rule\":{
            \"@xsi.type\":\"securityRuleDTO\",
            \"id\":21,
            \"cp_uid\":\"\",
            \"uid\":\"{9259f6ee-47a0-4996-a214-ab7edc14a916}\",
            \"order\":2,
            \"binding\":{
                \"default\":true,
                \"policy\":{
                    \"@xsi.type\":\"managementDomainPolicyDTO\",
                    \"id\":2,
                    \"name\":\"Standard\",
                    \"installable_targets\":\"\"
                },
                \"rule_count\":19,
                \"security_rule_count\":19,
                \"uid\":\"{00-FACED0-00}\"
                },
            \"acceleration_breaker\":false,
            \"action\":\"Accept\",
            \"application\":{
                \"id\":4735,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
            },
            \"authentication_rule\":false,
            \"comment\":\"DO NOT DELETE OR EDIT\",
            \"dst_network\":{
                \"id\":39,
                \"display_name\":\"Net_10.110.65.0\",
                \"name\":\"Net_10.110.65.0\"
                \"uid\":\"{1290f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_networks_negated\":false,
            \"dst_service\":{
                \"id\":7420,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
                \"uid\":\"{2904f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_services_negated\":false,
            \"dst_zone\":\"any\",
            \"disabled\":false,
            \"external\":false,
            \"implicit\":false,
            \"dst_zone_any\":true,
            \"src_zone_any\":true,
            \"name\":\"Accept SSHG\",
            \"option\":\"LOG_SESSION\",
            \"documentation\":{
                \"permissiveness_level\":\"LOW\",
                \"shadowed\":\"Not shadowed\",
                \"last_modified\":\"Today\",
                \"last_hit\":\"N/A\",
                \"violations\":\"\"
            },
            \"rule_location\":\"Shared\",
            \"rule_location_display\":\"Shared - Pre Rule\",
            \"rule_number\":2,
            \"rule_type\":\"universal\",
            \"src_zone\":\"any\",
            \"src_network\":{
                \"id\":38,
                \"display_name\":\"Net_10.110.64.0\",
                \"name\":\"Net_10.110.64.0\"
                \"uid\":\"{4934f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"src_networks_negated\":false,
            \"src_services_negated\":false,
            \"track\":{
                \"level\":\"LOG\"
            },
            \"type\":\"rule\",
            \"users\":{
                \"id\":5,
                \"display_name\":\"tufin\\\\regina\",
                \"name\":\"tufin\\\\regina@ldap\"
            }
        }
    }
}


Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid
413: Max supported count is 3000
413: There are more than 3000 rules, you must use pagination"},"response":[]},{"name":"Create a CSV file for rules search results","request":{"method":"GET","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/export","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is : for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API exports the results data as a CSV file in the SecureTrack Reports Repository.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export?search_text=shadowed:true
"},"response":[]},{"name":"Get a specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ruleId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rules/{{ruleId}}","description":"Parameters:
ruleId: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/rules/60
"},"response":[]}]},{"name":"Services and Ports","item":[{"name":"Get service groups containing specified service objects","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/groups","description":"Returns groups that contain the specified service objects


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.

Usage Example
https://192.168.1.1/securetrack/api/services/69577/groups
"},"response":[]},{"name":"Get specific service","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/services/{{ids}}","description":"Fetches list of specific service objects defined in device given by device ID and specified by their IDs.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Service object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/services/959888,959966
"},"response":[]},{"name":"Get services by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/services","description":"Fetches list of service objects defined on device given by device ID.
The default value for get_total is false. For APIF calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric between 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

"},"response":[]},{"name":"Get rules containing specified service object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/rules","description":"Returns the security rules that contain the specified service object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.
include_groups: You can add \"include_groups\" to find rules that include the service object and rules that include the groups that include the service object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/65078/rules?include_groups=true
"},"response":[]},{"name":"Get services by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/services","description":"Fetches list of service objects defined in revision given by revision ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric betweenm 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/785/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

"},"response":[]},{"name":"Get specific service","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/services/{{ids}}","description":"Fetches list of specific service objects defined in revision given by revision ID and specified by their IDs

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/services/959888
"},"response":[]},{"name":"Get services objects matching specified criteria","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"services\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"service:\": {\n\t\t\t\"id\": 169197,\n\t\t\t\"name\": \"tcp_10\",\n\t\t\t\"display_name\": \"tcp_10\",\n\t\t\t\"class_name\": \"access_role\",\n\t\t\t\"global\": false,\n\t\t\t\"device_id\": 158,\n\t\t\t\"comment\": \"\",\n\t\t\t\"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",\n\t\t\t\"implicit\": false,\n\t\t\t\"max\": false,\n\t\t\t\"min\": false,\n\t\t\t\"protocol\": 6,\n\t\t\t\"timeout\": \"\",\n\t\t\t\"type\": \"tcp_service\",\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/search","description":"You can search for service objects where the name or comment fields have a specified text string,
or you can search for service objects that have an Port or protocol that matches,
or you can search for service objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns service objects where the name or comment fields have a specified text string. \n“protocol” filter returns service objects that have a protocol that matches specified IP protocol number.\n“port” filter returns service objects that have a port that matches specified port number.\n “uid“ filter returns service objects with the specified uid.\n If no filter is specified, the “text” filter is used.
device_id: Returns service objects belonging to the specified device_id. [optional]
name: (For “text” filter) You can specify \"name\" to find service objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find service objects with the specified text in the comment field. [optional]
protocol: Specify Protocolto find service objects that have the specified IP Protocol. [optional]
port: Specify Portto find service objects that have the specified Port. [optional]
uid: (for “uid“ filter) Returns service objects with the specified uid. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=protocol&protocol=6&device_id=68

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=port&port=80

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
URLhttps://192.168.1.1/securetrack/api/services/search?filter=text&name=tcp_10
BODY{
    \"services\": {
        \"count\": 1,
        \"total\": 1,
        \"service:\": {
            \"id\": 169197,
            \"name\": \"tcp_10\",
            \"display_name\": \"tcp_10\",
            \"class_name\": \"access_role\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"max\": false,
            \"min\": false,
            \"protocol\": 6,
            \"timeout\": \"\",
            \"type\": \"tcp_service\",
            }
        }
    }
}

"},"response":[]}]},{"name":"Time Objects","item":[{"name":"Get time objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/time_objects","description":"Returns the time objects used in the specified device.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Starting page for query allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/time_objects
"},"response":[]},{"name":"Get time objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/time_objects","description":"Returns the time objects used in the specified revision.

Parameters:
context: Global MSSP context [optional]
id: Revision ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/time_objects
"},"response":[]},{"name":"Get specific time object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/time_objects/{{ids}}","description":"Fetches list of time objects by revision ID and rule ID

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Rule IDs

Usage Example
https://192.168.1.1/securetrack/api/revisions/7/time_objects/9
"},"response":[]}]},{"name":"Traffic Policy Matcher","item":[{"name":"Get policy relevance metrics for traffic","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"relevance_metrics\": {\n\t\t\"source_ips\": {\n\t\t\t\"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"dest_ips\": {\n\t\t\t\"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"targets\": {\n\t\t\t\"target\": [4, 10]\n\t\t}\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/traffic_policy/","description":"The response lists all the relevant security groups, tags, relevant instances, and count of unrelated instances for each Amazon VPC in the specified traffic path.
A relevant security group contains at least one instance including either the source or destination IP address.
An unrelated instance is included in the security group but not part of the specified traffic path.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is used only if MSSP mode is enabled. If MSSP mode is disabled context is ignored.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
body: Relevance metrics request

Usage Example
URLhttps://192.168.1.1/securetrack/api/traffic_policy
BODY{
    \"relevance_metrics\": {
        \"source_ips\": {
            \"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]
        },
        \"dest_ips\": {
            \"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]
        },
        \"targets\": {
            \"target\": [4, 10]
        }
    }
}


Response Messages:
200: Successful
401: Insufficient user permissions
404: Device not found
400: Invalid parameters"},"response":[]}]},{"name":"Unified Security Policy - Access Request Violations","item":[{"name":"Cancel violation task","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task/{{taskId}}","description":"Delete an access request violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/task/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Access request violations task has been aborted successfully.
401: Access is denied.
404: Access request violations task was not found."},"response":[]},{"name":"Start a task to calculate violations for an access request","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task","description":"Create a calculation task to find access requests violations.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
body [optional]
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request uses resources from multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/task?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
202: Access request violations task was accepted.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination)
400: No network source were specified.
400: No network destination were specified.
401: Access is denied.
503: Access request violations task was rejected."},"response":[]},{"name":"Get violation task results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/result/{{taskId}}","description":"Get result of access requests violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task results were received.
401: Access is denied.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet."},"response":[]},{"name":"Get violation task status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/status/{{taskId}}","description":"Get access requests violations task status.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task status was received.
401: Access is denied.
404: Access request violations task status was not found."},"response":[]},{"name":"Get violations for an access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/sync","description":"Calculate the violations for the given access request.
Note: this API may take a while to complete.
See the asynchronous API /violations/access_request/task as an alternative.

Parameters:
body: AccessRequestListDTO
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request supports multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/sync?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
200: Access request violations were calculated.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination).
401: Access is denied."},"response":[]}]},{"name":"Unified Security Policy - Alerts","item":[{"name":"Delete alerts by ids","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{ids}}","description":"Delete specified alerts by IDs
To delete multiple alert_ids, use a comma between each ID

Parameters:
context: Delete alerts in the specified domain ID. [optional]
ids: The alert Ids for deletion

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/87

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/86,87,88

Response Messages:
200:
401: Security Policy Alert Ids: :|'alert ids'| don't exist"},"response":[]},{"name":"Get a specific alert","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","description":"Returns a specified alert.
If the alert_id does not exist, an error message is returned.

Parameters:
context: MSSP context [optional]
id: The alert Id

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/1

Response Messages:
401: Alert ID does not exist"},"response":[]},{"name":"Update an alert","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": \"moshe\"\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","description":"Update an alert for unified security policies.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
id: The alert ID for updating [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts/1
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": \"moshe\"
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
204: Alert ID: 'alertId' was updated successfully
404: Alert ID: 'alertId' does not exist
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
401: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain"},"response":[]},{"name":"Get alerts","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"start"},{"value":null,"type":"text","key":"count"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","description":"Returns a list of all alerts. If an empty list is returned, it implies that there are no configured alerts for that context.
You must set start and count parameters to limit the number of returned alerts.
Start is zero based - to start from the second rule use start=1, to get rules 51-60 use start=50 and count=10.

Parameters:
context: MSSP context [optional]
start: Returns the results beginning with the specified result number
count: Returns the specified number of results

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts?start=10&count=25

Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid"},"response":[]},{"name":"Create an alert","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": \"moshe\"\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","description":"Create an alert for unified security policies.
Returns location with the alert id to get the alert.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": \"moshe\"
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
201: Security policy alert id :|'alertId'| , name : 'alertName'
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
401: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain"},"response":[]}]},{"name":"Unified Security Policy - Cloud Tag Policy","item":[{"name":"Check if tags are compliant with cloud tag policies","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":" {\n\t\"type\": \"vm\",\n\t\"name\": \"CRM-FE\",\n\t\"os\": \"ubuntu14.4\",\n\t\"image\": \"AMI-12345\",\n\t\"tags\": {\n\t\t\"Role\": \"webserver\",\n\t\t\"Budget\": \"corporate\",\n\t\t\"Owner\": \"Steve.Smith\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violation_check/","description":"Check if the tags of a cloud resource are compliant with the specified cloud tag policy. Specify the tag policy to validate in the TagPolicyViolationsCheckRequestDTO. The tags of a cloud resource are specified as a json object with the attribute 'tags' at the root level. 'tags' attributes can be a list of tag names or a map including both the tag name and value. If no tags are specified or if the tag is specified incorrectly, The compliance check will treat the resource as if it has no tags. If no cloud tag policy violations are found the API returns an empty violations list.

Parameters:
context: Returns results for the specified domain ID [optional]
policy_external_id: Tag policy external identifier
body: Tag policy violation check request

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/violation_check?policy_external_id=policyId
BODY {
    \"type\": \"vm\",
    \"name\": \"CRM-FE\",
    \"os\": \"ubuntu14.4\",
    \"image\": \"AMI-12345\",
    \"tags\": {
        \"Role\": \"webserver\",
        \"Budget\": \"corporate\",
        \"Owner\": \"Steve.Smith\"
    }
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Get all cloud tag policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","description":"This API returns the details of all the tag policies.

Results are filtered according to user domain permissions and request context. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicy1\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                },
                {
                        \"policy_id\": \"tp-102\",
                        \"policy_name\": \"myPolicy2\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions"},"response":[]},{"name":"Create a cloud tag policy","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":" {\n\t\"policy_name\": \"Production-VPC-Tag-Policy\",\n\t\"policy_description\": \"Instances tags in production\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_financial_tags\",\n\t\t\t\"requirement_severity\": \"HIGH\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Budget\"\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"requirement_type\": \"valid_values\",\n\t\t\t\"requirement_name\": \"budget_valid_values\",\n\t\t\t\"requirement_severity\": \"CRITICAL\",\n\t\t\t\"tag\": \"Budget\",\n\t\t\t\"values\": [\n\t\t\t\t\"Corporate\",\n\t\t\t\t\"Dev\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","description":"Create a new cloud tag policy. The policyName field specified in the TagPolicyDTO must be unique. Define the requirements enforced by the cloud tag policy in the requirements field of the TagPolicyDTO. The supported value for the \"requirement_type\" field are \"mandatory_tags\" and \"valid_values\"If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Create policy for the specified domain ID [optional]
body: cloud tag policy DTO [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
BODY {
    \"policy_name\": \"Production-VPC-Tag-Policy\",
    \"policy_description\": \"Instances tags in production\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_financial_tags\",
            \"requirement_severity\": \"HIGH\",
            \"tags\": [
                \"Owner\",
                \"Budget\"
            ]
        },
        {
            \"requirement_type\": \"valid_values\",
            \"requirement_name\": \"budget_valid_values\",
            \"requirement_severity\": \"CRITICAL\",
            \"tag\": \"Budget\",
            \"values\": [
                \"Corporate\",
                \"Dev\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
409: Policy name already exists"},"response":[]},{"name":"Get all cloud tag policy violations for a VPC","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"severity"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/tag_violations/","description":"Retrieve all cloud tag policy violations for the specified VPC and severity level.

Parameters:
context: Global MSSP context. [optional]
deviceId: The device ID for which to get violations
severity: Return only violations of this severity
resourceId: The id of the VM instance [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses \"count=100\". [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tag_violations?deviceId=123&severity=CRITICAL
OUTPUT<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<tag_policy_device_violations>
    <violating_resources_count>2</violating_resources_count>
    <device_name>Amazon Test VPC </device_name>
    <severity>critical</severity>
    <violating_resources>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Name' value 'email server' is not valid. Valid values are [R&D, HR]</violation_message>
                    <policy_id>tp-100</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>validValue_constraint2</requirement_name>
                    <requirement_severity>high</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"valid_values\">
                        <tag>Name</tag>
                        <valid_values>
                            <valid_value>R&D</valid_value>
                            <valid_value>HR</valid_value>
                        </valid_values>
                        <invalid_value>email server</invalid_value>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-abc12345</resource_id>
            <resource_name>email server</resource_name>
        </violating_resource>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Application' is missing</violation_message>
                    <policy_id>tp-105</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>mandatory_constraint1</requirement_name>
                    <requirement_severity>critical</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"mandatory_tags\">
                        <missing_tag>Application</missing_tag>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-12345678</resource_id>
            <resource_name>Violations tests server</resource_name>
        </violating_resource>
    </violating_resources>
</tag_policy_device_violations>


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: A device with the specified ID was not found"},"response":[]},{"name":"Replace a cloud tag policy","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Replace the cloud tag policy specified by policyID with the new policy attributes.

Use PATCH in order to partially modify a policy. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Replace policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}

"},"response":[]},{"name":"Modify a cloud tag policy","request":{"method":"PATCH","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Partially modify a cloud tag policy by stating the modified attributes. Providing requirements replaces the entire list.

Specifying an empty requirement list is not permitted. Modify some attributes of the cloud tag policy specified by policyID with the attributes provided. If one or more \"requirement\" objects is provided, the exsiting \"requirement\" objects will be deleted and replaced with the new objetcs. Specifying an empty requirement list is not permitted.If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Rename policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Delete cloud tag policy","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Delete the cloud tag policy specified by policyId.

If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Delete policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT {
        \"status\": \"OK\",
        \"policy_name\": \"myPolicyName\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Get cloud tag policy","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"This API retrieves the details of the cloud tag policy specified by policyId.

User must have admin permissions to the policy affiliated domain. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicyName\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryTagsRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found"},"response":[]}]},{"name":"Unified Security Policy - Exceptions","item":[{"name":"Get matching rules task status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/status/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task status was received.
401: User not permitted to Security policy exceptions.
404: Matching rules task status was not found."},"response":[]},{"name":"Get matching rules task results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/result/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task results were received.
401: User not permitted to Security policy exceptions.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet."},"response":[]},{"name":"Get a specific exception","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","description":"Gets a specific exception for unified security policies.

Parameters:
exceptionId: The ID of the exception to get.
context: Global MSSP context [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
401: User not permitted to access the specified domain
404: A security policy exception with the specified ID was not found."},"response":[]},{"name":"Delete an exception","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","description":"Delete the specific unified security policy exceptions

Parameters:
exceptionId: The ID of the exception to delete.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
404: The security policy with the specified ID does not exist
401: User not permitted to access the specified domain."},"response":[]},{"name":"Start a task to calculate matching rules for an exception","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}/matching_rules/start","description":"Create a calculation task to find matching rules.
The results will be on the relevant devices for each access.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
exceptionId: Security policy Exception ID on which to run the API.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/1/matching_rules/start

Response Messages:
401: User not permitted to Security policy exceptions.
404: A security policy exception with the specified ID was not found."},"response":[]},{"name":"Cancel Matching rules task","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Matching rules task has been aborted successfully.
401: User not permitted to Security policy exceptions.
404: Matching rules task was not found."},"response":[]},{"name":"Get all exceptions","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","description":"Gets a list of all unified security policy exceptions.

Parameters:
context: Global MSSP context [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions

Response Messages:
401: User not permitted to access the specified domain"},"response":[]},{"name":"Create an exception","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\tadmin\n\tst_user\n\t2015-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\t\n\t\t\n\t\t\tCreating USP exception for ticket 123\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.2\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tLAN\n\t\t\t\t\tcorporate security policy\n\t\t\t\t\tDMZ\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4321\n\t\t\t\t\t\ttcp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t1\n\t\t\t\t\t\t{5aa1c104-bd4d-4635-a281-b3a5442639ba}\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\thttp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t10\n\t\t\t\t\t\t20\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.1\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t2025-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\tadmin\n\t123\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","description":"Create an exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/exceptions
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<security_policy_exception>
    <approved_by>admin</approved_by>
    <created_by>st_user</created_by>
    <creation_date>2015-01-01</creation_date>
    <description>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</description>
    <exempted_traffic_list>
        <exempted_traffic>
            <comment>Creating USP exception for ticket 123</comment>
            <dest_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.2</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </dest_network_collection>
            <security_requirements>
                <zone_to_zone_security_requirement>
                    <from_zone>LAN</from_zone>
                    <policy_name>corporate security policy</policy_name>
                    <to_zone>DMZ</to_zone>
                </zone_to_zone_security_requirement>
            </security_requirements>
            <service_collection>
                <service_items>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"custom\">
                        <port>4321</port>
                        <protocol>tcp</protocol>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"device_service\">
                        <mgmt_id>1</mgmt_id>
                        <service_uid>{5aa1c104-bd4d-4635-a281-b3a5442639ba}</service_uid>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"predefined\">
                        <predefined_service_name>http</predefined_service_name>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"range_service\">
                        <minProtocol>10</minProtocol>
                        <maxProtocol>20</maxProtocol>
                    </service_item>
                </service_items>
            </service_collection>
            <source_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.1</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </source_network_collection>
        </exempted_traffic>
    </exempted_traffic_list>
    <expiration_date>2025-01-01</expiration_date>
    <name>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</name>
    <requested_by>admin</requested_by>
    <ticket_id>123</ticket_id>
</security_policy_exception>


Response Messages:
400: The specified network item is not valid.
400: The specified zone name does not exist.
400: The security policy with the specified name does not exist
400: The security policy 'created by' user is not valid.
400: The security policy with the specified name already exists.
401: User not permitted to access the specified domain."},"response":[]}]},{"name":"Unified Security Policy - Security Zone Matrix","item":[{"name":"Get unified security policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/","description":"Fetches the security zone matrices defined under Unified Security Policy.

Parameters:
context: Returns results for the specified domain ID. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies

Response Messages:
401: User not permitted to access the specified domain"},"response":[]},{"name":"Set manual device mapping","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n \n Vlan_30\n \n \n 10\n add\n \n \n \n\n "},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/manual_mapping","description":"Add or remove a zone on a device interface

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID
body: InterfacesManualMappingsDTO

Usage Example
URLhttps://127.0.0.1/securetrack/api/security_policies/10/manual_mapping
BODY<interfaces_manual_mappings>
<interface_manual_mapping>
<interface_name>Vlan_30</interface_name>
<zones_user_actions>
<zone_user_action>
<zoneId>10</zoneId>
<action>add</action>
</zone_user_action>
</zones_user_actions>
</interface_manual_mapping>
</interfaces_manual_mappings>


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Not found error
404: User action not valid (only add/remove)
404: No interface with name for device with id
404: No zone with id
404: No revision for device with id
404: No device with ID
404: Access denied for device with ID
404: InterfacesManualMappingsDTO is empty
404: Error on updating security_policy_interface_zone_mapping_user_action table for device with ID"},"response":[]},{"name":"Get global unified security policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/global","description":"Fetches the global security zone matrices defined under Unified Security Policy.



Usage Example
https://192.168.1.1/securetrack/api/security_policies/global

Response Messages:
401: User not permitted to access global security policies"},"response":[]},{"name":"Get unified security policy as CSV","request":{"method":"GET","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}/export","description":"Exports a Security Policy in CSV format

Parameters:
context: Returns results for the specified domain ID. [optional]
id: ID of the security policy. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1/export

Response Messages:
401: User not permitted to access the specified domain
404: Security Policy does not exist"},"response":[]},{"name":"Delete unified security policy","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}","description":"Delete a Security Policy Matrix

Parameters:
context: Returns results for the specified domain ID. [optional]
id: The unique identifier of the security policy matrix to delete

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1
"},"response":[]}]},{"name":"Unified Security Policy - Violations","item":[{"name":"Get the violating rules for the specified device.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"severity"},{"value":null,"type":"text","key":"type"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/device_violations","description":"policyName is supported for management devices running in Advanced management mode.

Parameters:
deviceId: The device ID for which to get violations
policyName: Return only violations that match this policy [optional]
severity: Return only violations of this severity
type: Return only violations of this type

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/device_violations?policy=policy_name&type=SECURITY_POLICY&severity=MEDIUM

Response Messages:
200: The violations were successfully retrieved
400: The specified value for the violation severity is invalid
400: The specified value for the violation type is invalid
400: You cannot specify a policyName because the device is not running in Advanced management mode
404: A device with the specified ID was not found
404: A policy with the specified policyName was not found for this device"},"response":[]},{"name":"Get the amount of violating rules for the specified device.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/count","description":"Parameters:
deviceId: The device ID for which to get violations.

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/count

Response Messages:
200: The violation count was successfully retrieved
404: Device with id: <deviceId> doesn't exist"},"response":[]}]}]} \ No newline at end of file diff --git a/Postman Format v2/R19-3 postman collection/tufin.postman_environment b/Postman Format v2/R19-3 postman collection/tufin.postman_environment new file mode 100644 index 0000000..51d4258 --- /dev/null +++ b/Postman Format v2/R19-3 postman collection/tufin.postman_environment @@ -0,0 +1 @@ +{"name":"Tufin environment","values":[{"type":"text","key":"SecureApp_IP"},{"type":"text","key":"SecureChange_IP"},{"type":"text","key":"SecureTrack_IP"},{"type":"text","key":"applicationId"},{"type":"text","key":"applicationInterfaceId"},{"type":"text","key":"application_id"},{"type":"text","key":"application_pack_id"},{"type":"text","key":"assigneeId"},{"type":"text","key":"child_id"},{"type":"text","key":"child_ids"},{"type":"text","key":"cleanup_id"},{"type":"text","key":"cloud_id"},{"type":"text","key":"connectionId"},{"type":"text","key":"connectionInterfaceId"},{"type":"text","key":"connectionToApplicationId"},{"type":"text","key":"connection_id"},{"type":"text","key":"connection_to_application_pack_id"},{"type":"text","key":"customer_id"},{"type":"text","key":"deviceId"},{"type":"text","key":"device_id"},{"type":"text","key":"domainId"},{"type":"text","key":"exceptionId"},{"type":"text","key":"fieldId"},{"type":"text","key":"id"},{"type":"text","key":"ids"},{"type":"text","key":"instructionId"},{"type":"text","key":"managementId"},{"type":"text","key":"parent_id"},{"type":"text","key":"parent_ids"},{"type":"text","key":"policyId"},{"type":"text","key":"requestId"},{"type":"text","key":"revId"},{"type":"text","key":"revision_id"},{"type":"text","key":"risk_id"},{"type":"text","key":"ruleId"},{"type":"text","key":"rule_id"},{"type":"text","key":"rule_uid"},{"type":"text","key":"serverId"},{"type":"text","key":"serviceId"},{"type":"text","key":"sourceApplicationId"},{"type":"text","key":"stepId"},{"type":"text","key":"tag_id"},{"type":"text","key":"targetApplicationId"},{"type":"text","key":"taskId"},{"type":"text","key":"task_id"},{"type":"text","key":"task_uid"},{"type":"text","key":"toStepId"},{"type":"text","key":"uid"},{"type":"text","key":"userId"},{"type":"text","key":"zone_id"},{"type":"text","key":"zone_ids"}]} \ No newline at end of file diff --git a/Postman Format v2/R20-1 postman collection/securechangeworkflow_R20-1-GA-v2.json b/Postman Format v2/R20-1 postman collection/securechangeworkflow_R20-1-GA-v2.json new file mode 100644 index 0000000..cc00a65 --- /dev/null +++ b/Postman Format v2/R20-1 postman collection/securechangeworkflow_R20-1-GA-v2.json @@ -0,0 +1 @@ +{"info":{"_postman_id":"2","name":"Tufin Tufin SecureChange/SecureApp R20-1-GA","description":"Tufin Orchestration Suite - Tufin SecureChange/SecureApp APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securechangeworkflow/apidoc","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json"},"item":[{"name":"Access Portal","item":[{"name":"Retrieve existing application access requests","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Update application access requests","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tAPPROVE\n\t\n\t\n\t\t2\n\t\tREJECT\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
body: application access requests

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_requests>
    <application_access_request>
        <id>1</id>
        <action>APPROVE</action>
    </application_access_request>
    <application_access_request>
        <id>2</id>
        <action>REJECT</action>
    </application_access_request>
</application_access_requests>


Response Messages:
200: Application access requests were updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Create application access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t1\n\t1.1.1.1\n\tRequest to join the WebServers server group\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Parameters:
applicationId: The unique identifier of the application
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_request>
    <server_group_id>1</server_group_id>
    <server_ip>1.1.1.1</server_ip>
    <comment>Request to join the WebServers server group</comment>
</application_access_request>


Response Messages:
201: Application access request was submitted.
400: The application was already deleted.
400: Server id cannot be empty.
400: Hostname or IP cannot be empty.
400: The provided server does not exist in application.
400: The provided server is not allowed to access.
400: Request already created
400: Requester cannot be null
400: Group cannot be empty
400: Invalid ip
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Update an application access request","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tAPPROVE\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1
BODY<application_access_request>
    <action>APPROVE</action>
</application_access_request>


Response Messages:
200: Application access request was updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve an existing application access request by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"requestId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","description":"Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Access request with id ID was not found in application with id ID"},"response":[]}]},{"name":"Application Connections","item":[{"name":"Retrieve existing connections, with extended resources information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_extended","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]
start: Return results starting only from the specified index; 0-based index; default value = 0 [optional]
count: Return the specified number of results. Returns all results if no value specified [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name&start=50&count=100

Response Messages:
400: Start value cannot be a negative number.
400: Count value must be greater than 0.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied.
404: There is no application with the specified ID.
404: There are no connections with the name NAME."},"response":[]},{"name":"Retrieve an existing connection by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Update a connection","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":" \n\t Connection A\n\t Connection A comment\n\t \n\t\t \n\t\t\t 2\n\t\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n "},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection
body: Connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections/1
BODY <connection>
     <name>Connection A</name>
     <comment>Connection A comment</comment>
     <sources>
         <source>
             <id>2</id>
         </source>
         <source>
             <id>3</id>
         </source>
     </sources>
     <services>
         <service>
             <id>1</id>
         </service>
     </services>
     <destinations>
         <destination>
             <id>1</id>
         </destination>
     </destinations>
</connection>


Response Messages:
200: Connection was modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application that contains the server ID
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Delete connection","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
200: Connection was deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Create a ticket to repair a connection","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tRepair connection 2\n\tu1\n\tNormal\n\t\n\t\tWorkflow with topology\n\t\n\t\n\t\t\n\t\t\tOpen request\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBusiness Justification\n\t\t\t\t\t\t\tI need access to ftp \n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tProject Number\n\t\t\t\t\t\t\tCR124560\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tHyperlink\n\t\t\t\t\t\t\thttp://192.168.1.1/ticket\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tChange Window\n\t\t\t\t\t\t\tMonday\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tmanager email\n\t\t\t\t\t\t\tmanager@tufin.com\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connections/{{connection_id}}/repair","description":"Parameters:
application_id: The application ID
connection_id: The connection ID
body: Ticket

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/2/repair
BODY<ticket>
    <subject>Repair connection 2</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <workflow>
        <name>Workflow with topology</name>
    </workflow>
    <steps>
        <step>
            <name>Open request</name>
            <tasks>
                <task>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                            <name>Business Justification</name>
                            <text>I need access to ftp </text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                            <name>Project Number</name>
                            <text>CR124560</text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                            <name>Hyperlink</name>
                            <url>http://192.168.1.1/ticket</url>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                            <name>Change Window</name>
                            <selection>Monday</selection>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                            <name>manager email</name>
                            <text>manager@tufin.com</text>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Response Messages:
201: Ticket was created.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set.
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: Expiration field is required.
400: Submit ticket enabled only with the first step.
400: First step can be only with one task.
400: The specified workflow does not contain an access request field in the first step.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
401: Logged in user: NAME do not have permission to perform on behalf actions.
401: You are not a participant in the first step of this workflow.
401: Access is denied.
401: To create a ticket you must purchase a valid SecureChange license.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: Cannot create a ticket to repair this connection because the connection status is not disconnected.
403: Cannot create a ticket to repair this connection because the connection was edited but a ticket has not been created yet.
403: Cannot create a ticket to repair this connection because there are other open tickets for an application that includes this connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Update connections","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 1\n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t 2\n\t\t Connection B\n\t \n\t \n\t\t 3\n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
body: List of connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <id>1</id>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <id>2</id>
         <name>Connection B</name>
     </connection>
     <connection>
         <id>3</id>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application that contains the server ID
401: You do not have permissions to edit this application.
401: Access is denied
401: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections?name=Connection Name

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no connections with the name NAME."},"response":[]},{"name":"Create connections","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t Connection B\n\t \n\t \n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
body: The list of the connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <name>Connection B</name>
     </connection>
     <connection>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were created.
201: Connection was created.
400: There are no items to add.
400: You cannot add to application NAME because it was decommissioned.
400: Connection name already exists.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Identities","item":[{"name":"Fetches application identities","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/application_identities","description":"Fetches the list of pre-defined application identities (like facebook) that can be used in a connection.

Parameters:
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities?name=facebook

Response Messages:
404: There are no application identities with the name NAME.
401: Access is denied."},"response":[]}]},{"name":"Application Interfaces","item":[{"name":"Retrieve an existing application interface by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Delete application interface","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
200: Application interface was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Update an application interface","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tupdated name\n\tUpdated application interface\n\ttrue\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Update the application interface properties. If is_published is set to true, the application interface is published for use by other users.

Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of The application interface
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1
BODY<application_interface>
    <name>updated name</name>
    <comment>Updated application interface</comment>
    <is_published>true</is_published>
</application_interface>


Response Messages:
200: Application interface was modified.
400: Application interface is not complete for publish.
400: Name cannot be empty.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing interface connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
name: The name of the interface connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections?name=Connection 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no connection interfaces with the name NAME.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Create interface connections","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tConnection 1\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\t\n\t\t\t\tFacebook\n\t\t\t\n\t\t\n\t\tNew connection\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
body: The interface connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections
BODY<interface_connections>
    <interface_connection>
        <name>Connection 1</name>
        <sources>
            <source>
                <id>3</id>
            </source>
        </sources>
        <services>
            <service>
                <id>3</id>
            </service>
            <service>
                <id>Facebook</id>
            </service>
        </services>
        <comment>New connection</comment>
    </interface_connection>
</interface_connections>


Response Messages:
200: Interface connections were created.
201: Interface connection was created.
400: There are no items to add.
400: Cannot create interface connection without a name.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
401: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Create connection to application","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tConnection to Application 1\n\tNew connection to application\n\t1\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","description":"Create a connection from this application to an application interface.

Parameters:
applicationId: The unique identifier of the application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications
BODY<connection_to_application>
    <name>Connection to Application 1</name>
    <comment>New connection to application</comment>
    <application_interface_id>1</application_interface_id>
    <servers>
        <server>
            <id>3</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
201: Connection to application was created.
400: You cannot add to application NAME because it was decommissioned.
400: The selected interface cannot be used more than once in the application.
400: Name cannot be empty.
400: Cannot create from local interface.
400: ApplicationInterface didn't got published.
400: Name already exists.
400: Cannot create connection to application without servers, there should be at least one server.
400: Reference to source/destination with ID is invalid.
400: You can use only interface from the same customer.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found."},"response":[]},{"name":"Retrieve existing connections to application","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection to application [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications?name=Connection to Application 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Update an interface connection","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\t\n\t\t\n\t\t\t19\n\t\t\n\t\n\t\n\t\t\n\t\t\t9\n\t\t\n\t\n\tUpdated connection\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection
body: The interface connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1
BODY<interface_connection>
    <name>Updated name</name>
    <sources>
        <source>
            <id>19</id>
        </source>
    </sources>
    <services>
        <service>
            <id>9</id>
        </service>
    </services>
    <comment>Updated connection</comment>
</interface_connection>


Response Messages:
200: Interface connection was modified.
400: Interface connection name cannot be empty.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
401: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve an existing interface connection by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"},{"value":null,"type":"text","key":"connectionInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Delete interface connection","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"},{"value":null,"type":"text","key":"connectionInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
200: Interface connection was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Update a connection to application","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated connection to application\n\t\n\t\t\n\t\t\t4\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1
BODY<connection_to_application>
    <name>Updated name</name>
    <comment>Updated connection to application</comment>
    <servers>
        <server>
            <id>4</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
200: Connection to application was modified.
400: Name cannot be empty.
400: Name already exists.
400: Reference to source/destination with ID is invalid.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Delete connection to application","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionToApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
200: Connection to application was deleted.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve an existing connection to application by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionToApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Create application interface","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tInterface to Application 1\n\tNew application interface\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","description":"Parameters:
applicationId: The unique identifier of the application
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces
BODY<application_interface>
    <name>Interface to Application 1</name>
    <comment>New application interface</comment>
</application_interface>


Response Messages:
201: Application interface was created.
400: You cannot add to application NAME because it was decommissioned.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing application interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","description":"To improve response time, set 'calculateIsPublished = false' to avoid calculating 'is_published'.

Parameters:
applicationId: The unique identifier of the application
name: The name of the application interface [optional]
calculateIsPublished: Should calculate is_published value [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces?name=Interface to Application 1

Response Messages:
400: There is no application with the specified ID.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no application interfaces with the name NAME."},"response":[]}]},{"name":"Application Migration","item":[{"name":"Retrieve server mappings for source and target applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
search_servers_type: Search server type [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping?search_servers_type=EXTERNAL

Response Messages:
400: Search migrated servers type parameter must be either internal, external or both.
400: Cannot get mappings between application to itself.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application with ID
401: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"Update server mappings for source and target applications","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t6\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","description":"Use id=-1 for target_network_object if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The server mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping
BODY<servers_mapping>
    <server_mapping>
        <source_network_object>
            <id>3</id>
        </source_network_object>
        <target_network_object>
            <id>4</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>5</id>
        </source_network_object>
        <target_network_object>
            <id>-1</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>6</id>
        </source_network_object>
    </server_mapping>
</servers_mapping>


Response Messages:
200: Server mappings were modified.
400: Source network object cannot be empty.
400: Source network object is not valid
400: Target network object is not valid
400: Source and target network objects must be internal or external both.
400: Cannot use DEVICE application resources as external network objects.
400: Source network object with ID must be used by any connection.
400: Cannot remove mapping of network object with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map to ANY network object.
400: Cannot map Internet network object.
400: Cannot map to Internet network object.
400: Target network object ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found."},"response":[]},{"name":"Copy application servers and connections to another application.","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}","description":"This API can be used to:
1. Create applications based on a blueprint (template).
2. Copy applications between environments (dev, test, prod).
3. Migrate applications between data-centers.

Before migrating make sure to map servers and connections to applications (if any exist).\nThis migration uses the configuration specified in the other API calls.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2

Response Messages:
200: Application was migrated.
400: Cannot migrate a decommissioned application.
400: Cannot migrate to a decommissioned application.
400: Cannot migrate an application to itself.
400: Cannot edit target DEVICE application.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
400: The source application has no connections to migrate.
409: You cannot migrate the application because not all servers are mapped.
409: You cannot migrate the application because not all connections to application are mapped.
409: You cannot migrate the application because one of the interfaces in the original application has been changed and has not been published."},"response":[]},{"name":"Update connection to application mappings for source and target applications","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","description":"Use id=-1 for target_application_interface if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The interface instance mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping
BODY<connections_to_applications_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>1</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>4</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>2</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>-1</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>3</id>
        </source_connection_to_application>
    </connection_to_application_mapping>
</connections_to_applications_mapping>


Response Messages:
200: Connection to application mappings were modified.
400: Source interface instance cannot be empty.
400: Source interface instance object is not valid
400: Target application interface is not valid
400: Connection to application with ID: ID was not found.
400: Interface with ID: ID was not found.
400: Cannot remove mapping of instance with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map instance to interface with ID ID because the interface exists in target application.
400: Cannot map to duplicate application interfaces
400: Application interface didn't got published
400: Connection to application with id: ID must used by source application
400: You cannot map connection to application ID, because it is contained in a connection to application pack.
400: Application interface ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve connection to application mappings for source and target applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping

Response Messages:
400: Cannot get mappings between application to itself.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Packs","item":[{"name":"List all application packs","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Parameters:
customer_id: The unique identifier of customer
name: The name of the application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs?name=Application pack 1

Response Messages:
401: Access is denied
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Create new application packs","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tApplication pack 1\n\t\tNew application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t5\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <name>Application pack 1</name>
        <comment>New application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <viewers>
            <viewer>
                <id>5</id>
            </viewer>
        </viewers>
    </application_pack>
</application_packs>


Response Messages:
401: Access is denied
401: You do not have permission to access application that contains the interface ID
400: There are no application packs to add.
400: Application pack can be created only in meshed domain mode.
404: Customer with ID was not found.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: The owner NAME does not have permission to access applications.
400: Application pack was already saved.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned."},"response":[]},{"name":"Update application packs","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tUpdated name\n\t\tUpdated application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\tfalse\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Update the application packs properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <id>1</id>
        <name>Updated name</name>
        <comment>Updated application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <is_published>false</is_published>
    </application_pack>
</application_packs>


Response Messages:
400: There are no application packs to edit.
400: Application pack ID cannot be empty.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
401: Access is denied
401: You do not have permission to access application that contains the interface ID
401: You do not have permissions to edit this application pack.
401: You do not have permissions to change the owner of application pack ID.
401: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Delete a connection to application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"connection_to_application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
400: Connection to application pack with ID was not found for application with ID.
400: The connection to application pack was already deleted.
401: Access is denied.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed."},"response":[]},{"name":"Retrieve an existing connection to application pack by ID.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"connection_to_application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
404: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID."},"response":[]},{"name":"Update an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated Connection to application pack\n\t\n\t\t\n\t\t\t\n\t\t\t\t1\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTag 1\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to update
body: Connection to application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1
BODY<connection_to_application_pack>
    <name>Updated name</name>
    <comment>Updated Connection to application pack</comment>
    <tags_servers>
        <tag_servers>
            <tag>
                <id>1</id>
            </tag>
            <servers>
                <server>
                    <id>3</id>
                </server>
            </servers>
        </tag_servers>
        <tag_servers>
            <tag>
                <name>Tag 1</name>
            </tag>
            <servers>
            </servers>
        </tag_servers>
    </tags_servers>
</connection_to_application_pack>


Response Messages:
400: There is no application with the specified ID.
400: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is required.
400: Tag with Name was not found.
400: Server ID cannot be empty.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
401: Access is denied.
401: You do not have permission to access application that contains the server ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed."},"response":[]},{"name":"Remove application interfaces from application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"application_interface_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
application_interface_id: IDs of application interfaces to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces?application_interface_id=1&application_interface_id=2

Response Messages:
200: Application Interface was deleted.
401: Access is denied
401: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Application interface ID was not found in application pack ID."},"response":[]},{"name":"Update application interfaces and tag mapping","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","description":"Add application interfaces to application pack, and map a tag to the application interface. If a tag is not specified for the interface, the tag will be set to “No Tag”.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: List of interface tag mapping to be added or modified

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces
BODY<application_interface_tags>
    <application_interface_tag>
        <application_interface>
            <id>1</id>
        </application_interface>
        <tag>
            <id>3</id>
        </tag>
    </application_interface_tag>
    <application_interface_tag>
        <application_interface>
            <id>2</id>
        </application_interface>
    </application_interface_tag>
</application_interface_tags>


Response Messages:
401: Access is denied
404: There are no application packs with the NAME in customer with ID.
401: You do not have permissions to edit this application pack.
401: You do not have permission to access application that contains the interface ID
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Application Interface can't be null.
400: Empty interface ID is not valid."},"response":[]},{"name":"Modify tags of an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tTag 1\n\t\n\t\n\t\t2\t\n\t\tTag 2\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Tags to modify

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <id>1</id>
        <name>Tag 1</name>
    </tag>
    <tag>
        <id>2</id>    
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
401: Access is denied
401: You do not have permissions to edit this application pack.
404: Customer with ID was not found.
404: There is no application pack with the ID in customer with ID.
400: Tag with NAME already exists in application pack ID.
400: Updated tag ID can't be empty
400: Updated Tag ID doesn't exist on application pack ID."},"response":[]},{"name":"Create new Tag under an application pack ","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tTag 1\n\t\n\t\n\t\tTag 2\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
body: List of tags

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <name>Tag 1</name>
    </tag>
    <tag>
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
401: Access is denied
404: There is no application pack with the ID in customer with ID.
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Tag name must contain at least 2 and no more than 160 characters.
400: Tag with NAME already exists in application pack ID."},"response":[]},{"name":"Delete tags from application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"tag_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
tag_id: IDs of tags to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/21/tags?tag_id=1&tag_id=2

Response Messages:
200: Tags were deleted.
401: Access is denied
401: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Tag ID was not found in application pack ID.
404: Tag ID is in use so can't be deleted.
404: Removed tag ID can't be empty."},"response":[]},{"name":"List all application pack tags","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags

Response Messages:
401: Access is denied
404: There is no application pack with the ID."},"response":[]},{"name":"Delete application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
200: Application pack wes deleted.
401: You do not have permissions to delete this application pack.
400: There is no application pack with the specified ID.
400: Customer with ID doesn't own an application pack with ID.
400: Application Pack ID cannot be deleted. It is in use by applications IDs."},"response":[]},{"name":"Retrieve an existing application pack by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
401: Access is denied
401: You do not have permission to access application pack with ID
404: Application pack with ID was not found for customer with ID."},"response":[]},{"name":"Update an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated application pack\n\t\n\t\t4\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\n\ttrue\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Update the application pack properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1
BODY<application_pack>
    <name>Updated name</name>
    <comment>Updated application pack</comment>
    <owner>
        <id>4</id>
    </owner>
    <editors>
        <editor>
            <id>3</id>
        </editor>
    </editors>
    <viewers>
        <viewer>
            <id>5</id>
        </viewer>
    </viewers>
    <is_published>true</is_published>
</application_pack>


Response Messages:
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
401: Access is denied
401: You do not have permission to access application that contains the interface ID
401: You do not have permissions to edit this application pack.
401: You do not have permissions to change the owner of application pack ID.
401: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Get tag by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"tag_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags/{{tag_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
tag_id: The unique identifier of a tag

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags/1

Response Messages:
401: Access is denied
404: There is no tag with ID.
404: Customer with ID doesn't own a tag with ID.
404: Application Pack with ID doesn't own a tag with ID."},"response":[]},{"name":"Retrieve a list of all connection to application pack by application ID.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","description":"Parameters:
application_id: The unique identifier of application
name: The name of the connection to application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs?name=Connection to application pack 1

Response Messages:
401: Access is denied
401: You do not have permission to access application with ID
404: There are no connection to application pack with the NAME in application with ID."},"response":[]},{"name":"Create new connection to application packs","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tConnection to application pack 1\n\t\tNew Connection to application pack\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t3\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tTag 1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","description":"Parameters:
application_id: The unique identifier of application
body: List of connection to application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs
BODY<connection_to_application_packs>
    <connection_to_application_pack>
        <name>Connection to application pack 1</name>
        <comment>New Connection to application pack</comment>
        <application_pack>
            <id>1</id>
        </application_pack>
        <tags_servers>
            <tag_servers>
                <tag>
                    <id>1</id>
                </tag>
                <servers>
                    <server>
                        <id>3</id>
                    </server>
                </servers>
            </tag_servers>
            <tag_servers>
                <tag>
                    <name>Tag 1</name>
                </tag>
                <servers>
                    <server>
                        <id>4</id>
                    </server>
                </servers>
            </tag_servers>
        </tags_servers>
    </connection_to_application_pack>
</connection_to_application_packs>


Response Messages:
400: There are no connection to application packs to add.
400: Application pack ID cannot be empty.
400: Application with ID was not found.
400: There is no application with the specified ID.
400: There is no application pack with the specified ID.
400: Application pack with ID was decommissioned.
400: Application pack with ID was not published.
400: Connection to application pack cannot be created in the domain of the application pack.
400: The application pack cannot be used more than once in the application.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is missing.
400: Tag ID does not exist.
400: Server ID does not exist.
400: Tag ID is not in use in connection to application pack ID, so it cannot be updated.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
401: Access is denied.
401: You do not have permission to access application that contains the server ID
401: You do not have permission to access application pack with ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Tag with NAME was not found."},"response":[]}]},{"name":"Application Pending Changes","item":[{"name":"Retrieve existing access rules","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/access_requests","description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/87/access_requests

Response Messages:
400: The application was already deleted.
400: There are no changed connections that are ready for creating a ticket.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
400: Application with ID ID was not found."},"response":[]}]},{"name":"Application Servers (across all applications)","item":[{"name":"Fetches server by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects/{{serverId}}","description":"Parameters:
serverId: The ID of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects/87

Response Messages:
400: Server with id ID was not found.
400: Application with ID ID was not found.
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance."},"response":[]},{"name":"Fetches servers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects","description":"Parameters:
name: The name of the servers [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?name=server1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: Server with name NAME was not found.
400: Parameter typeOnDevice is not valid.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no servers with the name NAME
404: There are no servers with the typeOnDevice TYPEONDEVICE "},"response":[]}]},{"name":"Application Servers (by application)","item":[{"name":"Create servers","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t \n\t \n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n \t\t 2.2.2.22\n\t \n\t \n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t \n\t \n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t \n\t \n\t\t group comment\n\t\t group1\n\t\t true\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: There are no items to add.
400: The application was already deleted.
400: You cannot add to application NAME because it was decommissioned.
400: Network object was already saved
400: Name cannot be empty
400: Server with NAME already exists.
400: IP is missing
400: Mask is missing
400: Invalid IP
400: Invalid mask
400: Max IP is missing
400: Min IP is missing
400: Invalid min IP
400: Invalid max IP
400: Min IP cannot be larger than max IP
400: Invalid network object type CLASS_NAME.
400: Invalid uid
400: Invalid device ID
400: Virtual server does not exist in SecureTrack
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Cannot save the server because the virtual server does not exist.
400: Cannot save the server because an error occurred
400: The type_on_device value is not valid
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
404: Virtual server was not found in SecureTrack.
503: Not connected to SecureTrack."},"response":[]},{"name":"Retrieve existing servers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the server [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?name=ServerName

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: The application was already deleted.
400: Parameter typeOnDevice is not valid.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no servers with the name NAME.
404: There are no servers with the typeOnDevice TYPEONDEVICE "},"response":[]},{"name":"Update servers","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 1\n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t\t host\n\t \n\t \n\t\t 2\n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n\t\t 2.2.2.22\n\t\t range\n\t \n\t \n\t\t 3\n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t\t subnet\n\t \n\t \n\t\t 4\n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t\t virtual-server\n\t \n\t \n\t\t 5\n\t\t vm1\n\t\t vm instance comment\n\t\t vm_instance\n\t \n\t \n\t\t 6\n\t\t group comment\n\t\t group1\n\t\t true\n\t\t group\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <id>1</id>
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
         <type>host</type>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <id>2</id>
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
         <type>range</type>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <id>3</id>
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
         <type>subnet</type>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <id>4</id>
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
         <type>virtual-server</type>
     </network_object>
     <network_object xsi:type=\"vmInstanceDTO\">
         <id>5</id>
         <name>vm1</name>
         <comment>vm instance comment</comment>
         <type>vm_instance</type>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <id>6</id>
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <type>group</type>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: The application was already deleted.
400: You cannot update a predefined object.
400: Invalid type in server with id ID.
400: Invalid member with id ID
400: Invalid ID
400: Invalid uid
400: Invalid network object type NAME
400: Cannot update user
400: Network object is new
400: Name cannot be empty
400: Server is in discovery
400: Ip is missing
400: Mask is missing
400: Invalid ip
400: Invalid mask
400: Max ip is missing
400: Min ip is missing
400: Invalid min ip
400: Invalid max ip
400: Min ip cannot be larger than max ip
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Server with NAME already exists.
400: Invalid device ID
400: The type_on_device value is not valid
400: An EDL group can not be modified to a regular group
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: DTO type used for server id ID is incompatible with this vendor.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Virtual server was not found in ST.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
503: Not connected to SecureTrack."},"response":[]},{"name":"Delete server","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","description":"To decommission a serer use force=true.

Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4?force=true

Response Messages:
400: The application was already deleted.
400: You cannot delete a predefined object.
400: Cannot delete an object that is being referenced by other objects
400: Cannot delete a predefined object.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID."},"response":[]},{"name":"Retrieve an existing server by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","description":"Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/3

Response Messages:
400: The application was already deleted.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID."},"response":[]},{"name":"Export Server Impact Analysis to a CSV file.","request":{"method":"GET","header":[],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/impact_analysis_csv","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/impact_analysis_csv

Response Messages:
400: Server with ID was not found.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"Move server","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"server_id"},{"value":null,"type":"text","key":"target_application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/move_server","description":"Parameters:
application_id: The unique identifier of the application
server_id: The unique identifier of the server
target_application_id: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/move_server?server_id=5&target_application_id=3

Response Messages:
400: Server ID is missing.
400: Target application ID is missing.
400: You cannot move a predefined object.
400: Server with ID is already associated to application with ID.
400: Cannot move server to a different customer.
400: The application was already deleted.
400: You cannot add to application APPLICATION_NAME because it was decommissioned.
400: Group/Server cannot be moved because there is no other application to move it to.
400: Group/Server cannot be moved because it or at least one of its group members is part of these groups: GROUPS_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is locked for discovery.
400: Group/Server cannot be moved because it or at least one of its group members is used in these application interfaces: APPLICATION_INTERFACE_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is used in these connections with another external resource: CONNECTION_NAME
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"If the identified server is a group, return a list of its members. When the media type is 'text/plain' (default), print each member on a separate line.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/members","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/members

Response Messages:
400: Server with ID is not of type group
401: Access is denied
401: You do not have permissions to view this application
403: No available licenses. Ask your SecureApp administrator for assistance
404: There is no application with the specified ID
404: Server with ID was not found"},"response":[]}]},{"name":"Application Services (global)","item":[{"name":"Fetches service by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/2

Response Messages:
404: Service with ID <ID> was not found.
401: Access is denied."},"response":[]},{"name":"Delete unused and non predefined global service","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/260

Response Messages:
200: Service was deleted.
404: Global Service with ID was not found.
400: Cannot delete an object that is being referenced by other objects.
400: You cannot delete a predefined object.
401: Access is denied."},"response":[]},{"name":"Modify unused and non predefined global services","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Service is new.
400: You cannot update a predefined object.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot update a global service that is being referenced by other objects.
400: Cannot update an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Group cannot contain itself as a member.
400: Application identity cannot be a member of a group.
401: Access is denied."},"response":[]},{"name":"Fetches services","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
globals_only: get only globals [optional]
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=AH

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true&name=AH

Response Messages:
404: There are no services with the name NAME.
401: Access is denied."},"response":[]},{"name":"Create global services","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Application identity cannot be a member of a group.
401: Access is denied."},"response":[]},{"name":"Delete unused and non predefined global service by name","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"name"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
name: The name of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=Global service

Response Messages:
200: Service was deleted.
404: Service name has not been provided.
404: There are no services with the name NAME.
400: Cannot delete ANY.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
401: Access is denied."},"response":[]}]},{"name":"Application Services (local)","item":[{"name":"Delete service","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","description":"Use force=true to delete a service with decommission.

Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250?force=true

Response Messages:
400: The application was already deleted.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Service with ID <SERVICE_ID> was not found in application with id <APPLICATION_ID>"},"response":[]},{"name":"Retrieve an existing service by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","description":"Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Response Messages:
400: The application was already deleted.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Service with ID was not found."},"response":[]},{"name":"Create services","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Cannot have members from different applications.
400: Can not have application identity in group
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.
404: There is no application with the specified ID."},"response":[]},{"name":"Update services","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t255\n\t\tService Group 2 updated\n\t\tUpdated comment\n\t\tgroup\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>255</id>
        <name>Service Group 2 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Local service must be associated with an application.
400: Service is locked for discovery.
400: Service is new.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Application identity cannot be a member of a group.
401: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found."},"response":[]},{"name":"Retrieve existing services","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services?name=Local service

Response Messages:
400: The application was already deleted.
401: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no services with the name NAME."},"response":[]}]},{"name":"Application Users","item":[{"name":"Delete unused user","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"userId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
200: User was deleted.
404: User with ID <ID> was not found.
400: Cannot delete an object that is being referenced by other objects.
401: Access is denied."},"response":[]},{"name":"Fetches user by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"userId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
404: User with ID <ID> was not found.
401: Access is denied."},"response":[]},{"name":"Fetches users","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","description":"Parameters:
name: The name of the user [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users?name=Local user 1

Response Messages:
404: There are no users with the name NAME.
401: Access is denied."},"response":[]},{"name":"Create users","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tLocal user 1\n\t\tNew local user\n\t\t8.8.8.8\n\t\n\t\n\t\tLdap user 1\n\t\tNew ldap user\n\t\n\t\n\t\tUser group 1\n\t\tNew user group\n\t\t\n\t\t\t14\n\t\t\n\t\t\n\t\t\t15\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","description":"Parameters:
body: List of users

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/users
BODY<users>
    <user>
        <name>Local user 1</name>
        <comment>New local user</comment>
        <ip>8.8.8.8</ip>
    </user>
    <user>
        <name>Ldap user 1</name>
        <comment>New ldap user</comment>
    </user>
    <user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"userObjectGroupDTO\">
        <name>User group 1</name>
        <comment>New user group</comment>
        <member>
            <id>14</id>
        </member>
        <member>
            <id>15</id>
        </member>
    </user>
</users>


Response Messages:
201: User was created.
200: Users were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: User with id <ID> was not found.
400: Invalid user type <TYPE>
400: Name cannot be empty.
400: User with name <NAME> already exists.
400: Invalid ip
401: Access is denied."},"response":[]}]},{"name":"Applications","item":[{"name":"Delete an application","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"Parameters:
applicationId: The unique identifier of the application to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
400: The resources of application NAME are used in connections for other applications.
400: You cannot delete application NAME because its application interfaces are used in other applications.
400: You cannot delete application NAME because its application interfaces are used in other application packs.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
400: Application with ID ID was not found.
400: You cannot delete application NAME because there are connection changes pending a ticket in other application."},"response":[]},{"name":"Change an application","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t 139\n\t UpdatedAppName\n\t UpdatedComment\n\t false\n\t \n\t\t 4\n\t \n\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 5\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
applicationId: The unique identifier of an application to change
body: Application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/139
BODY<application>
     <id>139</id>
     <name>UpdatedAppName</name>
     <comment>UpdatedComment</comment>
     <decommissioned>false</decommissioned>
     <owner>
         <id>4</id>
     </owner>
     <editors>
         <editor>
             <id>3</id>
         </editor>
     </editors>
     <viewers>
         <viewer>
             <id>5</id>
         </viewer>
     </viewers>
</application>


Response Messages:
400: The application was already deleted.
400: Application owner is missing.
400: Owner cannot be empty.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
401: Access is denied
401: You do not have permissions to change the owner of application ID.
401: You do not have permissions to change the editors and a viewer of application ID.
401: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve an existing application by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"Parameters:
applicationId: The unique identifier of an application to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
401: Access is denied
401: You do not have permission to access application with ID
404: There is no application with the specified ID."},"response":[]},{"name":"Export application history to PDF","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/history/export_pdf","description":"Parameters:
application_id: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History max rows [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&count=2

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?count=2

Response Messages:
401: Access is denied.
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date"},"response":[]},{"name":"Update applications","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 140\n\t\t App1\n\t\t true\n\t\t \n\t\t\t 4\n\t\t \n\t \n\t \n\t\t 139\n\t\t UpdatedAppName\n\t\t Updated Comment\n\t\t \n\t\t\t 4\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
body: List of applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <id>140</id>
         <name>App1</name>
         <decommissioned>true</decommissioned>
         <owner>
             <id>4</id>
         </owner>
     </application>
     <application>
         <id>139</id>
         <name>UpdatedAppName</name>
         <comment>Updated Comment</comment>
         <owner>
             <id>4</id>
         </owner>
         <editors>
             <editor>
                 <id>3</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
     </application>
</applications>


Response Messages:
400: Application ID is missing.
400: Application ID is invalid
400: The application was already deleted.
400: You must include the owner field.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
401: Access is denied
401: You do not have permissions to change the owner of application ID.
401: You do not have permissions to change the editors and a viewer of application ID.
401: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Create new applications","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t AppName\n\t\t Comment\n\t\t \n\t\t\t 3\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 4\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t\t \n\t\t\t 24\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"Parameters:
body: List all applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <name>AppName</name>
         <comment>Comment</comment>
         <owner>
             <id>3</id>
         </owner>
         <editors>
             <editor>
                 <id>4</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
         <customer>
             <id>24</id>
         </customer>
     </application>
</applications>


Response Messages:
400: There are no items to add.
400: Application was already saved.
400: Application name must contain at least 2 and no more than 160 characters.
400: Owner cannot be empty.
400: The specified owner does not exist.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
400: Application with NAME already exists.
400: Application owner is missing.
400: Reference to owner ID is invalid.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to customer ID is invalid.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: The specified customer does not exist.
400: There is an editor without an ID or name.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no editor with the name NAME."},"response":[]},{"name":"List all applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"Parameters:
userId: Applications by user ID, if not given the default is logged in user id [optional]
name: The name of the application [optional]
app_permissions: Filter applications by the given permissions (separated with commas):\napp_owner - returns applications where the user is the owner\napp_editor - returns applications where the user has been explicitly added as an editor\napp_viewer - returns applications where the user has been explicitly added as a viewer\napp_adminonly - returns applications where the user only has editor access because user has “edit all applications” permission, and does not include applications where this user is either the app_owner, app_editor, or app_viewer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?userId=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?app_permissions=app_owner,app_editor,app_viewer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App&app_permissions=app_adminonly

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications

Response Messages:
400: Invalid app_permissions value: 'appPermissions'.
401: Access is denied
401: You can't use the parameter 'userId' because you don't have 'View all applications' permission.
404: There are no applications matching your filter.
404: User with ID 'userId' was not found."},"response":[]},{"name":"Export Impact Analysis to a CSV file.","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/impact_analysis_csv","description":"To prevent a CSV injection attack when exporting Impact Analysis to a CSV file, if a special character ( = - + @ ) appears at the beginning of any field, a single quote (') is added before the character.

Parameters:
application_id: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/impact_analysis_csv

Response Messages:
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"Move applications to another customer","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t \n\t\t\t1\n\t\t \n\t\t \n\t\t\t 2\n\t\t \n\t \n\t \n\t\t \n\t\t\t2\n\t\t \n\t\t \n\t\t\tDefault\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/move_applications","description":"Parameters:
body: List of applications and customers [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/move_applications
BODY<move_applications>
     <move_application>
         <application>
            <id>1</id>
         </application>
         <customer>
             <id>2</id>
         </customer>
     </move_application>
     <move_application>
         <application>
            <id>2</id>
         </application>
         <customer>
            <name>Default</name>
         </customer>
     </move_application>
</move_applications>


Response Messages:
200: Applications were moved successfully.
400: Multi-Customer mode is not enabled.
400: You cannot move an application pack to a different customer.
400: Reference to application is invalid.
400: APPLICATION already exists in CUSTOMER.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: Reference to CUSTOMER is invalid.
400: CUSTOMER is not imported to SecureApp.
400: CUSTOMER was decommissioned.
400: You must delete virtual servers from CUSTOMER before you move APPLICATION to another customer.
400: You must remove virtual servers from the INTERFACE and publish it before you move APPLICATION to another customer.
400: You cannot move APPLICATION to CUSTOMER because the connection to application pack and the application pack cannot be in the same customer.
400: You cannot move APPLICATION to a different customer because the application interface and the application pack must be in the same customer.
400: You must remove INTERFACE from APPLICATION PACK and publish it before you can move APPLICATION to another customer.
400: CONNECTION TO APPLICATION from APPLICATION must use interface from CUSTOMER.
400: Sources in CONNECTION from APPLICATION must all be from applications in the same customer.
400: Destinations in CONNECTION in APPLICATION must all be from applications in the same customer.
400: Servers in CONNECTION from APPLICATION must all be from CUSTOMER.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from applications in the same customer.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from CUSTOMER.
400: Application or application pack with NAME already exists in CUSTOMER.
400: There are no applications to move.
401: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
401: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve security policy violations from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/compliance_violations","description":"Parameters:
applicationId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/compliance_violations

Response Messages:
400: No valid connections found in APPLICATION.
400: Security policy compliance check is not available because a security policy has not been defined.
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
503: Cannot connect to SecureTrack.
503: Timeout occurred while waiting for response from SecureTrack.
500: An error occurred in SecureTrack when running the security compliance check."},"response":[]},{"name":"Retrieve application history","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/history","description":"Parameters:
applicationId: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History list length [optional]
start: Offset the count starting point [optional]
type: States the history type to fetch [optional]
user: The username of the user made the changes [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start=0&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?type=SERVER

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?user=Jack

Response Messages:
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date
400: Count parameter must be a number
400: Start parameter must be a number
400: Start parameter must be less than total
400: Type parameter must be either server, server_group, connection, application, application_interface, connection_interface or connection_to_application
400: User not found
401: Access is denied
401: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Cloud Console","item":[{"name":"Associate cloud servers from SecureTrack with an application","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t9\n\t\t\n\t\t\t{b503916e-4468-4dc8-981b-2ec534587352}\n\t\t\t{0cc947a5-276f-4a4a-9d12-df5284fce609}\n\t\t\n\t\n\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","description":"Parameters:
application_id: The ID of the application
body: List of device IDs and cloud server UIDs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?application_id=87
BODY<devices_to_uids>
    <device_to_uids>
        <device_id>9</device_id>
        <uids>
            <uid>{b503916e-4468-4dc8-981b-2ec534587352}</uid>
            <uid>{0cc947a5-276f-4a4a-9d12-df5284fce609}</uid>
        </uids>
    </device_to_uids>
</devices_to_uids>


Response Messages:
201: Servers were imported to SecureApp.
401: Access is denied
400: There is no application with the specified ID.
401: No available licenses. Ask your SecureApp administrator for assistance.
400: You do not have permissions to edit this application.
400: You cannot associate servers with this application, because the application has been decommissioned.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to add cloud servers.
403: UID does not exist in device ID.
403: Device with ID does not exist.
403: Device with ID does not exist in DOMAIN.
403: The AWS instance with UID and device ID has already been imported to application NAME. You cannot import the same instance multiple times."},"response":[]},{"name":"Retrieve cloud server listing from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"vendor"},{"value":null,"type":"text","key":"search_string"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","description":"Parameters:
customer_id: Customer ID to be filtered by. [optional]
vendor: Vendor to be filtered by.
search_string: Search text.
start: Returning matching result starting from this element in the array (0-based). [optional]
count: Total number of matching servers to return. [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=WebServe

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=\"WebServer1\"

Response Messages:
401: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.
400: Illegal search string.
400: Start is bigger then possible result count.
400: Start and count cannot hold negative values.
400: Vendor query param is required.
400: Vendor should be one of the following: Amazon.
400: Search string query param is required.
400: Customer with ID does not exist in SecureApp
400: Customer with ID was decommissioned."},"response":[]},{"name":"Auto associate cloud servers from SecureTrack with an application","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tApplication\n\ttrue\n\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule","description":"When auto-associate is enabled, user must enter key value

Parameters:
body: Auto association rule

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule
BODY<auto_association_rule>
    <key>Application</key>
    <enabled>true</enabled>
</auto_association_rule>


Response Messages:
200: Auto association rule is saved.
400: Enabled rule requires key value.
401: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers."},"response":[]}]},{"name":"Customers","item":[{"name":"Fetches customer by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/1

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found."},"response":[]},{"name":"Update a customer","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tNOT_IMPORTED\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","description":"Parameters:
customer_id: The ID of the customer
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/2
BODY<customer>
    <usage_mode>NOT_IMPORTED</usage_mode>
</customer>


Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
400: Can not update Default customer.
400: This customer is already not imported.
400: USAGE_MODE is not a valid state. The valid values are: USAGE_MODES
401: Access is denied
500: This customer is not imported.
400: You cannot delete this customer because there are connection changes pending a ticket in another customer.You must decommission this customer first, and then delete it."},"response":[]},{"name":"List all customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/","description":"Parameters:
name: The name of the customer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers?name=Customer 1

Response Messages:
400: Not available in single-customer mode.
404: There are no customers with the name NAME."},"response":[]},{"name":"Retrieve existing applications for specific domain","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}/applications","description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/2/applications

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
401: Access is denied"},"response":[]},{"name":"import customers","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t2\n\t\n\t\n\t\t3\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/import","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.

Parameters:
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/import
BODY<customers>
    <customer>
        <id>2</id>
    </customer>
    <customer>
        <id>3</id>
    </customer>
</customers>


Response Messages:
400: Not available in single-customer mode.
400: ID can not be empty.
400: There are some id's that doesn't exist.
401: Access is denied
503: Not connected to SecureTrack."},"response":[]},{"name":"List all non-imported customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/not_imported","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.



Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/not_imported

Response Messages:
400: Not available in single-customer mode.
401: Access is denied
503: Not connected to SecureTrack."},"response":[]},{"name":"List all imported customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/imported","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/imported

Response Messages:
400: Not available in single-customer mode.
401: Access is denied"},"response":[]}]},{"name":"Domains","item":[{"name":"List all domains","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/","description":"Parameters:
name: The name of the domain [optional]

Usage Example


Response Messages:
404: There are no domains with the name NAME."},"response":[]},{"name":"synchronize domains","request":{"method":"PUT","header":[],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/synchronize","description":"Retrieves all the domains lists in ST , for use by SC. If a domain was deleted in ST, then it will be removed from SC



Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/domains/synchronize

Response Messages:
500: Multi-Domain mode is disabled in SecureChange. Unable to synchronize with SecureTrack domains"},"response":[]},{"name":"Fetches domain by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"domainId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/{{domainId}}","description":"Parameters:
domainId: The ID of the domain

Usage Example


Response Messages:
400: Domain with id ID was not found."},"response":[]}]},{"name":"Load Balancers","item":[{"name":"Fetches virtual servers from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ip"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers","description":"Find virtual servers matching a given IP address.
You can search for the virtual server itself of any of its members.

Parameters:
ip: ip
domainId: The unique identifier of a domain [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers?ip=2.2.2.2

Response Messages:
400: Invalid IP
400: Invalid Subnet
400: There is no domain with the specified ID.
401: Access is denied
503: Not connected to SecureTrack."},"response":[]}]},{"name":"SecureChange Devices","item":[{"name":"Returns the details of the devices that you can select as a target in SecureChange","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/","description":"Parameters:
name: device name or part of a name [optional]
show_targets: show devices as targets [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/devices?name=asa&show_targets=true

Response Messages:
404: Devices not found"},"response":[]},{"name":"Update the whole list of excluded devices in SecureChange","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t1\n\t12\n\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
BODY<device_ids>
    <id>1</id>
    <id>12</id>
</device_ids>

"},"response":[]},{"name":"Returns IDs for specified list of excluded parent management devices and child firewalls in SecureChange","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","description":"For example on this Panorama hierarchy:
DG1 - Excluded
  DG1.1
    FW1
    FW2
    FW3

Calling this API with false value will return only DG1’s id.
Calling this API with true value will return DG1, FW1, FW2, FW3 id’s.


Parameters:
show_all: When set to true - Displays the specified devices and all their child firewalls in the hierarchy, which will be excluded implicitly.
When set to false - Displays only the devices which were explicitly excluded.
Default value is false.
[optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=false
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=true
OUTPUT<device_ids>
    <id>33</id>
    <id>10</id>
    <id>11</id>
    <id>35</id>
    <id>29</id>
    <id>31</id>
</device_ids>

"},"response":[]},{"name":"Get suggested targets for a given access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"access_request\":{\n\t\t\"users\":{\n\t\t\t\"user\":[\n\t\t\t\t\"Any\"\n\t\t\t]\n\t\t},\n\t\t\"sources\":{\n\t\t\t\"source\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.1.1\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"destinations\":{\n\t\t\t\"destination\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.20.2\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"services\":{\n\t\t\t\"service\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"ANY\",\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"action\":\"Accept\",\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/suggest_target","description":"Returns a list of suggested targets for a given access request, based on topology calculations.

Parameters:
body [optional]
domain_name: Domain Name
workflow_name: Workflow Name

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/suggest_target?domain_name=Default&workflow_name=AR
BODY{
    \"access_request\":{
        \"users\":{
            \"user\":[
                \"Any\"
            ]
        },
        \"sources\":{
            \"source\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.1.1\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"destinations\":{
            \"destination\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.20.2\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"services\":{
            \"service\":[
                {
                    \"@type\":\"ANY\",
                }
            ]
        },
        \"action\":\"Accept\",
    }
}
OUTPUT{
    \"multi_target\": {
        \"target\": {
            \"@type\": \"Object\",
            \"object_name\": \"Device-1\",
            \"object_type\": \"firewall\",
            \"object_details\": \"10.100.40.1\",
            \"management_id\": 250,
            \"management_name\": \"Panorama/Domain1\"
        }
    }
}


Response Messages:
200: Targets returned successfully
400: User does not have permissions to domain or domain does not exist
401: Access is denied"},"response":[]}]},{"name":"Server Decommissioning","item":[{"name":"Get server decommission designer results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/designer","description":"Use this API to retrieve designer results generated in R17-1 and earlier.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Get verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Run server decommission designer for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/designer","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/designer

Response Messages:
400: Server decommission designer is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Get impact analysis results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/impact_analysis","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/impact_analysis

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Run Verifier for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/verifier","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/verifier

Response Messages:
400: Verifier is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Run Impact Analysis for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/impact_analysis","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/impact_analysis

Response Messages:
400: Impact analysis is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
401: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]}]},{"name":"System Configuration","item":[{"name":"Modify the SecureTrack connection settings and test the connection status","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\t\n\t\t \n\t\t\t192.168.11.1\n\t\t\tadmin\n\t\t\n\t\tfalse\n\t\t30\n\t\t192.168.2.2\n\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","description":"Parameters:
testOnly: Test the connection status using the specified settings. The new settings are not saved. The default value is false [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"remoteHost\">
            <IP_or_hostname>192.168.11.1</IP_or_hostname>
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
        <internal_IP_of_secureChange_server>192.168.2.2</internal_IP_of_secureChange_server>
    </secureTrack_settings>


Response Messages:
400: Invalid host name or IP address.
400: show_link_to_secureTrack is invalid. It must be 'true', 'false' or empty."},"response":[]},{"name":"Retrieve the SecureTrack connection settings and status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack?testOnly=false
"},"response":[]}]},{"name":"System Users","item":[{"name":"Import LDAP users to SecureChange by simulating login process","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tx\n\tLDAP\n\t\t\n\t\t\t1\n\t\t\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","description":"This API implicitly imports LDAP users to SecureChange by simulating their login.
To explicitly import LDAP entities- both users and groups, it is recommended to use /users/import API

Parameters:
body: partyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users
BODY<user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"user\">
    <name>x</name>
    <origin_type>LDAP</origin_type>
        <ldap_configuration>
            <id>1</id>
        </ldap_configuration>
</user>


Response Messages:
401: Access is denied.
400: Name is missing.
400: Origin is missing.
400: User {login_name} already exists, with ID (id} and name {name}.
400: User {login_name} not found in LDAP.
400: Creating a user via REST API is available only if origin is LDAP.
400: Creating a user via REST API is available only if type is User.
400: Ldap configuration with ID {id} not found."},"response":[]},{"name":"Return the list of users","request":{"method":"GET","header":[],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","description":"user_name: case insensitive, search mode: contains text
exact_name: when set to true, user_name search mode is case sensitive and exact text
email: case insentitive, search mode: exact match
Logical OR between user_name and email.

Parameters:
showIndirectRelation: Members that belong to the selected group only indirectly [optional]
user_name: The user's login name [optional]
email: The user's email [optional]
exact_name: Search user_name as exact match [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users?email=bob@tufin.com&user_name=bob&exact_name=true
"},"response":[]},{"name":"Change local group members","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"group_change\":{\n\t\t\"member_ids_to_add\": [1,2],\n\t\t\"member_ids_to_remove\":[3,4]\n\t}\n}\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group/{{id}}","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
id: Group ID
body: groupChangeDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group/1
BODY{
    \"group_change\":{
        \"member_ids_to_add\": [1,2],
        \"member_ids_to_remove\":[3,4]
    }
}    


Response Messages:
400: Exceeded limit of {MAXIMUM} group member changes
400: These user IDs do not exist: {IDs}
400: These user IDs do not exist or are not group members: {IDs}
400: Group ID {ID} is not a local group
400: Group ID {ID} does not exist
400: Cannot add a group to itself
400: Cannot add a group to a group that it already contains. Group {ID1} contains group {ID2}"},"response":[]},{"name":"Import user / group from LDAP","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"ldap_party\": {\n\t\t\"ldap_configuration_name\": \"ldap_name\",\n\t\t\"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/import","description":"The imported user / group will be visible in SecureChange GUI under users section.
In multi domain mode, imported entity will be assigned with the domains of \"any user\" group.
Only users with 'view settings tab' permission can run this API.

Parameters:
body: ldapPartyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/import
BODY{
    \"ldap_party\": {
        \"ldap_configuration_name\": \"ldap_name\",
        \"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"
    }
}


Response Messages:
400: The LDAP configuration name does not exist
400: The given ldap_dn does not exist
400: The given ldap_dn is already imported
400: Failed to create the selected user
400: Failed to create the selected group
400: Selected user already exists in SecureChange but is not synchronized with the LDAP server. Go to Settings > LDAP and synchronize with the LDAP
400: This group has a large number of users, and will not be expanded in the users console. To be able to configure roles and step participation for individual users from the group, add them explicitly.
400: Failed to update the selected group
400: Unsupported LDAP object class
400: Unable to establish a connection to server <SERVER_IP>:<SERVER_PORT> within the configured timeout of <TIMEOUT> milliseconds.
401: Access is denied"},"response":[]},{"name":"Create local group","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"group\": {\n\t\t\"name\": \"name1\",\n\t\t\"description\": \"description1\",\n\t\t\"email\": \"email1@tufin.com\"\n\t}\n}\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
body: CreateGroupDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group
BODY{
    \"group\": {
        \"name\": \"name1\",
        \"description\": \"description1\",
        \"email\": \"email1@tufin.com\"
    }
}    


Response Messages:
400: Input Validation Error : {field name}: {input validation error message}
400: Name already exists"},"response":[]},{"name":"Delete the specified User or Group","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","description":"Parameters:
id: User ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User with id {id} does not exist"},"response":[]},{"name":"Return the specified user","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","description":"Parameters:
id: User ID
showIndirectRelation: Members that belong to the selected group only indirectly [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User or group was not found."},"response":[]}]},{"name":"Ticket Lifecycle","item":[{"name":"Reject a ticket","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\trejected\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/reject","description":"Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: The user id, when logged in user is rejecting on behalf [optional]
body: Reject comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/reject?handler_id=5
BODY<reject_comment>
    <comment>rejected</comment>
</reject_comment>


Response Messages:
400: Ticket status <STATUS> is incorrect to perform this action
400: User <NAME> has no permissions to perform this action
400: Comment cannot be empty
401: User is not permitted to reject this ticket on behalf another user
401: You do not have permission to access ticket <ID>
401: On behalf user do not have permission to access ticket <ID>
401: Access is denied.
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>."},"response":[]},{"name":"Change the requester of the specified ticket task to the specified user.","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tuser was deleted moving tickets to Bob\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/change_requester/{{assigneeId}}","description":"Parameters:
id: Ticket ID
assigneeId: The assignee ID
body: CommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/change_requester/4
BODY<comment>
    <comment>user was deleted moving tickets to Bob</comment>
</comment>


Response Messages:
400: The change requester comment must be set in order to change the requester the ticket.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
404: There is no ticket with ID.
404: There is no requester (User) with ID."},"response":[]},{"name":"Returns the specified ticket to the specified step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tplease fix source \n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/redo/{{toStepId}}","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
toStepId: To which step we the ticket will return
body: RedoCommentDto

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/redo/1
BODY<redo_step_comment>
    <comment>please fix source </comment>
</redo_step_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
401: User has no permissions to redo ticket steps.
404: There is no ticket with ID.
404: No entity found for query"},"response":[]},{"name":"Cancel a ticket","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/cancel","description":"Parameters:
id: The ID of the ticket as shown in SecureChange
requester_id: The user of the ticket's requester, when logged in user is canceling on behalf [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/cancel?requester_id=5

Response Messages:
401: Access is denied.
404: Ticket is already closed
404: Ticket ID was not found"},"response":[]},{"name":"Map rules to ticket","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/map_rules","description":"Maps the rules from the ticket to the relevant rules in SecureTrack.
Adds record set entries to the relevant rules metadata.
Link to history is found in the returned location header.
Applicable only for closed tickets in the following workflows: Access Request, Access Request and Modify Group, and Clone Server Policy.
Use handler_id for running on behalf of another user.
To get handler_id, use the System Users API.

Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: Run API on behalf of defined user id [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules?handler_id=5

Response Messages:
201: Started asynchronous mapping of rules to ticket ID <ID>. Mapping status is displayed in ticket history.
400: Ticket's workflow type does not support this operation
401: Access is denied.
401: You do not have permission to access ticket <ID>
401: On behalf user do not have permission to access ticket <ID>
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.
412: Ticket is not in closed status"},"response":[]},{"name":"Returns the history of the specified ticket","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/history","description":"Parameters:
id: Ticket ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/history

Response Messages:
401: User has no permissions to view ticket history
404: You do not have permission to view this task. Contact your administrator for assistance.
404: There is no ticket with ID."},"response":[]},{"name":"Confirm the request","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tconfirmed\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/confirm","description":"Parameters:
id: Ticket ID
requester_id: The user of the ticket's requester, when logged in user is confirm on behalf [optional]
body: Confirm comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/confirm?requester_id=5
BODY<confirm_comment>
    <comment>confirmed</comment>
</confirm_comment>


Response Messages:
400: User is trying to confirm a ticket that belongs to another user
400: User is not permitted to confirm this ticket on behalf another user
400: The user can not confirm the ticket, because he is not in the domain of the ticket
401: Access is denied.
404: There is no ticket with ID ."},"response":[]},{"name":"Reassigns the specified ticket task to the specified user.","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tPlease complete the AR\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/reassign/{{assigneeId}}","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
assigneeId: The assignee ID
body: ReassignTaskCommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/reassign/4
BODY<reassign_task_comment>
    <comment>Please complete the AR</comment>
</reassign_task_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
404: There is no ticket with ID.
404: No entity found for query"},"response":[]}]},{"name":"Tickets","item":[{"name":"Get server clone policy verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/clone_server_policy/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/clone_server_policy/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the server clone policy request."},"response":[]},{"name":"Get access request verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request."},"response":[]},{"name":"Change a task of a ticket at the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY<task>
    <status>DONE</status>
    <fields/>
</task>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value"},"response":[]},{"name":"Returns a list of tickets by search parameters","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/search","description":"If the query is succesful but no results are found (for example, if there is no ticket for the specified Ticket ID) then the return code will be 200 and the results will be empty.

Parameters:
id: The ID number of the ticket as shown in SecureChange [optional]
subject: The subject of the ticket [optional]
requester: The requester of the ticket [optional]
group: The group handling the ticket [optional]
assigned_to: The user name of the person assigned to the ticket [optional]
priority: The priority of the ticket [optional]
status: The status of the ticket [optional]
sla_status: The SLA status of the ticket [optional]
field_name: Field name to search by [optional]
field_value: Field value to search by [optional]
current_step: Current step name [optional]
expiration_date_from: Search requests with expiration date from this date [optional]
expiration_date_to: Search requests with expiration date until this date [optional]
domain_name: The Domain of the ticket [optional]
start: Offset the count starting point [optional]
count: Ticket list length [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/search?id=1&status=IN_PROGRESS,REJECTED

Response Messages:
401: Access is denied.
400: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED, WAITING_TO_BE_ASSIGNED, ASSIGNED, WAITING_FOR_MORE_INFO, DONE, INVALID, PENDING, PENDING_LICENS
400: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
400: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
400: Cannot find specified domain <DOMAIN_NAME>"},"response":[]},{"name":"Get designer results according to field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer","description":"Use this API to retrieve designer results generated in R17-2 and later.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request."},"response":[]},{"name":"Returns the details of a specified ticket","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1
OUTPUT {
    \"ticket\": {
        \"id\": 1,
        \"subject\": \"AR-Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 11,
            \"name\": \"AR & MG\",
            \"uses_topology\": true
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 209,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 209,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": [
                                    {
                                        \"@xsi.type\": \"multi_access_request\",
                                        \"id\": 1695,
                                        \"name\": \"AR\",
                                        \"read_only\": false,
                                        \"access_request\": {
                                            \"id\": 1706,
                                            \"order\": \"AR1\",
                                            \"risk_analysis_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"verifier_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"use_topology\": true,
                                            \"targets\": {
                                                \"target\": {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1705
                                                }
                                            },
                                            \"users\": {
                                                \"user\": [
                                                    \"Any\"
                                                ]
                                            },
                                            \"sources\": {
                                                \"source\": [
                                                    {
                                                        \"@type\": \"INTERNET\",
                                                        \"id\": 1701
                                                    },
                                                    {
                                                        \"@type\": \"DNS\",
                                                        \"id\": 1702,
                                                        \"host_name\": \"www.google.com\",
                                                        \"dns_ip_addresses\": {
                                                            \"ip_address\": \"216.58.214.100\"
                                                        }
                                                    },
                                                    {
                                                        \"@type\": \"IP\",
                                                        \"id\": 1703,
                                                        \"ip_address\": \"1.1.1.1\",
                                                        \"netmask\": \"255.255.255.255\",
                                                        \"nat_ip_address\": \"4.4.4.4\",
                                                        \"nat_netmask\": \"255.255.255.255\"
                                                    }
                                                ]
                                            },
                                            \"destinations\": {
                                                \"destination\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1697
                                                    }
                                                ]
                                            },
                                            \"services\": {
                                                \"service\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1699
                                                    }
                                                ]
                                            },
                                            \"action\": \"Accept\",
                                            \"labels\": \"\"
                                        }
                                    },
                                    {
                                        \"@xsi.type\": \"multi_group_change\",
                                        \"id\": 1707,
                                        \"name\": \"MG\",
                                        \"read_only\": false,
                                        \"implementation_status\": \"NOT_SUPPORTED\"
                                    }
                                ]
                            }
                        }
                    }
                },
                {
                    \"id\": 210,
                    \"name\": \"STEP2 - auto AR with designer /update /commit\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 210,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"unlicensed_devices_for_automation\": {
                                \"unlicensed_device_for_automation\": [
                                    {
                                        \"id\": \"2\",
                                        \"name\": \"asa\"
                                    }
                                ]
                            }
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"multi_access_request\",
                                    \"id\": 1709,
                                    \"name\": \"AR\",
                                    \"read_only\": false,
                                    \"access_request\": {
                                        \"id\": 1720,
                                        \"order\": \"AR1\",
                                        \"risk_analysis_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"verifier_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"use_topology\": true,
                                        \"targets\": {
                                            \"target\": {
                                                \"@type\": \"ANY\",
                                                \"id\": 1719
                                            }
                                        },
                                        \"users\": {
                                            \"user\": [
                                                \"Any\"
                                            ]
                                        },
                                        \"sources\": {
                                            \"source\": [
                                                {
                                                    \"@type\": \"INTERNET\",
                                                    \"id\": 1721
                                                },
                                                {
                                                    \"@type\": \"DNS\",
                                                    \"id\": 1722,
                                                    \"host_name\": \"www.google.com\",
                                                    \"dns_ip_addresses\": {
                                                        \"ip_address\": \"216.58.214.100\"
                                                    }
                                                },
                                                {
                                                    \"@type\": \"IP\",
                                                    \"id\": 1723,
                                                    \"ip_address\": \"1.1.1.1\",
                                                    \"netmask\": \"255.255.255.255\",
                                                    \"nat_ip_address\": \"4.4.4.4\",
                                                    \"nat_netmask\": \"255.255.255.255\"
                                                },
                                                {
                                                    \"@type\": \"RANGE\",
                                                    \"id\": 1724,
                                                    \"range_first_ip\": \"1.1.11.1\",
                                                    \"range_last_ip\": \"1.1.11.10\"
                                                }
                                            ]
                                        },
                                        \"destinations\": {
                                            \"destination\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1711
                                                }
                                            ]
                                        },
                                        \"services\": {
                                            \"service\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1713
                                                }
                                            ]
                                        },
                                        \"action\": \"Accept\",
                                        \"labels\": \"\"
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 210,
            \"name\": \"STEP2 - auto AR with designer /update /commit\"
        },
        \"comments\": \"\"
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2
OUTPUT {
    \"ticket\": {
        \"id\": 2,
        \"subject\": \"Clone Server Policy Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 12,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 109,
            \"name\": \"sc_12705\",
            \"uses_topology\": false
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 78,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 78,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 872,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 869,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 871,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                },
                {
                    \"id\": 79,
                    \"name\": \"Business Approval\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 79,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 876,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 873,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 875,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 79,
            \"name\": \"Business Approval\"
        },
        \"comments\": \"\"
    }
}


Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: No entity found for query"},"response":[]},{"name":"Get commands for device from designer results of a specific field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/device/{{deviceId}}/commands","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
deviceId: Device ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/device/136/commands

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the access request.
404: Device with ID <ID> was not found in Designer result.
404: Device with ID <ID> does not support Commands feature."},"response":[]},{"name":"Returns the details of a specified ticket stages","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found"},"response":[]},{"name":"Change multiple fields within a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_network_object\">
         <id>7885</id>
         <name>n_obj</name>
         <network_object type=\"Object\">
             <object_name>Host_10.1.1.1</object_name>
             <management_name>cp239</management_name>
         </network_object>
         <network_object type=\"Object\">
             <st_uid>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</st_uid>
             <management_id>2</management_id>
         </network_object>
         <network_object type=\"DNS\">
             <host_name>tufin.com</host_name>
         </network_object>
     <field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_service\">
         <id>7887</id>
         <name>service</name>
         <service type=\"PROTOCOL\">
             <protocol>TCP</protocol>
             <port>80</port>
         </service>
         <service type=\"Object\">
             <object_name>AOL</object_name>
             <management_name>cp239</management_name>
         </service>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value"},"response":[]},{"name":"Returns the details of a the fields","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID ."},"response":[]},{"name":"Returns the details of a specified field","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
fieldId: The ID number of the field as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/229

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .
404: Field ID was not found in Task ID in Stage ID in ticket ID ."},"response":[]},{"name":"Change a field within a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields/7742
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multiple_selection\">
     <id>7742</id>
     <name>filter type</name>
     <selected_options>
         <selected_option>
             <value>FTP</value>
         </selected_option>
     </selected_options>
</field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Deleting rule recertification info is not allowed
400: Application Change field cannot be managed via this REST API
400: Rule associated with successfully updated recertification info cannot be removed
400: Rule was already updated
400: Rule does not exist
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value"},"response":[]},{"name":"Returns the results of the Commit action","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"},{"value":null,"type":"text","key":"managementId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/commit_report/{{managementId}}","description":"GENERAL USE
The report returns the Commit results for the device with the specified management ID and for the devices suggested in the Designer results. The report also includes results for devices that are in the related hierarchy of these devices.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID
managementId: Management ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/commit_report/3
OUTPUT{
    \"commit_report\": {
        \"ticketId\": 27,
        \"statTime\": \"24-Oct-2018 08:55 AM\",
        \"endTime\": \"24-Oct-2018 08:56 AM\",
        \"duration\": \"00:00:30\",
        \"vendorName\": \"PALO ALTO NETWORKS\",
        \"managmentName\": \"pano211\",
        \"devices\": {
            \"device\": [
                {
                    \"name\": \"DG1.1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                },
                {
                    \"name\": \"DG1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                }
            ]
        }
    }
}


Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request."},"response":[]},{"name":"Change the ticket properties","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/ticket_properties","description":"Change the ticket properties listed in the TicketPropertiesDTO.
When specifying the notification_group property you must use the ID of the group or leave the ID empty to remove the group.

Parameters:
body: ticketPropertiesDTO
id: The ID number of the ticket as shown in SecureChange

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id>10</id>
    </notification_group>
</ticket_properties>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id/>
    </notification_group>
</ticket_properties>


Response Messages:
400: Notification Group <ID> is a user and not a user group
400: Notification Group <ID> exceeds the configured maximum allowed number of users for notifications
400: <ID> (“Any User”) is not allowed as a Notification Group
400: Notification Group <ID> does not have permission of 'Group members can perform actions on requests submitted by other members'
400: Notification Group <ID> is not a member in the first step of the workflow
400: Notification Group is not enabled in this workflow
401: You do not have permission to change the Notification Group
404: There is no group with ID <ID>.
404: There is no ticket with ID <ID>."},"response":[]},{"name":"Change multiple field within a task of a ticket in the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_server_decommission_request\">
         <id>7591</id>
         <name>sd</name>
         <server_decommission_request>
             <id>7596</id>
             <order>DR1</order>
             <servers>
                 <server type=\"IP\">
                     <id>7593</id>
                     <ip_address>2.2.2.2</ip_address>
                     <netmask>255.255.255.255</netmask>
                 </server>
             </servers>
             <targets>
                 <target type=\"ANY\">
                     <id>7595</id>
                 </target>
             </targets>
             <comment>change ip from 1.1.1.1 to 2.2.2.2</comment>
         </server_decommission_request>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"date\">
         <id>7786</id>
         <name>date</name>
         <value>2015-12-15</value>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"time\">
         <id>7787</id>
         <name>time</name>
         <value>12:00</value>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value"},"response":[]},{"name":"Returns the details of a specified ticket stages","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID."},"response":[]},{"name":"Submit a new ticket to Secure Change","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"ticket\": {\n\t\t\"subject\": \"RM_EXAMPLE\",\n\t\t\"requester\": \"m\",\n\t\t\"requester_id\": 4,\n\t\t\"priority\": \"Normal\",\n\t\t\"domain_name\": \"\",\n\t\t\"workflow\": {\n\t\t\t\"name\": \"RM\",\n\t\t},\n\t\t\"steps\": {\n\t\t\t\"step\": [\n\t\t\t\t{\n\t\t\t\t\t\"tasks\": {\n\t\t\t\t\t\t\"task\": {\n\t\t\t\t\t\t\t\"fields\": {\n\t\t\t\t\t\t\t\t\"field\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\t\t\t\t\t\"devices\": {\n\t\t\t\t\t\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 11,\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 9,\n\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","description":" GENERAL USE
When posting a Modify Group ticket, group scope must be configured for FortiManager advanced and Juniper SRX devices.
Juniper SRX devices:
Global address-book will be used unless an existing address-book is given.
Ticket validation will fail in case given Address Book is not configured on the device.
FortiManager advanced devices:
'Any' zone will be used unless an existing zone is given.
Ticket validation will fail in case given zone is not configured on the device.
*Note: Zones and address-books must not be configured for other devices.

Using newly created objects from a different group in the same ticket
The user can add a newly created object from a different group to the selected group, with object_UID equal to the name of the newly created object.
For management devices with hierarchies, the newly created object does not populate other levels of the hierarchies.

Permitted values for @type
Allowed values for @type property included in DestinationDTO and SourceDTO are:
ANY
IP
DNS
Object - Device's existing object
INTERNET
LDAP (SourceDTO only) - LDAP entity

To use a service object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketDTO
closed: Cannot be done from the API [optional]
count [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>topology mode_AR1-with topology_AR2-no topology</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <domain_name>Default</domain_name>
    <workflow>
         <id>7</id>
         <name>Workflow with topology</name>
    </workflow>
    <steps>
         <step>
             <name>Open request</name>
             <tasks>
                 <task>
                     <fields>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_access_request\">
                             <name>Required Access</name>
                             <access_request>
                                 <use_topology>true</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>ASA</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>host_10.100.10.140</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
                                         <management_id>13</management_id>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>h_10.10.10.10</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"PROTOCOL\">
                                         <protocol>TCP</protocol>
                                         <port>80</port>
                                     </service>
                                     <service type=\"APPLICATION_IDENTITY\">
                                         <application_name>Gmail</application_name>
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                             <access_request>
                                 <use_topology>false</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>inside_access_in</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>1.1.1.0</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>network_regi3</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"ANY\">
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                             <name>Business Justification</name>
                             <text>I need access to ftp </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                             <name>Project Number</name>
                             <text>CR124560 </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                             <name>Hyperlink</name>
                             <url>http://192.168.1.1/ticket</url>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                             <name>Change Window</name>
                             <selection>Monday</selection>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                             <name>manager email</name>
                             <text>manager@tufin.com</text>
                         </field>
                     </fields>
                 </task>
             </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>New MG ticket</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <status>In Progress</status>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>6</id>
        <name>MG</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>72</id>
            <name>New step</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>72</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>
                    <status>ASSIGNED</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>262</id>
                            <name>MG</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>ExistingGroup</name>
                                <object_UID>{c862fb6f-1314-45da-9e01-56c9b85d001d}</object_UID>
                                <management_id>58</management_id>
                                <management_name>FMG/root</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>157</id>
                                        <name>10.100 net</name>
                                        <object_UID>{37cdc055-7aac-4385-b46b-cc54d95e4b6d}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.100.0.0/255.255.0.0</object_details>
                                        <management_id>58</management_id>
                                        <management_name>FMG/root</management_name>
                                        <status>NOT_CHANGED</status>
                                        <object_updated_status>EXISTING_EDITED</object_updated_status>
                                        <comment>new_comment</comment>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                            <group_change>
                                <name>78.45.12.0</name>
                                <object_UID>{cac64d34-a05e-4a05-b271-64642eb976ff}</object_UID>
                                <management_id>28</management_id>
                                <management_name>SRX-root-lsys</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>158</id>
                                        <name>78.45.12.1</name>
                                        <object_UID>{7912c335-6dbe-47de-b872-1322f9015b2f}</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>78.45.12.1/255.255.255.255</object_details>
                                        <management_id>28</management_id>
                                        <management_name>SRX-root-lsys</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <address_book>
                                    <name>global</name>
                                </address_book>
                            </group_change>
                            <group_change>
                                <name>10.10.0.0/16</name>
                                <object_UID>{5dff0bd8-51e4-4a83-8138-d54dd18ca52b}</object_UID>
                                <management_id>24</management_id>
                                <management_name>NSX-Distributed Firewall</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>161</id>
                                        <name>10.10.0.0/16</name>
                                        <object_UID>{5d7b826c-f053-40fd-81bd-7a6f44cf15ef}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.10.0.0/255.255.0.0</object_details>
                                        <management_id>24</management_id>
                                        <management_name>NSX-Distributed Firewall</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>test API</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>8</id>
        <name>Modify group</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>11</id>
            <name>Open request</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>11</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>                    <status>DONE</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>137</id>
                            <name>ff</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>port1Group</name>
                                <object_UID>{d5b4459b-6b27-4012-9924-b244c250520f}</object_UID>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"HOST\">
                                        <id>69</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <status>ADDED</status>
                                        <comment/>
                                        <object_updated_status>NEW</object_updated_status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                            <group_change>
                                <name>gfd</name>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>70</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <management_name>10.100.111.8/ADOM_5_2</management_name>
                                        <status>ADDED</status>
                                        <object_updated_status>EXISTING_NOT_EDITED</object_updated_status>
                                    </member>
                                </members>
                                <change_action>CREATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <current_step>
        <id>12</id>
        <name>Copy of Open request</name>
    </current_step>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"application_details\": { \"id\": \"1\" },
        \"subject\": \"topology mode_AR1-with topology_AR2-no topology\",
        \"priority\": \"Normal\",
        \"workflow\": { \"name\": \"ar\" }
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"subject\": \"RM_EXAMPLE\",
        \"requester\": \"m\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"domain_name\": \"\",
        \"workflow\": {
            \"name\": \"RM\",
        },
        \"steps\": {
            \"step\": [
                {
                    \"tasks\": {
                        \"task\": {
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"rule_modification_field\",
                                    \"devices\": {
                                        \"device\": {
                                            \"revision_id\": 24,
                                            \"management_id\": 5,
                                            \"bindings\": {
                                                \"binding\": {
                                                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                    \"binding\": {
                                                        \"@xsi.type\": \"policy__binding\",
                                                        \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                                    },
                                                    \"rules\": {
                                                        \"rule\": {
                                                            \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                                            \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                                        }
                                                    }
                                                }
                                            }
                                        }
                                    },
                                    \"rule_modifications\": {
                                        \"rule_modification\": {
                                            \"@xsi.type\": \"modify_rule_modification\",
                                            \"rule_key\": {
                                                \"device_id\": 5,
                                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                            },
                                            \"source_modifications\": {
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                                        \"name\": \"RANGE_1\",
                                                                        \"comment\": \"EXAMPLE_RANGE\",
                                                                        \"min_ip\": \"3.3.3.3\",
                                                                        \"max_ip\": \"5.5.5.5\"
                                                                    }
                                                                ]
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                                        \"name\": \"NET_1\",
                                                                        \"comment\": \"\",
                                                                        \"ip\": \"3.3.3.3\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"destination_modifications\": {
                                                \"id\": 11,
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                                        \"name\": \"Host123\",
                                                                        \"comment\": \"cccHost\",
                                                                        \"ip\": \"1.2.3.4\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"service_modifications\": {
                                                \"id\": 9,
                                                \"service_object_cell_modifications\": {
                                                    \"service_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                                    \"name\": \"ICMP_1\",
                                                                    \"comment\": \"EXAMPLE_ICMP\",
                                                                    \"type\": {
                                                                        \"from\": 55,
                                                                        \"to\": 55
                                                                    }
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"UDP_1\",
                                                                    \"comment\": \"EXAMPLE_UDP\",
                                                                    \"port\": {
                                                                        \"from\": 3,
                                                                        \"to\": 3
                                                                    },
                                                                    \"protocol\": \"UDP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"TCP_1\",
                                                                    \"comment\": \"EXAMPLE_TCP\",
                                                                    \"port\": {
                                                                        \"from\": 1234,
                                                                        \"to\": 1234
                                                                    },
                                                                    \"protocol\": \"TCP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                                                }
                                                            }
                                                        }
                                                    ]
                                                }
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
    }
}


Response Messages:
400: Application ID is missing.
400: Create closed ticket is enabled only from SecureApp application.
400: The application was already deleted.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: You cannot open a new ticket with an empty subject.
400: Expiration field is required.
400: Submit ticket enabled only with the first step
400: First step can be only with one task
400: The specified workflow does not contain an access request field in the first step.
400: There are no changed connections that are ready for creating a ticket.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
400: Managed tasks are not initialized or done
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (Rule Modification workflow is not supported for this device)
401: You do not have permissions to edit this application.
401: Logged in user: NAME do not have permission to perform on behalf actions
401: You are not a participant in the first step of this workflow
401: UNAUTHORIZED
404: There is no application with the specified ID
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (Network object cell modification missing action)
400: Invalid value for field: <FIELD_NAME> (Network object cell modification element cannot be empty)
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value"},"response":[]},{"name":"Returns the details of a specified tickets (max 100 tickets in a single query)","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
status: The status of the tickets [optional]
count: Tickets list max pagination length (max value is 100) [optional]
start: Offset the count starting point [optional]
desc: Get the list in descending order [optional]
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets?status=In Progress&count=10&start=3&expand_links=false

Response Messages:
400: Status is not a valid. The valid values are: TICKET_STATUSES
400: Can not fetch more than 100 tickets in 1 time
401: Access is denied"},"response":[]},{"name":"Returns a list of tickets by search parameters","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/free_text_search","description":"Parameters:
parameter: Free text search parameter (Search syntax details) [optional]
start: Offset the count starting point [optional]
count: Tickets list max length (max value is 1000) [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/free_text_search/?parameter=taskstatus:ASSIGNED AND priority:High

Response Messages:
400: Can not fetch more than 1000 tickets in 1 time
401: Access is denied.
404: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED
404: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
404: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal count value entered. Max value is 1000
404: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
404: No entity found for query"},"response":[]},{"name":"Returns the details of the tasks","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID."},"response":[]},{"name":"Returns topology map image (png file) for specific verifier results","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier/topology_map","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier/topology_map

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.
404: Toplogy map was not found for this field."},"response":[]},{"name":"Change a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4
BODY<task>
     <status>ASSIGNED</status>
     <fields>
         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
             <id>7599</id>
             <name>mf</name>
             <read_only>false</read_only>
             <implementation_status>NOT_STARTED</implementation_status>
             <group_change>
                        <name>ggg</name>
                        <st_uid>{A12AE330-0DBD-11E5-B841-7F0000010E0E}</st_uid>
                        <management_id>42</management_id>
                        <management_name>cp239</management_name>
                        <members>
                             <member type=\"Object\">
                                 <id>8</id>
                                 <name>yaakovs_host</name>
                                 <st_uid>{BDAA378C-C90B-4D12-B598-1AFED2D1DA14}</st_uid>
                                 <object_type>Host</object_type>
                                 <object_details>1.1.1.1/255.255.255.255</object_details>
                         <management_id>42</management_id>
                         <management_name>cp239</management_name>
                                 <status>NOT_CHANGED</status>
                             </member>
                             <member type=\"Object\">
                                 <id>9</id>
                                    <name>Avi_10.100.120.254</name>
                                    <st_uid>{8F195CDC-F426-47B6-9E8A-1FF14C17E54F}</st_uid>
                                     <object_type>Host</object_type>
                                     <object_details>10.100.120.254/255.255.255.255</object_details>
                                     <management_id>42</management_id>
                                     <management_name>cp239</management_name>
                                     <status>NOT_CHANGED</status>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>2.2.2.2/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>3.3.3.3/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                 </members>
                 <change_implementation_status>NOT_RUN</change_implementation_status>
                    </group_change>
            </field>
     </fields>
</task>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value"},"response":[]},{"name":"Returns the details of a specified task","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2?expand_links=true

Response Messages:
401: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID ."},"response":[]},{"name":"Modify the Designer suggestions for Access Request or Clone Server Policy","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"rule_placement\": {\"new_value\":\"before\"}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/tasks/{{taskId}}/designer/instruction/{{instructionId}}","description":" GENERAL USE
1. Create a ticket using UI/API.
2. Run the designer using UI/API.
3. Use relevent API to get the designer results.
4. Run this API to modify the required parameters.

*Note: you can modify one parameter at a time.

Change rule location use
a. Modifying the rule order places the new rule before the rule with the specified identifier (rule name or number).
b. Modifying the rule placement to \"last\" places the new rule as last rule or last pre-rule (depending on the vendor convention for the device).
c. For vendors that support \"after\" placement, modifying the rule placement allows positioning the new rule before or after the suggested rule location.

track level permitted values:
NONE, LOG, ACCOUNT, ALERT, SNMP, MAIL, USER_DEFINED, EMERGENCIES, ALERTS, CRITICAL, ERRORS, WARNINGS, NOTIFICATIONS, INFORMATIONAL, DEBUGGING, DISABLED, DEFAULT, FULL_LOG, NETWORK_LOG, USER_ALERT_1, USER_ALERT_2, USER_ALERT_3

rule placement permitted values:
BEFORE, AFTER, LAST

Parameters:
body: DesignerInstructionChangeDTO
id: Ticket ID
taskId: Task ID
instructionId: Instruction ID
force: force update when new revision available [optional]

Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196?force=true
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_name\": {\"new_value\":\"new rule name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"track_level\": {\"new_value\":\"LOG\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_name\": {\"new_value\":\"new object name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"log_forwarding_profile\": {\"new_value\":\"new log forwarding profile\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"security_profile_group\": {\"new_value\":\"new security profile group\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_replace\": {
             \"new_value\":\"new object uid\",
             \"old_value\":\"old object uid\"
    }
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_order\": {\"new_value\":\"8\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"last\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"before\"}
}


Response Messages:
200: New rule will be shadowed
200: New rule will be shadowed or break acceleration
400: Modify Designer Results API is only supported for Access Request and Clone Server Policy workflows
412: Current instruction cannot be modified because either the implementation was successful or failed irrevocably.
412: Current step does not support Designer modification action
400: A ticket with ID <ID> cannot be found.
400: Task ID <ID> cannot be found in the current step with ID <ID>.
403: Changing <TYPE> is not supported on this device
403: This Change is not supported for <INSTRUCTION TYPE> instruction type\"
401: You do not have permission to update this task. Contact your administrator for assistance.
403: New revision is available, cannot modify the Designer results
404: Specified instruction, id: <ID> was not found
404: Designer results were not found in the access request.
400: a valid object name must start with an alphanumeric character and can contain alphanumeric characters, underscore '_'. Hypen '-', dot '.' or spaces
400: For this device, the comment must be less than 100 characters per line.
400: For this device, this field must be less than <NUMBER OF CHARACTERS> characters
400: For this device, this field is required.
400: For this device, a valid object name cannot be <OBJECT NAME> because it is a reserved word
409: Rule name already exists for this device. Please give this rule a unique name.
409: Rule name <NAME> already exists in the device group hierarchy. Choose a unique name for this rule.
400: Comment contains invalid characters.
400: <DEVICE> does not support tracking level <TRACKING LEVEL>
400: <TRACKING LEVEL> is not a valid rule track level value
400: a valid object name cannot contain any of the following characters: <CHARACTERS>
400: a valid object name must be less than <NUMBER OF CHARACTERS> characters
400: a valid object name cannot be empty
400: a valid object name must conform to the following pattern: <STRING PATTERN>
409: Object already exists
400: A security profile group cannot be empty.
404: The security profile group <SECURITY PROFILE GROUP> was not found.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to validate the security profile group.
400: A log forwarding profile cannot be empty.
404: The log forwarding profile <LOG FORWARDING PROFILE> was not found.
500: An error occurred in SecureTrack while trying to validate the log forwarding profile.
400: Object UID <OLD OBJECT UID> not found in the rule for this instruction.
400: Values of new object UID <NEW OBJECT UID> and old object UID <OLD OBJECT UID> do not match.
400: Rule placement can only be: \"before\", \"after\" or \"last\".
400: You can't change rule placement when there is no rule order. please add rule order first.
400: You can't change rule placement to \"After\" for this type of device.
400: You can't change rule placement to \"Last\" for this type of device."},"response":[]},{"name":"Get rule decommision verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/rule_decommission/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/rule_decommission/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type <TYPE>.
404: Verifier results were not found in the request."},"response":[]},{"name":"Change a field within a task of a ticket at the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields/{{fieldId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/7642
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"approve_reject\">
         <id>7661</id>
         <name>approve access</name>
         <approved>true</approved>
         <reason>Request approved</reason>
    </field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
401: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value"},"response":[]}]}]} \ No newline at end of file diff --git a/Postman Format v2/R20-1 postman collection/securetrack_R20-1-GA-v2.json b/Postman Format v2/R20-1 postman collection/securetrack_R20-1-GA-v2.json new file mode 100644 index 0000000..fc43357 --- /dev/null +++ b/Postman Format v2/R20-1 postman collection/securetrack_R20-1-GA-v2.json @@ -0,0 +1 @@ +{"info":{"_postman_id":"1","name":"Tufin Tufin SecureTrack R20-1-GA","description":"Tufin Orchestration Suite - Tufin SecureTrack APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securetrack/apidoc","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json"},"item":[{"name":"Additional Policy Fields","item":[{"name":"Get additional parameters identities by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
type: Additional parameter type [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group

Response Messages:
200: Successful
400: Invalid request"},"response":[]},{"name":"Get all URL Categories by revision.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories","description":"Fetches list of URL Categories defined in a revision given by ID.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories
"},"response":[]},{"name":"Get specific additional parameter identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters/{{ids}}","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Additional parameter IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760
"},"response":[]},{"name":"Get a URL Category.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories/{{ids}}","description":"Fetches one or more URL Categories.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Url Category IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760
"},"response":[]}]},{"name":"Application IDs","item":[{"name":"Get applications identities by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/applications","description":"Fetches list of applications defined in a revision given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 1,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

"},"response":[]},{"name":"Get specific application identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/applications/{{ids}}","description":"Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760
"},"response":[]},{"name":"Get application identities by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications","description":"Fetches list of applications defined on device given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 50,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

"},"response":[]},{"name":"Get specific application identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications/{{ids}}","description":"Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
Note: This API retrieves the information from the latest revision.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
id: Device ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/1/applications/701
"},"response":[]}]},{"name":"Change Authorization","item":[{"name":"Compare revisions on two different devices in terms of traffic.","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_traffic_comparison_request\": {\n\t\t\"oldVersionId\": \"234\",\n\t\t\"newVersionId\": \"179\",\n\t\t\"oldId2newIdMap\": [\n\t\t\t{\n\t\t\t\t\"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",\n\t\t\t\t\"newId\" : \"{00-FACED0-00}\"\n\t\t\t}\n\t\t],\n\t\t\"withTraffic\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/policyTrafficComparison","description":"This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic.
The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions.
The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions.
Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared.
Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules
Note 3: The format of the result is the same as the one returned by /change_authorization
Note 4: The API accepts in request body only one pair of oldId - newId map
Note 5: The request is valid only if the mapping ids are found in the active policies

Parameters:
body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions.

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison
BODY{
    \"policy_traffic_comparison_request\": {
        \"oldVersionId\": \"234\",
        \"newVersionId\": \"179\",
        \"oldId2newIdMap\": [
            {
                \"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",
                \"newId\" : \"{00-FACED0-00}\"
            }
        ],
        \"withTraffic\": true
    }
}


Response Messages:
200: Policies diff was successfully calculated
400: Could not find the requested revisions for comparison"},"response":[]},{"name":"Determine if changes between two revisions are authorized","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"new_version"},{"value":null,"type":"text","key":"old_version"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/","description":"This API checks for unauthorized changes between any two versions of a firewall policy.
The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets.
The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket.

The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove).
The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes.

Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing.
Note 2: Use the ID returned by the /revisions API for new_version and old_version.
Note 3: The default value for traffic_details and ignore_tickets is false.
Note 4: Traffic that is handled by an implicit rule will not have a rule ID.

Parameters:
new_version: New version ID
old_version: Old version ID
traffic_details: Return unauthorized traffic change details for all modified rules [optional]
ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional]

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true

Response Messages:
200: Change authorization has been successfully calculated
400: Input parameters are not valid
400: Could not find the requested revisions for comparison"},"response":[]}]},{"name":"Change Windows","item":[{"name":"Get a list of completed policy changes for a specific change window","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks","description":"Retrieves a list of completed policy changes for a specific change window.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
start: Starting result for query allowable value is numeric [optional]
count: Number of tasks for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true
OUTPUT {
    \"commit_tasks\": {
        \"count\": 1,
        \"total\": 1,
        \"commit_task\": {
            \"id\": 1,
            \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
            \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
            \"errors\": \"\"
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain "},"response":[]},{"name":"Get scheduling and device details for a specific change window","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"uid"},{"value":null,"type":"text","key":"task_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks/{{task_id}}","description":"Retrieves scheduling and device details for a specific change window.

Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
task_id: Task Id

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1
OUTPUT {
    \"commit_task\": {
        \"id\": 1,
        \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
        \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
        \"errors\": \"\",
        \"device_commits\": {
            \"device_commit\": [
                {
                    \"id\": 1,
                    \"result\": {
                        \"errors\": {
                            \"error\": \"got_error_from_dcs\"
                        },
                        \"device\": {
                            \"id\": 17,
                            \"status\": \"FAILURE\",
                            \"revision_id\": 1,
                            \"errors\": {
                                \"error\": \"Login error\"
                            }
                        }
                    }
                },
                {
                    \"id\": 2,
                    \"result\": {
                        \"errors\": \"\",
                        \"device\": {
                            \"id\": 19,
                            \"status\": \"SUCCESS_WITH_WARNINGS\",
                            \"revision_id\": 1,
                            \"warnings\": {
                                \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                            }
                        }
                    }
                }
            ]
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain
404: Fail to find task for change window "},"response":[]},{"name":"Get name and status for all change windows","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/","description":"Retrieves a list of all change windows.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
start: Starting result for query allowable value is numeric [optional]
count: Number of change windows for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true
OUTPUT {
    \"change_windows\": {
        \"count\": 2,
        \"total\": 2,
        \"change_window\": [
            {
                \"uuid\": \"6ae41504-a95c-4f23-98a2-f18b2efadb9d\",
                \"name\": \"cw1\",
                \"domain_id\": 1,
                \"enabled\": true
            },
            {
                \"uuid\": \"fc7b167c-29ea-49a1-9ee3-efb6d1351343\",
                \"name\": \"cw2\",
                \"domain_id\": 1,
                \"enabled\": true
            }
        ]
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
401: Not permitted to access this context "},"response":[]}]},{"name":"Device Interfaces and Zones","item":[{"name":"Get device zones by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/zones","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/787/zones
"},"response":[]},{"name":"Get network interfaces by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/interfaces","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/interfaces
"},"response":[]},{"name":"Get device zones by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/zones","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/zones
"},"response":[]},{"name":"Get zones and network interfaces that participate in sub-policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindable_objects","description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/bindable_objects
"},"response":[]},{"name":"Get network interfaces by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/interfaces","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/10/interfaces
"},"response":[]}]},{"name":"Domains","item":[{"name":"Get domain","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","description":"Parameters:
context: Global MSSP context [optional]
id: Domain id

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
401: User not permitted to access domains
400: Domain with ID was not found"},"response":[]},{"name":"Update a domain","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"domain\": {\n\t\t\"name\": \"edited name\",\n\t\t\"address\": \"edited address\",\n\t\t\"description\": \"edited description\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","description":"Parameters:
id: Domain id
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains/2
BODY{
    \"domain\": {
        \"name\": \"edited name\",
        \"address\": \"edited address\",
        \"description\": \"edited description\"
    }
}


Response Messages:
401: User not permitted to access domains
400: Domain with ID was not found
400: Domain with this name already exists
400: Domain name is empty
400: Default domain cannot be changed"},"response":[]},{"name":"Add a domain","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"domain\": {\n\t\t\"name\": \"domain1\",\n\t\t\"address\": \"address\",\n\t\t\"description\": \"description\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains
BODY{
    \"domain\": {
        \"name\": \"domain1\",
        \"address\": \"address\",
        \"description\": \"description\"
    }
}


Response Messages:
401: User not permitted to access domains
400: Domain with this name already exists
400: Domain name is empty"},"response":[]},{"name":"Get all domains","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","description":"

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
401: User not permitted to access domains"},"response":[]}]},{"name":"General Properties","item":[{"name":"Get general properties","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/properties/","description":"This API requires 'Super admin' privileges



Usage Example
URLhttps://192.168.1.1/securetrack/api/properties
OUTPUT{
    \"properties\": {
        \"sc_addresses\": {
            \"sc_address\": [
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"external\"
                },
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"internal\"
                }
            ]
        }
    }
}


Response Messages:
401: User not permitted to view properties"},"response":[]}]},{"name":"IPsec VPN","item":[{"name":"Get Cisco cryptographic maps by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/crypto_maps","description":"Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://191.168.1.1/securetrack/api/revisions/18/crypto_maps
"},"response":[]},{"name":"Get Check Point VPN (IPSec) communities and gateways","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_communities","description":"Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities.
Works on clusters and gateways, not on management servers.

Parameters:
device_id: The unique identifier of target device

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities
"},"response":[]},{"name":"Get Cisco IPsec policy and peers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"outputInterfaceName"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_tunnels","description":"Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config.
You can retrieve the interface names by calling the /devices/id/interfaces API.

Parameters:
device_id: The unique identifier of target device
outputInterfaceName: Interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1
"},"response":[]},{"name":"Get Cisco cryptographic maps by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/crypto_maps","description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/19/crypto_maps
"},"response":[]}]},{"name":"Internet Objects","item":[{"name":"Get resolved Internet representation for device","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}/object","description":"The order of precedence used to resolve the Internet object is:
Step 1: Identify the Internet referral:
Search for a defined Internet referral on the specified device.
If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral.
If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2.
If an Internet referral is not found, it resolves to “Any”.
Step 2: Resolve the object by name:
Search the specified device for a defined network object that matches the name returned in Step 1.
If a matching network object is not found, an error will be returned.

Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2/object

Response Messages:
200: Resolved Internet referral object for device is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Configured object was not found on the device
401: Access is denied."},"response":[]},{"name":"Update Internet representation for device","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_10.11.73.1\"\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Updates the Internet referral configuration for the device.
If there was no previous configuration, it will be created.

Parameters:
deviceId: SecureTrack Device ID
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_10.11.73.1\"
    }
}


Response Messages:
200: Internet referral configuration was updated
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
401: Access is denied."},"response":[]},{"name":"Get Internet representation for device","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Internet referral configuration was not found for device ID
401: Access is denied."},"response":[]},{"name":"Delete Internet representation for device","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration was deleted
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration for device ID does not exist
401: Access is denied."},"response":[]},{"name":"Create new Internet representation for a device","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_2.2.2.2\"\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/","description":"The internet referral lets you represent the Internet as an object on a device.
See REST API: /internet_referral/{deviceId:[0-9]+}/object for a description of how internet referral is resolved.

Parameters:
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_2.2.2.2\"
    }
}


Response Messages:
201: Internet referral configuration was created
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
400: Internet referral configuration for given device ID already exists
401: Access is denied."},"response":[]}]},{"name":"LDAP","item":[{"name":"Get LDAP entry details by DN","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"dn"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntryByDN","description":"Returns the UID, DN and Name of a LDAP entry specified by the DN.

Parameters:
dn: LDAP DN

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntryByDN?dn=CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com
OUTPUT{
    \"ldap_entry\": {
        \"uid\": \"mYbWQms7p0q5YinEyW5Byw==\",
        \"dn\": \"CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com\",
        \"name\": \"Manufacturing\"
    }
}


Response Messages:
200: OK
400: Invalid DN format
404: Entry matching the DN cannot be found
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Get the base DN entry details","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getBaseDNEntry","description":"The returned \"base DN\" is used by GetEntriesByNames API as the search start entry.



Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getBaseDNEntry
OUTPUT{
    \"ldap_entry\": {
        \"dn\": \"DC=tufintest,DC=com\",
        \"uid\": \"nABbRP/lPUKlteNRI4j6iA==\"
    }
}


Response Messages:
200: OK
404: Base Entry cannot be found
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Return entries that exactly match one of the given strings","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"search_by_name_criteria\": {\n\t\t\"search_texts\": {\n\t\t\t\"search_text\": [\n\t\t\t\t\"Finance\",\n\t\t\t\t\"Marketing\",\n\t\t\t\t\"Management\"\n\t\t\t]\n\t\t},\n\t\t\"ldap_entry_types\": {\n\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\"GROUP\"\n\t\t\t]\n\t\t},\n\t\t\"max_search_result\": 20\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntriesByNames","description":"Return list of LDAP entries which match the exact given multiple search_text.

Parameters:
body: Names to search

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntriesByNames
BODY{
    \"search_by_name_criteria\": {
        \"search_texts\": {
            \"search_text\": [
                \"Finance\",
                \"Marketing\",
                \"Management\"
            ]
        },
        \"ldap_entry_types\": {
            \"ldap_entry_type\": [
                \"GROUP\"
            ]
        },
        \"max_search_result\": 20
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Finance,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"uOvJTpYRD0aTjEENA87N5A==\",
                    \"displayName\": \"Finance\"
                },
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Management,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"jdf778skfsgs730fksdHHs==\",
                    \"displayName\": \"Management\"
                }
            ]
        },
        \"has_more_results_to_return\": false
    }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal value)
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Return LDAP entries which match the given search criteria","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"search_criteria\": {\n\t\t\"search_base_dn\": \"DC=tufintest,DC=com\",\n\t\t\"search_text\": \"test\",\n\t\t\"ldap_search_options\": {\n\t\t\t\"ldap_entry_types\": {\n\t\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\t\"OU\",\n\t\t\t\t\t\"USER\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"search_mode\": \"CONTAINS\",\n\t\t\t\"max_search_result\": 3\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/search","description":"Return list of LDAP entries which match the given search criteria according to the search mode (EXACT, CONTAINS, STARTS_WITH, ENDS_WITH).
The search is case insensitive.
The limit of max_search_result is 1000.

Parameters:
body: Search criteria

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/search
BODY{
    \"search_criteria\": {
        \"search_base_dn\": \"DC=tufintest,DC=com\",
        \"search_text\": \"test\",
        \"ldap_search_options\": {
            \"ldap_entry_types\": {
                \"ldap_entry_type\": [
                    \"OU\",
                    \"USER\"
                ]
            },
            \"search_mode\": \"CONTAINS\",
            \"max_search_result\": 3
        }
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
            {
                \"dn\": \"CN=User15ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"ZRuKW3XqIEOIxCwlfgJQYA==\",
                \"displayName\": \"User15ATTesting1\"
            },
            {
                \"dn\": \"CN=IWAM_TEST2003,CN=Users,DC=tufintest,DC=com\",
                \"uid\": \"bYVqqcZXsUSF51hiP4W7Yw==\",
                \"displayName\": \"Testing1\"
            },
            {
                \"dn\": \"CN=User1ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"2ma3TrgeHEWQDITwvcRqlg==\",
                \"displayName\": \"test\"
            }
            ]
        },
            \"has_more_results_to_return\": \"true\"
        }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal or invalid value)
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]}]},{"name":"Monitored Devices","item":[{"name":"Add devices to SecureTrack","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n \t\t \"devices\": [{ \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"r80_version\":\"false\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"user_name\":\"admin\",\n \t\t\t\t \"password\":\"1234\",\n \t\t\t\t \"r80_version\":\"true\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"ASA\",\n \t\t\t \"vendor\":\"Cisco\",\n \t\t\t \"securetrack_domain\":\"Domain-A\",\n \t\t\t \"display_name\":\"Ireland-ASA\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t \"enable_virtual_contexts\":\"true\",\n \t\t\t \"import_all\":\"false\",\n \t\t\t \"import_devices\": \n \t\t\t\t\t [\"VC1\",\"VC2\"],\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"enable_password\":\"st-enable-password\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"Panorama\",\n \t\t\t \"vendor\":\"PaloAltoNetworks\",\n \t\t\t \"display_name\":\"First-Device-example\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t {\n \t\t\t \"model\":\"FortiManager\",\n \t\t\t \"vendor\":\"Fortinet\",\n \t\t\t \"display_name\":\"Spain-FortiManager\",\n \t\t\t \"securetrack_server\":\"RemoteControlServerName\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_all\": \"false\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t\t { \n \t\t\t\t \"name\": \"AdomX\",\n \t\t\t\t \"import_all\": \"false\", \n \t\t\t\t \"managed_devices\": [\"FW1\"]\n \t\t\t\t\t\t}\n \t\t\t\t\t]\n \t\t\t\t}\n \t\t\t}\n \t\t]\n \t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","description":"Use this API to add a single device or a list of devices to SecureTrack.
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
Currently supported types: CMA, SMC, ASA, Panorama NG and FortiManager.

This API verifies connection to the provided device, before adding a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be added.
Only \"live\" device with correct credentials can be added using this API.
To add Checkpoint R77 devices, use \"r80_version\" : \"false\".


Parameters:
body: device_list

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"r80_version\":\"false\"
             }
         },
         {
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"user_name\":\"admin\",
                 \"password\":\"1234\",
                 \"r80_version\":\"true\"
             }
         },
         {
             \"model\":\"ASA\",
             \"vendor\":\"Cisco\",
             \"securetrack_domain\":\"Domain-A\",
             \"display_name\":\"Ireland-ASA\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
             \"enable_virtual_contexts\":\"true\",
             \"import_all\":\"false\",
             \"import_devices\":
                     [\"VC1\",\"VC2\"],
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"collect_dynamic_topology\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"enable_password\":\"st-enable-password\"
             }
         },
         {
             \"model\":\"Panorama\",
             \"vendor\":\"PaloAltoNetworks\",
             \"display_name\":\"First-Device-example\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"model\":\"FortiManager\",
             \"vendor\":\"Fortinet\",
             \"display_name\":\"Spain-FortiManager\",
             \"securetrack_server\":\"RemoteControlServerName\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_all\": \"false\",
                 \"import_devices\": [
                         {
                 \"name\": \"AdomX\",
                 \"import_all\": \"false\",
                 \"managed_devices\": [\"FW1\"]
                        }
                    ]
                }
            }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Edit Securetrack device","request":{"method":"PATCH","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n\t\t \"devices\": [{\n\t\t\t \"device_id\": 1,\n\t\t\t \"display_name\": \"CheckPoint-R77-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.1\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"authentication_mode\": \"LEA\",\n\t\t\t\t \"lea_authentication_mode\": \"ssl_opsec\",\n\t\t\t\t \"lea_authentication_port\": \"2488\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 2,\n\t\t\t \"display_name\": \"CheckPoint-R80-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 3,\n\t\t\t \"display_name\": \"Cisco-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"enable_password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 4,\n\t\t\t \"display_name\": \"PaloAlto-PanoramaNg-Device\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 5,\n\t\t\t \"display_name\": \"PaloAlto-DeviceGroup\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 6,\n\t\t\t \"display_name\": \"PaloAlto-FireWall-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 7,\n\t\t\t \"display_name\": \"Spain-FortiManager\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 8,\n\t\t\t \"display_name\": \"FortiManager-Adom\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 9,\n\t\t\t \"display_name\": \"FortiManager-FireWall\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t }\n\t\t]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","description":"Use this API to edit the settings of a management device, including changing multiple parameters in the same call.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
Note: This API cannot be used to edit SecureTrack Domains and SecureTrack Servers.
This API verifies connection to the provided device, before updating a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be updated.
Only \"live\" device with correct credentials can be updated using this API.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"device_id\": 1,
             \"display_name\": \"CheckPoint-R77-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.1\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"authentication_mode\": \"LEA\",
                 \"lea_authentication_mode\": \"ssl_opsec\",
                 \"lea_authentication_port\": \"2488\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 2,
             \"display_name\": \"CheckPoint-R80-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.2\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 3,
             \"display_name\": \"Cisco-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"enable_password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 4,
             \"display_name\": \"PaloAlto-PanoramaNg-Device\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 5,
             \"display_name\": \"PaloAlto-DeviceGroup\"
         },
         {
             \"device_id\": 6,
             \"display_name\": \"PaloAlto-FireWall-Device\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         },
         {
             \"device_id\": 7,
             \"display_name\": \"Spain-FortiManager\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 8,
             \"display_name\": \"FortiManager-Adom\"
         },
         {
             \"device_id\": 9,
             \"display_name\": \"FortiManager-FireWall\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Add configuration for offline device","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"configuration_file"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/tasks/add_device_config_task","description":"Parameters:
device_id: Device ID
configuration_file: Configuration File

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"device_id=1\" https://192.168.1.1/securetrack/api/tasks/add_device_config_task

Response Messages:
200: Configuration added successfully."},"response":[]},{"name":"Get textual configuration by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/config","description":"Returns textual configuration for the specified revision Id.


Parameters:
context: Global MSSP context [optional]
id: Revision id

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/config
"},"response":[]},{"name":"Get textual configuration by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/config","description":"Get latest revision of running configuration for a given device Id.


Parameters:
context: global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/111/config
"},"response":[]},{"name":"Update offline device","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t API OFFLINE ASA2\n\t true\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}","description":"Device name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
device_id: Device ID
body: Device to be updated

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/1
BODY<device>
     <name>API OFFLINE ASA2</name>
     <topology>true</topology>
</device>

"},"response":[]},{"name":"Get specific device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}","description":"Returns the vendor, model, name, domain and ID for the specified device.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
id: Device ID
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/60

Usage Example
https://192.168.1.1/securetrack/api/devices/20?show_os_version=true
"},"response":[]},{"name":"Import managed devices","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n \t\t \"devices\":[ \n \t\t { \n \t\t\t \"device_id\":\"1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"2\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"firewall1\", \"firewall2\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"3\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"] \n \t\t\t }\n \t\t }\n \t\t]\n \t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/import","description":"Use this API to import more managed devices to SecureTrack.
The following devices can be added: Device Groups (for Panorama), Administrative Domains (for FortiManager).\nCurrently supported types: Panorama, FortiManager, Cisco ASA.
Please see examples below per device id: device id 1 for Panorama, device 2 for FortiManager, device id 3 for Cisco ASA.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk/import
BODY{
     \"devices_list\":{
         \"devices\":[
         {
             \"device_id\":\"1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"device_id\":\"2\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [
                     {
                         \"name\":\"Adom1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"firewall1\", \"firewall2\"]
                     },
                     {
                         \"name\":\"Adom2\",
                         \"import_all\":\"true\"
                     }
                 ]
             }
         },
         {
             \"device_id\":\"3\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"]
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Add offline device","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t asa \n\t Cisco\n\t 1\n\t Default\n\t API OFFLINE ASA1\n\t true\n\t true\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","description":"You can choose to select the domain either by name or id using the domain_id or domain_name tags.\nDevice name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
body: Device to be added

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices
BODY<device>
     <model>asa</model>
     <vendor>Cisco</vendor>
     <domain_id>1</domain_id>
     <domain_name>Default</domain_name>
     <name>API OFFLINE ASA1</name>
     <offline>true</offline>
     <topology>true</topology>
</device>

"},"response":[]},{"name":"Get devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","description":"Returns the list of devices that are configured in SecureTrack, including the vendor, model, name, domain and device ID.
The results can be sorted by ip, name, vendor and model.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
name: Device name [optional]
ip: Device IP address [optional]
vendor: Device vendor [optional]
model: Device model [optional]
sort: Sort ascending or descending allowable types are: asc or desc [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices

Usage Example
https://192.168.1.1/securetrack/api/devices?vendor=VMware

Usage Example
https://192.168.1.1/securetrack/api/devices?sort=ip:asc

Usage Example
https://192.168.1.1/securetrack/api/devices?show_os_version=true
"},"response":[]},{"name":"Get specific task results of bulk operations on devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"task_uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/tasks/{{task_uid}}","description":"Use this API to track and display the current progress of the devices being edited or added to\nSecureTrack for a specific Task ID.
For a list of devices, the status of each device is displayed.

A device that was not added due to some reason will be added to \"failed\" list with status element containing a description.
For example:
\"description\": \"No connection to device\".

Parameters:
task_uid: Task UID

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk/tasks/d7e88799-a6e5-45da-8c72-c979a5dbe235
OUTPUT{
    \"task_result\":{
        \"total_succeeded\":\"0\",
        \"total_in_progress\":\"2\",
        \"total_failed\":\"0\",
        \"succeeded\":{
            \"count\":\"0\"
        },
        \"in_progress\":{
            \"count\":\"2\",
            \"devices\":[
                {
                    \"device_id\":\"1\",
                    \"display_name\":\"Europe-CMA\",
                    \"ip_address\":\"192.168.1.1\",
                    \"status\":{
                    }
                },
                {
                    \"device_id\":\"2\",
                    \"display_name\":\"Ireland-ASA\",
                    \"ip_address\":\"172.16.1.1\",
                    \"status\":{
                    }
                }
            ]
        },
        \"failed\":{
            \"count\":\"0\"
        }
    }
}


Response Messages:
404: The task with the given UID was not found
400: Bad request
200: Accepted
408: Request timed out
500: Internal server error"},"response":[]}]},{"name":"NAT Policies","item":[{"name":"Get NAT objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/nat_objects","description":"Fetches a list of NAT objects for a given revision
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Version ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects?get_total=true
"},"response":[]},{"name":"Get NAT rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_rules/bindings","description":"Fetches list of NAT rules for device given by device ID

input_interface and output_interface are not supported for Panorama running in Advanced management mode
nat_stage is supported for Netscreen and JunOS
nat_type is supported for FortiManager
Note: For Check Point, NAT rules are available from the modules (not managements)
Note: For Palo Alto, filtering NAT rules by interface is only available for firewall devices

Parameters:
context: Global MSSP context [optional]
id: Device ID
input_interface: Input interface for NAT rules, \"any\" for all interfaces [optional]
output_interface: output interface for NAT rules, \"any\" for all interfaces [optional]
nat_stage: NAT stage for NAT rules allowable values: \"pre_policy\" , \"post_policy\" or \"both\" [optional]
nat_type: NAT stage for NAT rules allowable values: \"vip\" or \"reverse_vip\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/10/nat_rules/bindings?input_interface=Any
"},"response":[]},{"name":"Get NAT objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_objects","description":"Fetches a list of NAT objects defined on device given by device ID
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable value is numeric [optional]
count: Starting page for query allowable value is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects?get_total=true
"},"response":[]}]},{"name":"Network Objects","item":[{"name":"Get rules containing specified network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/rules","description":"Returns the security rules that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.
include_groups: You can add \"include_groups\" to find rules that include the network object and rules that include the groups that include the network object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/65078/rules?include_groups=true
"},"response":[]},{"name":"Get specific network objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/network_objects/{{ids}}","description":"Fetches a single or partial list of the network objects for a given revision.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects/69547?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169185,
            \"name\": \"Access_Role_Domain Controllers\",
            \"display_name\": \"Access_Role_Domain Controllers\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{140B8F32-188D-414C-A7BE-F4A7D7E9A169}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14237,
                    \"name\": \"ad_group_Domain_Controllers\",
                    \"display_name\": \"Domain Controllers\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{0A8A459E-58E8-45DC-981E-16BBF2BD1922}\",
                    \"dn\": \"CN=Domain Controllers,CN=Users,DC=rnd,DC=local\"
                }
            }
        }
    }
}

"},"response":[]},{"name":"Get network objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/network_objects","description":"Fetches list of network objects defined on device given by ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169178,
                \"name\": \"Access_role\",
                \"display_name\": \"Access_role\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": false,
                \"comment\": \"\",
                \"uid\": \"{FC267948-DA8C-4FB6-A736-76B5254BF825}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14320,
                        \"name\": \"ad_group_auto_30K_grp1\",
                        \"display_name\": \"auto_30K_grp1\",
                        \"class_name\": \"ad_group\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{CAB92DCC-CF63-4E47-B8E3-1E1231996D5E}\",
                        \"dn\": \"CN=auto_30K_grp1,OU=OU_30K_Groups,DC=rnd,DC=local\"
                    }
                }
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid"},"response":[]},{"name":"Get specific network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/network_objects/{{ids}}","description":"Fetches a single or partial list of the network objects for a given device ID.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects/169184?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169184,
            \"name\": \"Access_Role_@grp\",
            \"display_name\": \"Access_Role_@grp\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{1870612C-0922-4AEE-81FF-5472DB7C32E1}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14338,
                    \"name\": \"ad_group_grp\",
                    \"display_name\": \"@grp\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{C5740C23-F36E-4D2E-8B17-1F99C239C12A}\",
                    \"dn\": \"CN=@grp,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}

"},"response":[]},{"name":"Get network objects matching specified criteria","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"filter"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/search","description":"You can search for network objects where the IP address, name or comment fields have a specified text string,
or you can search for network objects that have an IP address that matches, contains or is contained in a specified IP subnet,
or you can search for network objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns network objects where the IP address, name or comment fields have a specified text string. “subnet” filter returns network objects that have an IP address that matches, contains or is contained in a specified IP subnet. “uid“ filter returns network objects with the specified uid. If no filter is specified, the “text” filter is used.
device_id: Returns network objects belonging to the specified device_id. [optional]
ip: (For “text” filter) You can specify \"ip\" to find network objects with the specified text in the IP address field. [optional]
name: (For “text” filter) You can specify \"name\" to find network objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find network objects with the specified text in the comment field. [optional]
any_field: (For “text” filter) You can specify \"any_field\" to find network objects with the specified text in the IP address, name or comment fields. [optional]
exact_match: (For “text” filter) You can add \"exact_match=true\" to find network objects with the specified text in the comment field. If this field is not specified, the query uses \"exact_match=false\". [optional]
contained_in: (For “subnet” filter) You can specify \"contained_in\" to find network objects that are contained in the specified IP subnet. For example, 10.1.0.0 is contained in 10.0.0.0. [optional]
contains: (For “subnet” filter) You can specify \"contains\" to find network objects that contain the specified IP subnet. For example, 10.0.0.0 contains 10.1.0.0. [optional]
exact_subnet: (For “subnet” filter) You can specify \"exact_subnet\" to find network objects that have the specified IP address. [optional]
uid: (for “uid“ filter) Returns network objects with the specified uid. [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: You can specify \"typeOnDevice\" to find network object groups that are EDL. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=host&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&any_field=host&count=10&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&contains=10.1.1.0

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&count=10&exact_subnet=1.1.1.1

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191&device_id=4

Usage Example
URLhttps://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=Access_Role&identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1,
        \"total\": 1,
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169197,
            \"name\": \"Access_Role_aaa\",
            \"display_name\": \"Access_Role_aaa\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14317,
                    \"name\": \"ad_group_aaa\",
                    \"display_name\": \"aaa\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{5D16859C-0256-4673-A402-4254588B8F40}\",
                    \"dn\": \"CN=aaa,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}


Response Messages:
400: The typeOnDevice value is not valid.Use edl_ip_list as value to search EDL groups."},"response":[]},{"name":"Get network groups containing specified network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/groups","description":"Returns groups that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.

Usage Example
https://192.168.1.1/securetrack/api/network_objects/69577/groups
"},"response":[]},{"name":"Get network objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/network_objects","description":"Fetches list of network objects from specific revision
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169183,
                \"name\": \"Access role 1\",
                \"display_name\": \"Access role 1\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": true,
                \"comment\": \"\",
                \"uid\": \"{1E4C35A0-1FE4-4101-8A38-FDE656BCDCFB}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14346,
                        \"name\": \"all identified\",
                        \"display_name\": \"all identified\",
                        \"class_name\": \"all_identified\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{17A972AC-4B4A-4715-859F-867128707F59}\",
                        \"dn\": \"\"
                    }
                }
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid"},"response":[]}]},{"name":"Network Topology","item":[{"name":"Get generic Route","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","description":"Get a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/30
OUTPUT{
    GenericRoute: {
        id: 30,
        mgmtId: 2,
        destination: \"222.100.10.22\",
        mask: \"255.255.0.0\",
        interfaceName: \"catch22\",
        nextHop: \"100.100.10.10\",
        nextHopType: \"IP\",
        vrf: \"V102-YO\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Generic Route Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Route","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","description":"Delete a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/5\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: Generic Route Not Found.
500: General error occurred."},"response":[]},{"name":"Get topology routing tables for a given device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"mgmtId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_routes","description":"The returned routing tables are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=1&is_generic=true
"},"response":[]},{"name":"Delete Ignored Interfaces.","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","description":"Delete Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10\n

Response Messages:
200: 2 entries deleted where mgmtId = 10
400: Bad Request.
401: Access is denied.
404: Management Id 10 not found.
500: General error occurred."},"response":[]},{"name":"Get Ignored Interfaces.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","description":"Get Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10
OUTPUT{
    IgnoredInterfaces: [
        {
            interfaceName: \"eth2\",
            mgmtId: 10,
            ip: \"0.0.0.0\"
        },
        {
            interfaceName: \"loopback100\",
            mgmtId: 10,
            ip: \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
500: General error occurred."},"response":[]},{"name":"Get cloud information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"cloud\": {\n\t\t\t\"management_name\": \"FW1\",\n\t\t\t\"management_id\": 20,\n\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\"cloud_id\": 120,\n\t\t\t\"vertex_id\": 250,\n\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\"routes_count\": 5,\n\t\t\t\"is_parent\": false\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions/{{cloud_id}}","description":"Returns information about a specific cloud in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
cloud_id: cloud id
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions/120
BODY{
    \"suggested_clouds\": {
        \"count\": 1,
        \"total\": 1,
        \"cloud\": {
            \"management_name\": \"FW1\",
            \"management_id\": 20,
            \"cloud_name\": \"Cloud 10.100.0.1\",
            \"cloud_id\": 120,
            \"vertex_id\": 250,
            \"ip\": \"10.100.0.1\",
            \"routes_count\": 5,
            \"is_parent\": false
        }
    }
}


Response Messages:
202: Accepted
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Add generic device to Topology model","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"configuration_file"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","description":"Upload a configuration file that will be used to add a generic device to the Topology model.
The context field is the domain ID to which the generic device is added: If not provided, the device is added to the global domain.
configuration_file must include a valid generic device configuration.
The specified path must point to a file on the computer being sue to make the REST API call.
If update update_topology = true, then the Topology model will be updated immediately after the device is added.
For maximum efficiency, if you are adding multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.Default value for update_topology = true.
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
body: Generic device to be added
configuration_file: Configuration File for generic device
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"my_generic_device\", \"customer_id\": 1}};type=application/json' -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices\n

Response Messages:
201: The generic device was created successfully
401: User is not permitted to access the specified domain
400: Failed to create generic device "},"response":[]},{"name":"Get generic devices that are configured in ST","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","description":"Returns a list of the generic devices included in all the domains that the user has permission to.
Use context and/or name optional parameters to get more specific results.
To get context optional parameter, you can call /domains/ API and use the id included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
name: Generic device name [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices
"},"response":[]},{"name":"Get cloud information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 2,\n\t\t\"total\": 2,\n\t\t\"cloud\": [\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW1\",\n\t\t\t\t\"management_id\": 20,\n\t\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\t\"cloud_id\": 120,\n\t\t\t\t\"vertex_id\": 250,\n\t\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\t\"routes_count\": 5,\n\t\t\t\t\"is_parent\": false\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW2\",\n\t\t\t\t\"management_id\": 21,\n\t\t\t\t\"cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t\t\"cloud_id\": 125,\n\t\t\t\t\"vertex_id\": 270,\n\t\t\t\t\"ip\": \"172.16.0.1\",\n\t\t\t\t\"routes_count\": 7,\n\t\t\t\t\"is_parent\": false,\n\t\t\t\t\"parent_vertex_id\": 40\n\t\t\t\t\"parent_cloud_id\": 45\n\t\t\t\t\"parent_cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t}\n\t\t]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions","description":"Returns information about all clouds in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
context: Global MSSP context [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions
BODY{
    \"suggested_clouds\": {
        \"count\": 2,
        \"total\": 2,
        \"cloud\": [
            {
                \"management_name\": \"FW1\",
                \"management_id\": 20,
                \"cloud_name\": \"Cloud 10.100.0.1\",
                \"cloud_id\": 120,
                \"vertex_id\": 250,
                \"ip\": \"10.100.0.1\",
                \"routes_count\": 5,
                \"is_parent\": false
            },
            {
                \"management_name\": \"FW2\",
                \"management_id\": 21,
                \"cloud_name\": \"Cloud 172.16.0.1\",
                \"cloud_id\": 125,
                \"vertex_id\": 270,
                \"ip\": \"172.16.0.1\",
                \"routes_count\": 7,
                \"is_parent\": false,
                \"parent_vertex_id\": 40
                \"parent_cloud_id\": 45
                \"parent_cloud_name\": \"Cloud 172.16.0.1\",
            }
        ]
    }
}


Response Messages:
202: Accepted
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Create generic Vpns","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","description":"Create generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Update generic Vpns","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"id\": 24,\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"new33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"id\": 25,\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"new111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","description":"Update generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"id\": 24,
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"new33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"id\": 25,
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"new111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Vpn/Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Get Transparent Firewalls","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","description":"Get Transparent Firewalls for participated managed/generic DeviceId

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw/device/9?generic=false
OUTPUT{
    TransparentFirewalls: [
        {
            id: 17,
            outputL3DeviceId: 22,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet0/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 1,
            inputL3IsGenericDevice: true,
            inputL3InterfaceName: \"interface2\"
        },
        {
            id: 23,
            outputL3DeviceId: 23,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet2/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 17,
            inputL3IsGenericDevice: false,
            inputL3InterfaceName: \"mgmt\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Delete Transparent Firewalls.","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","description":"Delete Transparent Firewalls for participated layer 2 deviceId

Parameters:
deviceId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/device/9\n

Response Messages:
200: 4 entries deleted where layer2 deviceId = 9
400: Bad Request.
401: Access is denied.
404: DeviceId 9 not found.
500: General error occurred."},"response":[]},{"name":"Delete generic Vpns","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","description":"Delete all generic Vpns from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/device/2?generic=false\n

Response Messages:
200: 4 Generic Vpns were deleted from mgmtId 2.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Vpns","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","description":"Get generic Vpns of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/device/3?generic=true
OUTPUT{
    GenericVpns: [
    {
        id: 17,
        generic: true,
        deviceId: 3,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.177\",
        tunnelDestIpAddr: \"1.1.1.188\"
    },
    {
        id: 22,
        generic: true,
        deviceId: 3,
        interfaceName: \"111\",
        tunnelSourceIpAddr: \"1.1.1.188\",
        tunnelDestIpAddr: \"1.1.1.177\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Get topology subnets","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets","description":"Returns a list of the topology subnets for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology subnet names that match the search criteria provided, as follows:
1. If you provide only a mask, then an exact match search is done on the mask portion of the name
e.g. if name=/2, the results will include 1.2.3.4/2, but not 1.2.3.4/22
2. If you provide only a partial or complete IP address, then a contains search is done in the IPv4 block portion of the name
e.g. name=32, the results will include 192.168.205.32/24 and 55.192.32.22/16, but will not include 55.168.205.5/32
3. If you provide both an IPv4 address (either partial or complete) and a mask, then an exact match search is done
e.g. if name=23.4/2, then the results will include 192.168.23.4/2, but will not include 192.168.23.4/23 or 23.4.192.168/2

The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
name: Subnet name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=10.27
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.20/32\",
                \"ip\": \"10.27.122.20\",
                \"mask\": \"255.255.255.255\"
            },
            {
                \"id\": 616,
                \"name\": \"10.27.122.60/32\",
                \"ip\": \"10.27.122.60\",
                \"mask\": \"255.255.255.255\"
            },
            {
                \"id\": 619,
                \"name\": \"10.27.122.0/30\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.252\"
            },
            {
                \"id\": 620,
                \"name\": \"10.27.122.4/30\",
                \"ip\": \"10.27.122.4\",
                \"mask\": \"255.255.255.252\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=144/30
OUTPUT{
    \"topology_subnets\": {
        \"count\": 2,
        \"total\": 2,
        \"subnets\": [
            {
                \"id\": 773,
                \"name\": \"10.13.64.144/30\",
                \"ip\": \"10.13.64.144\",
                \"mask\": \"255.255.255.252\"
            },
            {
                \"id\": 825,
                \"name\": \"10.15.64.144/30\",
                \"ip\": \"10.15.64.144\",
                \"mask\": \"255.255.255.252\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId"},"response":[]},{"name":"Delete Transparent Firewall","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/{{layer2DataId}}","description":"Delete Transparent Firewall by Id.

Parameters:
layer2DataId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/17\n

Response Messages:
200: layer2DataId 17 deleted.
400: Bad Request.
401: Access is denied.
404: Layer2Data Id 17 not found.
500: General error occurred."},"response":[]},{"name":"Create Join Cloud","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"name\" : \"Yami\",\n\t\t\"clouds\" : [1, 2]\n\t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","description":"Create Join Cloud.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"name\" : \"Yami\",
        \"clouds\" : [1, 2]
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Update Join Cloud","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"id\" : 67,\n\t\t\"name\" : \"Yamile\",\n\t\t\"clouds\" : [1, 2, 57]\n\t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","description":"Update Join Clouds.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"id\" : 67,
        \"name\" : \"Yamile\",
        \"clouds\" : [1, 2, 57]
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Get path image for specified traffic","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_image","description":"Returns an image containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80
"},"response":[]},{"name":"Delete generic Vpn","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","description":"Delete a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/5\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Vpn","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","description":"Get a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/18
OUTPUT{
    GenericVpn: {
        id: 18,
        generic: false,
        deviceId: 2,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.77\",
        tunnelDestIpAddr: \"1.1.1.88\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred."},"response":[]},{"name":"Update generic Interfaces","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"id\": 204,\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"NewBob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": null\n\t},\n\t{\n\t\t\"id\": 205,\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"NewBob2\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","description":"Update generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"id\": 204,
        \"mgmtId\": 1,
        \"name\": \"NewBob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": null
    },
    {
        \"id\": 205,
        \"mgmtId\": 2,
        \"name\": \"NewBob2\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Interface/Management Not Found.
500: General error occurred."},"response":[]},{"name":"Create generic Interfaces","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"Bob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-PA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"Bob2\",\n\t\t\"ip\": \"100.100.45.66\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-BA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","description":"Create generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"mgmtId\": 1,
        \"name\": \"Bob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-PA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    },
    {
        \"mgmtId\": 2,
        \"name\": \"Bob2\",
        \"ip\": \"100.100.45.66\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-BA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","description":"Get generic Interfaces of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/mgmt/1
OUTPUT{
    GenericInterfaces: [
    {
        id: 206,
        mgmtId: 1,
        name: \"newApo3\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    },
    {
        id: 208,
        mgmtId: 1,
        name: \"newApo4\",
        ip: \"100.103.33.34\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"internal\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Interfaces","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","description":"Delete all generic Interfaces from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/mgmt/2\n

Response Messages:
200: 11 Generic Interfaces were deleted from mgmtId 2.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Create Ignored Interfaces.","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"IgnoredInterfaces\": \n\t[\n\t\t{\n\t\t\t\"interfaceName\" : \"eth2\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"0.0.0.0\"\n\t\t},\n\t\t{\n\t\t\t\"interfaceName\" : \"loopback100\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"34.34.34.34\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface","description":"Create Ignored Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface
BODY{
    \"IgnoredInterfaces\":
    [
        {
            \"interfaceName\" : \"eth2\",
            \"mgmtId\" : 10,
            \"ip\" : \"0.0.0.0\"
        },
        {
            \"interfaceName\" : \"loopback100\",
            \"mgmtId\" : 10,
            \"ip\" : \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Id 10 not found.
500: General error occurred."},"response":[]},{"name":"Create manual Interface CustomerTags","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port4\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 6,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","description":"Create manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port4\",
            \"customerId\": 2
        },
        {
            \"generic\": false,
            \"deviceId\": 6,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
401: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred."},"response":[]},{"name":"Update manual Interface CustomerTags","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"id\": 73,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port5\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"id\": 74,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","description":"Update manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"id\": 73,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port5\",
            \"customerId\": 2
        },
        {
            \"id\": 74,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
401: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred."},"response":[]},{"name":"Delete manual Interface CustomerTag","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","description":"Delete a manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/66\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: InterfaceCustomer Id 66 not found
500: General error occurred."},"response":[]},{"name":"Get manual Interface CustomerTag","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","description":"Get manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/74
OUTPUT{
    InterfaceCustomerTag: {
        id: 74,
        generic: false,
        deviceId: 5,
        interfaceName: \"port4.1\",
        customerId: 3
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: InterfaceCustomer Id 74 not found.
500: General error occurred."},"response":[]},{"name":"Get manual Interface CustomerTags","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","description":"Get manual Interface CustomerTags of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/5?generic=false
OUTPUT{
    InterfaceCustomerTags: [
        {
            id: 73,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4\",
            customerId: 2
        },
        {
            id: 74,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4.1\",
            customerId: 3
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Delete manual Interface CustomerTags","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","description":"Delete all manual Interface CustomerTags from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/6?generic=false\n

Response Messages:
200: 2 Interface Customers were deleted from deviceId 6.
400: Bad Request.
401: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Create generic Routes","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","description":"Create generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"mgmtId\": 1,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"mgmtId\": 2,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Update generic Routes","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"id\": 29,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"id\": 30,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","description":"Update generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"id\": 29,
        \"mgmtId\": 3,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"id\": 30,
        \"mgmtId\": 3,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Interface/Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get Cloud Internal Networks","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_internal_networks/{{id}}","description":"Returns the internal networks for the specified Cloud management id.
This API requires 'Super admin' privileges.

Parameters:
id: Cloud management id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_internal_networks/20
OUTPUT{
    \"network_list\":
    {
        \"count\": 3,
        \"total\": 3,
        \"network\":
        {
            \"ip\": \"10.27.122.20\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.60\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.4\",
            \"mask\": \"255.255.255.252\"
        }
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for NSX with id ID
401: Device ID specified is not supported
404: The specified device ID was not found
404: The specified device ID was not found in Topology"},"response":[]},{"name":"Synchronize the Topology model","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize","description":"Invoke of the Topology Model Synchronization.
full_sync=false - Builds the topology model from the information stored in the Tufin database.
full_sync=true - Retrieves the current data from devices and builds the topology model.
Default value for full_sync = false.

Parameters:
full_sync: Perform full sync [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize?full_sync=true

Response Messages:
200: The topology synchronization was invoked successfully.
401: Access is denied
500: Error Synchronizing Topology Model"},"response":[]},{"name":"Create Transparent Firewalls","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback0\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","description":"Create Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback0\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Device Id 23 not found.
500: General error occurred."},"response":[]},{"name":"Update Transparent Firewalls","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"id\" : 25,\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"id\" : 27,\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","description":"Update Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"id\" : 25,
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback2\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"id\" : 27,
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt2\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Device Id 23 not found.
500: General error occurred."},"response":[]},{"name":"Get topology network interfaces by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"mgmtId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_interfaces","description":"The returned interfaces are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
context: Global MSSP context [optional]
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=1&is_generic=true
"},"response":[]},{"name":"Get Specific topology cloud","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","description":"Returns the topology cloud data for the specified id.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the cloud resides.

Parameters:
id: Cloud id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/48
OUTPUT{
    \"topology_cloud\": {
        \"id\": 48,
        \"name\": \"Cloud 69.70.120.155\",
        \"domain\": 1,
        \"type\": \"NON_JOINED\",
        \"ip\": \"69.70.120.155\"
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/66
OUTPUT{
    \"topology_cloud\": {
        \"id\": 66,
        \"name\": \"Cloud 10.100.10.14\",
        \"domain\": 1,
        \"type\": \"JOINED\",
        \"members\": [
            {
                \"id\": 50,
                \"ip\": \"10.100.6.238\",
                \"name\": \"Cloud 10.100.6.238\"
            },
            {
                \"id\": 73,
                \"ip\": \"10.100.10.14\",
                \"name\": \"Cloud 10.100.10.14\"
            },
            {
                \"id\": 74,
                \"ip\": \"10.100.9.9\",
                \"name\": \"Cloud 10.100.9.9\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: No cloud was found for the provided ID"},"response":[]},{"name":"Update a cloud","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"new cloud\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","description":"Modify the name of a topology cloud, and add/remove members of a joined cloud.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain context of the joined cloud, and any members specified in the body.
To change the name of a topology cloud, enter a value in the name field of the body.
To add/remove members of a joined cloud, specify the action and specify the clouds in the members list of the body.
The action is used only if the body contains a members list. If a members list is provided but no actions is specified, then the default action is ‘add’.
When adding cloud members, clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
When removing cloud members, if only zero or one member remains in the joined cloud, it will be deleted from the Interactive Map.

Parameters:
id: cloud id
action: action [optional]
body: Cloud data

Usage Example
URLfor renaming of any cloud - https://192.168.1.1/securetrack/api/topology/clouds/436
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\"
    }
}


Usage Example
URLfor renaming and members updating of a joined cloud - https://192.168.1.1/securetrack/api/topology/clouds/436?action=remove
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
204: Cloud updated successfully
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: Cloud with id ID is a not joined cloud
412: Cloud id: cloudId does not belong to domain: Context
412: Provided clouds don't belongs to the same domain
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud
412: Member cloud with id ID cannot be removed - it is not a member of a joined cloud"},"response":[]},{"name":"Get Topology Synchronization status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize/status","description":"Returns the progress status of the Topology Model Synchronization.



Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize/status

Response Messages:
200: The topology synchronization was invoked successfully.
401: Access is denied
500: Error getting synchronize progress"},"response":[]},{"name":"Delete Join Cloud","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","description":"Delete Join Cloud by Id.

Parameters:
cloudId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/join/clouds/67\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Get Join Cloud","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","description":"Get Join Cloud by Id.

Parameters:
cloudId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds/67
OUTPUT{
    id: 67,
    name: \"Yami\",
    clouds: [
        1,
        2,
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Interface","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","description":"Get a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/212
OUTPUT{
    GenericInterface: {
        id: 212,
        mgmtId: 1,
        name: \"newApo5\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PAL\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Generic Interface Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Interface","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","description":"Delete a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/5\n

Response Messages:
204: No Content.
400: Bad Request.
401: Access is denied.
404: Generic Interface Not Found.
500: General error occurred."},"response":[]},{"name":"Create a joined topology cloud","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"optional new cloud name\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","description":"Create a new topology cloud in the Interactive Map by joining existing clouds together.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
The body must include at least two topology cloud ids that are on a single domain.
If the context parameter is not provided, then the API will use the context id of the first member of the members list in the body.
Clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
If the provided body does not specify a joined cloud name, the newly created topology cloud will be given the name of the first member of the members list in the body.


Parameters:
context: Global MSSP context [optional]
body: Cloud data

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"optional new cloud name\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
201: Joined cloud created successfully
401: Access is denied
401: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: You must provide 2 or more clouds
412: Cloud id: cloudId does not belong to domain: Context
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud"},"response":[]},{"name":"Get topology clouds","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","description":"Returns a list of the topology clouds for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology clouds that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
type: Required clouds type [optional]
name: Cloud name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
OUTPUT{
    \"topology_clouds\": {
        \"count\": 3,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"MEMBER\",
                \"ip\": \"10.100.6.238\"
            },
            {
                \"id\": 66,
                \"name\": \"Cloud 10.100.10.14\",
                \"domain\": 1,
                \"type\": \"JOINED\",
                \"members\": [
                    {
                        \"id\": 50,
                        \"ip\": \"10.100.6.238\",
                        \"name\": \"Cloud 10.100.6.238\"
                    },
                    {
                        \"id\": 73,
                        \"ip\": \"10.100.10.14\",
                        \"name\": \"Cloud 10.100.10.14\"
                    },
                    {
                        \"id\": 74,
                        \"ip\": \"10.100.9.9\",
                        \"name\": \"Cloud 10.100.9.9\"
                    }
                ]
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds?type=non-joined
OUTPUT{
    \"topology_clouds\": {
        \"count\": 2,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"10.100.6.238\"
            }
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined"},"response":[]},{"name":"Get path for specified traffic","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path","description":"Returns one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path?src=29.29.29.1&dst=25.25.25.1&service=Facebook,tcp:80
OUTPUT {
    \"path_calc_results\": {
        \"traffic_allowed\": false,
        \"device_info\": {
            \"id\": \"17\",
            \"name\": \"PA-VM-111.6 (Cluster)\",
            \"type\": \"mgmt\",
            \"vendor\": \"Palo Alto Networks\",
            \"incomingInterfaces\": {
                \"incomingVrf\": \"default\",
                \"ip\": \"29.29.29.1/255.255.255.252\",
                \"name\": \"tunnel.11\"
            },
            \"nextDevices\": {
                \"name\": \"DIRECTLY_CONNECTED\",
                \"routes\": {
                    \"outgoingInterfaceName\": \"ethernet1/5\",
                    \"outgoingVrf\": \"default\",
                    \"routeDestination\": \"25.25.25.1/255.255.255.0\"
                }
            },
            \"bindings\": {
                \"name\": \"\",
                \"rules\": [
                    {
                        \"action\": \"Accept\",
                        \"applications\": \"facebook\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 43,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    },
                    {
                        \"action\": \"Deny\",
                        \"applications\": \"Any\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 62,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    }
                ]
            }
        }
    }
}

"},"response":[]},{"name":"Delete generic device from Topology model","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","description":"Delete a generic device from the Topology model.
The ID must be for a valid generic device listed in the Topology Model.
If update update_topology = true, then the Topology model will be updated immediately after the device is deleted.
For maximum efficiency, if you are deleting multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.
Default value for update_topology = true.

Parameters:
id: Generic device id
update_topology: Synchronize And Update Topology [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/1

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/10?update_topology=false

Response Messages:
204: Generic Device deleted successfully.
400: Failed to delete generic device with id {}
404: A 'Generic Device' with the specified ID was not found"},"response":[]},{"name":"Update an existing generic device in the Topology model","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","description":"Modify an existing generic device by uploading a new configuration file and/or specifying a new name.
If name field is specified, the generic device will be renamed.
configuration_file is optional, if provided it must include a valid generic device configuration.
The specified path points to a file in the client machine.
If a generic device name is changed and a new configuration file is not provided, topology will not be synchronized (update_topology flag is ignored).
Default value for update_topology = true.
To save time when there are several consecutive api calls: For the last call, set update_topology = true (for all other calls, update_topology = false).
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
id: Generic device id
body: Generic device to be updated [optional]
configuration_file: Configuration File for generic device [optional]
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices/24

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"new_generic_device_name\"}};type=application/json' -F \"update_topology=false\" https://192.168.1.1/securetrack/api/generic_devices/72

Response Messages:
204: The generic device was updated successfully.
400: A new name or a new configuration file must be indicated in order to update generic device with id {}
400: Failed to update generic device with id {}
404: A 'Generic Device' with the specified ID was not found"},"response":[]},{"name":"Delete generic Routes","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","description":"Delete all generic Routes from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/mgmt/2\n

Response Messages:
200: 11 Generic Routes were deleted from mgmtId 2.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Routes","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","description":"Get generic Routes of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/mgmt/2
OUTPUT{
    GenericRoutes: [
    {
        id: 27,
        mgmtId: 2,
        destination: \"10.4.4.4\",
        mask: \"255.0.0.0\",
        interfaceName: \"\",
        nextHop: \"AA\",
        nextHopType: \"VR\",
        vrf: \"V102-YO\"
    },
    {
        id: 28,
        mgmtId: 2,
        destination: \"10.4.5.5\",
        mask: \"255.0.0.0\",
        interfaceName: \"eeee\",
        nextHop: \"\",
        nextHopType: \"IP\",
        vrf: \"V101-PA\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
401: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get most specific network interfaces from which a host IP is accessible","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"host"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/interfaces/last_hop","description":"Parameters:
context: Global MSSP context [optional]
host: IP address of device for a query

Usage Example
https://192.168.1.1/securetrack/api/devices/interfaces/last_hop?host=192.168.1.66
"},"response":[]},{"name":"Get topology generic VPN connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":{"raw":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic_vpns{device_id:(/device_id)?}","protocol":"https","host":["{{SecureTrack_IP}}"],"path":["securetrack","api","topology","generic_vpns{device_id:(","device_id)"],"query":[{"key":"}","value":null}]},"description":"Returns a list of the generic vpn connections in the Topology map, for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology generic vpn connections that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
is_generic: Get generic devices [optional]
device_id: Device id [optional]
name: VPN connection name (accepts '*', '?' as wildcards) [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns
OUTPUT{
    \"generic_vpns\": {
        \"count\": 3,
        \"total\": 3,
        \"generic_vpn\": [
            {
                \"device_id\": 222,
                \"generic\": false,
                \"id\": 3,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.155\",
                \"tunnel_src_ip\": \"84.200.6.1\",
                \"vpn_name\": \"Palo_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns?is_generic=true
OUTPUT{
    \"generic_vpns\": {
        \"count\": 2,
        \"total\": 2,
        \"generic_vpn\": [
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Response Messages:
401: Access is denied
401: Only users with ‘Super admin’ permissions can access Global domain map
401: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined"},"response":[]},{"name":"Get Specific topology subnet","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets/{{id}}","description":"Returns the subnet for the specified id, including information regarding attached devices and join candidates.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the subnet resides.

Parameters:
id: Subnet id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets/20
OUTPUT{
    \"subnet\": {
        \"id\": 18,
        \"name\": \"90.0.0.0/24\",
        \"ip\": \"90.0.0.0\",
        \"mask\": \"255.255.255.0\",
        \"attached_devices\": {
            \"attached_device\": [
                {
                    \"is_generic\": false,
                    \"id\": 10,
                    \"name\": \"srx\",
                    \"interface_id\": 4,
                    \"interface_name\": \"eth0\",
                    \"interface_ip\": \"90.0.0.1\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 13,
                    \"name\": \"ZBFW\",
                    \"interface_id\": 5,
                    \"interface_name\": \"eth1\",
                    \"interface_ip\": \"90.0.0.124\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 85,
                    \"name\": \"netscreen\",
                    \"interface_id\": 6,
                    \"interface_name\": \"eth2\",
                    \"interface_ip\": \"90.0.0.50\"
                }
            ]
        },
        \"join_candidates\": {
            \"join_candidate\": {
                \"is_generic\": false,
                \"id\": 72,
                \"name\": \"CP25\",
                \"interface_id\": 14,
                \"interface_name\": \"eth24/1\",
                \"interface_ip\": \"90.0.0.83\"
            }
        }
    }
}


Response Messages:
401: Access is denied
401: You do not have access permission to the domain for subnet with id ID
404: No subnet was found for the provided ID"},"response":[]}]},{"name":"Network Zone Manager - Patterns","item":[{"name":"Get a specific zone pattern entry for a specific zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t2\tsecurity_group_by_name\n\tThis is a comment\n\tWEB\n\t75\n\tZone_10_0_0_1\n\t\n\t\t
koko
\n\t\tbobo\n\t\t1\n\t\tDefault\n\t
\n
\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries/{{id}}","description":"Get a specific zone pattern entry for a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone entry.
id: Identifier of the zone pattern entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/75/pattern-entries/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entry>
    <id>2</id>    <type>security_group_by_name</type>
    <comment>This is a comment</comment>
    <pattern>WEB</pattern>
    <zone_id>75</zone_id>
    <zone_name>Zone_10_0_0_1</zone_name>
    <domain>
        <address>koko</address>
        <description>bobo</description>
        <id>1</id>
        <name>Default</name>
    </domain>
</pattern_match_entry>


Response Messages:
200: The zone pattern entry was successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified identifier was not found.
404: A zone pattern entry with the specified identifier was not found."},"response":[]},{"name":"Create a zone pattern entry in a specific zone","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t\n\t\t1\n\t\t2\n\t\t\n\t\t\t1\n\t\t\tDefault\n\t\t\n\t\tWEB\n\t\tsecurity_group_by_name\n\t\tThis is a comment\n\t\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries","description":"Create a zone pattern entry in a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone pattern entry.
body: The zone pattern entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<create_pattern_match_entry>
    <pattern_match_entry>
        <id>1</id>
        <zone_id>2</zone_id>
        <domain>
            <id>1</id>
            <name>Default</name>
        </domain>
        <pattern>WEB</pattern>
        <type>security_group_by_name</type>
        <comment>This is a comment</comment>
    </pattern_match_entry>
</create_pattern_match_entry>


Response Messages:
201: The zone pattern entry was created successfully.
401: User is not permitted to access the specified domain
400: Some of pattern entry parameters were invalid or missing
404: A zone with the specified identifier was not found."},"response":[]},{"name":"Get all pattern entries for specific zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t\n\t\t0\n\t\t2\n\t\t2\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEB\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEo\n\t\t\t2\n\t\t\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/pattern-entries","description":"Get the list of zone pattern entries for specific zones by identifiers

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the pattern entry results. [optional]
pattern: Filter by pattern string for the zone entry results. [optional]
name: Filter by zone name for the pattern entry results. [optional]
comment: Filter by comment for the pattern entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/1,2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entries_find_result>
    <paging_info>
        <start>0</start>
        <count>2</count>
        <total>2</total>
    </paging_info>
    <pattern_match_entries>
        <pattern_match_entry>
            <id>2</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEB</pattern>
            <zone_id>1</zone_id>
        </pattern_match_entry>
        <pattern_match_entry>
            <id>3</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEo</pattern>
            <zone_id>2</zone_id>
        </pattern_match_entry>
    </pattern_match_entries>
</pattern_match_entries_find_result>


Response Messages:
200: The zone pattern entries were successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]}]},{"name":"Network Zone Manager - Subnets","item":[{"name":"Get a specific zone entry","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_id"},{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"Get a specific zone entry by ID for a zone.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/123

Response Messages:
200: The zone entry was successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Delete zone entries","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_id"},{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"Delete existing zone entries.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/10

Response Messages:
200: The zone entry was deleted successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Create a zone entry","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
body: The zone entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
201: The zone entry was created successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get entries for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/entries","description":"Get the list of zone entries for a zone.

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the zone entry results. [optional]
name: Filter by name for the zone entry results. [optional]
ip: Filter by IP for the zone entry results. [optional]
netmask: Filter by netmask for the zone entry results. [optional]
prefix: Filter by prefix for the zone entry results. [optional]
comment: Filter by comment for the zone entry results. [optional]
group: Filter by device group for the zone entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries

Response Messages:
200: The zone entries were successfully retrieved.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Modify multiple existing zone entries","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entries\" : {\n\t\t\"zone_entry\": [\n\t\t\t{\n\t\t\t\t\"id\": 120,\n\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\"prefix\": 32,\n\t\t\t\t\"new_zone_id\": 85\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"id\": 139,\n\t\t\t\t\"ip\": \"1b98:c72:1f00:0001::\",\n\t\t\t\t\"prefix\": \"52\",\n\t\t\t\t\"new_zone_id\": 98\n\t\t\t}\n\t\t]\n}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","description":"For IPv4 entry provide IP and netmask/prefix.
For IPv6 provide IP and prefix only, netmask is not allowed.
new_zone_id is not optional, it may be the same as the present zoneId.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entries.
ids: The ID(s) of the zone entries to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/85,98/entries/120,139
BODY{
\"zone_entries\" : {
        \"zone_entry\": [
            {
                \"id\": 120,
                \"ip\": \"3.3.3.3\",
                \"prefix\": 32,
                \"new_zone_id\": 85
            },
            {
                \"id\": 139,
                \"ip\": \"1b98:c72:1f00:0001::\",
                \"prefix\": \"52\",
                \"new_zone_id\": 98
            }
        ]
}
}


Response Messages:
200: The zone entry was modified successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Modify a zone entry","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.
body: The modified zone entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
200: The zone entry was modified successfully.
401: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Modify a zone entry","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_ids"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","description":"Modify an existing zone entry.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entry.
ids: The ID(s) of the zone entries to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/entries/10,20

Response Messages:
200: The zone entry was deleted successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]}]},{"name":"Network Zone Manager - Zones","item":[{"name":"Add a zone as an ancestor to a zone","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"child_id"},{"value":null,"type":"text","key":"parent_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","description":"Add a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to add ancestors zone(s).
parent_ids: The ID(s) of the zones to add as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was added as an ancestor successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Remove a zone as an ancestor to a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"child_id"},{"value":null,"type":"text","key":"parent_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","description":"Remove a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to remove ancestors zone(s).
parent_ids: The ID(s) of the zones to remove as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was removed as an ancestor successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get ancestor zones for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/ancestors","description":"Get a list of ancestor zones for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for ancestor zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/123,234/ancestors

Response Messages:
200: The zone ancestors were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Create a zone","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\tDMZ\n\tAll DMZ addresses\n\tfalse\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Create a zone.

Parameters:
context: Global MSSP context. [optional]
body: The zone to add.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <name>DMZ</name>
    <comment>All DMZ addresses</comment>
    <shared>false</shared>
</zone>


Response Messages:
201: The zone was created successfully.
401: User is not permitted to access the specified domain
400: The zone parameters were invalid"},"response":[]},{"name":"Get all zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Gets a list of all zones.

Parameters:
context: Global MSSP context. [optional]
name: Filter by zone name for the zone results. [optional]
comment: Filter by zone comment for the zone results. [optional]
imported: List domains that imported zones. [optional]
includeInternet: Include the Internet zone. [optional]
includeImported: Include imported zones. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
200: The zones were retrieved successfully.
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Delete all zones","request":{"method":"DELETE","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Delete all existing zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
204: All zones were successfully deleted.
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Get shared zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/shared","description":"Get a list of shared zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/shared

Response Messages:
200: The list of shared zones was retrieved successfully.
401: User is not permitted to access the specified domain"},"response":[]},{"name":"Import a zone","request":{"method":"POST","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/import/{{ids}}","description":"Import a shared zone into the specified domain

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones to import. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/import/10,20

Response Messages:
200: The zone was imported successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Delete a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}","description":"Delete an existing zone.

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zone to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/1,2

Response Messages:
204: The specified zone was successfully deleted.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Map network elements to security zones","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t \n\t\t 10.8.8.0\n\t\t 255.255.255.0\n\t\t \n\t \n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_zones/","description":"This API maps each network element in the AccessRequestNetworkListDTO (such as IP address, IP address range, object, or group) to all matching Tufin security zones. If the network element is a group, then each zone also identifies all matching group members. The internet referral object can be included in the list, and will always map to the predefined Internet security zone. If the 'Any' element is included in the list it will map to all zones.
Note: if multi-domain mode is enabled, the API calls only checks zones that are in the “Default” domain.

Parameters:
body: AccessRequestNetworkListDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_zones
BODY<network_objects>
     <network_object xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"ip_network\">
         <network xsi:type=\"raw_network_subnet\">
         <ip>10.8.8.0</ip>
         <mask>255.255.255.0</mask>
         </network>
     </network_object>
</network_objects>


Response Messages:
200: Returns mapping of network elements to security zones
400: Access Request Network List is malformed.
401: Access is denied."},"response":[]},{"name":"Modify a zone","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t2\n\tDMZ\n\tAll DMZ hosts\n\tfalse\n\tfalse\n\tfalse\n\tfalse\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","description":"Modify an existing zone.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <id>2</id>
    <name>DMZ</name>
    <comment>All DMZ hosts</comment>
    <shared>false</shared>
    <internet>false</internet>
    <user_networks>false</user_networks>
    <unassociated_networks>false</unassociated_networks>
</zone>


Response Messages:
204: The specified zone was successfully modified.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
400: The zone parameters were invalid"},"response":[]},{"name":"Get a specific zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","description":"Get the zone with the specified ID.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to get.
imported: List domains that imported zones. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2

Response Messages:
200: The zone was retrieved successfully.
401: User is not permitted to access the specified domain
401: A zone with the specified ID does not exist."},"response":[]},{"name":"Get descendant zones for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/descendants","description":"Get a list of zones descended from the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for descendant zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/10,20/descendants

Response Messages:
200: The zone descendants were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get configuration usages for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/dependencies","description":"Get a list of configuration usages for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for configuration dependencies.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/dependencies

Response Messages:
200: The zone dependencies were retrieved successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Remove a zone as an descendants to a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"parent_id"},{"value":null,"type":"text","key":"child_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","description":"Remove a zone(s) as an descendants to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to remove descendant zone(s).
child_ids: The ID(s) of the zone to remove as a descendant.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was removed as an descendant successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Add a zone as a descendant to a zone","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"parent_id"},{"value":null,"type":"text","key":"child_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","description":"Add a zone(s) as a descendant to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to add descendant zone(s).
child_ids: The ID(s) of the zones to add as descendants.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was added as an descendant successfully.
401: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]}]},{"name":"Policies and Sub-Policies","item":[{"name":"Get sub-policies (bindings) by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/bindings","description":"Returns a list of all of the subpolicies (bindings) for a given revision.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Revision ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
"},"response":[]},{"name":"Get list of sub-policies (bindings) with input and/or output interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"supremum_version_id"},{"value":null,"type":"text","key":"inputInterfaceName"},{"value":null,"type":"text","key":"outputInterfaceName"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/binding_query","description":"Retrieve list of bindings of input and/or output interfaces

Parameters:
device_id: The unique identifier of target device
supremum_version_id: The unique identifier of target revision
inputInterfaceName: Input interface name
outputInterfaceName: Output interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/binding_query?supremum_version_id=785&inputInterfaceName=Any&outputInterfaceName=Any
"},"response":[]},{"name":"Get sub-policies (bindings) by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindings","description":"Returns a list of all of the subpolicies (bindings) for a given device.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Device ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
"},"response":[]},{"name":"Get policies by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/policies","description":"Fetches list of policies defined on a given device ID.
Supported devices: CheckPoint, Panorama Advanced, FortiManager Basic and Advanced, FMC and NSX.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/policies
"},"response":[]},{"name":"Get policies by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/policies","description":"Fetches list of policies defined on a given revision ID

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/policies
"},"response":[]},{"name":"Get rules by input and output interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/topology_interfaces","description":"Parameters:
device_id: The unique identifier of target device
inputInterfaceName: Input interface name [optional]
outputInterfaceName: Output interface name [optional]

Usage Example
https://192.168.1.1/securetrack/api/bindings/2/topology_interfaces?inputInterfaceName=ethernet1/1&outputInterfaceName=ethernet1/2
"},"response":[]}]},{"name":"Policy Analysis","item":[{"name":"Run Policy Analysis query","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_ids"},{"value":null,"type":"text","key":"sources"},{"value":null,"type":"text","key":"destinations"},{"value":null,"type":"text","key":"services"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/policy_analysis/query/matching_rules","description":"Parameters:
device_ids: Device ids
sources: Source list
destinations: Destination list
services: Service list
exclude_any: Exclude any in the specified, comma-separated fields of source, destination or service. For example: exclude_any = destination,service [optional]
action: Action [optional]

Usage Example
https://192.168.1.1/securetrack/api/policy_analysis/query/matching_rules?device_ids=41&sources=33.33.33.0:24,113.113.113.100&destinations=114.1.1.0:24&services=tcp:80&exclude_any=source,destination

Response Messages:
200: Returns request results.
400: Error in request syntax."},"response":[]}]},{"name":"Policy Browser (formerly Rule Documentation)","item":[{"name":"Get specific rule documentation","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Fetches rule documentation for a single rule given by revision ID and rule ID.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the requested rule

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16373/documentation
"},"response":[]},{"name":"Modify specific rule documentation","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 172\n\t\t 789111\n\t \n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Modify rule documentation for a single rule identified by revision ID and rule ID.
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If no rule documentation exists for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If rule documentation already exists for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.
Record set entries that are automatically created or calculated, for example automatic mapping to a SecureChange ticket, cannot be modified.
The following fields are automatically calculated, and cannot be modified:
Permissiveness, Violations, Last Hit, Last Modified, Shadowing Status, Certification Status, Certification Date, Certification Expiration Date, Application Name, Application Owner

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the changed rule
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>172</id>
         <ticketCr>789111</ticketCr>
     </record_set>
</rule_documentation>

"},"response":[]},{"name":"Delete specific rule documentation","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Delete rule documentation for a single rule given by revision ID and rule ID.
If the rule has automatic mapping to a ticket, the record is not deleted.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Rule id

Usage Example
https://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
"},"response":[]},{"name":"Modify specific rule documentation","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 173\n\t\t 789112\n\t \n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Modify rule documentation for a single rule given by device ID and rule ID
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If there is no existing rule documentation for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If there is existing rule documentation for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>173</id>
         <ticketCr>789112</ticketCr>
     </record_set>
</rule_documentation>

"},"response":[]},{"name":"Get specific rule documentation","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Fetches rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16373/documentation
"},"response":[]},{"name":"Delete specific rule documentation","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Delete rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
"},"response":[]}]},{"name":"Policy Optimization","item":[{"name":"Get the specific objects or rules identified for the cleanup results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"cleanup_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/instances","description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/instances
"},"response":[]},{"name":"Get cleanups results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup
"},"response":[]},{"name":"Get cleanups by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"code"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/cleanups","description":"Fetches set of Cleanup calculation results for a device given by ID.
Only fully shadowed rules (cleanup code C01) are supported.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
code: Cleanup category code
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query result allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/cleanups?code=C01
"},"response":[]},{"name":"Get shadowing rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"shadowed_uids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/shadowing_rules","description":"Find shadowing rules for given shadowed rules of a specific device

Parameters:
device_id: Device ID
shadowed_uids: UIDs of shadowed rules separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/31/shadowing_rules?shadowed_uids=78786a0d-b9cc-478e-b7a2-dea953c976c7
"},"response":[]},{"name":"Get devices in risk results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"risk_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/devices","description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id

Usage Example
https://192.168.1.1/securetrack/api/risk/1/devices
"},"response":[]},{"name":"Get risks results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk
"},"response":[]},{"name":"Get the specific objects or rules identified for the risk results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"risk_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/instances","description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk/1/instances
"},"response":[]},{"name":"Get devices in cleanup results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"cleanup_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/devices","description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/devices
"},"response":[]}]},{"name":"Revisions","item":[{"name":"Get specific revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revId}}","description":"Fetches a revision specified by revision Id.
To get revId for this API, use the 'id' property of RevisionDTO that is returned by 'Get revisions by device' or 'Get latest revision by device' APIs

Parameters:
context: Global MSSP context [optional]
revId: Id of fetched revision

Usage Example
https://192.168.1.1/securetrack/api/revisions/785
"},"response":[]},{"name":"Get latest revision by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/latest_revision","description":"Fetches latest revision for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/105/latest_revision
"},"response":[]},{"name":"Get revisions by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/revisions","description":"Fetches revisions for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/105/revisions
"},"response":[]}]},{"name":"Rule Usage","item":[{"name":"Get last hit for a specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"rule_uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find/{{device_id}}/{{rule_uid}}","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.
The rule_uid is the value from the uid field returned by the /rules API: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Parameters:
device_id: device_id
rule_uid: rule_uid

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find/20/ea9db13e-d058-45c6-a2f0-cd731027c22b
"},"response":[]},{"name":"Get last hits for all rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find_all/{{device_id}}","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.

Parameters:
device_id: device id

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find_all/20
"},"response":[]}]},{"name":"Security Rules","item":[{"name":"Get a specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ruleId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rules/{{ruleId}}","description":"Parameters:
ruleId: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/rules/60
"},"response":[]},{"name":"Get rule count per device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API will return a list of all the devices, the devices that has rules that match the search criteria will have rule_count that is bigger than 0

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=ICMP application:facebook

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT{
    \"device_list\":{
        \"device\":[
            {
                \"device_id\":512,
                \"revision_id\":6864,
                \"rule_count\":1
            },
            {
                \"device_id\":59,
                \"revision_id\":543,
                \"rule_count\":0
            }
        ]
    }
}

"},"response":[]},{"name":"Get rules by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules","description":"Returns a list of all of the security rules for the specified revision.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.


Parameters:
context: Global MSSP context [optional]
id: Revision id
policyId: Policy id [optional]
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]
with_zb: Include zone-based rules [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]
is_alternate_order: OrderBy alternate order, for display Aci rules by contracts [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?subpolicy_name=layer1&is_global=true
"},"response":[]},{"name":"Get rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules","description":"Returns a list of all of the security rules for the specified device.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.


Parameters:
context: Global MSSP context [optional]
id: Device ID
policyId: Policy ID [optional]
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Show rules grouping criteria. Can be set only to \"bindings\". Output will be grouped by bindings and section header for Check Point devices, ACL for Cisco devices, and Zones for Juniper, Palo Alto, and Fortinet device [optional]
with_zb: Include zone based rules, values can be 'true' or 'false' [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?subpolicy_name=layer1&is_global=true
"},"response":[]},{"name":"Get specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/rules/{{ids}}","description":"Returns a list of rules by revision ID, rule IDs and additional criteria

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \\\"documentation\\\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \\\"bindings\\\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16370
"},"response":[]},{"name":"Create a CSV file for rules search results","request":{"method":"GET","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/export","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is : for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API exports the results data as a CSV file in the SecureTrack Reports Repository.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export?search_text=shadowed:true
"},"response":[]},{"name":"Find rules","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/{{device_id}}","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.To get more information regarding objects included in the returned rules (like src_network or dst_network) use their uid, as the objects’ ID might change.
\n By default, if there are less than 3,000 rules - the API will return all the rules.\nIn case there are more than 3,000 rules the API will return an error code 413 with the error message “There are more than 3000 rules, you must use pagination”

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
device_id: Device id
start: The starting rule to include in the returned results [optional]
count: Number of rules to include in the results [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/31?search_text=source:Sales_192.168.2.60 fromzone:sales tozone:External

Usage Example
https://192.168.1.1/securetrack/api/rule_search/20?search_text=Mobile Access hascomment:false

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=web_server&start=0&count=10

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search/59?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT {
    \"rules\":{
        \"count\":1,
        \"total\":1,
        \"rule\":{
            \"@xsi.type\":\"securityRuleDTO\",
            \"id\":21,
            \"cp_uid\":\"\",
            \"uid\":\"{9259f6ee-47a0-4996-a214-ab7edc14a916}\",
            \"order\":2,
            \"binding\":{
                \"default\":true,
                \"policy\":{
                    \"@xsi.type\":\"managementDomainPolicyDTO\",
                    \"id\":2,
                    \"name\":\"Standard\",
                    \"installable_targets\":\"\"
                },
                \"rule_count\":19,
                \"security_rule_count\":19,
                \"uid\":\"{00-FACED0-00}\"
                },
            \"acceleration_breaker\":false,
            \"action\":\"Accept\",
            \"application\":{
                \"id\":4735,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
            },
            \"authentication_rule\":false,
            \"comment\":\"DO NOT DELETE OR EDIT\",
            \"dst_network\":{
                \"id\":39,
                \"display_name\":\"Net_10.110.65.0\",
                \"name\":\"Net_10.110.65.0\"
                \"uid\":\"{1290f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_networks_negated\":false,
            \"dst_service\":{
                \"id\":7420,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
                \"uid\":\"{2904f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_services_negated\":false,
            \"dst_zone\":\"any\",
            \"disabled\":false,
            \"external\":false,
            \"implicit\":false,
            \"dst_zone_any\":true,
            \"src_zone_any\":true,
            \"name\":\"Accept SSHG\",
            \"option\":\"LOG_SESSION\",
            \"documentation\":{
                \"permissiveness_level\":\"LOW\",
                \"shadowed\":\"Not shadowed\",
                \"last_modified\":\"Today\",
                \"last_hit\":\"N/A\",
                \"violations\":\"\"
            },
            \"rule_location\":\"Shared\",
            \"rule_location_display\":\"Shared - Pre Rule\",
            \"rule_number\":2,
            \"rule_type\":\"universal\",
            \"src_zone\":\"any\",
            \"src_network\":{
                \"id\":38,
                \"display_name\":\"Net_10.110.64.0\",
                \"name\":\"Net_10.110.64.0\"
                \"uid\":\"{4934f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"src_networks_negated\":false,
            \"src_services_negated\":false,
            \"track\":{
                \"level\":\"LOG\"
            },
            \"type\":\"rule\",
            \"users\":{
                \"id\":5,
                \"display_name\":\"tufin\\\\regina\",
                \"name\":\"tufin\\\\regina@ldap\"
            }
        }
    }
}


Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid
413: Max supported count is 3000
413: There are more than 3000 rules, you must use pagination"},"response":[]},{"name":"Get specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/rules/{{ids}}","description":"Returns a list of rules by device ID, rule IDs and additional criteria.
Note: This API retrieves the information from the latest revision.


Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Rule IDs
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16370
"},"response":[]}]},{"name":"Services and Ports","item":[{"name":"Get services by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/services","description":"Fetches list of service objects defined in revision given by revision ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric betweenm 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/785/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

"},"response":[]},{"name":"Get rules containing specified service object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/rules","description":"Returns the security rules that contain the specified service object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.
include_groups: You can add \"include_groups\" to find rules that include the service object and rules that include the groups that include the service object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/65078/rules?include_groups=true
"},"response":[]},{"name":"Get specific service","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/services/{{ids}}","description":"Fetches list of specific service objects defined in revision given by revision ID and specified by their IDs

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/services/959888
"},"response":[]},{"name":"Get service groups containing specified service objects","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/groups","description":"Returns groups that contain the specified service objects


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.

Usage Example
https://192.168.1.1/securetrack/api/services/69577/groups
"},"response":[]},{"name":"Get specific service","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/services/{{ids}}","description":"Fetches list of specific service objects defined in device given by device ID and specified by their IDs.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Service object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/services/959888,959966
"},"response":[]},{"name":"Get services by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/services","description":"Fetches list of service objects defined on device given by device ID.
The default value for get_total is false. For APIF calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric between 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

"},"response":[]},{"name":"Get services objects matching specified criteria","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"services\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"service:\": {\n\t\t\t\"id\": 169197,\n\t\t\t\"name\": \"tcp_10\",\n\t\t\t\"display_name\": \"tcp_10\",\n\t\t\t\"class_name\": \"access_role\",\n\t\t\t\"global\": false,\n\t\t\t\"device_id\": 158,\n\t\t\t\"comment\": \"\",\n\t\t\t\"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",\n\t\t\t\"implicit\": false,\n\t\t\t\"max\": false,\n\t\t\t\"min\": false,\n\t\t\t\"protocol\": 6,\n\t\t\t\"timeout\": \"\",\n\t\t\t\"type\": \"tcp_service\",\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/search","description":"You can search for service objects where the name or comment fields have a specified text string,
or you can search for service objects that have an Port or protocol that matches,
or you can search for service objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns service objects where the name or comment fields have a specified text string. \n“protocol” filter returns service objects that have a protocol that matches specified IP protocol number.\n“port” filter returns service objects that have a port that matches specified port number.\n “uid“ filter returns service objects with the specified uid.\n If no filter is specified, the “text” filter is used.
device_id: Returns service objects belonging to the specified device_id. [optional]
name: (For “text” filter) You can specify \"name\" to find service objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find service objects with the specified text in the comment field. [optional]
protocol: Specify Protocolto find service objects that have the specified IP Protocol. [optional]
port: Specify Portto find service objects that have the specified Port. [optional]
uid: (for “uid“ filter) Returns service objects with the specified uid. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=protocol&protocol=6&device_id=68

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=port&port=80

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
URLhttps://192.168.1.1/securetrack/api/services/search?filter=text&name=tcp_10
BODY{
    \"services\": {
        \"count\": 1,
        \"total\": 1,
        \"service:\": {
            \"id\": 169197,
            \"name\": \"tcp_10\",
            \"display_name\": \"tcp_10\",
            \"class_name\": \"access_role\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"max\": false,
            \"min\": false,
            \"protocol\": 6,
            \"timeout\": \"\",
            \"type\": \"tcp_service\",
            }
        }
    }
}

"},"response":[]}]},{"name":"Time Objects","item":[{"name":"Get specific time object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/time_objects/{{ids}}","description":"Fetches list of time objects by revision ID and rule ID

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Rule IDs

Usage Example
https://192.168.1.1/securetrack/api/revisions/7/time_objects/9
"},"response":[]},{"name":"Get time objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/time_objects","description":"Returns the time objects used in the specified device.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Starting page for query allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/time_objects
"},"response":[]},{"name":"Get time objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/time_objects","description":"Returns the time objects used in the specified revision.

Parameters:
context: Global MSSP context [optional]
id: Revision ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/time_objects
"},"response":[]}]},{"name":"Traffic Policy Matcher","item":[{"name":"Get policy relevance metrics for traffic","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"relevance_metrics\": {\n\t\t\"source_ips\": {\n\t\t\t\"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"dest_ips\": {\n\t\t\t\"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"targets\": {\n\t\t\t\"target\": [4, 10]\n\t\t}\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/traffic_policy/","description":"The response lists all the relevant security groups, tags, relevant instances, and count of unrelated instances for each Amazon VPC in the specified traffic path.
A relevant security group contains at least one instance including either the source or destination IP address.
An unrelated instance is included in the security group but not part of the specified traffic path.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is used only if MSSP mode is enabled. If MSSP mode is disabled context is ignored.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
body: Relevance metrics request

Usage Example
URLhttps://192.168.1.1/securetrack/api/traffic_policy
BODY{
    \"relevance_metrics\": {
        \"source_ips\": {
            \"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]
        },
        \"dest_ips\": {
            \"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]
        },
        \"targets\": {
            \"target\": [4, 10]
        }
    }
}


Response Messages:
200: Successful
401: Insufficient user permissions
404: Device not found
400: Invalid parameters"},"response":[]}]},{"name":"Unified Security Policy - Access Request Violations","item":[{"name":"Start a task to calculate violations for an access request","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task","description":"Create a calculation task to find access requests violations.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
body [optional]
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request uses resources from multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/task?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
202: Access request violations task was accepted.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination)
400: No network source were specified.
400: No network destination were specified.
401: Access is denied.
503: Access request violations task was rejected."},"response":[]},{"name":"Get violation task results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/result/{{taskId}}","description":"Get result of access requests violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task results were received.
401: Access is denied.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet."},"response":[]},{"name":"Cancel violation task","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task/{{taskId}}","description":"Delete an access request violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/task/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Access request violations task has been aborted successfully.
401: Access is denied.
404: Access request violations task was not found."},"response":[]},{"name":"Get violation task status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/status/{{taskId}}","description":"Get access requests violations task status.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task status was received.
401: Access is denied.
404: Access request violations task status was not found."},"response":[]},{"name":"Get violations for an access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/sync","description":"Calculate the violations for the given access request.
Note: this API may take a while to complete.
See the asynchronous API /violations/access_request/task as an alternative.

Parameters:
body: AccessRequestListDTO
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request supports multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/sync?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
200: Access request violations were calculated.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination).
401: Access is denied."},"response":[]}]},{"name":"Unified Security Policy - Alerts","item":[{"name":"Delete alerts by ids","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{ids}}","description":"Delete specified alerts by IDs
To delete multiple alert_ids, use a comma between each ID

Parameters:
context: Delete alerts in the specified domain ID. [optional]
ids: The alert Ids for deletion

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/87

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/86,87,88

Response Messages:
200:
401: Security Policy Alert Ids: :|'alert ids'| don't exist"},"response":[]},{"name":"Get a specific alert","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","description":"Returns a specified alert.
If the alert_id does not exist, an error message is returned.

Parameters:
context: MSSP context [optional]
id: The alert Id

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/1

Response Messages:
401: Alert ID does not exist"},"response":[]},{"name":"Update an alert","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": \"moshe\"\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","description":"Update an alert for unified security policies.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
id: The alert ID for updating [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts/1
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": \"moshe\"
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
204: Alert ID: 'alertId' was updated successfully
404: Alert ID: 'alertId' does not exist
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
401: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain"},"response":[]},{"name":"Get alerts","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"start"},{"value":null,"type":"text","key":"count"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","description":"Returns a list of all alerts. If an empty list is returned, it implies that there are no configured alerts for that context.
You must set start and count parameters to limit the number of returned alerts.
Start is zero based - to start from the second rule use start=1, to get rules 51-60 use start=50 and count=10.

Parameters:
context: MSSP context [optional]
start: Returns the results beginning with the specified result number
count: Returns the specified number of results

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts?start=10&count=25

Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid"},"response":[]},{"name":"Create an alert","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": \"moshe\"\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","description":"Create an alert for unified security policies.
Returns location with the alert id to get the alert.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": \"moshe\"
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
201: Security policy alert id :|'alertId'| , name : 'alertName'
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
401: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain"},"response":[]}]},{"name":"Unified Security Policy - Cloud Tag Policy","item":[{"name":"Create a cloud tag policy","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":" {\n\t\"policy_name\": \"Production-VPC-Tag-Policy\",\n\t\"policy_description\": \"Instances tags in production\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_financial_tags\",\n\t\t\t\"requirement_severity\": \"HIGH\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Budget\"\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"requirement_type\": \"valid_values\",\n\t\t\t\"requirement_name\": \"budget_valid_values\",\n\t\t\t\"requirement_severity\": \"CRITICAL\",\n\t\t\t\"tag\": \"Budget\",\n\t\t\t\"values\": [\n\t\t\t\t\"Corporate\",\n\t\t\t\t\"Dev\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","description":"Create a new cloud tag policy. The policyName field specified in the TagPolicyDTO must be unique. Define the requirements enforced by the cloud tag policy in the requirements field of the TagPolicyDTO. The supported value for the \"requirement_type\" field are \"mandatory_tags\" and \"valid_values\"If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Create policy for the specified domain ID [optional]
body: cloud tag policy DTO [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
BODY {
    \"policy_name\": \"Production-VPC-Tag-Policy\",
    \"policy_description\": \"Instances tags in production\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_financial_tags\",
            \"requirement_severity\": \"HIGH\",
            \"tags\": [
                \"Owner\",
                \"Budget\"
            ]
        },
        {
            \"requirement_type\": \"valid_values\",
            \"requirement_name\": \"budget_valid_values\",
            \"requirement_severity\": \"CRITICAL\",
            \"tag\": \"Budget\",
            \"values\": [
                \"Corporate\",
                \"Dev\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
409: Policy name already exists"},"response":[]},{"name":"Get all cloud tag policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","description":"This API returns the details of all the tag policies.

Results are filtered according to user domain permissions and request context. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicy1\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                },
                {
                        \"policy_id\": \"tp-102\",
                        \"policy_name\": \"myPolicy2\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions"},"response":[]},{"name":"Replace a cloud tag policy","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Replace the cloud tag policy specified by policyID with the new policy attributes.

Use PATCH in order to partially modify a policy. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Replace policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}

"},"response":[]},{"name":"Get cloud tag policy","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"This API retrieves the details of the cloud tag policy specified by policyId.

User must have admin permissions to the policy affiliated domain. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicyName\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryTagsRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Modify a cloud tag policy","request":{"method":"PATCH","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Partially modify a cloud tag policy by stating the modified attributes. Providing requirements replaces the entire list.

Specifying an empty requirement list is not permitted. Modify some attributes of the cloud tag policy specified by policyID with the attributes provided. If one or more \"requirement\" objects is provided, the exsiting \"requirement\" objects will be deleted and replaced with the new objetcs. Specifying an empty requirement list is not permitted.If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Rename policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Delete cloud tag policy","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Delete the cloud tag policy specified by policyId.

If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Delete policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT {
        \"status\": \"OK\",
        \"policy_name\": \"myPolicyName\"
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Check if tags are compliant with cloud tag policies","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":" {\n\t\"type\": \"vm\",\n\t\"name\": \"CRM-FE\",\n\t\"os\": \"ubuntu14.4\",\n\t\"image\": \"AMI-12345\",\n\t\"tags\": {\n\t\t\"Role\": \"webserver\",\n\t\t\"Budget\": \"corporate\",\n\t\t\"Owner\": \"Steve.Smith\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violation_check/","description":"Check if the tags of a cloud resource are compliant with the specified cloud tag policy. Specify the tag policy to validate in the TagPolicyViolationsCheckRequestDTO. The tags of a cloud resource are specified as a json object with the attribute 'tags' at the root level. 'tags' attributes can be a list of tag names or a map including both the tag name and value. If no tags are specified or if the tag is specified incorrectly, The compliance check will treat the resource as if it has no tags. If no cloud tag policy violations are found the API returns an empty violations list.

Parameters:
context: Returns results for the specified domain ID [optional]
policy_external_id: Tag policy external identifier
body: Tag policy violation check request

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/violation_check?policy_external_id=policyId
BODY {
    \"type\": \"vm\",
    \"name\": \"CRM-FE\",
    \"os\": \"ubuntu14.4\",
    \"image\": \"AMI-12345\",
    \"tags\": {
        \"Role\": \"webserver\",
        \"Budget\": \"corporate\",
        \"Owner\": \"Steve.Smith\"
    }
}


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Get all cloud tag policy violations for a VPC","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"severity"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/tag_violations/","description":"Retrieve all cloud tag policy violations for the specified VPC and severity level.

Parameters:
context: Global MSSP context. [optional]
deviceId: The device ID for which to get violations
severity: Return only violations of this severity
resourceId: The id of the VM instance [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses \"count=100\". [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tag_violations?deviceId=123&severity=CRITICAL
OUTPUT<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<tag_policy_device_violations>
    <violating_resources_count>2</violating_resources_count>
    <device_name>Amazon Test VPC </device_name>
    <severity>critical</severity>
    <violating_resources>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Name' value 'email server' is not valid. Valid values are [R&D, HR]</violation_message>
                    <policy_id>tp-100</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>validValue_constraint2</requirement_name>
                    <requirement_severity>high</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"valid_values\">
                        <tag>Name</tag>
                        <valid_values>
                            <valid_value>R&D</valid_value>
                            <valid_value>HR</valid_value>
                        </valid_values>
                        <invalid_value>email server</invalid_value>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-abc12345</resource_id>
            <resource_name>email server</resource_name>
        </violating_resource>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Application' is missing</violation_message>
                    <policy_id>tp-105</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>mandatory_constraint1</requirement_name>
                    <requirement_severity>critical</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"mandatory_tags\">
                        <missing_tag>Application</missing_tag>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-12345678</resource_id>
            <resource_name>Violations tests server</resource_name>
        </violating_resource>
    </violating_resources>
</tag_policy_device_violations>


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: A device with the specified ID was not found"},"response":[]}]},{"name":"Unified Security Policy - Exceptions","item":[{"name":"Delete an exception","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","description":"Delete the specific unified security policy exceptions

Parameters:
exceptionId: The ID of the exception to delete.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
404: The security policy with the specified ID does not exist
401: User not permitted to access the specified domain."},"response":[]},{"name":"Get a specific exception","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","description":"Gets a specific exception for unified security policies.

Parameters:
exceptionId: The ID of the exception to get.
context: Global MSSP context [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
401: User not permitted to access the specified domain
404: A security policy exception with the specified ID was not found."},"response":[]},{"name":"Get matching rules task status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/status/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task status was received.
401: User not permitted to Security policy exceptions.
404: Matching rules task status was not found."},"response":[]},{"name":"Create an exception","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\tadmin\n\tst_user\n\t2015-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\t\n\t\t\n\t\t\tCreating USP exception for ticket 123\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.2\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tLAN\n\t\t\t\t\tcorporate security policy\n\t\t\t\t\tDMZ\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4321\n\t\t\t\t\t\ttcp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t1\n\t\t\t\t\t\t{5aa1c104-bd4d-4635-a281-b3a5442639ba}\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\thttp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t10\n\t\t\t\t\t\t20\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.1\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t2025-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\tadmin\n\t123\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","description":"Create an exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/exceptions
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<security_policy_exception>
    <approved_by>admin</approved_by>
    <created_by>st_user</created_by>
    <creation_date>2015-01-01</creation_date>
    <description>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</description>
    <exempted_traffic_list>
        <exempted_traffic>
            <comment>Creating USP exception for ticket 123</comment>
            <dest_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.2</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </dest_network_collection>
            <security_requirements>
                <zone_to_zone_security_requirement>
                    <from_zone>LAN</from_zone>
                    <policy_name>corporate security policy</policy_name>
                    <to_zone>DMZ</to_zone>
                </zone_to_zone_security_requirement>
            </security_requirements>
            <service_collection>
                <service_items>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"custom\">
                        <port>4321</port>
                        <protocol>tcp</protocol>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"device_service\">
                        <mgmt_id>1</mgmt_id>
                        <service_uid>{5aa1c104-bd4d-4635-a281-b3a5442639ba}</service_uid>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"predefined\">
                        <predefined_service_name>http</predefined_service_name>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"range_service\">
                        <minProtocol>10</minProtocol>
                        <maxProtocol>20</maxProtocol>
                    </service_item>
                </service_items>
            </service_collection>
            <source_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.1</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </source_network_collection>
        </exempted_traffic>
    </exempted_traffic_list>
    <expiration_date>2025-01-01</expiration_date>
    <name>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</name>
    <requested_by>admin</requested_by>
    <ticket_id>123</ticket_id>
</security_policy_exception>


Response Messages:
400: The specified network item is not valid.
400: The specified zone name does not exist.
400: The security policy with the specified name does not exist
400: The security policy 'created by' user is not valid.
400: The security policy with the specified name already exists.
401: User not permitted to access the specified domain."},"response":[]},{"name":"Get all exceptions","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","description":"Gets a list of all unified security policy exceptions.

Parameters:
context: Global MSSP context [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions

Response Messages:
401: User not permitted to access the specified domain"},"response":[]},{"name":"Start a task to calculate matching rules for an exception","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}/matching_rules/start","description":"Create a calculation task to find matching rules.
The results will be on the relevant devices for each access.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
exceptionId: Security policy Exception ID on which to run the API.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/1/matching_rules/start

Response Messages:
401: User not permitted to Security policy exceptions.
404: A security policy exception with the specified ID was not found."},"response":[]},{"name":"Get matching rules task results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/result/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task results were received.
401: User not permitted to Security policy exceptions.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet."},"response":[]},{"name":"Cancel Matching rules task","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Matching rules task has been aborted successfully.
401: User not permitted to Security policy exceptions.
404: Matching rules task was not found."},"response":[]}]},{"name":"Unified Security Policy - Security Zone Matrix","item":[{"name":"Set manual device mapping","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n \n Vlan_30\n \n \n 10\n add\n \n \n \n\n "},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/manual_mapping","description":"Add or remove a zone on a device interface

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID
body: InterfacesManualMappingsDTO

Usage Example
URLhttps://127.0.0.1/securetrack/api/security_policies/10/manual_mapping
BODY<interfaces_manual_mappings>
<interface_manual_mapping>
<interface_name>Vlan_30</interface_name>
<zones_user_actions>
<zone_user_action>
<zoneId>10</zoneId>
<action>add</action>
</zone_user_action>
</zones_user_actions>
</interface_manual_mapping>
</interfaces_manual_mappings>


Response Messages:
200: Successful
400: Invalid request
401: Insufficient user permissions
404: Not found error
404: User action not valid (only add/remove)
404: No interface with name for device with id
404: No zone with id
404: No revision for device with id
404: No device with ID
404: Access denied for device with ID
404: InterfacesManualMappingsDTO is empty
404: Error on updating security_policy_interface_zone_mapping_user_action table for device with ID"},"response":[]},{"name":"Delete unified security policy","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}","description":"Delete a Security Policy Matrix

Parameters:
context: Returns results for the specified domain ID. [optional]
id: The unique identifier of the security policy matrix to delete

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1
"},"response":[]},{"name":"Get global unified security policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/global","description":"Fetches the global security zone matrices defined under Unified Security Policy.



Usage Example
https://192.168.1.1/securetrack/api/security_policies/global

Response Messages:
401: User not permitted to access global security policies"},"response":[]},{"name":"Get unified security policy as CSV","request":{"method":"GET","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}/export","description":"Exports a Security Policy in CSV format

Parameters:
context: Returns results for the specified domain ID. [optional]
id: ID of the security policy. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1/export

Response Messages:
401: User not permitted to access the specified domain
404: Security Policy does not exist"},"response":[]},{"name":"Get unified security policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/","description":"Fetches the security zone matrices defined under Unified Security Policy.

Parameters:
context: Returns results for the specified domain ID. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies

Response Messages:
401: User not permitted to access the specified domain"},"response":[]}]},{"name":"Unified Security Policy - Violations","item":[{"name":"Get the amount of violating rules for the specified device.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/count","description":"Parameters:
deviceId: The device ID for which to get violations.

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/count

Response Messages:
200: The violation count was successfully retrieved
404: Device with id: <deviceId> doesn't exist"},"response":[]},{"name":"Get the violating rules for the specified device.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"severity"},{"value":null,"type":"text","key":"type"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/device_violations","description":"policyName is supported for management devices running in Advanced management mode.

Parameters:
deviceId: The device ID for which to get violations
policyName: Return only violations that match this policy [optional]
severity: Return only violations of this severity
type: Return only violations of this type

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/device_violations?policy=policy_name&type=SECURITY_POLICY&severity=MEDIUM

Response Messages:
200: The violations were successfully retrieved
400: The specified value for the violation severity is invalid
400: The specified value for the violation type is invalid
400: You cannot specify a policyName because the device is not running in Advanced management mode
404: A device with the specified ID was not found
404: A policy with the specified policyName was not found for this device"},"response":[]}]}]} \ No newline at end of file diff --git a/Postman Format v2/R20-1 postman collection/tufin.postman_environment b/Postman Format v2/R20-1 postman collection/tufin.postman_environment new file mode 100644 index 0000000..c031d2b --- /dev/null +++ b/Postman Format v2/R20-1 postman collection/tufin.postman_environment @@ -0,0 +1 @@ +{"name":"Tufin environment","values":[{"type":"text","key":"SecureApp_IP"},{"type":"text","key":"SecureChange_IP"},{"type":"text","key":"SecureTrack_IP"},{"type":"text","key":"applicationId"},{"type":"text","key":"applicationInterfaceId"},{"type":"text","key":"application_id"},{"type":"text","key":"application_pack_id"},{"type":"text","key":"assigneeId"},{"type":"text","key":"child_id"},{"type":"text","key":"child_ids"},{"type":"text","key":"cleanup_id"},{"type":"text","key":"cloudId"},{"type":"text","key":"cloud_id"},{"type":"text","key":"connectionId"},{"type":"text","key":"connectionInterfaceId"},{"type":"text","key":"connectionToApplicationId"},{"type":"text","key":"connection_id"},{"type":"text","key":"connection_to_application_pack_id"},{"type":"text","key":"customer_id"},{"type":"text","key":"deviceId"},{"type":"text","key":"device_id"},{"type":"text","key":"domainId"},{"type":"text","key":"exceptionId"},{"type":"text","key":"fieldId"},{"type":"text","key":"id"},{"type":"text","key":"ids"},{"type":"text","key":"inId"},{"type":"text","key":"instructionId"},{"type":"text","key":"interfaceCustomerId"},{"type":"text","key":"layer2DataId"},{"type":"text","key":"managementId"},{"type":"text","key":"mgmtId"},{"type":"text","key":"parent_id"},{"type":"text","key":"parent_ids"},{"type":"text","key":"policyId"},{"type":"text","key":"requestId"},{"type":"text","key":"revId"},{"type":"text","key":"revision_id"},{"type":"text","key":"risk_id"},{"type":"text","key":"routeId"},{"type":"text","key":"ruleId"},{"type":"text","key":"rule_id"},{"type":"text","key":"rule_uid"},{"type":"text","key":"serverId"},{"type":"text","key":"serviceId"},{"type":"text","key":"sourceApplicationId"},{"type":"text","key":"stepId"},{"type":"text","key":"tag_id"},{"type":"text","key":"targetApplicationId"},{"type":"text","key":"taskId"},{"type":"text","key":"task_id"},{"type":"text","key":"task_uid"},{"type":"text","key":"toStepId"},{"type":"text","key":"uid"},{"type":"text","key":"userId"},{"type":"text","key":"vpnId"},{"type":"text","key":"zone_id"},{"type":"text","key":"zone_ids"}]} \ No newline at end of file diff --git a/Postman Format v2/R20-2 postman collection/securechangeworkflow_R20-2-HF2-v2.json b/Postman Format v2/R20-2 postman collection/securechangeworkflow_R20-2-HF2-v2.json new file mode 100644 index 0000000..a458c72 --- /dev/null +++ b/Postman Format v2/R20-2 postman collection/securechangeworkflow_R20-2-HF2-v2.json @@ -0,0 +1 @@ +{"info":{"_postman_id":"2","name":"Tufin Tufin SecureChange/SecureApp R20-2-HF2","description":"Tufin Orchestration Suite - Tufin SecureChange/SecureApp APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securechangeworkflow/apidoc","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json"},"item":[{"name":"Access Portal","item":[{"name":"Retrieve existing application access requests","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Create application access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t1\n\t1.1.1.1\n\tRequest to join the WebServers server group\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Parameters:
applicationId: The unique identifier of the application
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_request>
    <server_group_id>1</server_group_id>
    <server_ip>1.1.1.1</server_ip>
    <comment>Request to join the WebServers server group</comment>
</application_access_request>


Response Messages:
201: Application access request was submitted.
400: The application was already deleted.
400: Server id cannot be empty.
400: Hostname or IP cannot be empty.
400: The provided server does not exist in application.
400: The provided server is not allowed to access.
400: Request already created
400: Requester cannot be null
400: Group cannot be empty
400: Invalid ip
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Update application access requests","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tAPPROVE\n\t\n\t\n\t\t2\n\t\tREJECT\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
body: application access requests

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_requests>
    <application_access_request>
        <id>1</id>
        <action>APPROVE</action>
    </application_access_request>
    <application_access_request>
        <id>2</id>
        <action>REJECT</action>
    </application_access_request>
</application_access_requests>


Response Messages:
200: Application access requests were updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Update an application access request","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tAPPROVE\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1
BODY<application_access_request>
    <action>APPROVE</action>
</application_access_request>


Response Messages:
200: Application access request was updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve an existing application access request by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"requestId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","description":"Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Access request with id ID was not found in application with id ID"},"response":[]}]},{"name":"Application Connections","item":[{"name":"Retrieve existing connections, with extended resources information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_extended","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]
start: Return results starting only from the specified index; 0-based index; default value = 0 [optional]
count: Return the specified number of results. Returns all results if no value specified [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name&start=50&count=100

Response Messages:
400: Start value cannot be a negative number.
400: Count value must be greater than 0.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied.
404: There is no application with the specified ID.
404: There are no connections with the name NAME."},"response":[]},{"name":"Create a ticket to repair a connection","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tRepair connection 2\n\tu1\n\tNormal\n\t\n\t\tWorkflow with topology\n\t\n\t\n\t\t\n\t\t\tOpen request\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBusiness Justification\n\t\t\t\t\t\t\tI need access to ftp \n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tProject Number\n\t\t\t\t\t\t\tCR124560\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tHyperlink\n\t\t\t\t\t\t\thttp://192.168.1.1/ticket\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tChange Window\n\t\t\t\t\t\t\tMonday\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tmanager email\n\t\t\t\t\t\t\tmanager@tufin.com\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connections/{{connection_id}}/repair","description":"Parameters:
application_id: The application ID
connection_id: The connection ID
body: Ticket

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/2/repair
BODY<ticket>
    <subject>Repair connection 2</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <workflow>
        <name>Workflow with topology</name>
    </workflow>
    <steps>
        <step>
            <name>Open request</name>
            <tasks>
                <task>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                            <name>Business Justification</name>
                            <text>I need access to ftp </text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                            <name>Project Number</name>
                            <text>CR124560</text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                            <name>Hyperlink</name>
                            <url>http://192.168.1.1/ticket</url>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                            <name>Change Window</name>
                            <selection>Monday</selection>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                            <name>manager email</name>
                            <text>manager@tufin.com</text>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Response Messages:
201: Ticket was created.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set.
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: Expiration field is required.
400: Submit ticket enabled only with the first step.
400: First step can be only with one task.
400: The specified workflow does not contain an access request field in the first step.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
403: Logged in user: NAME do not have permission to perform on behalf actions.
403: You are not a participant in the first step of this workflow.
403: Access is denied.
403: To create a ticket you must purchase a valid SecureChange license.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Cannot create a ticket to repair this connection because the connection status is not disconnected.
403: Cannot create a ticket to repair this connection because the connection was edited but a ticket has not been created yet.
403: Cannot create a ticket to repair this connection because there are other open tickets for an application that includes this connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Retrieve an existing connection by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Update a connection","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":" \n\t Connection A\n\t Connection A comment\n\t \n\t\t \n\t\t\t 2\n\t\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n "},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection
body: Connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections/1
BODY <connection>
     <name>Connection A</name>
     <comment>Connection A comment</comment>
     <sources>
         <source>
             <id>2</id>
         </source>
         <source>
             <id>3</id>
         </source>
     </sources>
     <services>
         <service>
             <id>1</id>
         </service>
     </services>
     <destinations>
         <destination>
             <id>1</id>
         </destination>
     </destinations>
</connection>


Response Messages:
200: Connection was modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application that contains the server ID
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Delete connection","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
200: Connection was deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Update connections","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 1\n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t 2\n\t\t Connection B\n\t \n\t \n\t\t 3\n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
body: List of connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <id>1</id>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <id>2</id>
         <name>Connection B</name>
     </connection>
     <connection>
         <id>3</id>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application that contains the server ID
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections?name=Connection Name

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no connections with the name NAME."},"response":[]},{"name":"Create connections","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t Connection B\n\t \n\t \n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
body: The list of the connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <name>Connection B</name>
     </connection>
     <connection>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were created.
201: Connection was created.
400: There are no items to add.
400: You cannot add to application NAME because it was decommissioned.
400: Connection name already exists.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Identities","item":[{"name":"Fetches application identities","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/application_identities","description":"Fetches the list of pre-defined application identities (like facebook) that can be used in a connection.

Parameters:
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities?name=facebook

Response Messages:
404: There are no application identities with the name NAME.
403: Access is denied."},"response":[]}]},{"name":"Application Interfaces","item":[{"name":"Retrieve existing interface connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
name: The name of the interface connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections?name=Connection 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no connection interfaces with the name NAME.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Create interface connections","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tConnection 1\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\t\n\t\t\t\tFacebook\n\t\t\t\n\t\t\n\t\tNew connection\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
body: The interface connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections
BODY<interface_connections>
    <interface_connection>
        <name>Connection 1</name>
        <sources>
            <source>
                <id>3</id>
            </source>
        </sources>
        <services>
            <service>
                <id>3</id>
            </service>
            <service>
                <id>Facebook</id>
            </service>
        </services>
        <comment>New connection</comment>
    </interface_connection>
</interface_connections>


Response Messages:
200: Interface connections were created.
201: Interface connection was created.
400: There are no items to add.
400: Cannot create interface connection without a name.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
403: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve an existing interface connection by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"},{"value":null,"type":"text","key":"connectionInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Delete interface connection","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"},{"value":null,"type":"text","key":"connectionInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
200: Interface connection was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Update an interface connection","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\t\n\t\t\n\t\t\t19\n\t\t\n\t\n\t\n\t\t\n\t\t\t9\n\t\t\n\t\n\tUpdated connection\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection
body: The interface connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1
BODY<interface_connection>
    <name>Updated name</name>
    <sources>
        <source>
            <id>19</id>
        </source>
    </sources>
    <services>
        <service>
            <id>9</id>
        </service>
    </services>
    <comment>Updated connection</comment>
</interface_connection>


Response Messages:
200: Interface connection was modified.
400: Interface connection name cannot be empty.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
403: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve an existing application interface by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Update an application interface","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tupdated name\n\tUpdated application interface\n\ttrue\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Update the application interface properties. If is_published is set to true, the application interface is published for use by other users.

Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of The application interface
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1
BODY<application_interface>
    <name>updated name</name>
    <comment>Updated application interface</comment>
    <is_published>true</is_published>
</application_interface>


Response Messages:
200: Application interface was modified.
400: Application interface is not complete for publish.
400: Name cannot be empty.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Delete application interface","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
200: Application interface was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Delete connection to application","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionToApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
200: Connection to application was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Update a connection to application","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated connection to application\n\t\n\t\t\n\t\t\t4\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1
BODY<connection_to_application>
    <name>Updated name</name>
    <comment>Updated connection to application</comment>
    <servers>
        <server>
            <id>4</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
200: Connection to application was modified.
400: Name cannot be empty.
400: Name already exists.
400: Reference to source/destination with ID is invalid.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve an existing connection to application by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionToApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve existing connections to application","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection to application [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications?name=Connection to Application 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Create connection to application","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tConnection to Application 1\n\tNew connection to application\n\t1\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","description":"Create a connection from this application to an application interface.

Parameters:
applicationId: The unique identifier of the application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications
BODY<connection_to_application>
    <name>Connection to Application 1</name>
    <comment>New connection to application</comment>
    <application_interface_id>1</application_interface_id>
    <servers>
        <server>
            <id>3</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
201: Connection to application was created.
400: You cannot add to application NAME because it was decommissioned.
400: The selected interface cannot be used more than once in the application.
400: Name cannot be empty.
400: Cannot create from local interface.
400: ApplicationInterface didn't got published.
400: Name already exists.
400: Cannot create connection to application without servers, there should be at least one server.
400: Reference to source/destination with ID is invalid.
400: You can use only interface from the same customer.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found."},"response":[]},{"name":"Create application interface","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tInterface to Application 1\n\tNew application interface\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","description":"Parameters:
applicationId: The unique identifier of the application
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces
BODY<application_interface>
    <name>Interface to Application 1</name>
    <comment>New application interface</comment>
</application_interface>


Response Messages:
201: Application interface was created.
400: You cannot add to application NAME because it was decommissioned.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing application interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","description":"To improve response time, set 'calculateIsPublished = false' to avoid calculating 'is_published'.

Parameters:
applicationId: The unique identifier of the application
name: The name of the application interface [optional]
calculateIsPublished: Should calculate is_published value [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces?name=Interface to Application 1

Response Messages:
400: There is no application with the specified ID.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no application interfaces with the name NAME."},"response":[]}]},{"name":"Application Migration","item":[{"name":"Copy application servers and connections to another application.","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}","description":"This API can be used to:
1. Create applications based on a blueprint (template).
2. Copy applications between environments (dev, test, prod).
3. Migrate applications between data-centers.

Before migrating make sure to map servers and connections to applications (if any exist).\nThis migration uses the configuration specified in the other API calls.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2

Response Messages:
200: Application was migrated.
400: Cannot migrate a decommissioned application.
400: Cannot migrate to a decommissioned application.
400: Cannot migrate an application to itself.
400: Cannot edit target DEVICE application.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
400: The source application has no connections to migrate.
409: You cannot migrate the application because not all servers are mapped.
409: You cannot migrate the application because not all connections to application are mapped.
409: You cannot migrate the application because one of the interfaces in the original application has been changed and has not been published."},"response":[]},{"name":"Retrieve server mappings for source and target applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
search_servers_type: Search server type [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping?search_servers_type=EXTERNAL

Response Messages:
400: Search migrated servers type parameter must be either internal, external or both.
400: Cannot get mappings between application to itself.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application with ID
403: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"Update server mappings for source and target applications","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t6\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","description":"Use id=-1 for target_network_object if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The server mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping
BODY<servers_mapping>
    <server_mapping>
        <source_network_object>
            <id>3</id>
        </source_network_object>
        <target_network_object>
            <id>4</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>5</id>
        </source_network_object>
        <target_network_object>
            <id>-1</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>6</id>
        </source_network_object>
    </server_mapping>
</servers_mapping>


Response Messages:
200: Server mappings were modified.
400: Source network object cannot be empty.
400: Source network object is not valid
400: Target network object is not valid
400: Source and target network objects must be internal or external both.
400: Cannot use DEVICE application resources as external network objects.
400: Source network object with ID must be used by any connection.
400: Cannot remove mapping of network object with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map to ANY network object.
400: Cannot map Internet network object.
400: Cannot map to Internet network object.
400: Target network object ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found."},"response":[]},{"name":"Update connection to application mappings for source and target applications","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","description":"Use id=-1 for target_application_interface if new mapping is “Not Needed”.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The interface instance mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping
BODY<connections_to_applications_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>1</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>4</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>2</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>-1</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>3</id>
        </source_connection_to_application>
    </connection_to_application_mapping>
</connections_to_applications_mapping>


Response Messages:
200: Connection to application mappings were modified.
400: Source interface instance cannot be empty.
400: Source interface instance object is not valid
400: Target application interface is not valid
400: Connection to application with ID: ID was not found.
400: Interface with ID: ID was not found.
400: Cannot remove mapping of instance with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map instance to interface with ID ID because the interface exists in target application.
400: Cannot map to duplicate application interfaces
400: Application interface didn't got published
400: Connection to application with id: ID must used by source application
400: You cannot map connection to application ID, because it is contained in a connection to application pack.
400: Application interface ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve connection to application mappings for source and target applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping

Response Messages:
400: Cannot get mappings between application to itself.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Packs","item":[{"name":"Retrieve an existing application pack by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
403: Access is denied
403: You do not have permission to access application pack with ID
404: Application pack with ID was not found for customer with ID."},"response":[]},{"name":"Update an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated application pack\n\t\n\t\t4\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\n\ttrue\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Update the application pack properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1
BODY<application_pack>
    <name>Updated name</name>
    <comment>Updated application pack</comment>
    <owner>
        <id>4</id>
    </owner>
    <editors>
        <editor>
            <id>3</id>
        </editor>
    </editors>
    <viewers>
        <viewer>
            <id>5</id>
        </viewer>
    </viewers>
    <is_published>true</is_published>
</application_pack>


Response Messages:
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
403: Access is denied
403: You do not have permission to access application that contains the interface ID
403: You do not have permissions to edit this application pack.
403: You do not have permissions to change the owner of application pack ID.
403: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Delete application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
200: Application pack wes deleted.
403: You do not have permissions to delete this application pack.
400: There is no application pack with the specified ID.
400: Customer with ID doesn't own an application pack with ID.
400: Application Pack ID cannot be deleted. It is in use by applications IDs."},"response":[]},{"name":"Remove application interfaces from application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"application_interface_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
application_interface_id: IDs of application interfaces to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces?application_interface_id=1&application_interface_id=2

Response Messages:
200: Application Interface was deleted.
403: Access is denied
403: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Application interface ID was not found in application pack ID."},"response":[]},{"name":"Update application interfaces and tag mapping","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","description":"Add application interfaces to application pack, and map a tag to the application interface. If a tag is not specified for the interface, the tag will be set to “No Tag”.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: List of interface tag mapping to be added or modified

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces
BODY<application_interface_tags>
    <application_interface_tag>
        <application_interface>
            <id>1</id>
        </application_interface>
        <tag>
            <id>3</id>
        </tag>
    </application_interface_tag>
    <application_interface_tag>
        <application_interface>
            <id>2</id>
        </application_interface>
    </application_interface_tag>
</application_interface_tags>


Response Messages:
403: Access is denied
404: There are no application packs with the NAME in customer with ID.
403: You do not have permissions to edit this application pack.
403: You do not have permission to access application that contains the interface ID
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Application Interface can't be null.
400: Empty interface ID is not valid."},"response":[]},{"name":"Update application packs","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tUpdated name\n\t\tUpdated application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\tfalse\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Update the application packs properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <id>1</id>
        <name>Updated name</name>
        <comment>Updated application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <is_published>false</is_published>
    </application_pack>
</application_packs>


Response Messages:
400: There are no application packs to edit.
400: Application pack ID cannot be empty.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
403: Access is denied
403: You do not have permission to access application that contains the interface ID
403: You do not have permissions to edit this application pack.
403: You do not have permissions to change the owner of application pack ID.
403: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"List all application packs","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Parameters:
customer_id: The unique identifier of customer
name: The name of the application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs?name=Application pack 1

Response Messages:
403: Access is denied
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Create new application packs","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tApplication pack 1\n\t\tNew application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t5\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <name>Application pack 1</name>
        <comment>New application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <viewers>
            <viewer>
                <id>5</id>
            </viewer>
        </viewers>
    </application_pack>
</application_packs>


Response Messages:
403: Access is denied
403: You do not have permission to access application that contains the interface ID
400: There are no application packs to add.
400: Application pack can be created only in meshed domain mode.
404: Customer with ID was not found.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: The owner NAME does not have permission to access applications.
400: Application pack was already saved.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned."},"response":[]},{"name":"Modify tags of an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tTag 1\n\t\n\t\n\t\t2\t\n\t\tTag 2\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Tags to modify

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <id>1</id>
        <name>Tag 1</name>
    </tag>
    <tag>
        <id>2</id>    
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
403: Access is denied
403: You do not have permissions to edit this application pack.
404: Customer with ID was not found.
404: There is no application pack with the ID in customer with ID.
400: Tag with NAME already exists in application pack ID.
400: Updated tag ID can't be empty
400: Updated Tag ID doesn't exist on application pack ID."},"response":[]},{"name":"Delete tags from application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"tag_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
tag_id: IDs of tags to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/21/tags?tag_id=1&tag_id=2

Response Messages:
200: Tags were deleted.
403: Access is denied
403: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Tag ID was not found in application pack ID.
404: Tag ID is in use so can't be deleted.
404: Removed tag ID can't be empty."},"response":[]},{"name":"List all application pack tags","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags

Response Messages:
403: Access is denied
404: There is no application pack with the ID."},"response":[]},{"name":"Create new Tag under an application pack ","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tTag 1\n\t\n\t\n\t\tTag 2\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
body: List of tags

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <name>Tag 1</name>
    </tag>
    <tag>
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
403: Access is denied
404: There is no application pack with the ID in customer with ID.
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Tag name must contain at least 2 and no more than 160 characters.
400: Tag with NAME already exists in application pack ID."},"response":[]},{"name":"Create new connection to application packs","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tConnection to application pack 1\n\t\tNew Connection to application pack\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t3\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tTag 1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","description":"Parameters:
application_id: The unique identifier of application
body: List of connection to application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs
BODY<connection_to_application_packs>
    <connection_to_application_pack>
        <name>Connection to application pack 1</name>
        <comment>New Connection to application pack</comment>
        <application_pack>
            <id>1</id>
        </application_pack>
        <tags_servers>
            <tag_servers>
                <tag>
                    <id>1</id>
                </tag>
                <servers>
                    <server>
                        <id>3</id>
                    </server>
                </servers>
            </tag_servers>
            <tag_servers>
                <tag>
                    <name>Tag 1</name>
                </tag>
                <servers>
                    <server>
                        <id>4</id>
                    </server>
                </servers>
            </tag_servers>
        </tags_servers>
    </connection_to_application_pack>
</connection_to_application_packs>


Response Messages:
400: There are no connection to application packs to add.
400: Application pack ID cannot be empty.
400: Application with ID was not found.
400: There is no application with the specified ID.
400: There is no application pack with the specified ID.
400: Application pack with ID was decommissioned.
400: Application pack with ID was not published.
400: Connection to application pack cannot be created in the domain of the application pack.
400: The application pack cannot be used more than once in the application.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is missing.
400: Tag ID does not exist.
400: Server ID does not exist.
400: Tag ID is not in use in connection to application pack ID, so it cannot be updated.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
403: Access is denied.
403: You do not have permission to access application that contains the server ID
403: You do not have permission to access application pack with ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Tag with NAME was not found."},"response":[]},{"name":"Retrieve a list of all connection to application pack by application ID.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","description":"Parameters:
application_id: The unique identifier of application
name: The name of the connection to application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs?name=Connection to application pack 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
404: There are no connection to application pack with the NAME in application with ID."},"response":[]},{"name":"Get tag by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"tag_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags/{{tag_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
tag_id: The unique identifier of a tag

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags/1

Response Messages:
403: Access is denied
404: There is no tag with ID.
404: Customer with ID doesn't own a tag with ID.
404: Application Pack with ID doesn't own a tag with ID."},"response":[]},{"name":"Update an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated Connection to application pack\n\t\n\t\t\n\t\t\t\n\t\t\t\t1\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTag 1\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to update
body: Connection to application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1
BODY<connection_to_application_pack>
    <name>Updated name</name>
    <comment>Updated Connection to application pack</comment>
    <tags_servers>
        <tag_servers>
            <tag>
                <id>1</id>
            </tag>
            <servers>
                <server>
                    <id>3</id>
                </server>
            </servers>
        </tag_servers>
        <tag_servers>
            <tag>
                <name>Tag 1</name>
            </tag>
            <servers>
            </servers>
        </tag_servers>
    </tags_servers>
</connection_to_application_pack>


Response Messages:
400: There is no application with the specified ID.
400: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is required.
400: Tag with Name was not found.
400: Server ID cannot be empty.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
403: Access is denied.
403: You do not have permission to access application that contains the server ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed."},"response":[]},{"name":"Delete a connection to application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"connection_to_application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
400: Connection to application pack with ID was not found for application with ID.
400: The connection to application pack was already deleted.
403: Access is denied.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed."},"response":[]},{"name":"Retrieve an existing connection to application pack by ID.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"connection_to_application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
404: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID."},"response":[]}]},{"name":"Application Pending Changes","item":[{"name":"Retrieve existing access rules","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/access_requests","description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/87/access_requests

Response Messages:
400: The application was already deleted.
400: There are no changed connections that are ready for creating a ticket.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
400: Application with ID ID was not found."},"response":[]}]},{"name":"Application Servers (across all applications)","item":[{"name":"Fetches server by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects/{{serverId}}","description":"Parameters:
serverId: The ID of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects/87

Response Messages:
400: Server with id ID was not found.
400: Application with ID ID was not found.
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance."},"response":[]},{"name":"Fetches servers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects","description":"Parameters:
name: The name of the servers [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?name=server1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: Server with name NAME was not found.
400: Parameter typeOnDevice is not valid.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no servers with the name NAME
404: There are no servers with the typeOnDevice TYPEONDEVICE "},"response":[]}]},{"name":"Application Servers (by application)","item":[{"name":"Delete server","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","description":"To decommission a serer use force=true.

Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4?force=true

Response Messages:
400: The application was already deleted.
400: You cannot delete a predefined object.
400: Cannot delete an object that is being referenced by other objects
400: Cannot delete a predefined object.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID."},"response":[]},{"name":"Retrieve an existing server by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","description":"Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/3

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID."},"response":[]},{"name":"If the identified server is a group, return a list of its members. When the media type is 'text/plain' (default), print each member on a separate line.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/members","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/members

Response Messages:
400: Server with ID is not of type group
403: Access is denied
403: You do not have permissions to view this application
403: No available licenses. Ask your SecureApp administrator for assistance
404: There is no application with the specified ID
404: Server with ID was not found"},"response":[]},{"name":"Export Server Impact Analysis to a CSV file.","request":{"method":"GET","header":[],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/impact_analysis_csv","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/impact_analysis_csv

Response Messages:
400: Server with ID was not found.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"Move server","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"server_id"},{"value":null,"type":"text","key":"target_application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/move_server","description":"Parameters:
application_id: The unique identifier of the application
server_id: The unique identifier of the server
target_application_id: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/move_server?server_id=5&target_application_id=3

Response Messages:
400: Server ID is missing.
400: Target application ID is missing.
400: You cannot move a predefined object.
400: Server with ID is already associated to application with ID.
400: Cannot move server to a different customer.
400: The application was already deleted.
400: You cannot add to application APPLICATION_NAME because it was decommissioned.
400: Group/Server cannot be moved because there is no other application to move it to.
400: Group/Server cannot be moved because it or at least one of its group members is part of these groups: GROUPS_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is locked for discovery.
400: Group/Server cannot be moved because it or at least one of its group members is used in these application interfaces: APPLICATION_INTERFACE_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is used in these connections with another external resource: CONNECTION_NAME
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Update servers","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 1\n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t\t host\n\t \n\t \n\t\t 2\n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n\t\t 2.2.2.22\n\t\t range\n\t \n\t \n\t\t 3\n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t\t subnet\n\t \n\t \n\t\t 4\n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t\t virtual-server\n\t \n\t \n\t\t 5\n\t\t vm1\n\t\t vm instance comment\n\t\t vm_instance\n\t \n\t \n\t\t 6\n\t\t group comment\n\t\t group1\n\t\t true\n\t\t group\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <id>1</id>
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
         <type>host</type>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <id>2</id>
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
         <type>range</type>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <id>3</id>
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
         <type>subnet</type>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <id>4</id>
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
         <type>virtual-server</type>
     </network_object>
     <network_object xsi:type=\"vmInstanceDTO\">
         <id>5</id>
         <name>vm1</name>
         <comment>vm instance comment</comment>
         <type>vm_instance</type>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <id>6</id>
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <type>group</type>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: The application was already deleted.
400: You cannot update a predefined object.
400: Invalid type in server with id ID.
400: Invalid member with id ID
400: Invalid ID
400: Invalid uid
400: Invalid network object type NAME
400: Cannot update user
400: Network object is new
400: Name cannot be empty
400: Server is in discovery
400: Ip is missing
400: Mask is missing
400: Invalid ip
400: Invalid mask
400: Max ip is missing
400: Min ip is missing
400: Invalid min ip
400: Invalid max ip
400: Min ip cannot be larger than max ip
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Server with NAME already exists.
400: Invalid device ID
400: The type_on_device value is not valid
400: An EDL group can not be modified to a regular group
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: DTO type used for server id ID is incompatible with this vendor.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Virtual server was not found in ST.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
503: Not connected to SecureTrack."},"response":[]},{"name":"Retrieve existing servers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the server [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?name=ServerName

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: The application was already deleted.
400: Parameter typeOnDevice is not valid.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no servers with the name NAME.
404: There are no servers with the typeOnDevice TYPEONDEVICE "},"response":[]},{"name":"Create servers","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t \n\t \n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n \t\t 2.2.2.22\n\t \n\t \n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t \n\t \n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t \n\t \n\t\t group comment\n\t\t group1\n\t\t true\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: There are no items to add.
400: The application was already deleted.
400: You cannot add to application NAME because it was decommissioned.
400: Network object was already saved
400: Name cannot be empty
400: Server with NAME already exists.
400: IP is missing
400: Mask is missing
400: Invalid IP
400: Invalid mask
400: Max IP is missing
400: Min IP is missing
400: Invalid min IP
400: Invalid max IP
400: Min IP cannot be larger than max IP
400: Invalid network object type CLASS_NAME.
400: Invalid uid
400: Invalid device ID
400: Virtual server does not exist in SecureTrack
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Cannot save the server because the virtual server does not exist.
400: Cannot save the server because an error occurred
400: The type_on_device value is not valid
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
404: Virtual server was not found in SecureTrack.
503: Not connected to SecureTrack."},"response":[]}]},{"name":"Application Services (global)","item":[{"name":"Modify unused and non predefined global services","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Service is new.
400: You cannot update a predefined object.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot update a global service that is being referenced by other objects.
400: Cannot update an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Group cannot contain itself as a member.
400: Application identity cannot be a member of a group.
403: Access is denied."},"response":[]},{"name":"Fetches services","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
globals_only: get only globals [optional]
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=AH

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true&name=AH

Response Messages:
404: There are no services with the name NAME.
403: Access is denied."},"response":[]},{"name":"Create global services","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Application identity cannot be a member of a group.
403: Access is denied."},"response":[]},{"name":"Delete unused and non predefined global service by name","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"name"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
name: The name of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=Global service

Response Messages:
200: Service was deleted.
404: Service name has not been provided.
404: There are no services with the name NAME.
400: Cannot delete ANY.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: Access is denied."},"response":[]},{"name":"Fetches service by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/2

Response Messages:
404: Service with ID <ID> was not found.
403: Access is denied."},"response":[]},{"name":"Delete unused and non predefined global service","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/260

Response Messages:
200: Service was deleted.
404: Global Service with ID was not found.
400: Cannot delete an object that is being referenced by other objects.
400: You cannot delete a predefined object.
403: Access is denied."},"response":[]}]},{"name":"Application Services (local)","item":[{"name":"Retrieve an existing service by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","description":"Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Response Messages:
400: The application was already deleted.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Service with ID was not found."},"response":[]},{"name":"Delete service","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","description":"Use force=true to delete a service with decommission.

Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250?force=true

Response Messages:
400: The application was already deleted.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Service with ID <SERVICE_ID> was not found in application with id <APPLICATION_ID>"},"response":[]},{"name":"Create services","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Cannot have members from different applications.
400: Can not have application identity in group
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve existing services","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services?name=Local service

Response Messages:
400: The application was already deleted.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no services with the name NAME."},"response":[]},{"name":"Update services","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t255\n\t\tService Group 2 updated\n\t\tUpdated comment\n\t\tgroup\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>255</id>
        <name>Service Group 2 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Local service must be associated with an application.
400: Service is locked for discovery.
400: Service is new.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Application identity cannot be a member of a group.
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found."},"response":[]}]},{"name":"Application Users","item":[{"name":"Fetches users","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","description":"Parameters:
name: The name of the user [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users?name=Local user 1

Response Messages:
404: There are no users with the name NAME.
403: Access is denied."},"response":[]},{"name":"Create users","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tLocal user 1\n\t\tNew local user\n\t\t8.8.8.8\n\t\n\t\n\t\tLdap user 1\n\t\tNew ldap user\n\t\n\t\n\t\tUser group 1\n\t\tNew user group\n\t\t\n\t\t\t14\n\t\t\n\t\t\n\t\t\t15\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","description":"Parameters:
body: List of users

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/users
BODY<users>
    <user>
        <name>Local user 1</name>
        <comment>New local user</comment>
        <ip>8.8.8.8</ip>
    </user>
    <user>
        <name>Ldap user 1</name>
        <comment>New ldap user</comment>
    </user>
    <user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"userObjectGroupDTO\">
        <name>User group 1</name>
        <comment>New user group</comment>
        <member>
            <id>14</id>
        </member>
        <member>
            <id>15</id>
        </member>
    </user>
</users>


Response Messages:
201: User was created.
200: Users were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: User with id <ID> was not found.
400: Invalid user type <TYPE>
400: Name cannot be empty.
400: User with name <NAME> already exists.
400: Invalid ip
403: Access is denied."},"response":[]},{"name":"Delete unused user","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"userId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
200: User was deleted.
404: User with ID <ID> was not found.
400: Cannot delete an object that is being referenced by other objects.
403: Access is denied."},"response":[]},{"name":"Fetches user by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"userId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
404: User with ID <ID> was not found.
403: Access is denied."},"response":[]}]},{"name":"Applications","item":[{"name":"Move applications to another customer","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t \n\t\t\t1\n\t\t \n\t\t \n\t\t\t 2\n\t\t \n\t \n\t \n\t\t \n\t\t\t2\n\t\t \n\t\t \n\t\t\tDefault\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/move_applications","description":"Parameters:
body: List of applications and customers [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/move_applications
BODY<move_applications>
     <move_application>
         <application>
            <id>1</id>
         </application>
         <customer>
             <id>2</id>
         </customer>
     </move_application>
     <move_application>
         <application>
            <id>2</id>
         </application>
         <customer>
            <name>Default</name>
         </customer>
     </move_application>
</move_applications>


Response Messages:
200: Applications were moved successfully.
400: Multi-Customer mode is not enabled.
400: You cannot move an application pack to a different customer.
400: Reference to application is invalid.
400: APPLICATION already exists in CUSTOMER.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: Reference to CUSTOMER is invalid.
400: CUSTOMER is not imported to SecureApp.
400: CUSTOMER was decommissioned.
400: You must delete virtual servers from CUSTOMER before you move APPLICATION to another customer.
400: You must remove virtual servers from the INTERFACE and publish it before you move APPLICATION to another customer.
400: You cannot move APPLICATION to CUSTOMER because the connection to application pack and the application pack cannot be in the same customer.
400: You cannot move APPLICATION to a different customer because the application interface and the application pack must be in the same customer.
400: You must remove INTERFACE from APPLICATION PACK and publish it before you can move APPLICATION to another customer.
400: CONNECTION TO APPLICATION from APPLICATION must use interface from CUSTOMER.
400: Sources in CONNECTION from APPLICATION must all be from applications in the same customer.
400: Destinations in CONNECTION in APPLICATION must all be from applications in the same customer.
400: Servers in CONNECTION from APPLICATION must all be from CUSTOMER.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from applications in the same customer.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from CUSTOMER.
400: Application or application pack with NAME already exists in CUSTOMER.
400: There are no applications to move.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve an existing application by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"Parameters:
applicationId: The unique identifier of an application to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID."},"response":[]},{"name":"Change an application","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t 139\n\t UpdatedAppName\n\t UpdatedComment\n\t false\n\t \n\t\t 4\n\t \n\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 5\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
applicationId: The unique identifier of an application to change
body: Application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/139
BODY<application>
     <id>139</id>
     <name>UpdatedAppName</name>
     <comment>UpdatedComment</comment>
     <decommissioned>false</decommissioned>
     <owner>
         <id>4</id>
     </owner>
     <editors>
         <editor>
             <id>3</id>
         </editor>
     </editors>
     <viewers>
         <viewer>
             <id>5</id>
         </viewer>
     </viewers>
</application>


Response Messages:
400: The application was already deleted.
400: Application owner is missing.
400: Owner cannot be empty.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
403: Access is denied
403: You do not have permissions to change the owner of application ID.
403: You do not have permissions to change the editors and a viewer of application ID.
403: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Delete an application","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"Parameters:
applicationId: The unique identifier of the application to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
400: The resources of application NAME are used in connections for other applications.
400: You cannot delete application NAME because its application interfaces are used in other applications.
400: You cannot delete application NAME because its application interfaces are used in other application packs.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
400: Application with ID ID was not found.
400: You cannot delete application NAME because there are connection changes pending a ticket in other application."},"response":[]},{"name":"Export application history to PDF","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/history/export_pdf","description":"Parameters:
application_id: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History max rows [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&count=2

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?count=2

Response Messages:
403: Access is denied.
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date"},"response":[]},{"name":"Retrieve security policy violations from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/compliance_violations","description":"Parameters:
applicationId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/compliance_violations

Response Messages:
400: No valid connections found in APPLICATION.
400: Security policy compliance check is not available because a security policy has not been defined.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
503: Cannot connect to SecureTrack.
503: Timeout occurred while waiting for response from SecureTrack.
500: An error occurred in SecureTrack when running the security compliance check."},"response":[]},{"name":"Retrieve application history","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/history","description":"Parameters:
applicationId: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History list length [optional]
start: Offset the count starting point [optional]
type: States the history type to fetch [optional]
user: The username of the user made the changes [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start=0&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?type=SERVER

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?user=Jack

Response Messages:
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date
400: Count parameter must be a number
400: Start parameter must be a number
400: Start parameter must be less than total
400: Type parameter must be either server, server_group, connection, application, application_interface, connection_interface or connection_to_application
400: User not found
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Export Impact Analysis to a CSV file.","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/impact_analysis_csv","description":"To prevent a CSV injection attack when exporting Impact Analysis to a CSV file, if a special character ( = - + @ ) appears at the beginning of any field, a single quote (') is added before the character.

Parameters:
application_id: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/impact_analysis_csv

Response Messages:
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"Create new applications","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t AppName\n\t\t Comment\n\t\t \n\t\t\t 3\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 4\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t\t \n\t\t\t 24\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"Parameters:
body: List all applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <name>AppName</name>
         <comment>Comment</comment>
         <owner>
             <id>3</id>
         </owner>
         <editors>
             <editor>
                 <id>4</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
         <customer>
             <id>24</id>
         </customer>
     </application>
</applications>


Response Messages:
400: There are no items to add.
400: Application was already saved.
400: Application name must contain at least 2 and no more than 160 characters.
400: Owner cannot be empty.
400: The specified owner does not exist.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
400: Application with NAME already exists.
400: Application owner is missing.
400: Reference to owner ID is invalid.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to customer ID is invalid.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: The specified customer does not exist.
400: There is an editor without an ID or name.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no editor with the name NAME."},"response":[]},{"name":"Update applications","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 140\n\t\t App1\n\t\t true\n\t\t \n\t\t\t 4\n\t\t \n\t \n\t \n\t\t 139\n\t\t UpdatedAppName\n\t\t Updated Comment\n\t\t \n\t\t\t 4\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
body: List of applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <id>140</id>
         <name>App1</name>
         <decommissioned>true</decommissioned>
         <owner>
             <id>4</id>
         </owner>
     </application>
     <application>
         <id>139</id>
         <name>UpdatedAppName</name>
         <comment>Updated Comment</comment>
         <owner>
             <id>4</id>
         </owner>
         <editors>
             <editor>
                 <id>3</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
     </application>
</applications>


Response Messages:
400: Application ID is missing.
400: Application ID is invalid
400: The application was already deleted.
400: You must include the owner field.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
403: Access is denied
403: You do not have permissions to change the owner of application ID.
403: You do not have permissions to change the editors and a viewer of application ID.
403: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"List all applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"Parameters:
userId: Applications by user ID, if not given the default is logged in user id [optional]
name: The name of the application [optional]
app_permissions: Filter applications by the given permissions (separated with commas):\napp_owner - returns applications where the user is the owner\napp_editor - returns applications where the user has been explicitly added as an editor\napp_viewer - returns applications where the user has been explicitly added as a viewer\napp_adminonly - returns applications where the user only has editor access because user has “edit all applications” permission, and does not include applications where this user is either the app_owner, app_editor, or app_viewer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?userId=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?app_permissions=app_owner,app_editor,app_viewer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App&app_permissions=app_adminonly

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications

Response Messages:
400: Invalid app_permissions value: 'appPermissions'.
403: Access is denied
403: You can't use the parameter 'userId' because you don't have 'View all applications' permission.
404: There are no applications matching your filter.
404: User with ID 'userId' was not found."},"response":[]}]},{"name":"Cloud Console","item":[{"name":"Auto associate cloud servers from SecureTrack with an application","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tApplication\n\ttrue\n\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule","description":"When auto-associate is enabled, user must enter key value

Parameters:
body: Auto association rule

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule
BODY<auto_association_rule>
    <key>Application</key>
    <enabled>true</enabled>
</auto_association_rule>


Response Messages:
200: Auto association rule is saved.
400: Enabled rule requires key value.
403: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers."},"response":[]},{"name":"Retrieve cloud server listing from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"vendor"},{"value":null,"type":"text","key":"search_string"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","description":"Parameters:
customer_id: Customer ID to be filtered by. [optional]
vendor: Vendor to be filtered by.
search_string: Search text.
start: Returning matching result starting from this element in the array (0-based). [optional]
count: Total number of matching servers to return. [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=WebServe

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=\"WebServer1\"

Response Messages:
403: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.
400: Illegal search string.
400: Start is bigger then possible result count.
400: Start and count cannot hold negative values.
400: Vendor query param is required.
400: Vendor should be one of the following: Amazon.
400: Search string query param is required.
400: Customer with ID does not exist in SecureApp
400: Customer with ID was decommissioned."},"response":[]},{"name":"Associate cloud servers from SecureTrack with an application","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t9\n\t\t\n\t\t\t{b503916e-4468-4dc8-981b-2ec534587352}\n\t\t\t{0cc947a5-276f-4a4a-9d12-df5284fce609}\n\t\t\n\t\n\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","description":"Parameters:
application_id: The ID of the application
body: List of device IDs and cloud server UIDs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?application_id=87
BODY<devices_to_uids>
    <device_to_uids>
        <device_id>9</device_id>
        <uids>
            <uid>{b503916e-4468-4dc8-981b-2ec534587352}</uid>
            <uid>{0cc947a5-276f-4a4a-9d12-df5284fce609}</uid>
        </uids>
    </device_to_uids>
</devices_to_uids>


Response Messages:
201: Servers were imported to SecureApp.
403: Access is denied
400: There is no application with the specified ID.
401: No available licenses. Ask your SecureApp administrator for assistance.
400: You do not have permissions to edit this application.
400: You cannot associate servers with this application, because the application has been decommissioned.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to add cloud servers.
403: UID does not exist in device ID.
403: Device with ID does not exist.
403: Device with ID does not exist in DOMAIN.
403: The AWS instance with UID and device ID has already been imported to application NAME. You cannot import the same instance multiple times."},"response":[]}]},{"name":"Customers","item":[{"name":"import customers","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t2\n\t\n\t\n\t\t3\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/import","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.

Parameters:
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/import
BODY<customers>
    <customer>
        <id>2</id>
    </customer>
    <customer>
        <id>3</id>
    </customer>
</customers>


Response Messages:
400: Not available in single-customer mode.
400: ID can not be empty.
400: There are some id's that doesn't exist.
403: Access is denied
503: Not connected to SecureTrack."},"response":[]},{"name":"List all imported customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/imported","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/imported

Response Messages:
400: Not available in single-customer mode.
403: Access is denied"},"response":[]},{"name":"List all non-imported customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/not_imported","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.



Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/not_imported

Response Messages:
400: Not available in single-customer mode.
403: Access is denied
503: Not connected to SecureTrack."},"response":[]},{"name":"List all customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/","description":"Parameters:
name: The name of the customer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers?name=Customer 1

Response Messages:
400: Not available in single-customer mode.
404: There are no customers with the name NAME."},"response":[]},{"name":"Retrieve existing applications for specific domain","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}/applications","description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/2/applications

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
403: Access is denied"},"response":[]},{"name":"Update a customer","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tNOT_IMPORTED\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","description":"Parameters:
customer_id: The ID of the customer
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/2
BODY<customer>
    <usage_mode>NOT_IMPORTED</usage_mode>
</customer>


Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
400: Can not update Default customer.
400: This customer is already not imported.
400: USAGE_MODE is not a valid state. The valid values are: USAGE_MODES
403: Access is denied
500: This customer is not imported.
400: You cannot delete this customer because there are connection changes pending a ticket in another customer.You must decommission this customer first, and then delete it."},"response":[]},{"name":"Fetches customer by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/1

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found."},"response":[]}]},{"name":"Domains","item":[{"name":"Fetches domain by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"domainId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/{{domainId}}","description":"Parameters:
domainId: The ID of the domain

Usage Example


Response Messages:
400: Domain with id ID was not found."},"response":[]},{"name":"synchronize domains","request":{"method":"PUT","header":[],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/synchronize","description":"Retrieves all the domains lists in ST , for use by SC. If a domain was deleted in ST, then it will be removed from SC



Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/domains/synchronize

Response Messages:
500: Multi-Domain mode is disabled in SecureChange. Unable to synchronize with SecureTrack domains"},"response":[]},{"name":"List all domains","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/","description":"Parameters:
name: The name of the domain [optional]

Usage Example


Response Messages:
404: There are no domains with the name NAME."},"response":[]}]},{"name":"Load Balancers","item":[{"name":"Fetches virtual servers from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ip"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers","description":"Find virtual servers matching a given IP address.
You can search for the virtual server itself of any of its members.

Parameters:
ip: ip
domainId: The unique identifier of a domain [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers?ip=2.2.2.2

Response Messages:
400: Invalid IP
400: Invalid Subnet
400: There is no domain with the specified ID.
403: Access is denied
503: Not connected to SecureTrack."},"response":[]}]},{"name":"Rule Recertification","item":[{"name":"Run Update Metadata for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/rule_recertification/update_metadata","description":"A link to the rule recertification field will returned in the location field of the header, for example: /securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/72

Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/rule_recertification/update_metadata

Response Messages:
400: Update Metadata is not defined for the requested field.
400: Update Metadata is not available for the current ticket status.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a rule recertification request field.
403: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]}]},{"name":"SecureChange Devices","item":[{"name":"Get suggested targets for a given access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"access_request\":{\n\t\t\"users\":{\n\t\t\t\"user\":[\n\t\t\t\t\"Any\"\n\t\t\t]\n\t\t},\n\t\t\"sources\":{\n\t\t\t\"source\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.1.1\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"destinations\":{\n\t\t\t\"destination\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.20.2\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"services\":{\n\t\t\t\"service\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"ANY\",\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"action\":\"Accept\",\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/suggest_target","description":"Returns a list of suggested targets for a given access request, based on topology calculations.

Parameters:
body [optional]
domain_name: Domain Name
workflow_name: Workflow Name

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/suggest_target?domain_name=Default&workflow_name=AR
BODY{
    \"access_request\":{
        \"users\":{
            \"user\":[
                \"Any\"
            ]
        },
        \"sources\":{
            \"source\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.1.1\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"destinations\":{
            \"destination\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.20.2\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"services\":{
            \"service\":[
                {
                    \"@type\":\"ANY\",
                }
            ]
        },
        \"action\":\"Accept\",
    }
}
OUTPUT{
    \"multi_target\": {
        \"target\": {
            \"@type\": \"Object\",
            \"object_name\": \"Device-1\",
            \"object_type\": \"firewall\",
            \"object_details\": \"10.100.40.1\",
            \"management_id\": 250,
            \"management_name\": \"Panorama/Domain1\"
        }
    }
}


Response Messages:
200: Targets returned successfully
400: User does not have permissions to domain or domain does not exist
403: Access is denied"},"response":[]},{"name":"Update the whole list of excluded devices in SecureChange","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t1\n\t12\n\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
BODY<device_ids>
    <id>1</id>
    <id>12</id>
</device_ids>

"},"response":[]},{"name":"Returns IDs for specified list of excluded parent management devices and child firewalls in SecureChange","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","description":"For example on this Panorama hierarchy:
DG1 - Excluded
  DG1.1
    FW1
    FW2
    FW3

Calling this API with false value will return only DG1’s id.
Calling this API with true value will return DG1, FW1, FW2, FW3 id’s.


Parameters:
show_all: When set to true - Displays the specified devices and all their child firewalls in the hierarchy, which will be excluded implicitly.
When set to false - Displays only the devices which were explicitly excluded.
Default value is false.
[optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=false
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=true
OUTPUT<device_ids>
    <id>33</id>
    <id>10</id>
    <id>11</id>
    <id>35</id>
    <id>29</id>
    <id>31</id>
</device_ids>

"},"response":[]},{"name":"Returns the details of the devices that you can select as a target in SecureChange","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/","description":"Parameters:
name: device name or part of a name [optional]
show_targets: show devices as targets [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/devices?name=asa&show_targets=true

Response Messages:
404: Devices not found"},"response":[]}]},{"name":"Server Decommissioning","item":[{"name":"Get server decommission designer results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/designer","description":"Use this API to retrieve designer results generated in R17-1 and earlier.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Get verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Run Verifier for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/verifier","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/verifier

Response Messages:
400: Verifier is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Run Impact Analysis for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/impact_analysis","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/impact_analysis

Response Messages:
400: Impact analysis is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Get impact analysis results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/impact_analysis","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/impact_analysis

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Run server decommission designer for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/designer","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/designer

Response Messages:
400: Server decommission designer is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]}]},{"name":"System Configuration","item":[{"name":"Retrieve the SecureTrack connection settings and status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack?testOnly=false
"},"response":[]},{"name":"Modify the SecureTrack connection settings and test the connection status","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\t\n\t\t \n\t\t\t192.168.11.1\n\t\t\tadmin\n\t\t\n\t\tfalse\n\t\t30\n\t\t192.168.2.2\n\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","description":"Parameters:
testOnly: Test the connection status using the specified settings. The new settings are not saved. The default value is false [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"remoteHost\">
            <IP_or_hostname>192.168.11.1</IP_or_hostname>
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
        <internal_IP_of_secureChange_server>192.168.2.2</internal_IP_of_secureChange_server>
    </secureTrack_settings>


Response Messages:
400: Invalid host name or IP address.
400: show_link_to_secureTrack is invalid. It must be 'true', 'false' or empty."},"response":[]}]},{"name":"System Users","item":[{"name":"Return the list of users","request":{"method":"GET","header":[],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","description":"user_name: case insensitive, search mode: contains text
exact_name: when set to true, user_name search mode is case sensitive and exact text
email: case insentitive, search mode: exact match
Logical OR between user_name and email.

Parameters:
showIndirectRelation: Members that belong to the selected group only indirectly [optional]
user_name: The user's login name [optional]
email: The user's email [optional]
exact_name: Search user_name as exact match [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users?email=bob@tufin.com&user_name=bob&exact_name=true
"},"response":[]},{"name":"Import LDAP users to SecureChange by simulating login process","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tx\n\tLDAP\n\t\t\n\t\t\t1\n\t\t\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","description":"This API implicitly imports LDAP users to SecureChange by simulating their login.
To explicitly import LDAP entities- both users and groups, it is recommended to use /users/import API

Parameters:
body: partyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users
BODY<user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"user\">
    <name>x</name>
    <origin_type>LDAP</origin_type>
        <ldap_configuration>
            <id>1</id>
        </ldap_configuration>
</user>


Response Messages:
403: Access is denied.
400: Name is missing.
400: Origin is missing.
400: User {login_name} already exists, with ID (id} and name {name}.
400: User {login_name} not found in LDAP.
400: Creating a user via REST API is available only if origin is LDAP.
400: Creating a user via REST API is available only if type is User.
400: Ldap configuration with ID {id} not found."},"response":[]},{"name":"Import user / group from LDAP","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"ldap_party\": {\n\t\t\"ldap_configuration_name\": \"ldap_name\",\n\t\t\"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/import","description":"The imported user / group will be visible in SecureChange GUI under users section.
In multi domain mode, imported entity will be assigned with the domains of \"any user\" group.
Only users with 'view settings tab' permission can run this API.

Parameters:
body: ldapPartyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/import
BODY{
    \"ldap_party\": {
        \"ldap_configuration_name\": \"ldap_name\",
        \"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"
    }
}


Response Messages:
400: The LDAP configuration name does not exist
400: The given ldap_dn does not exist
400: The given ldap_dn is already imported
400: Failed to create the selected user
400: Failed to create the selected group
400: Selected user already exists in SecureChange but is not synchronized with the LDAP server. Go to Settings > LDAP and synchronize with the LDAP
400: This group has a large number of users, and will not be expanded in the users console. To be able to configure roles and step participation for individual users from the group, add them explicitly.
400: Failed to update the selected group
400: Unsupported LDAP object class
400: Unable to establish a connection to server <SERVER_IP>:<SERVER_PORT> within the configured timeout of <TIMEOUT> milliseconds.
403: Access is denied"},"response":[]},{"name":"Change local group members","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"group_change\":{\n\t\t\"member_ids_to_add\": [1,2],\n\t\t\"member_ids_to_remove\":[3,4]\n\t}\n}\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group/{{id}}","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
id: Group ID
body: groupChangeDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group/1
BODY{
    \"group_change\":{
        \"member_ids_to_add\": [1,2],
        \"member_ids_to_remove\":[3,4]
    }
}    


Response Messages:
400: Exceeded limit of {MAXIMUM} group member changes
400: These user IDs do not exist: {IDs}
400: These user IDs do not exist or are not group members: {IDs}
400: Group ID {ID} is not a local group
400: Group ID {ID} does not exist
400: Cannot add a group to itself
400: Cannot add a group to a group that it already contains. Group {ID1} contains group {ID2}"},"response":[]},{"name":"Return the specified user","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","description":"Parameters:
id: User ID
showIndirectRelation: Members that belong to the selected group only indirectly [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User or group was not found."},"response":[]},{"name":"Delete the specified User or Group","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","description":"Parameters:
id: User ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User with id {id} does not exist"},"response":[]},{"name":"Create local group","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"group\": {\n\t\t\"name\": \"name1\",\n\t\t\"description\": \"description1\",\n\t\t\"email\": \"email1@tufin.com\"\n\t}\n}\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
body: CreateGroupDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group
BODY{
    \"group\": {
        \"name\": \"name1\",
        \"description\": \"description1\",
        \"email\": \"email1@tufin.com\"
    }
}    


Response Messages:
400: Input Validation Error : {field name}: {input validation error message}
400: Name already exists"},"response":[]}]},{"name":"Ticket Lifecycle","item":[{"name":"Returns the specified ticket to the specified step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tplease fix source \n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/redo/{{toStepId}}","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
toStepId: To which step we the ticket will return
body: RedoCommentDto

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/redo/1
BODY<redo_step_comment>
    <comment>please fix source </comment>
</redo_step_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
403: User has no permissions to redo ticket steps.
404: There is no ticket with ID.
404: No entity found for query"},"response":[]},{"name":"Change the requester of the specified ticket task to the specified user.","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tuser was deleted moving tickets to Bob\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/change_requester/{{assigneeId}}","description":"Parameters:
id: Ticket ID
assigneeId: The assignee ID
body: CommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/change_requester/4
BODY<comment>
    <comment>user was deleted moving tickets to Bob</comment>
</comment>


Response Messages:
400: The change requester comment must be set in order to change the requester the ticket.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
404: There is no ticket with ID.
404: There is no requester (User) with ID."},"response":[]},{"name":"Confirm the request","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tconfirmed\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/confirm","description":"Parameters:
id: Ticket ID
requester_id: The user of the ticket's requester, when logged in user is confirm on behalf [optional]
body: Confirm comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/confirm?requester_id=5
BODY<confirm_comment>
    <comment>confirmed</comment>
</confirm_comment>


Response Messages:
400: User is trying to confirm a ticket that belongs to another user
400: User is not permitted to confirm this ticket on behalf another user
400: The user can not confirm the ticket, because he is not in the domain of the ticket
403: Access is denied.
404: There is no ticket with ID ."},"response":[]},{"name":"Cancel a ticket","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/cancel","description":"Parameters:
id: The ID of the ticket as shown in SecureChange
requester_id: The user of the ticket's requester, when logged in user is canceling on behalf [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/cancel?requester_id=5

Response Messages:
403: Access is denied.
404: Ticket is already closed
404: Ticket ID was not found"},"response":[]},{"name":"Reassigns the specified ticket task to the specified user.","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tPlease complete the AR\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/reassign/{{assigneeId}}","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
assigneeId: The assignee ID
body: ReassignTaskCommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/reassign/4
BODY<reassign_task_comment>
    <comment>Please complete the AR</comment>
</reassign_task_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
404: There is no ticket with ID.
404: No entity found for query"},"response":[]},{"name":"Map rules to ticket","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/map_rules","description":"Maps the rules from the ticket to the relevant rules in SecureTrack.
Adds record set entries to the relevant rules metadata.
Link to history is found in the returned location header.
Applicable only for closed tickets in the following workflows: Access Request, Access Request and Modify Group, and Clone Server Policy.
Use handler_id for running on behalf of another user.
To get handler_id, use the System Users API.

Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: Run API on behalf of defined user id [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules?handler_id=5

Response Messages:
201: Started asynchronous mapping of rules to ticket ID <ID>. Mapping status is displayed in ticket history.
400: Ticket's workflow type does not support this operation
403: Access is denied.
403: You do not have permission to access ticket <ID>
403: On behalf user do not have permission to access ticket <ID>
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.
412: Ticket is not in closed status"},"response":[]},{"name":"Returns the history of the specified ticket","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/history","description":"Parameters:
id: Ticket ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/history

Response Messages:
403: User has no permissions to view ticket history
404: You do not have permission to view this task. Contact your administrator for assistance.
404: There is no ticket with ID."},"response":[]},{"name":"Reject a ticket","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\trejected\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/reject","description":"Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: The user id, when logged in user is rejecting on behalf [optional]
body: Reject comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/reject?handler_id=5
BODY<reject_comment>
    <comment>rejected</comment>
</reject_comment>


Response Messages:
400: Ticket status <STATUS> is incorrect to perform this action
400: User <NAME> has no permissions to perform this action
400: Comment cannot be empty
403: User is not permitted to reject this ticket on behalf another user
403: You do not have permission to access ticket <ID>
403: On behalf user do not have permission to access ticket <ID>
403: Access is denied.
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>."},"response":[]}]},{"name":"Tickets","item":[{"name":"Returns a list of tickets by search parameters","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/search","description":"If the query is succesful but no results are found (for example, if there is no ticket for the specified Ticket ID) then the return code will be 200 and the results will be empty.

Parameters:
id: The ID number of the ticket as shown in SecureChange [optional]
subject: The subject of the ticket [optional]
requester: The requester of the ticket [optional]
group: The group handling the ticket [optional]
assigned_to: The user name of the person assigned to the ticket [optional]
priority: The priority of the ticket [optional]
status: The status of the ticket [optional]
sla_status: The SLA status of the ticket [optional]
field_name: Field name to search by [optional]
field_value: Field value to search by [optional]
current_step: Current step name [optional]
expiration_date_from: Search requests with expiration date from this date [optional]
expiration_date_to: Search requests with expiration date until this date [optional]
domain_name: The Domain of the ticket [optional]
start: Offset the count starting point [optional]
count: Ticket list length [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/search?id=1&status=IN_PROGRESS,REJECTED

Response Messages:
403: Access is denied.
400: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED, WAITING_TO_BE_ASSIGNED, ASSIGNED, WAITING_FOR_MORE_INFO, DONE, INVALID, PENDING, PENDING_LICENS
400: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
400: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
400: Cannot find specified domain <DOMAIN_NAME>"},"response":[]},{"name":"Returns the details of a specified ticket stages","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID."},"response":[]},{"name":"Returns the details of the tasks","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID."},"response":[]},{"name":"Get rule decommision verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/rule_decommission/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/rule_decommission/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type <TYPE>.
404: Verifier results were not found in the request."},"response":[]},{"name":"Returns the details of a the fields","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID ."},"response":[]},{"name":"Change multiple fields within a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_network_object\">
         <id>7885</id>
         <name>n_obj</name>
         <network_object type=\"Object\">
             <object_name>Host_10.1.1.1</object_name>
             <management_name>cp239</management_name>
         </network_object>
         <network_object type=\"Object\">
             <st_uid>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</st_uid>
             <management_id>2</management_id>
         </network_object>
         <network_object type=\"DNS\">
             <host_name>tufin.com</host_name>
         </network_object>
     <field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_service\">
         <id>7887</id>
         <name>service</name>
         <service type=\"PROTOCOL\">
             <protocol>TCP</protocol>
             <port>80</port>
         </service>
         <service type=\"Object\">
             <object_name>AOL</object_name>
             <management_name>cp239</management_name>
         </service>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Returns topology map image (png file) for specific verifier results","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier/topology_map","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier/topology_map

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.
404: Toplogy map was not found for this field."},"response":[]},{"name":"Change the ticket properties","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/ticket_properties","description":"Change the ticket properties listed in the TicketPropertiesDTO.
When specifying the notification_group property you must use the ID of the group or leave the ID empty to remove the group. This property can be updated on a closed ticket.
When specifying the referenced_ticket property you must use the ID of the ticket or leave the ID empty to remove the ticket.
When specifying the expiration_date property, you must use a yyyy-mm-dd format, or leave the value empty to remove the expiration date. To ignore the field, do not include it in the request. This property can be updated on a closed ticket.

Parameters:
body: ticketPropertiesDTO
id: The ID number of the ticket as shown in SecureChange

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <referenced_ticket>
        <id>9</id>
    </referenced_ticket>
    <notification_group>
        <id>10</id>
    </notification_group>
    <expiration_date>2022-12-10</expiration_date>
</ticket_properties>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id/>
    </notification_group>
    <referenced_ticket>
        <id/>
    </referenced_ticket>
    <expiration_date/>
</ticket_properties>


Response Messages:
400: Notification Group <ID> is a user and not a user group
400: Notification Group <ID> exceeds the configured maximum allowed number of users for notifications
400: <ID> (“Any User”) is not allowed as a Notification Group
400: Notification Group <ID> does not have permission of 'Group members can perform actions on requests submitted by other members'
400: Notification Group <ID> is not a member in the first step of the workflow
400: Notification Group is not enabled in this workflow
403: You do not have permission to change the Notification Group
404: There is no group with ID <ID>.
404: There is no ticket with ID <ID>.
400: Referenced ticket id cannot be the same as ticket id
400: invalid id format for referenced ticket
400: Cannot update properties [<Property A>, <Property B>] for ticket with status <STATUS>
403: You do not have permission to update this ticket at this stage. Contact your administrator for assistance.
403: The user is not allowed to add the specified referenced ticket.
400: Workflow does not support referenced ticket
400: Cannot delete expiration date on this workflow due to it being a mandatory field
400: Invalid date. Cannot update expiration to a date that has passed
400: Invalid value for field: expiration_date (The date format must be: yyyy-mm-dd)
400: Invalid value for field: expiration_date (The date is not valid)
400: This workflow does not support expiration dates"},"response":[]},{"name":"Modify the Designer suggestions for Access Request or Clone Server Policy","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"rule_placement\": {\"new_value\":\"before\"}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/tasks/{{taskId}}/designer/instruction/{{instructionId}}","description":" GENERAL USE
1. Create a ticket using UI/API.
2. Run the designer using UI/API.
3. Use relevent API to get the designer results.
4. Run this API to modify the required parameters.

*Note: you can modify one parameter at a time.

Change rule location use
a. Modifying the rule order places the new rule before the rule with the specified identifier (rule name or number).
b. Modifying the rule placement to \"last\" places the new rule as last rule or last pre-rule (depending on the vendor convention for the device).
c. For vendors that support \"after\" placement, modifying the rule placement allows positioning the new rule before or after the suggested rule location.
d. For Check Point R80 and above releases, the indented rule numbering format can be applied to globally assigned policies (for example, “rule_order”: “4.5”).

track level permitted values:
NONE, LOG, ACCOUNT, ALERT, SNMP, MAIL, USER_DEFINED, EMERGENCIES, ALERTS, CRITICAL, ERRORS, WARNINGS, NOTIFICATIONS, INFORMATIONAL, DEBUGGING, DISABLED, DEFAULT, FULL_LOG, NETWORK_LOG, USER_ALERT_1, USER_ALERT_2, USER_ALERT_3

rule placement permitted values:
BEFORE, AFTER, LAST

Parameters:
body: DesignerInstructionChangeDTO
id: Ticket ID
taskId: Task ID
instructionId: Instruction ID
force: force update when new revision available [optional]

Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196?force=true
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_name\": {\"new_value\":\"new rule name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"track_level\": {\"new_value\":\"LOG\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_name\": {\"new_value\":\"new object name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"log_forwarding_profile\": {\"new_value\":\"new log forwarding profile\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"security_profile_group\": {\"new_value\":\"new security profile group\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_replace\": {
             \"new_value\":\"new object uid\",
             \"old_value\":\"old object uid\"
    }
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_order\": {\"new_value\":\"8\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"tags\": {\"values\":[\"tag1\", \"tag2\"]}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"tags\": {\"values\":[]}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"last\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"before\"}
}


Response Messages:
200: New rule will be shadowed
200: New rule will be shadowed or break acceleration
400: Modify Designer Results API is only supported for Access Request and Clone Server Policy workflows
412: Current instruction cannot be modified because either the implementation was successful or failed irrevocably.
412: Current step does not support Designer modification action
404: A ticket with ID <ID> cannot be found.
400: Task ID <ID> cannot be found in the current step with ID <ID>.
403: Changing <TYPE> is not supported on this device
403: This Change is not supported for <INSTRUCTION TYPE> instruction type\"
403: You do not have permission to update this task. Contact your administrator for assistance.
403: New revision is available, cannot modify the Designer results
404: Specified instruction, id: <ID> was not found
404: Designer results were not found in the access request.
400: a valid object name must start with an alphanumeric character and can contain alphanumeric characters, underscore '_'. Hypen '-', dot '.' or spaces
400: For this device, the comment must be less than 100 characters per line.
400: For this device, this field must be less than <NUMBER OF CHARACTERS> characters
400: For this device, this field is required.
400: For this device, a valid object name cannot be <OBJECT NAME> because it is a reserved word
409: Rule name already exists for this device. Please give this rule a unique name.
409: Rule name <NAME> already exists in the device group hierarchy. Choose a unique name for this rule.
400: Comment contains invalid characters.
400: <DEVICE> does not support tracking level <TRACKING LEVEL>
400: <TRACKING LEVEL> is not a valid rule track level value
400: a valid object name cannot contain any of the following characters: <CHARACTERS>
400: a valid object name must be less than <NUMBER OF CHARACTERS> characters
400: a valid object name cannot be empty
400: a valid object name must conform to the following pattern: <STRING PATTERN>
409: Object already exists
400: A security profile group cannot be empty.
404: The security profile group <SECURITY PROFILE GROUP> was not found.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to validate the security profile group.
400: A log forwarding profile cannot be empty.
400: Tag list is longer than 20 items.
400: Tag list contains the same tag more than once.
400: These tags don't exist or aren't relevant to the rule on its DG location : <Tags>
404: The log forwarding profile <LOG FORWARDING PROFILE> was not found.
500: An error occurred in SecureTrack while trying to validate the log forwarding profile.
400: Object UID <OLD OBJECT UID> not found in the rule for this instruction.
400: Values of new object UID <NEW OBJECT UID> and old object UID <OLD OBJECT UID> do not match.
400: Rule placement can only be: \"before\", \"after\" or \"last\".
400: You can't change rule placement when there is no rule order. please add rule order first.
400: You can't change rule placement to \"After\" for this type of device.
400: You can't change rule placement to \"Last\" for this type of device."},"response":[]},{"name":"Returns the details of a specified tickets (max 100 tickets in a single query)","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
status: The status of the tickets [optional]
count: Tickets list max pagination length (max value is 100) [optional]
start: Offset the count starting point [optional]
desc: Get the list in descending order [optional]
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets?status=In Progress&count=10&start=3&expand_links=false

Response Messages:
400: Status is not a valid. The valid values are: TICKET_STATUSES
400: Can not fetch more than 100 tickets in 1 time
403: Access is denied"},"response":[]},{"name":"Submit a new ticket to Secure Change","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"ticket\": {\n\t\t\"subject\": \"RM_EXAMPLE\",\n\t\t\"requester\": \"m\",\n\t\t\"requester_id\": 4,\n\t\t\"priority\": \"Normal\",\n\t\t\"domain_name\": \"\",\n\t\t\"workflow\": {\n\t\t\t\"name\": \"RM\",\n\t\t},\n\t\t\"steps\": {\n\t\t\t\"step\": [\n\t\t\t\t{\n\t\t\t\t\t\"tasks\": {\n\t\t\t\t\t\t\"task\": {\n\t\t\t\t\t\t\t\"fields\": {\n\t\t\t\t\t\t\t\t\"field\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\t\t\t\t\t\"devices\": {\n\t\t\t\t\t\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 11,\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 9,\n\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","description":" GENERAL USE
When posting a Modify Group ticket, group scope must be configured for FortiManager advanced and Juniper SRX devices.
Juniper SRX devices:
Global address-book will be used unless an existing address-book is given.
Ticket validation will fail in case given Address Book is not configured on the device.
FortiManager advanced devices:
'Any' zone will be used unless an existing zone is given.
Ticket validation will fail in case given zone is not configured on the device.
*Note: Zones and address-books must not be configured for other devices.

Using newly created objects from a different group in the same ticket
The user can add a newly created object from a different group to the selected group, with object_UID equal to the name of the newly created object.
For management devices with hierarchies, the newly created object does not populate other levels of the hierarchies.

Permitted values for @type
Allowed values for @type property included in DestinationDTO and SourceDTO are:
ANY
IP
DNS
Object - Device's existing object
INTERNET
LDAP (SourceDTO only) - LDAP entity

To use a service object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketDTO
closed: Cannot be done from the API [optional]
count [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>topology mode_AR1-with topology_AR2-no topology</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <domain_name>Default</domain_name>
    <workflow>
         <id>7</id>
         <name>Workflow with topology</name>
    </workflow>
    <steps>
         <step>
             <name>Open request</name>
             <tasks>
                 <task>
                     <fields>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_access_request\">
                             <name>Required Access</name>
                             <access_request>
                                 <use_topology>true</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>ASA</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>host_10.100.10.140</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
                                         <management_id>13</management_id>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>h_10.10.10.10</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"PROTOCOL\">
                                         <protocol>TCP</protocol>
                                         <port>80</port>
                                     </service>
                                     <service type=\"APPLICATION_IDENTITY\">
                                         <application_name>Gmail</application_name>
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                             <access_request>
                                 <use_topology>false</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>inside_access_in</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>1.1.1.0</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>network_regi3</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"ANY\">
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                             <name>Business Justification</name>
                             <text>I need access to ftp </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                             <name>Project Number</name>
                             <text>CR124560 </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                             <name>Hyperlink</name>
                             <url>http://192.168.1.1/ticket</url>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                             <name>Change Window</name>
                             <selection>Monday</selection>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                             <name>manager email</name>
                             <text>manager@tufin.com</text>
                         </field>
                     </fields>
                 </task>
             </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>New MG ticket</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <status>In Progress</status>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>6</id>
        <name>MG</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>72</id>
            <name>New step</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>72</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>
                    <status>ASSIGNED</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>262</id>
                            <name>MG</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>ExistingGroup</name>
                                <object_UID>{c862fb6f-1314-45da-9e01-56c9b85d001d}</object_UID>
                                <management_id>58</management_id>
                                <management_name>FMG/root</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>157</id>
                                        <name>10.100 net</name>
                                        <object_UID>{37cdc055-7aac-4385-b46b-cc54d95e4b6d}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.100.0.0/255.255.0.0</object_details>
                                        <management_id>58</management_id>
                                        <management_name>FMG/root</management_name>
                                        <status>NOT_CHANGED</status>
                                        <object_updated_status>EXISTING_EDITED</object_updated_status>
                                        <comment>new_comment</comment>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                            <group_change>
                                <name>78.45.12.0</name>
                                <object_UID>{cac64d34-a05e-4a05-b271-64642eb976ff}</object_UID>
                                <management_id>28</management_id>
                                <management_name>SRX-root-lsys</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>158</id>
                                        <name>78.45.12.1</name>
                                        <object_UID>{7912c335-6dbe-47de-b872-1322f9015b2f}</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>78.45.12.1/255.255.255.255</object_details>
                                        <management_id>28</management_id>
                                        <management_name>SRX-root-lsys</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <address_book>
                                    <name>global</name>
                                </address_book>
                            </group_change>
                            <group_change>
                                <name>10.10.0.0/16</name>
                                <object_UID>{5dff0bd8-51e4-4a83-8138-d54dd18ca52b}</object_UID>
                                <management_id>24</management_id>
                                <management_name>NSX-Distributed Firewall</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>161</id>
                                        <name>10.10.0.0/16</name>
                                        <object_UID>{5d7b826c-f053-40fd-81bd-7a6f44cf15ef}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.10.0.0/255.255.0.0</object_details>
                                        <management_id>24</management_id>
                                        <management_name>NSX-Distributed Firewall</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>test API</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>8</id>
        <name>Modify group</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>11</id>
            <name>Open request</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>11</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>                    <status>DONE</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>137</id>
                            <name>ff</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>port1Group</name>
                                <object_UID>{d5b4459b-6b27-4012-9924-b244c250520f}</object_UID>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"HOST\">
                                        <id>69</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <status>ADDED</status>
                                        <comment/>
                                        <object_updated_status>NEW</object_updated_status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                            <group_change>
                                <name>gfd</name>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>70</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <management_name>10.100.111.8/ADOM_5_2</management_name>
                                        <status>ADDED</status>
                                        <object_updated_status>EXISTING_NOT_EDITED</object_updated_status>
                                    </member>
                                </members>
                                <change_action>CREATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <current_step>
        <id>12</id>
        <name>Copy of Open request</name>
    </current_step>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"application_details\": { \"id\": \"1\" },
        \"referenced_ticket\": { \"id\": \"3\" },
        \"subject\": \"topology mode_AR1-with topology_AR2-no topology\",
        \"priority\": \"Normal\",
        \"workflow\": { \"name\": \"ar\" }
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"subject\": \"RM_EXAMPLE\",
        \"requester\": \"m\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"domain_name\": \"\",
        \"workflow\": {
            \"name\": \"RM\",
        },
        \"steps\": {
            \"step\": [
                {
                    \"tasks\": {
                        \"task\": {
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"rule_modification_field\",
                                    \"devices\": {
                                        \"device\": {
                                            \"revision_id\": 24,
                                            \"management_id\": 5,
                                            \"bindings\": {
                                                \"binding\": {
                                                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                    \"binding\": {
                                                        \"@xsi.type\": \"policy__binding\",
                                                        \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                                    },
                                                    \"rules\": {
                                                        \"rule\": {
                                                            \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                                            \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                                        }
                                                    }
                                                }
                                            }
                                        }
                                    },
                                    \"rule_modifications\": {
                                        \"rule_modification\": {
                                            \"@xsi.type\": \"modify_rule_modification\",
                                            \"rule_key\": {
                                                \"device_id\": 5,
                                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                            },
                                            \"source_modifications\": {
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                                        \"name\": \"RANGE_1\",
                                                                        \"comment\": \"EXAMPLE_RANGE\",
                                                                        \"min_ip\": \"3.3.3.3\",
                                                                        \"max_ip\": \"5.5.5.5\"
                                                                    }
                                                                ]
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                                        \"name\": \"NET_1\",
                                                                        \"comment\": \"\",
                                                                        \"ip\": \"3.3.3.3\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"destination_modifications\": {
                                                \"id\": 11,
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                                        \"name\": \"Host123\",
                                                                        \"comment\": \"cccHost\",
                                                                        \"ip\": \"1.2.3.4\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"service_modifications\": {
                                                \"id\": 9,
                                                \"service_object_cell_modifications\": {
                                                    \"service_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                                    \"name\": \"ICMP_1\",
                                                                    \"comment\": \"EXAMPLE_ICMP\",
                                                                    \"type\": {
                                                                        \"from\": 55,
                                                                        \"to\": 55
                                                                    }
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"UDP_1\",
                                                                    \"comment\": \"EXAMPLE_UDP\",
                                                                    \"port\": {
                                                                        \"from\": 3,
                                                                        \"to\": 3
                                                                    },
                                                                    \"protocol\": \"UDP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"TCP_1\",
                                                                    \"comment\": \"EXAMPLE_TCP\",
                                                                    \"port\": {
                                                                        \"from\": 1234,
                                                                        \"to\": 1234
                                                                    },
                                                                    \"protocol\": \"TCP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                                                }
                                                            }
                                                        }
                                                    ]
                                                }
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
    }
}


Response Messages:
400: Application ID is missing.
400: Create closed ticket is enabled only from SecureApp application.
400: The application was already deleted.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: You cannot open a new ticket with an empty subject.
400: Expiration field is required.
400: Submit ticket enabled only with the first step
400: First step can be only with one task
400: The specified workflow does not contain an access request field in the first step.
400: There are no changed connections that are ready for creating a ticket.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
400: Managed tasks are not initialized or done
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (Rule Modification workflow is not supported for this device)
403: You do not have permissions to edit this application.
403: Logged in user: NAME do not have permission to perform on behalf actions
403: You are not a participant in the first step of this workflow
403: UNAUTHORIZED
404: There is no application with the specified ID
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (Network object cell modification missing action)
400: Invalid value for field: <FIELD_NAME> (Network object cell modification element cannot be empty)
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
400: Workflow does not support referenced ticket
400: The referenced ticket cannot be the ticket itself
406: Invalid format detected: <subject|name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: <subject|name> - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: <subject|name> - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Change a field within a task of a ticket at the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields/{{fieldId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/7642
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"approve_reject\">
         <id>7661</id>
         <name>approve access</name>
         <approved>true</approved>
         <reason>Request approved</reason>
    </field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Change a task of a ticket at the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY<task>
    <status>DONE</status>
    <fields/>
</task>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Change multiple field within a task of a ticket in the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_server_decommission_request\">
         <id>7591</id>
         <name>sd</name>
         <server_decommission_request>
             <id>7596</id>
             <order>DR1</order>
             <servers>
                 <server type=\"IP\">
                     <id>7593</id>
                     <ip_address>2.2.2.2</ip_address>
                     <netmask>255.255.255.255</netmask>
                 </server>
             </servers>
             <targets>
                 <target type=\"ANY\">
                     <id>7595</id>
                 </target>
             </targets>
             <comment>change ip from 1.1.1.1 to 2.2.2.2</comment>
         </server_decommission_request>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"date\">
         <id>7786</id>
         <name>date</name>
         <value>2015-12-15</value>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"time\">
         <id>7787</id>
         <name>time</name>
         <value>12:00</value>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object / device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object / device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Get commands for device from designer results of a specific field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/device/{{deviceId}}/commands","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
deviceId: Device ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/device/136/commands

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the access request.
404: Device with ID <ID> was not found in Designer result.
404: Device with ID <ID> does not support Commands feature."},"response":[]},{"name":"Returns the details of a specified ticket stages","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found"},"response":[]},{"name":"Returns the results of the Commit action","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"},{"value":null,"type":"text","key":"managementId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/commit_report/{{managementId}}","description":"GENERAL USE
The report returns the Commit results for the device with the specified management ID and for the devices suggested in the Designer results. The report also includes results for devices that are in the related hierarchy of these devices.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID
managementId: Management ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/commit_report/3
OUTPUT{
    \"commit_report\": {
        \"ticketId\": 27,
        \"statTime\": \"24-Oct-2018 08:55 AM\",
        \"endTime\": \"24-Oct-2018 08:56 AM\",
        \"duration\": \"00:00:30\",
        \"vendorName\": \"PALO ALTO NETWORKS\",
        \"managmentName\": \"pano211\",
        \"devices\": {
            \"device\": [
                {
                    \"name\": \"DG1.1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                },
                {
                    \"name\": \"DG1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                }
            ]
        }
    }
}


Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request."},"response":[]},{"name":"Returns the details of a specified field","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
fieldId: The ID number of the field as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/229

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .
404: Field ID was not found in Task ID in Stage ID in ticket ID ."},"response":[]},{"name":"Change a field within a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields/7742
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multiple_selection\">
     <id>7742</id>
     <name>filter type</name>
     <selected_options>
         <selected_option>
             <value>FTP</value>
         </selected_option>
     </selected_options>
</field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Deleting rule recertification info is not allowed
400: Application Change field cannot be managed via this REST API
400: Rule associated with successfully updated recertification info cannot be removed
400: Rule was already updated
400: Rule does not exist
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Get server clone policy verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/clone_server_policy/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/clone_server_policy/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the server clone policy request."},"response":[]},{"name":"Get designer results according to field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer","description":"Use this API to retrieve designer results generated in R17-2 and later.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request."},"response":[]},{"name":"Get security zones according to field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/security_zones","description":"Use this API to retrieve security zones for multi access result field

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/security_zones

Response Messages:
404: There is no ticket with ID <ID>.
401: Cannot update ticket because it is either closed, rejected or waiting for requester confirmation
400: Task ID <ID> cannot be found in the current step with ID <ID>.
400: You can only update the current step of the ticket. Step ID <ID> does not match the current step ID <ID>.
400: The task with ID <ID> does not contain a field with ID <ID>.
400: The task with ID <ID> does not contain a field of type <ID>.
400: Security zones tool is not enabled for the requested field.
403: You do not have permission to view this task. Contact your administrator for assistance."},"response":[]},{"name":"Get access request verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request."},"response":[]},{"name":"Returns the details of a specified ticket","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1
OUTPUT {
    \"ticket\": {
        \"id\": 1,
        \"subject\": \"AR-Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 11,
            \"name\": \"AR & MG\",
            \"uses_topology\": true
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 209,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 209,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": [
                                    {
                                        \"@xsi.type\": \"multi_access_request\",
                                        \"id\": 1695,
                                        \"name\": \"AR\",
                                        \"read_only\": false,
                                        \"access_request\": {
                                            \"id\": 1706,
                                            \"order\": \"AR1\",
                                            \"risk_analysis_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"verifier_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"use_topology\": true,
                                            \"targets\": {
                                                \"target\": {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1705
                                                }
                                            },
                                            \"users\": {
                                                \"user\": [
                                                    \"Any\"
                                                ]
                                            },
                                            \"sources\": {
                                                \"source\": [
                                                    {
                                                        \"@type\": \"INTERNET\",
                                                        \"id\": 1701
                                                    },
                                                    {
                                                        \"@type\": \"DNS\",
                                                        \"id\": 1702,
                                                        \"host_name\": \"www.google.com\",
                                                        \"dns_ip_addresses\": {
                                                            \"ip_address\": \"216.58.214.100\"
                                                        }
                                                    },
                                                    {
                                                        \"@type\": \"IP\",
                                                        \"id\": 1703,
                                                        \"ip_address\": \"1.1.1.1\",
                                                        \"netmask\": \"255.255.255.255\",
                                                        \"nat_ip_address\": \"4.4.4.4\",
                                                        \"nat_netmask\": \"255.255.255.255\"
                                                    }
                                                ]
                                            },
                                            \"destinations\": {
                                                \"destination\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1697
                                                    }
                                                ]
                                            },
                                            \"services\": {
                                                \"service\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1699
                                                    }
                                                ]
                                            },
                                            \"action\": \"Accept\",
                                            \"labels\": \"\"
                                        }
                                    },
                                    {
                                        \"@xsi.type\": \"multi_group_change\",
                                        \"id\": 1707,
                                        \"name\": \"MG\",
                                        \"read_only\": false,
                                        \"implementation_status\": \"NOT_SUPPORTED\"
                                    }
                                ]
                            }
                        }
                    }
                },
                {
                    \"id\": 210,
                    \"name\": \"STEP2 - auto AR with designer /update /commit\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 210,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"unlicensed_devices_for_automation\": {
                                \"unlicensed_device_for_automation\": [
                                    {
                                        \"id\": \"2\",
                                        \"name\": \"asa\"
                                    }
                                ]
                            }
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"multi_access_request\",
                                    \"id\": 1709,
                                    \"name\": \"AR\",
                                    \"read_only\": false,
                                    \"access_request\": {
                                        \"id\": 1720,
                                        \"order\": \"AR1\",
                                        \"risk_analysis_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"verifier_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"use_topology\": true,
                                        \"targets\": {
                                            \"target\": {
                                                \"@type\": \"ANY\",
                                                \"id\": 1719
                                            }
                                        },
                                        \"users\": {
                                            \"user\": [
                                                \"Any\"
                                            ]
                                        },
                                        \"sources\": {
                                            \"source\": [
                                                {
                                                    \"@type\": \"INTERNET\",
                                                    \"id\": 1721
                                                },
                                                {
                                                    \"@type\": \"DNS\",
                                                    \"id\": 1722,
                                                    \"host_name\": \"www.google.com\",
                                                    \"dns_ip_addresses\": {
                                                        \"ip_address\": \"216.58.214.100\"
                                                    }
                                                },
                                                {
                                                    \"@type\": \"IP\",
                                                    \"id\": 1723,
                                                    \"ip_address\": \"1.1.1.1\",
                                                    \"netmask\": \"255.255.255.255\",
                                                    \"nat_ip_address\": \"4.4.4.4\",
                                                    \"nat_netmask\": \"255.255.255.255\"
                                                },
                                                {
                                                    \"@type\": \"RANGE\",
                                                    \"id\": 1724,
                                                    \"range_first_ip\": \"1.1.11.1\",
                                                    \"range_last_ip\": \"1.1.11.10\"
                                                }
                                            ]
                                        },
                                        \"destinations\": {
                                            \"destination\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1711
                                                }
                                            ]
                                        },
                                        \"services\": {
                                            \"service\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1713
                                                }
                                            ]
                                        },
                                        \"action\": \"Accept\",
                                        \"labels\": \"\"
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 210,
            \"name\": \"STEP2 - auto AR with designer /update /commit\"
        },
        \"comments\": \"\"
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2
OUTPUT {
    \"ticket\": {
        \"id\": 2,
        \"subject\": \"Clone Server Policy Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 12,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"referenced_ticket\": {
            \"id\": 1,
            \"name\": \"Ticket Subject Sample\",
            \"link\": {
                \"@href\": \"https://host/securechangeworkflow/api/securechange/tickets/1\"
            }
        },
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 109,
            \"name\": \"sc_12705\",
            \"uses_topology\": false
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 78,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 78,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 872,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 869,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 871,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                },
                {
                    \"id\": 79,
                    \"name\": \"Business Approval\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 79,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 876,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 873,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 875,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 79,
            \"name\": \"Business Approval\"
        },
        \"comments\": \"\"
    }
}


Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: No entity found for query"},"response":[]},{"name":"Returns a list of tickets by search parameters","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/free_text_search","description":"Parameters:
parameter: Free text search parameter (Search syntax details) [optional]
start: Offset the count starting point [optional]
count: Tickets list max length (max value is 1000) [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/free_text_search/?parameter=taskstatus:ASSIGNED AND priority:High

Response Messages:
400: Can not fetch more than 1000 tickets in 1 time
403: Access is denied.
404: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED
404: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
404: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal count value entered. Max value is 1000
404: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
404: No entity found for query"},"response":[]},{"name":"Change a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ‘add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4
BODY<task>
     <status>ASSIGNED</status>
     <fields>
         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
             <id>7599</id>
             <name>mf</name>
             <read_only>false</read_only>
             <implementation_status>NOT_STARTED</implementation_status>
             <group_change>
                        <name>ggg</name>
                        <st_uid>{A12AE330-0DBD-11E5-B841-7F0000010E0E}</st_uid>
                        <management_id>42</management_id>
                        <management_name>cp239</management_name>
                        <members>
                             <member type=\"Object\">
                                 <id>8</id>
                                 <name>yaakovs_host</name>
                                 <st_uid>{BDAA378C-C90B-4D12-B598-1AFED2D1DA14}</st_uid>
                                 <object_type>Host</object_type>
                                 <object_details>1.1.1.1/255.255.255.255</object_details>
                         <management_id>42</management_id>
                         <management_name>cp239</management_name>
                                 <status>NOT_CHANGED</status>
                             </member>
                             <member type=\"Object\">
                                 <id>9</id>
                                    <name>Avi_10.100.120.254</name>
                                    <st_uid>{8F195CDC-F426-47B6-9E8A-1FF14C17E54F}</st_uid>
                                     <object_type>Host</object_type>
                                     <object_details>10.100.120.254/255.255.255.255</object_details>
                                     <management_id>42</management_id>
                                     <management_name>cp239</management_name>
                                     <status>NOT_CHANGED</status>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>2.2.2.2/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>3.3.3.3/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                 </members>
                 <change_implementation_status>NOT_RUN</change_implementation_status>
                    </group_change>
            </field>
     </fields>
</task>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Returns the details of a specified task","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2?expand_links=true

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID ."},"response":[]}]}]} \ No newline at end of file diff --git a/Postman Format v2/R20-2 postman collection/securetrack_R20-2-HF2-v2.json b/Postman Format v2/R20-2 postman collection/securetrack_R20-2-HF2-v2.json new file mode 100644 index 0000000..493eaac --- /dev/null +++ b/Postman Format v2/R20-2 postman collection/securetrack_R20-2-HF2-v2.json @@ -0,0 +1 @@ +{"info":{"_postman_id":"1","name":"Tufin Tufin SecureTrack R20-2-HF2","description":"Tufin Orchestration Suite - Tufin SecureTrack APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securetrack/apidoc","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json"},"item":[{"name":"Additional Policy Fields","item":[{"name":"Get all URL Categories by revision.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories","description":"Fetches list of URL Categories defined in a revision given by ID.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories
"},"response":[]},{"name":"Get additional parameters identities by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
type: Additional parameter type [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group

Response Messages:
200: Successful
400: Invalid request"},"response":[]},{"name":"Get specific additional parameter identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters/{{ids}}","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Additional parameter IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760
"},"response":[]},{"name":"Get a URL Category.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories/{{ids}}","description":"Fetches one or more URL Categories.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Url Category IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760
"},"response":[]}]},{"name":"Application IDs","item":[{"name":"Get applications identities by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/applications","description":"Fetches list of applications defined in a revision given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 1,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

"},"response":[]},{"name":"Get specific application identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/applications/{{ids}}","description":"Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760
"},"response":[]},{"name":"Get application identities by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications","description":"Fetches list of applications defined on device given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 50,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

"},"response":[]},{"name":"Get specific application identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications/{{ids}}","description":"Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
Note: This API retrieves the information from the latest revision.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
id: Device ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/1/applications/701
"},"response":[]}]},{"name":"Change Authorization","item":[{"name":"Compare revisions on two different devices in terms of traffic.","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_traffic_comparison_request\": {\n\t\t\"oldVersionId\": \"234\",\n\t\t\"newVersionId\": \"179\",\n\t\t\"oldId2newIdMap\": [\n\t\t\t{\n\t\t\t\t\"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",\n\t\t\t\t\"newId\" : \"{00-FACED0-00}\"\n\t\t\t}\n\t\t],\n\t\t\"withTraffic\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/policyTrafficComparison","description":"This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic.
The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions.
The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions.
Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared.
Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules
Note 3: The format of the result is the same as the one returned by /change_authorization
Note 4: The API accepts in request body only one pair of oldId - newId map
Note 5: The request is valid only if the mapping ids are found in the active policies

Parameters:
body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions.

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison
BODY{
    \"policy_traffic_comparison_request\": {
        \"oldVersionId\": \"234\",
        \"newVersionId\": \"179\",
        \"oldId2newIdMap\": [
            {
                \"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",
                \"newId\" : \"{00-FACED0-00}\"
            }
        ],
        \"withTraffic\": true
    }
}


Response Messages:
200: Policies diff was successfully calculated
400: Could not find the requested revisions for comparison"},"response":[]},{"name":"Determine if changes between two revisions are authorized","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"new_version"},{"value":null,"type":"text","key":"old_version"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/","description":"This API checks for unauthorized changes between any two versions of a firewall policy.
The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets.
The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket.

The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove).
The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes.

Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing.
Note 2: Use the ID returned by the /revisions API for new_version and old_version.
Note 3: The default value for traffic_details and ignore_tickets is false.
Note 4: Traffic that is handled by an implicit rule will not have a rule ID.

Parameters:
new_version: New version ID
old_version: Old version ID
traffic_details: Return unauthorized traffic change details for all modified rules [optional]
ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional]

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true

Response Messages:
200: Change authorization has been successfully calculated
400: Input parameters are not valid
400: Could not find the requested revisions for comparison"},"response":[]}]},{"name":"Change Windows","item":[{"name":"Get scheduling and device details for a specific change window","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"uid"},{"value":null,"type":"text","key":"task_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks/{{task_id}}","description":"Retrieves scheduling and device details for a specific change window.

Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
task_id: Task Id

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1
OUTPUT {
    \"commit_task\": {
        \"id\": 1,
        \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
        \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
        \"errors\": \"\",
        \"device_commits\": {
            \"device_commit\": [
                {
                    \"id\": 1,
                    \"result\": {
                        \"errors\": {
                            \"error\": \"got_error_from_dcs\"
                        },
                        \"device\": {
                            \"id\": 17,
                            \"status\": \"FAILURE\",
                            \"revision_id\": 1,
                            \"errors\": {
                                \"error\": \"Login error\"
                            }
                        }
                    }
                },
                {
                    \"id\": 2,
                    \"result\": {
                        \"errors\": \"\",
                        \"device\": {
                            \"id\": 19,
                            \"status\": \"SUCCESS_WITH_WARNINGS\",
                            \"revision_id\": 1,
                            \"warnings\": {
                                \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                            }
                        }
                    }
                }
            ]
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain
404: Fail to find task for change window "},"response":[]},{"name":"Get a list of completed policy changes for a specific change window","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks","description":"Retrieves a list of completed policy changes for a specific change window.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
start: Starting result for query allowable value is numeric [optional]
count: Number of tasks for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true
OUTPUT {
    \"commit_tasks\": {
        \"count\": 1,
        \"total\": 1,
        \"commit_task\": {
            \"id\": 1,
            \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
            \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
            \"errors\": \"\"
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain "},"response":[]},{"name":"Get name and status for all change windows","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/","description":"Retrieves a list of all change windows.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
start: Starting result for query allowable value is numeric [optional]
count: Number of change windows for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true
OUTPUT {
    \"change_windows\": {
        \"count\": 2,
        \"total\": 2,
        \"change_window\": [
            {
                \"uuid\": \"6ae41504-a95c-4f23-98a2-f18b2efadb9d\",
                \"name\": \"cw1\",
                \"domain_id\": 1,
                \"enabled\": true
            },
            {
                \"uuid\": \"fc7b167c-29ea-49a1-9ee3-efb6d1351343\",
                \"name\": \"cw2\",
                \"domain_id\": 1,
                \"enabled\": true
            }
        ]
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context "},"response":[]}]},{"name":"Device Interfaces and Zones","item":[{"name":"Get device zones by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/zones","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/zones
"},"response":[]},{"name":"Get device zones by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/zones","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/787/zones
"},"response":[]},{"name":"Get network interfaces by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/interfaces","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/interfaces
"},"response":[]},{"name":"Get zones and network interfaces that participate in sub-policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindable_objects","description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/bindable_objects
"},"response":[]},{"name":"Get network interfaces by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/interfaces","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/10/interfaces
"},"response":[]}]},{"name":"Domains","item":[{"name":"Add a domain","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"domain\": {\n\t\t\"name\": \"domain1\",\n\t\t\"address\": \"address\",\n\t\t\"description\": \"description\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains
BODY{
    \"domain\": {
        \"name\": \"domain1\",
        \"address\": \"address\",
        \"description\": \"description\"
    }
}


Response Messages:
403: User not permitted to access domains
400: Domain with this name already exists
400: Domain name is empty"},"response":[]},{"name":"Get all domains","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","description":"

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
403: User not permitted to access domains"},"response":[]},{"name":"Get domain","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","description":"Parameters:
context: Global MSSP context [optional]
id: Domain id

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
403: User not permitted to access domains
400: Domain with ID was not found"},"response":[]},{"name":"Update a domain","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"domain\": {\n\t\t\"name\": \"edited name\",\n\t\t\"address\": \"edited address\",\n\t\t\"description\": \"edited description\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","description":"Parameters:
id: Domain id
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains/2
BODY{
    \"domain\": {
        \"name\": \"edited name\",
        \"address\": \"edited address\",
        \"description\": \"edited description\"
    }
}


Response Messages:
403: User not permitted to access domains
400: Domain with ID was not found
400: Domain with this name already exists
400: Domain name is empty
400: Default domain cannot be changed"},"response":[]}]},{"name":"General Properties","item":[{"name":"Get general properties","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/properties/","description":"This API requires 'Super admin' privileges



Usage Example
URLhttps://192.168.1.1/securetrack/api/properties
OUTPUT{
    \"properties\": {
        \"sc_addresses\": {
            \"sc_address\": [
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"external\"
                },
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"internal\"
                }
            ]
        }
    }
}


Response Messages:
403: User not permitted to view properties"},"response":[]}]},{"name":"IPsec VPN","item":[{"name":"Get Check Point VPN (IPSec) communities and gateways","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_communities","description":"Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities.
Works on clusters and gateways, not on management servers.

Parameters:
device_id: The unique identifier of target device

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities
"},"response":[]},{"name":"Get Cisco IPsec policy and peers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"outputInterfaceName"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_tunnels","description":"Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config.
You can retrieve the interface names by calling the /devices/id/interfaces API.

Parameters:
device_id: The unique identifier of target device
outputInterfaceName: Interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1
"},"response":[]},{"name":"Get Cisco cryptographic maps by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/crypto_maps","description":"Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://191.168.1.1/securetrack/api/revisions/18/crypto_maps
"},"response":[]},{"name":"Get Cisco cryptographic maps by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/crypto_maps","description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/19/crypto_maps
"},"response":[]}]},{"name":"Internet Objects","item":[{"name":"Get resolved Internet representation for device","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}/object","description":"The order of precedence used to resolve the Internet object is:
Step 1: Identify the Internet referral:
Search for a defined Internet referral on the specified device.
If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral.
If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2.
If an Internet referral is not found, it resolves to “Any”.
Step 2: Resolve the object by name:
Search the specified device for a defined network object that matches the name returned in Step 1.
If a matching network object is not found, an error will be returned.

Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2/object

Response Messages:
200: Resolved Internet referral object for device is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Configured object was not found on the device
403: Access is denied."},"response":[]},{"name":"Update Internet representation for device","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_10.11.73.1\"\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Updates the Internet referral configuration for the device.
If there was no previous configuration, it will be created.

Parameters:
deviceId: SecureTrack Device ID
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_10.11.73.1\"
    }
}


Response Messages:
200: Internet referral configuration was updated
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
403: Access is denied."},"response":[]},{"name":"Get Internet representation for device","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Internet referral configuration was not found for device ID
403: Access is denied."},"response":[]},{"name":"Delete Internet representation for device","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration was deleted
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration for device ID does not exist
403: Access is denied."},"response":[]},{"name":"Create new Internet representation for a device","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_2.2.2.2\"\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/","description":"The internet referral lets you represent the Internet as an object on a device.
See REST API: /internet_referral/{deviceId:[0-9]+}/object for a description of how internet referral is resolved.

Parameters:
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_2.2.2.2\"
    }
}


Response Messages:
201: Internet referral configuration was created
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
400: Internet referral configuration for given device ID already exists
403: Access is denied."},"response":[]}]},{"name":"LDAP","item":[{"name":"Get LDAP entry details by DN","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"dn"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntryByDN","description":"Returns the UID, DN and Name of a LDAP entry specified by the DN.

Parameters:
dn: LDAP DN

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntryByDN?dn=CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com
OUTPUT{
    \"ldap_entry\": {
        \"uid\": \"mYbWQms7p0q5YinEyW5Byw==\",
        \"dn\": \"CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com\",
        \"name\": \"Manufacturing\"
    }
}


Response Messages:
200: OK
400: Invalid DN format
404: Entry matching the DN cannot be found
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Return LDAP entries which match the given search criteria","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"search_criteria\": {\n\t\t\"search_base_dn\": \"DC=tufintest,DC=com\",\n\t\t\"search_text\": \"test\",\n\t\t\"ldap_search_options\": {\n\t\t\t\"ldap_entry_types\": {\n\t\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\t\"OU\",\n\t\t\t\t\t\"USER\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"search_mode\": \"CONTAINS\",\n\t\t\t\"max_search_result\": 3\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/search","description":"Return list of LDAP entries which match the given search criteria according to the search mode (EXACT, CONTAINS, STARTS_WITH, ENDS_WITH).
The search is case insensitive.
The limit of max_search_result is 1000.

Parameters:
body: Search criteria

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/search
BODY{
    \"search_criteria\": {
        \"search_base_dn\": \"DC=tufintest,DC=com\",
        \"search_text\": \"test\",
        \"ldap_search_options\": {
            \"ldap_entry_types\": {
                \"ldap_entry_type\": [
                    \"OU\",
                    \"USER\"
                ]
            },
            \"search_mode\": \"CONTAINS\",
            \"max_search_result\": 3
        }
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
            {
                \"dn\": \"CN=User15ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"ZRuKW3XqIEOIxCwlfgJQYA==\",
                \"displayName\": \"User15ATTesting1\"
            },
            {
                \"dn\": \"CN=IWAM_TEST2003,CN=Users,DC=tufintest,DC=com\",
                \"uid\": \"bYVqqcZXsUSF51hiP4W7Yw==\",
                \"displayName\": \"Testing1\"
            },
            {
                \"dn\": \"CN=User1ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"2ma3TrgeHEWQDITwvcRqlg==\",
                \"displayName\": \"test\"
            }
            ]
        },
            \"has_more_results_to_return\": \"true\"
        }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal or invalid value)
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Return entries that exactly match one of the given strings","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"search_by_name_criteria\": {\n\t\t\"search_texts\": {\n\t\t\t\"search_text\": [\n\t\t\t\t\"Finance\",\n\t\t\t\t\"Marketing\",\n\t\t\t\t\"Management\"\n\t\t\t]\n\t\t},\n\t\t\"ldap_entry_types\": {\n\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\"GROUP\"\n\t\t\t]\n\t\t},\n\t\t\"max_search_result\": 20\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntriesByNames","description":"Return list of LDAP entries which match the exact given multiple search_text.

Parameters:
body: Names to search

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntriesByNames
BODY{
    \"search_by_name_criteria\": {
        \"search_texts\": {
            \"search_text\": [
                \"Finance\",
                \"Marketing\",
                \"Management\"
            ]
        },
        \"ldap_entry_types\": {
            \"ldap_entry_type\": [
                \"GROUP\"
            ]
        },
        \"max_search_result\": 20
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Finance,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"uOvJTpYRD0aTjEENA87N5A==\",
                    \"displayName\": \"Finance\"
                },
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Management,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"jdf778skfsgs730fksdHHs==\",
                    \"displayName\": \"Management\"
                }
            ]
        },
        \"has_more_results_to_return\": false
    }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal value)
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Get the base DN entry details","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getBaseDNEntry","description":"The returned \"base DN\" is used by GetEntriesByNames API as the search start entry.



Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getBaseDNEntry
OUTPUT{
    \"ldap_entry\": {
        \"dn\": \"DC=tufintest,DC=com\",
        \"uid\": \"nABbRP/lPUKlteNRI4j6iA==\"
    }
}


Response Messages:
200: OK
404: Base Entry cannot be found
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]}]},{"name":"Monitored Devices","item":[{"name":"Add devices to SecureTrack","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n \t\t \"devices\": [{ \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"r80_version\":\"false\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"user_name\":\"admin\",\n \t\t\t\t \"password\":\"1234\",\n \t\t\t\t \"r80_version\":\"true\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"ASA\",\n \t\t\t \"vendor\":\"Cisco\",\n \t\t\t \"securetrack_domain\":\"Domain-A\",\n \t\t\t \"display_name\":\"Ireland-ASA\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t \"enable_virtual_contexts\":\"true\",\n \t\t\t \"import_all\":\"false\",\n \t\t\t \"import_devices\": \n \t\t\t\t\t [\"VC1\",\"VC2\"],\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"enable_password\":\"st-enable-password\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"Panorama\",\n \t\t\t \"vendor\":\"PaloAltoNetworks\",\n \t\t\t \"display_name\":\"First-Device-example\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t {\n \t\t\t \"model\":\"FortiManager\",\n \t\t\t \"vendor\":\"Fortinet\",\n \t\t\t \"display_name\":\"Spain-FortiManager\",\n \t\t\t \"securetrack_server\":\"RemoteControlServerName\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_all\": \"false\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t\t { \n \t\t\t\t \"name\": \"AdomX\",\n \t\t\t\t \"import_all\": \"false\", \n \t\t\t\t \"managed_devices\": [\"FW1\"]\n \t\t\t\t\t\t}\n \t\t\t\t\t]\n \t\t\t\t}\n \t\t\t}\n \t\t]\n \t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","description":"Use this API to add a single device or a list of devices to SecureTrack.
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
Currently supported types: CMA, SMC, ASA, Panorama NG and FortiManager.

This API verifies connection to the provided device, before adding a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be added.
Only \"live\" device with correct credentials can be added using this API.
To add Checkpoint R77 devices, use \"r80_version\" : \"false\".


Parameters:
body: device_list

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"r80_version\":\"false\"
             }
         },
         {
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"user_name\":\"admin\",
                 \"password\":\"1234\",
                 \"r80_version\":\"true\"
             }
         },
         {
             \"model\":\"ASA\",
             \"vendor\":\"Cisco\",
             \"securetrack_domain\":\"Domain-A\",
             \"display_name\":\"Ireland-ASA\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
             \"enable_virtual_contexts\":\"true\",
             \"import_all\":\"false\",
             \"import_devices\":
                     [\"VC1\",\"VC2\"],
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"collect_dynamic_topology\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"enable_password\":\"st-enable-password\"
             }
         },
         {
             \"model\":\"Panorama\",
             \"vendor\":\"PaloAltoNetworks\",
             \"display_name\":\"First-Device-example\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"model\":\"FortiManager\",
             \"vendor\":\"Fortinet\",
             \"display_name\":\"Spain-FortiManager\",
             \"securetrack_server\":\"RemoteControlServerName\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_all\": \"false\",
                 \"import_devices\": [
                         {
                 \"name\": \"AdomX\",
                 \"import_all\": \"false\",
                 \"managed_devices\": [\"FW1\"]
                        }
                    ]
                }
            }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Edit Securetrack device","request":{"method":"PATCH","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n\t\t \"devices\": [{\n\t\t\t \"device_id\": 1,\n\t\t\t \"display_name\": \"CheckPoint-R77-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.1\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"authentication_mode\": \"LEA\",\n\t\t\t\t \"lea_authentication_mode\": \"ssl_opsec\",\n\t\t\t\t \"lea_authentication_port\": \"2488\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 2,\n\t\t\t \"display_name\": \"CheckPoint-R80-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 3,\n\t\t\t \"display_name\": \"Cisco-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"enable_password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 4,\n\t\t\t \"display_name\": \"PaloAlto-PanoramaNg-Device\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 5,\n\t\t\t \"display_name\": \"PaloAlto-DeviceGroup\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 6,\n\t\t\t \"display_name\": \"PaloAlto-FireWall-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 7,\n\t\t\t \"display_name\": \"Spain-FortiManager\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 8,\n\t\t\t \"display_name\": \"FortiManager-Adom\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 9,\n\t\t\t \"display_name\": \"FortiManager-FireWall\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t }\n\t\t]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","description":"Use this API to edit the settings of a management device, including changing multiple parameters in the same call.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
Note: This API cannot be used to edit SecureTrack Domains and SecureTrack Servers.
This API verifies connection to the provided device, before updating a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be updated.
Only \"live\" device with correct credentials can be updated using this API.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"device_id\": 1,
             \"display_name\": \"CheckPoint-R77-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.1\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"authentication_mode\": \"LEA\",
                 \"lea_authentication_mode\": \"ssl_opsec\",
                 \"lea_authentication_port\": \"2488\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 2,
             \"display_name\": \"CheckPoint-R80-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.2\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 3,
             \"display_name\": \"Cisco-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"enable_password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 4,
             \"display_name\": \"PaloAlto-PanoramaNg-Device\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 5,
             \"display_name\": \"PaloAlto-DeviceGroup\"
         },
         {
             \"device_id\": 6,
             \"display_name\": \"PaloAlto-FireWall-Device\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         },
         {
             \"device_id\": 7,
             \"display_name\": \"Spain-FortiManager\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 8,
             \"display_name\": \"FortiManager-Adom\"
         },
         {
             \"device_id\": 9,
             \"display_name\": \"FortiManager-FireWall\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Get specific device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}","description":"Returns the vendor, model, name, domain and ID for the specified device.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
id: Device ID
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/60

Usage Example
https://192.168.1.1/securetrack/api/devices/20?show_os_version=true
"},"response":[]},{"name":"Add offline device","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t asa \n\t Cisco\n\t 1\n\t Default\n\t API OFFLINE ASA1\n\t true\n\t true\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","description":"You can choose to select the domain either by name or id using the domain_id or domain_name tags.\nDevice name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
body: Device to be added

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices
BODY<device>
     <model>asa</model>
     <vendor>Cisco</vendor>
     <domain_id>1</domain_id>
     <domain_name>Default</domain_name>
     <name>API OFFLINE ASA1</name>
     <offline>true</offline>
     <topology>true</topology>
</device>

"},"response":[]},{"name":"Get devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","description":"Returns the list of devices that are configured in SecureTrack, including the vendor, model, name, domain and device ID.
The results can be sorted by ip, name, vendor and model.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
name: Device name [optional]
ip: Device IP address [optional]
vendor: Device vendor [optional]
model: Device model [optional]
sort: Sort ascending or descending allowable types are: asc or desc [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices

Usage Example
https://192.168.1.1/securetrack/api/devices?vendor=VMware

Usage Example
https://192.168.1.1/securetrack/api/devices?sort=ip:asc

Usage Example
https://192.168.1.1/securetrack/api/devices?show_os_version=true
"},"response":[]},{"name":"Import managed devices","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n \t\t \"devices\":[ \n \t\t { \n \t\t\t \"device_id\":\"1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"2\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"firewall1\", \"firewall2\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"3\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"] \n \t\t\t }\n \t\t }\n \t\t]\n \t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/import","description":"Use this API to import more managed devices to SecureTrack.
The following devices can be added: Device Groups (for Panorama), Administrative Domains (for FortiManager).\nCurrently supported types: Panorama, FortiManager, Cisco ASA.
Please see examples below per device id: device id 1 for Panorama, device 2 for FortiManager, device id 3 for Cisco ASA.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk/import
BODY{
     \"devices_list\":{
         \"devices\":[
         {
             \"device_id\":\"1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"device_id\":\"2\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [
                     {
                         \"name\":\"Adom1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"firewall1\", \"firewall2\"]
                     },
                     {
                         \"name\":\"Adom2\",
                         \"import_all\":\"true\"
                     }
                 ]
             }
         },
         {
             \"device_id\":\"3\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"]
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Get specific task results of bulk operations on devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"task_uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/tasks/{{task_uid}}","description":"Use this API to track and display the current progress of the devices being edited or added to\nSecureTrack for a specific Task ID.
For a list of devices, the status of each device is displayed.

A device that was not added due to some reason will be added to \"failed\" list with status element containing a description.
For example:
\"description\": \"No connection to device\".

Parameters:
task_uid: Task UID

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk/tasks/d7e88799-a6e5-45da-8c72-c979a5dbe235
OUTPUT{
    \"task_result\":{
        \"total_succeeded\":\"0\",
        \"total_in_progress\":\"2\",
        \"total_failed\":\"0\",
        \"succeeded\":{
            \"count\":\"0\"
        },
        \"in_progress\":{
            \"count\":\"2\",
            \"devices\":[
                {
                    \"device_id\":\"1\",
                    \"display_name\":\"Europe-CMA\",
                    \"ip_address\":\"192.168.1.1\",
                    \"status\":{
                    }
                },
                {
                    \"device_id\":\"2\",
                    \"display_name\":\"Ireland-ASA\",
                    \"ip_address\":\"172.16.1.1\",
                    \"status\":{
                    }
                }
            ]
        },
        \"failed\":{
            \"count\":\"0\"
        }
    }
}


Response Messages:
404: The task with the given UID was not found
400: Bad request
200: Accepted
408: Request timed out
500: Internal server error"},"response":[]},{"name":"Get textual configuration by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/config","description":"Get latest revision of running configuration for a given device Id.


Parameters:
context: global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/111/config
"},"response":[]},{"name":"Add configuration for offline device","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"configuration_file"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/tasks/add_device_config_task","description":"Parameters:
device_id: Device ID
configuration_file: Configuration File

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"device_id=1\" https://192.168.1.1/securetrack/api/tasks/add_device_config_task

Response Messages:
200: Configuration added successfully."},"response":[]},{"name":"Update offline device","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t API OFFLINE ASA2\n\t true\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}","description":"Device name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
device_id: Device ID
body: Device to be updated

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/1
BODY<device>
     <name>API OFFLINE ASA2</name>
     <topology>true</topology>
</device>

"},"response":[]},{"name":"Get textual configuration by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/config","description":"Returns textual configuration for the specified revision Id.


Parameters:
context: Global MSSP context [optional]
id: Revision id

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/config
"},"response":[]}]},{"name":"NAT Policies","item":[{"name":"Get NAT objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/nat_objects","description":"Fetches a list of NAT objects for a given revision
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Version ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects?get_total=true
"},"response":[]},{"name":"Get NAT objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_objects","description":"Fetches a list of NAT objects defined on device given by device ID
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable value is numeric [optional]
count: Starting page for query allowable value is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects?get_total=true
"},"response":[]},{"name":"Get NAT rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_rules/bindings","description":"Fetches list of NAT rules for device given by device ID

input_interface and output_interface are not supported for Panorama running in Advanced management mode
nat_stage is supported for Netscreen and JunOS
nat_type is supported for FortiManager
Note: For Check Point, NAT rules are available from the modules (not managements)
Note: For Palo Alto, filtering NAT rules by interface is only available for firewall devices

Parameters:
context: Global MSSP context [optional]
id: Device ID
input_interface: Input interface for NAT rules, \"any\" for all interfaces [optional]
output_interface: output interface for NAT rules, \"any\" for all interfaces [optional]
nat_stage: NAT stage for NAT rules allowable values: \"pre_policy\" , \"post_policy\" or \"both\" [optional]
nat_type: NAT stage for NAT rules allowable values: \"vip\" or \"reverse_vip\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/10/nat_rules/bindings?input_interface=Any
"},"response":[]}]},{"name":"Network Objects","item":[{"name":"Get network groups containing specified network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/groups","description":"Returns groups that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.

Usage Example
https://192.168.1.1/securetrack/api/network_objects/69577/groups
"},"response":[]},{"name":"Get rules containing specified network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/rules","description":"Returns the security rules that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.
include_groups: You can add \"include_groups\" to find rules that include the network object and rules that include the groups that include the network object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/65078/rules?include_groups=true
"},"response":[]},{"name":"Get network objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/network_objects","description":"Fetches list of network objects defined on device given by ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169178,
                \"name\": \"Access_role\",
                \"display_name\": \"Access_role\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": false,
                \"comment\": \"\",
                \"uid\": \"{FC267948-DA8C-4FB6-A736-76B5254BF825}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14320,
                        \"name\": \"ad_group_auto_30K_grp1\",
                        \"display_name\": \"auto_30K_grp1\",
                        \"class_name\": \"ad_group\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{CAB92DCC-CF63-4E47-B8E3-1E1231996D5E}\",
                        \"dn\": \"CN=auto_30K_grp1,OU=OU_30K_Groups,DC=rnd,DC=local\"
                    }
                }
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid"},"response":[]},{"name":"Get network objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/network_objects","description":"Fetches list of network objects from specific revision
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169183,
                \"name\": \"Access role 1\",
                \"display_name\": \"Access role 1\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": true,
                \"comment\": \"\",
                \"uid\": \"{1E4C35A0-1FE4-4101-8A38-FDE656BCDCFB}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14346,
                        \"name\": \"all identified\",
                        \"display_name\": \"all identified\",
                        \"class_name\": \"all_identified\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{17A972AC-4B4A-4715-859F-867128707F59}\",
                        \"dn\": \"\"
                    }
                }
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid"},"response":[]},{"name":"Get network objects matching specified criteria","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"filter"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/search","description":"You can search for network objects where the IP address, name or comment fields have a specified text string,
or you can search for network objects that have an IP address that matches, contains or is contained in a specified IP subnet,
or you can search for network objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns network objects where the IP address, name or comment fields have a specified text string. “subnet” filter returns network objects that have an IP address that matches, contains or is contained in a specified IP subnet. “uid“ filter returns network objects with the specified uid. If no filter is specified, the “text” filter is used.
device_id: Returns network objects belonging to the specified device_id. [optional]
ip: (For “text” filter) You can specify \"ip\" to find network objects with the specified text in the IP address field. [optional]
name: (For “text” filter) You can specify \"name\" to find network objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find network objects with the specified text in the comment field. [optional]
any_field: (For “text” filter) You can specify \"any_field\" to find network objects with the specified text in the IP address, name or comment fields. [optional]
exact_match: (For “text” filter) You can add \"exact_match=true\" to find network objects with the specified text in the comment field. If this field is not specified, the query uses \"exact_match=false\". [optional]
contained_in: (For “subnet” filter) You can specify \"contained_in\" to find network objects that are contained in the specified IP subnet. For example, 10.1.0.0 is contained in 10.0.0.0. [optional]
contains: (For “subnet” filter) You can specify \"contains\" to find network objects that contain the specified IP subnet. For example, 10.0.0.0 contains 10.1.0.0. [optional]
exact_subnet: (For “subnet” filter) You can specify \"exact_subnet\" to find network objects that have the specified IP address. [optional]
uid: (for “uid“ filter) Returns network objects with the specified uid. [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: You can specify \"typeOnDevice\" to find network object groups that are EDL. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=host&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&any_field=host&count=10&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&contains=10.1.1.0

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&count=10&exact_subnet=1.1.1.1

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191&device_id=4

Usage Example
URLhttps://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=Access_Role&identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1,
        \"total\": 1,
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169197,
            \"name\": \"Access_Role_aaa\",
            \"display_name\": \"Access_Role_aaa\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14317,
                    \"name\": \"ad_group_aaa\",
                    \"display_name\": \"aaa\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{5D16859C-0256-4673-A402-4254588B8F40}\",
                    \"dn\": \"CN=aaa,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}


Response Messages:
400: The typeOnDevice value is not valid.Use edl_ip_list as value to search EDL groups."},"response":[]},{"name":"Get specific network objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/network_objects/{{ids}}","description":"Fetches a single or partial list of the network objects for a given revision.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects/69547?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169185,
            \"name\": \"Access_Role_Domain Controllers\",
            \"display_name\": \"Access_Role_Domain Controllers\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{140B8F32-188D-414C-A7BE-F4A7D7E9A169}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14237,
                    \"name\": \"ad_group_Domain_Controllers\",
                    \"display_name\": \"Domain Controllers\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{0A8A459E-58E8-45DC-981E-16BBF2BD1922}\",
                    \"dn\": \"CN=Domain Controllers,CN=Users,DC=rnd,DC=local\"
                }
            }
        }
    }
}

"},"response":[]},{"name":"Get specific network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/network_objects/{{ids}}","description":"Fetches a single or partial list of the network objects for a given device ID.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects/169184?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169184,
            \"name\": \"Access_Role_@grp\",
            \"display_name\": \"Access_Role_@grp\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{1870612C-0922-4AEE-81FF-5472DB7C32E1}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14338,
                    \"name\": \"ad_group_grp\",
                    \"display_name\": \"@grp\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{C5740C23-F36E-4D2E-8B17-1F99C239C12A}\",
                    \"dn\": \"CN=@grp,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}

"},"response":[]}]},{"name":"Network Topology","item":[{"name":"Get generic devices that are configured in ST","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","description":"Returns a list of the generic devices included in all the domains that the user has permission to.
Use context and/or name optional parameters to get more specific results.
To get context optional parameter, you can call /domains/ API and use the id included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
name: Generic device name [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices
"},"response":[]},{"name":"Add generic device to Topology model","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"configuration_file"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","description":"Upload a configuration file that will be used to add a generic device to the Topology model.
The context field is the domain ID to which the generic device is added: If not provided, the device is added to the global domain.
configuration_file must include a valid generic device configuration.
The specified path must point to a file on the computer being sue to make the REST API call.
If update update_topology = true, then the Topology model will be updated immediately after the device is added.
For maximum efficiency, if you are adding multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.Default value for update_topology = true.
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
body: Generic device to be added
configuration_file: Configuration File for generic device
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"my_generic_device\", \"customer_id\": 1}};type=application/json' -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices\n

Response Messages:
201: The generic device was created successfully
403: User is not permitted to access the specified domain
400: Failed to create generic device "},"response":[]},{"name":"Get cloud information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 2,\n\t\t\"total\": 2,\n\t\t\"cloud\": [\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW1\",\n\t\t\t\t\"management_id\": 20,\n\t\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\t\"cloud_id\": 120,\n\t\t\t\t\"vertex_id\": 250,\n\t\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\t\"routes_count\": 5,\n\t\t\t\t\"is_parent\": false\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW2\",\n\t\t\t\t\"management_id\": 21,\n\t\t\t\t\"cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t\t\"cloud_id\": 125,\n\t\t\t\t\"vertex_id\": 270,\n\t\t\t\t\"ip\": \"172.16.0.1\",\n\t\t\t\t\"routes_count\": 7,\n\t\t\t\t\"is_parent\": false,\n\t\t\t\t\"parent_vertex_id\": 40\n\t\t\t\t\"parent_cloud_id\": 45\n\t\t\t\t\"parent_cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t}\n\t\t]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions","description":"Returns information about all clouds in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
context: Global MSSP context [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions
BODY{
    \"suggested_clouds\": {
        \"count\": 2,
        \"total\": 2,
        \"cloud\": [
            {
                \"management_name\": \"FW1\",
                \"management_id\": 20,
                \"cloud_name\": \"Cloud 10.100.0.1\",
                \"cloud_id\": 120,
                \"vertex_id\": 250,
                \"ip\": \"10.100.0.1\",
                \"routes_count\": 5,
                \"is_parent\": false
            },
            {
                \"management_name\": \"FW2\",
                \"management_id\": 21,
                \"cloud_name\": \"Cloud 172.16.0.1\",
                \"cloud_id\": 125,
                \"vertex_id\": 270,
                \"ip\": \"172.16.0.1\",
                \"routes_count\": 7,
                \"is_parent\": false,
                \"parent_vertex_id\": 40
                \"parent_cloud_id\": 45
                \"parent_cloud_name\": \"Cloud 172.16.0.1\",
            }
        ]
    }
}


Response Messages:
202: Accepted
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Get topology network interfaces by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"mgmtId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_interfaces","description":"The returned interfaces are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
context: Global MSSP context [optional]
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=1&is_generic=true
"},"response":[]},{"name":"Get most specific network interfaces from which a host IP is accessible","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"host"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/interfaces/last_hop","description":"Parameters:
context: Global MSSP context [optional]
host: IP address of device for a query

Usage Example
https://192.168.1.1/securetrack/api/devices/interfaces/last_hop?host=192.168.1.66
"},"response":[]},{"name":"Get topology routing tables for a given device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"mgmtId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_routes","description":"The returned routing tables are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=1&is_generic=true
"},"response":[]},{"name":"Get topology subnets","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets","description":"Returns a list of the topology subnets for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology subnet names that match the search criteria provided, as follows:
1. If you provide only a mask, then an exact match search is done on the mask portion of the name
e.g. if name=/2, the results will include 1.2.3.4/2, but not 1.2.3.4/22
2. If you provide only a partial or complete IP address, then a contains search is done in the IPv4 block portion of the name
e.g. name=32, the results will include 192.168.205.32/24 and 55.192.32.22/16, but will not include 55.168.205.5/32
3. If you provide both an IPv4 address (either partial or complete) and a mask, then an exact match search is done
e.g. if name=23.4/2, then the results will include 192.168.23.4/2, but will not include 192.168.23.4/23 or 23.4.192.168/2

Use the optional ip parameter to restrict the results to topology subnets that contain this ip, see example below.

User can use ip or name parameter, not both.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
name: Subnet name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]
ip: Ip host [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=10.27
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.20/32\",
                \"ip\": \"10.27.122.20\",
                \"mask\": \"255.255.255.255\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 616,
                \"name\": \"10.27.122.60/32\",
                \"ip\": \"10.27.122.60\",
                \"mask\": \"255.255.255.255\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 619,
                \"name\": \"10.27.122.0/30\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 620,
                \"name\": \"10.27.122.4/30\",
                \"ip\": \"10.27.122.4\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=144/30
OUTPUT{
    \"topology_subnets\": {
        \"count\": 2,
        \"total\": 2,
        \"subnets\": [
            {
                \"id\": 773,
                \"name\": \"10.13.64.144/30\",
                \"ip\": \"10.13.64.144\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 825,
                \"name\": \"10.15.64.144/30\",
                \"ip\": \"10.15.64.144\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?ip=10.27.122.3
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.0/24\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.0\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 616,
                \"name\": \"10.27.0.0/16\",
                \"ip\": \"10.27.0.0\",
                \"mask\": \"255.255.0.0\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 619,
                \"name\": \"10.0.0.0/8\",
                \"ip\": \"10.0.0.0\",
                \"mask\": \"255.0.0.0\",
                \"domainIdTag\": 1
            },
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
403: Using name and ip parameters is not allowed
403: Using Ipv6 in ip parameter is not supported
403: Ip parameter is not valid"},"response":[]},{"name":"Delete Join Cloud","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","description":"Delete Join Cloud by Id.

Parameters:
cloudId [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
https://{st_host}/securetrack/api/topology/join/clouds/67\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Get Join Cloud","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","description":"Get Join Cloud by Id.

Parameters:
cloudId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds/67
OUTPUT{
    id: 67,
    name: \"Yami\",
    clouds: [
        1,
        2,
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Create generic Routes","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","description":"Create generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"mgmtId\": 1,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"mgmtId\": 2,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Update generic Routes","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"id\": 29,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"id\": 30,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","description":"Update generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"id\": 29,
        \"mgmtId\": 3,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"id\": 30,
        \"mgmtId\": 3,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Interface/Management Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Routes","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","description":"Delete all generic Routes from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/mgmt/2\n

Response Messages:
200: 11 Generic Routes were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Routes","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","description":"Get generic Routes of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/mgmt/2
OUTPUT{
    GenericRoutes: [
    {
        id: 27,
        mgmtId: 2,
        destination: \"10.4.4.4\",
        mask: \"255.0.0.0\",
        interfaceName: \"\",
        nextHop: \"AA\",
        nextHopType: \"VR\",
        vrf: \"V102-YO\"
    },
    {
        id: 28,
        mgmtId: 2,
        destination: \"10.4.5.5\",
        mask: \"255.0.0.0\",
        interfaceName: \"eeee\",
        nextHop: \"\",
        nextHopType: \"IP\",
        vrf: \"V101-PA\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Update an existing generic device in the Topology model","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","description":"Modify an existing generic device by uploading a new configuration file and/or specifying a new name.
If name field is specified, the generic device will be renamed.
configuration_file is optional, if provided it must include a valid generic device configuration.
The specified path points to a file in the client machine.
If a generic device name is changed and a new configuration file is not provided, topology will not be synchronized (update_topology flag is ignored).
Default value for update_topology = true.
To save time when there are several consecutive api calls: For the last call, set update_topology = true (for all other calls, update_topology = false).
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
id: Generic device id
body: Generic device to be updated [optional]
configuration_file: Configuration File for generic device [optional]
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices/24

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"new_generic_device_name\"}};type=application/json' -F \"update_topology=false\" https://192.168.1.1/securetrack/api/generic_devices/72

Response Messages:
204: The generic device was updated successfully.
400: A new name or a new configuration file must be indicated in order to update generic device with id {}
400: Failed to update generic device with id {}
404: A 'Generic Device' with the specified ID was not found"},"response":[]},{"name":"Delete generic device from Topology model","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","description":"Delete a generic device from the Topology model.
The ID must be for a valid generic device listed in the Topology Model.
If update update_topology = true, then the Topology model will be updated immediately after the device is deleted.
For maximum efficiency, if you are deleting multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.
Default value for update_topology = true.

Parameters:
id: Generic device id
update_topology: Synchronize And Update Topology [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/1

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/10?update_topology=false

Response Messages:
204: Generic Device deleted successfully.
400: Failed to delete generic device with id {}
404: A 'Generic Device' with the specified ID was not found"},"response":[]},{"name":"Get path image for specified traffic","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_image","description":"Returns an image containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80
"},"response":[]},{"name":"Delete generic Interface","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","description":"Delete a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Interface Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Interface","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","description":"Get a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/212
OUTPUT{
    GenericInterface: {
        id: 212,
        mgmtId: 1,
        name: \"newApo5\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PAL\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Interface Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","description":"Get generic Interfaces of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/mgmt/1
OUTPUT{
    GenericInterfaces: [
    {
        id: 206,
        mgmtId: 1,
        name: \"newApo3\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    },
    {
        id: 208,
        mgmtId: 1,
        name: \"newApo4\",
        ip: \"100.103.33.34\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"internal\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Interfaces","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","description":"Delete all generic Interfaces from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/mgmt/2\n

Response Messages:
200: 11 Generic Interfaces were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Update manual Interface CustomerTags","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"id\": 73,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port5\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"id\": 74,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","description":"Update manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"id\": 73,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port5\",
            \"customerId\": 2
        },
        {
            \"id\": 74,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
403: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred."},"response":[]},{"name":"Create manual Interface CustomerTags","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port4\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 6,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","description":"Create manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port4\",
            \"customerId\": 2
        },
        {
            \"generic\": false,
            \"deviceId\": 6,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
403: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred."},"response":[]},{"name":"Delete manual Interface CustomerTags","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","description":"Delete all manual Interface CustomerTags from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/6?generic=false\n

Response Messages:
200: 2 Interface Customers were deleted from deviceId 6.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Get manual Interface CustomerTags","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","description":"Get manual Interface CustomerTags of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/5?generic=false
OUTPUT{
    InterfaceCustomerTags: [
        {
            id: 73,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4\",
            customerId: 2
        },
        {
            id: 74,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4.1\",
            customerId: 3
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Update a cloud","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"new cloud\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","description":"Modify the name of a topology cloud, and add/remove members of a joined cloud.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain context of the joined cloud, and any members specified in the body.
To change the name of a topology cloud, enter a value in the name field of the body.
To add/remove members of a joined cloud, specify the action and specify the clouds in the members list of the body.
The action is used only if the body contains a members list. If a members list is provided but no actions is specified, then the default action is ‘add’.
When adding cloud members, clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
When removing cloud members, if only zero or one member remains in the joined cloud, it will be deleted from the Interactive Map.

Parameters:
id: cloud id
action: action [optional]
body: Cloud data
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLfor renaming of any cloud - https://192.168.1.1/securetrack/api/topology/clouds/436
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\"
    }
}


Usage Example
URLfor renaming and members updating of a joined cloud - https://192.168.1.1/securetrack/api/topology/clouds/436?action=remove
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
204: Cloud updated successfully
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: Cloud with id ID is a not joined cloud
412: Cloud id: cloudId does not belong to domain: Context
412: Provided clouds don't belongs to the same domain
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud
412: Member cloud with id ID cannot be removed - it is not a member of a joined cloud"},"response":[]},{"name":"Get Specific topology cloud","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","description":"Returns the topology cloud data for the specified id.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the cloud resides.

Parameters:
id: Cloud id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/48
OUTPUT{
    \"topology_cloud\": {
        \"id\": 48,
        \"name\": \"Cloud 69.70.120.155\",
        \"domain\": 1,
        \"type\": \"NON_JOINED\",
        \"ip\": \"69.70.120.155\"
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/66
OUTPUT{
    \"topology_cloud\": {
        \"id\": 66,
        \"name\": \"Cloud 10.100.10.14\",
        \"domain\": 1,
        \"type\": \"JOINED\",
        \"members\": [
            {
                \"id\": 50,
                \"ip\": \"10.100.6.238\",
                \"name\": \"Cloud 10.100.6.238\"
            },
            {
                \"id\": 73,
                \"ip\": \"10.100.10.14\",
                \"name\": \"Cloud 10.100.10.14\"
            },
            {
                \"id\": 74,
                \"ip\": \"10.100.9.9\",
                \"name\": \"Cloud 10.100.9.9\"
            }
        ]
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: No cloud was found for the provided ID"},"response":[]},{"name":"Update generic Interfaces","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"id\": 204,\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"NewBob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": null\n\t},\n\t{\n\t\t\"id\": 205,\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"NewBob2\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","description":"Update generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"id\": 204,
        \"mgmtId\": 1,
        \"name\": \"NewBob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": null
    },
    {
        \"id\": 205,
        \"mgmtId\": 2,
        \"name\": \"NewBob2\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Interface/Management Not Found.
500: General error occurred."},"response":[]},{"name":"Create generic Interfaces","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"Bob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-PA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"Bob2\",\n\t\t\"ip\": \"100.100.45.66\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-BA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","description":"Create generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"mgmtId\": 1,
        \"name\": \"Bob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-PA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    },
    {
        \"mgmtId\": 2,
        \"name\": \"Bob2\",
        \"ip\": \"100.100.45.66\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-BA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get path domains for specified traffic","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_domains","description":"Returns one or more domain entries for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_domains?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path_domains?src=10.0.2.1&dst=10.0.1.1&service=Facebook,tcp:80
OUTPUT {
    \"path_domain_entries\": {
        \"path_domain_entry\": [
                {
                        \"domainId\": \"1\",
                        \"vertex\": \"Subnet 10.0.2.0/24\",
                        \"entryType\": \"STARTING_POINT\",
                }
                {
                        \"domainId\": \"1\",
                        \"vertex\": \"Subnet 10.0.1.0/24\",
                        \"entryType\": \"ENDING_POINT\",
                }
    ]
}

"},"response":[]},{"name":"Get manual Interface CustomerTag","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","description":"Get manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/74
OUTPUT{
    InterfaceCustomerTag: {
        id: 74,
        generic: false,
        deviceId: 5,
        interfaceName: \"port4.1\",
        customerId: 3
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: InterfaceCustomer Id 74 not found.
500: General error occurred."},"response":[]},{"name":"Delete manual Interface CustomerTag","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","description":"Delete a manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/66\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: InterfaceCustomer Id 66 not found
500: General error occurred."},"response":[]},{"name":"Get Ignored Interfaces.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","description":"Get Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10
OUTPUT{
    IgnoredInterfaces: [
        {
            interfaceName: \"eth2\",
            mgmtId: 10,
            ip: \"0.0.0.0\"
        },
        {
            interfaceName: \"loopback100\",
            mgmtId: 10,
            ip: \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
500: General error occurred."},"response":[]},{"name":"Delete Ignored Interfaces.","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","description":"Delete Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10\n

Response Messages:
200: 2 entries deleted where mgmtId = 10
400: Bad Request.
403: Access is denied.
404: Management Id 10 not found.
500: General error occurred."},"response":[]},{"name":"Create Ignored Interfaces.","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"IgnoredInterfaces\": \n\t[\n\t\t{\n\t\t\t\"interfaceName\" : \"eth2\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"0.0.0.0\"\n\t\t},\n\t\t{\n\t\t\t\"interfaceName\" : \"loopback100\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"34.34.34.34\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface","description":"Create Ignored Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface
BODY{
    \"IgnoredInterfaces\":
    [
        {
            \"interfaceName\" : \"eth2\",
            \"mgmtId\" : 10,
            \"ip\" : \"0.0.0.0\"
        },
        {
            \"interfaceName\" : \"loopback100\",
            \"mgmtId\" : 10,
            \"ip\" : \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Id 10 not found.
500: General error occurred."},"response":[]},{"name":"Update generic Vpns","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"id\": 24,\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"new33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"id\": 25,\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"new111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","description":"Update generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"id\": 24,
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"new33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"id\": 25,
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"new111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Vpn/Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Create generic Vpns","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","description":"Create generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Create Transparent Firewalls","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback0\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","description":"Create Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback0\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Device Id 23 not found.
500: General error occurred."},"response":[]},{"name":"Update Transparent Firewalls","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"id\" : 25,\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"id\" : 27,\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","description":"Update Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"id\" : 25,
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback2\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"id\" : 27,
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt2\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Device Id 23 not found.
500: General error occurred."},"response":[]},{"name":"Get Transparent Firewalls","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","description":"Get Transparent Firewalls for participated managed/generic DeviceId

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw/device/9?generic=false
OUTPUT{
    TransparentFirewalls: [
        {
            id: 17,
            outputL3DeviceId: 22,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet0/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 1,
            inputL3IsGenericDevice: true,
            inputL3InterfaceName: \"interface2\"
        },
        {
            id: 23,
            outputL3DeviceId: 23,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet2/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 17,
            inputL3IsGenericDevice: false,
            inputL3InterfaceName: \"mgmt\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Delete Transparent Firewalls.","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","description":"Delete Transparent Firewalls for participated layer 2 deviceId

Parameters:
deviceId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/device/9\n

Response Messages:
200: 4 entries deleted where layer2 deviceId = 9
400: Bad Request.
403: Access is denied.
404: DeviceId 9 not found.
500: General error occurred."},"response":[]},{"name":"Delete Transparent Firewall","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/{{layer2DataId}}","description":"Delete Transparent Firewall by Id.

Parameters:
layer2DataId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/17\n

Response Messages:
200: layer2DataId 17 deleted.
400: Bad Request.
403: Access is denied.
404: Layer2Data Id 17 not found.
500: General error occurred."},"response":[]},{"name":"Get Specific topology subnet","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets/{{id}}","description":"Returns the subnet for the specified id, including information regarding attached devices and join candidates.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the subnet resides.

Parameters:
id: Subnet id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets/20
OUTPUT{
    \"subnet\": {
        \"id\": 18,
        \"name\": \"90.0.0.0/24\",
        \"ip\": \"90.0.0.0\",
        \"mask\": \"255.255.255.0\",
        \"attached_devices\": {
            \"attached_device\": [
                {
                    \"is_generic\": false,
                    \"id\": 10,
                    \"name\": \"srx\",
                    \"interface_id\": 4,
                    \"interface_name\": \"eth0\",
                    \"interface_ip\": \"90.0.0.1\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 13,
                    \"name\": \"ZBFW\",
                    \"interface_id\": 5,
                    \"interface_name\": \"eth1\",
                    \"interface_ip\": \"90.0.0.124\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 85,
                    \"name\": \"netscreen\",
                    \"interface_id\": 6,
                    \"interface_name\": \"eth2\",
                    \"interface_ip\": \"90.0.0.50\"
                }
            ]
        },
        \"join_candidates\": {
            \"join_candidate\": {
                \"is_generic\": false,
                \"id\": 72,
                \"name\": \"CP25\",
                \"interface_id\": 14,
                \"interface_name\": \"eth24/1\",
                \"interface_ip\": \"90.0.0.83\"
            }
        }
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for subnet with id ID
404: No subnet was found for the provided ID"},"response":[]},{"name":"Get Cloud Internal Networks","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_internal_networks/{{id}}","description":"Returns the internal networks for the specified Cloud management id.
This API requires 'Super admin' privileges.

Parameters:
id: Cloud management id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_internal_networks/20
OUTPUT{
    \"network_list\":
    {
        \"count\": 3,
        \"total\": 3,
        \"network\":
        {
            \"ip\": \"10.27.122.20\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.60\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.4\",
            \"mask\": \"255.255.255.252\"
        }
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for NSX with id ID
403: Device ID specified is not supported
404: The specified device ID was not found
404: The specified device ID was not found in Topology"},"response":[]},{"name":"Get topology clouds","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","description":"Returns a list of the topology clouds for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology clouds that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
type: Required clouds type [optional]
name: Cloud name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
OUTPUT{
    \"topology_clouds\": {
        \"count\": 3,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"MEMBER\",
                \"ip\": \"10.100.6.238\"
            },
            {
                \"id\": 66,
                \"name\": \"Cloud 10.100.10.14\",
                \"domain\": 1,
                \"type\": \"JOINED\",
                \"members\": [
                    {
                        \"id\": 50,
                        \"ip\": \"10.100.6.238\",
                        \"name\": \"Cloud 10.100.6.238\"
                    },
                    {
                        \"id\": 73,
                        \"ip\": \"10.100.10.14\",
                        \"name\": \"Cloud 10.100.10.14\"
                    },
                    {
                        \"id\": 74,
                        \"ip\": \"10.100.9.9\",
                        \"name\": \"Cloud 10.100.9.9\"
                    }
                ]
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds?type=non-joined
OUTPUT{
    \"topology_clouds\": {
        \"count\": 2,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"10.100.6.238\"
            }
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined"},"response":[]},{"name":"Create a joined topology cloud","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"optional new cloud name\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","description":"Create a new topology cloud in the Interactive Map by joining existing clouds together.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
The body must include at least two topology cloud ids that are on a single domain.
If the context parameter is not provided, then the API will use the context id of the first member of the members list in the body.
Clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
If the provided body does not specify a joined cloud name, the newly created topology cloud will be given the name of the first member of the members list in the body.


Parameters:
context: Global MSSP context [optional]
body: Cloud data
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"optional new cloud name\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
201: Joined cloud created successfully
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: You must provide 2 or more clouds
412: Cloud id: cloudId does not belong to domain: Context
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud"},"response":[]},{"name":"Delete generic Route","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","description":"Delete a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Route Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Route","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","description":"Get a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/30
OUTPUT{
    GenericRoute: {
        id: 30,
        mgmtId: 2,
        destination: \"222.100.10.22\",
        mask: \"255.255.0.0\",
        interfaceName: \"catch22\",
        nextHop: \"100.100.10.10\",
        nextHopType: \"IP\",
        vrf: \"V102-YO\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Route Not Found.
500: General error occurred."},"response":[]},{"name":"Create Join Cloud","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"name\" : \"Yami\",\n\t\t\"clouds\" : [1, 2]\n\t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","description":"Create Join Cloud.

Parameters:
body [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"name\" : \"Yami\",
        \"clouds\" : [1, 2]
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Update Join Cloud","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"id\" : 67,\n\t\t\"name\" : \"Yamile\",\n\t\t\"clouds\" : [1, 2, 57]\n\t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","description":"Update Join Clouds.

Parameters:
body [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"id\" : 67,
        \"name\" : \"Yamile\",
        \"clouds\" : [1, 2, 57]
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Get cloud information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"cloud\": {\n\t\t\t\"management_name\": \"FW1\",\n\t\t\t\"management_id\": 20,\n\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\"cloud_id\": 120,\n\t\t\t\"vertex_id\": 250,\n\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\"routes_count\": 5,\n\t\t\t\"is_parent\": false\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions/{{cloud_id}}","description":"Returns information about a specific cloud in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
cloud_id: cloud id
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions/120
BODY{
    \"suggested_clouds\": {
        \"count\": 1,
        \"total\": 1,
        \"cloud\": {
            \"management_name\": \"FW1\",
            \"management_id\": 20,
            \"cloud_name\": \"Cloud 10.100.0.1\",
            \"cloud_id\": 120,
            \"vertex_id\": 250,
            \"ip\": \"10.100.0.1\",
            \"routes_count\": 5,
            \"is_parent\": false
        }
    }
}


Response Messages:
202: Accepted
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Get Topology Synchronization status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize/status","description":"Returns the progress status of the Topology Model Synchronization.



Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize/status

Response Messages:
200: The topology synchronization was invoked successfully.
403: Access is denied
500: Error getting synchronize progress"},"response":[]},{"name":"Get path for specified traffic","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path","description":"Returns one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path?src=29.29.29.1&dst=25.25.25.1&service=Facebook,tcp:80
OUTPUT {
    \"path_calc_results\": {
        \"traffic_allowed\": false,
        \"device_info\": {
            \"id\": \"17\",
            \"name\": \"PA-VM-111.6 (Cluster)\",
            \"type\": \"mgmt\",
            \"vendor\": \"Palo Alto Networks\",
            \"incomingInterfaces\": {
                \"incomingVrf\": \"default\",
                \"ip\": \"29.29.29.1/255.255.255.252\",
                \"name\": \"tunnel.11\"
            },
            \"nextDevices\": {
                \"name\": \"DIRECTLY_CONNECTED\",
                \"routes\": {
                    \"outgoingInterfaceName\": \"ethernet1/5\",
                    \"outgoingVrf\": \"default\",
                    \"routeDestination\": \"25.25.25.1/255.255.255.0\"
                }
            },
            \"bindings\": {
                \"name\": \"\",
                \"rules\": [
                    {
                        \"action\": \"Accept\",
                        \"applications\": \"facebook\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 43,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    },
                    {
                        \"action\": \"Deny\",
                        \"applications\": \"Any\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 62,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    }
                ]
            }
        }
    }
}

"},"response":[]},{"name":"Get generic Vpn","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","description":"Get a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/18
OUTPUT{
    GenericVpn: {
        id: 18,
        generic: false,
        deviceId: 2,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.77\",
        tunnelDestIpAddr: \"1.1.1.88\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Vpn","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","description":"Delete a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred."},"response":[]},{"name":"Get topology generic VPN connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":{"raw":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic_vpns{device_id:(/device_id)?}","protocol":"https","host":["{{SecureTrack_IP}}"],"path":["securetrack","api","topology","generic_vpns{device_id:(","device_id)"],"query":[{"key":"}","value":null}]},"description":"Returns a list of the generic vpn connections in the Topology map, for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology generic vpn connections that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
is_generic: Get generic devices [optional]
device_id: Device id [optional]
name: VPN connection name (accepts '*', '?' as wildcards) [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns
OUTPUT{
    \"generic_vpns\": {
        \"count\": 3,
        \"total\": 3,
        \"generic_vpn\": [
            {
                \"device_id\": 222,
                \"generic\": false,
                \"id\": 3,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.155\",
                \"tunnel_src_ip\": \"84.200.6.1\",
                \"vpn_name\": \"Palo_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns?is_generic=true
OUTPUT{
    \"generic_vpns\": {
        \"count\": 2,
        \"total\": 2,
        \"generic_vpn\": [
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined"},"response":[]},{"name":"Delete generic Vpns","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","description":"Delete all generic Vpns from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/device/2?generic=false\n

Response Messages:
200: 4 Generic Vpns were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Vpns","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","description":"Get generic Vpns of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/device/3?generic=true
OUTPUT{
    GenericVpns: [
    {
        id: 17,
        generic: true,
        deviceId: 3,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.177\",
        tunnelDestIpAddr: \"1.1.1.188\"
    },
    {
        id: 22,
        generic: true,
        deviceId: 3,
        interfaceName: \"111\",
        tunnelSourceIpAddr: \"1.1.1.188\",
        tunnelDestIpAddr: \"1.1.1.177\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Synchronize the Topology model","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize","description":"Invoke of the Topology Model Synchronization.
full_sync=false - Builds the topology model from the information stored in the Tufin database.
full_sync=true - Retrieves the current data from devices and builds the topology model.
Default value for full_sync = false.

Parameters:
full_sync: Perform full sync [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize?full_sync=true

Response Messages:
200: The topology synchronization was invoked successfully.
403: Access is denied
500: Error Synchronizing Topology Model
503: Service unavailable, Graph builder is currently running"},"response":[]}]},{"name":"Network Zone Manager - Patterns","item":[{"name":"Get all pattern entries for specific zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t\n\t\t0\n\t\t2\n\t\t2\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEB\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEo\n\t\t\t2\n\t\t\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/pattern-entries","description":"Get the list of zone pattern entries for specific zones by identifiers

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the pattern entry results. [optional]
pattern: Filter by pattern string for the zone entry results. [optional]
name: Filter by zone name for the pattern entry results. [optional]
comment: Filter by comment for the pattern entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/1,2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entries_find_result>
    <paging_info>
        <start>0</start>
        <count>2</count>
        <total>2</total>
    </paging_info>
    <pattern_match_entries>
        <pattern_match_entry>
            <id>2</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEB</pattern>
            <zone_id>1</zone_id>
        </pattern_match_entry>
        <pattern_match_entry>
            <id>3</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEo</pattern>
            <zone_id>2</zone_id>
        </pattern_match_entry>
    </pattern_match_entries>
</pattern_match_entries_find_result>


Response Messages:
200: The zone pattern entries were successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get a specific zone pattern entry for a specific zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t2\tsecurity_group_by_name\n\tThis is a comment\n\tWEB\n\t75\n\tZone_10_0_0_1\n\t\n\t\t
koko
\n\t\tbobo\n\t\t1\n\t\tDefault\n\t
\n
\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries/{{id}}","description":"Get a specific zone pattern entry for a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone entry.
id: Identifier of the zone pattern entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/75/pattern-entries/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entry>
    <id>2</id>    <type>security_group_by_name</type>
    <comment>This is a comment</comment>
    <pattern>WEB</pattern>
    <zone_id>75</zone_id>
    <zone_name>Zone_10_0_0_1</zone_name>
    <domain>
        <address>koko</address>
        <description>bobo</description>
        <id>1</id>
        <name>Default</name>
    </domain>
</pattern_match_entry>


Response Messages:
200: The zone pattern entry was successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified identifier was not found.
404: A zone pattern entry with the specified identifier was not found."},"response":[]},{"name":"Create a zone pattern entry in a specific zone","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t\n\t\t1\n\t\t2\n\t\t\n\t\t\t1\n\t\t\tDefault\n\t\t\n\t\tWEB\n\t\tsecurity_group_by_name\n\t\tThis is a comment\n\t\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries","description":"Create a zone pattern entry in a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone pattern entry.
body: The zone pattern entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<create_pattern_match_entry>
    <pattern_match_entry>
        <id>1</id>
        <zone_id>2</zone_id>
        <domain>
            <id>1</id>
            <name>Default</name>
        </domain>
        <pattern>WEB</pattern>
        <type>security_group_by_name</type>
        <comment>This is a comment</comment>
    </pattern_match_entry>
</create_pattern_match_entry>


Response Messages:
201: The zone pattern entry was created successfully.
403: User is not permitted to access the specified domain
400: Some of pattern entry parameters were invalid or missing
404: A zone with the specified identifier was not found."},"response":[]}]},{"name":"Network Zone Manager - Subnets","item":[{"name":"Get entries for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/entries","description":"Get the list of zone entries for a zone.

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the zone entry results. [optional]
name: Filter by name for the zone entry results. [optional]
ip: Filter by IP for the zone entry results. [optional]
netmask: Filter by netmask for the zone entry results. [optional]
prefix: Filter by prefix for the zone entry results. [optional]
comment: Filter by comment for the zone entry results. [optional]
group: Filter by device group for the zone entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries

Response Messages:
200: The zone entries were successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Modify a zone entry","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.
body: The modified zone entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
200: The zone entry was modified successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Get a specific zone entry","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_id"},{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"Get a specific zone entry by ID for a zone.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/123

Response Messages:
200: The zone entry was successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Delete zone entries","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_id"},{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"Delete existing zone entries.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/10

Response Messages:
200: The zone entry was deleted successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Modify multiple existing zone entries","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entries\" : {\n\t\t\"zone_entry\": [\n\t\t\t{\n\t\t\t\t\"id\": 120,\n\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\"prefix\": 32,\n\t\t\t\t\"new_zone_id\": 85\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"id\": 139,\n\t\t\t\t\"ip\": \"1b98:c72:1f00:0001::\",\n\t\t\t\t\"prefix\": \"52\",\n\t\t\t\t\"new_zone_id\": 98\n\t\t\t}\n\t\t]\n}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","description":"For IPv4 entry provide IP and netmask/prefix.
For IPv6 provide IP and prefix only, netmask is not allowed.
new_zone_id is not optional, it may be the same as the present zoneId.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entries.
ids: The ID(s) of the zone entries to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/85,98/entries/120,139
BODY{
\"zone_entries\" : {
        \"zone_entry\": [
            {
                \"id\": 120,
                \"ip\": \"3.3.3.3\",
                \"prefix\": 32,
                \"new_zone_id\": 85
            },
            {
                \"id\": 139,
                \"ip\": \"1b98:c72:1f00:0001::\",
                \"prefix\": \"52\",
                \"new_zone_id\": 98
            }
        ]
}
}


Response Messages:
200: The zone entry was modified successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Create a zone entry","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
body: The zone entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
201: The zone entry was created successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found."},"response":[]},{"name":"Modify a zone entry","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_ids"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","description":"Modify an existing zone entry.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entry.
ids: The ID(s) of the zone entries to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/entries/10,20

Response Messages:
200: The zone entry was deleted successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]}]},{"name":"Network Zone Manager - Zones","item":[{"name":"Create a zone","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\tDMZ\n\tAll DMZ addresses\n\tfalse\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Create a zone.

Parameters:
context: Global MSSP context. [optional]
body: The zone to add.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <name>DMZ</name>
    <comment>All DMZ addresses</comment>
    <shared>false</shared>
</zone>


Response Messages:
201: The zone was created successfully.
403: User is not permitted to access the specified domain
400: The zone parameters were invalid"},"response":[]},{"name":"Get all zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Gets a list of all zones.

Parameters:
context: Global MSSP context. [optional]
name: Filter by zone name for the zone results. [optional]
comment: Filter by zone comment for the zone results. [optional]
imported: List domains that imported zones. [optional]
includeInternet: Include the Internet zone. [optional]
includeImported: Include imported zones. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
200: The zones were retrieved successfully.
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Delete all zones","request":{"method":"DELETE","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Delete all existing zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
204: All zones were successfully deleted.
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Get descendant zones for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/descendants","description":"Get a list of zones descended from the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for descendant zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/10,20/descendants

Response Messages:
200: The zone descendants were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Add a zone as a descendant to a zone","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"parent_id"},{"value":null,"type":"text","key":"child_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","description":"Add a zone(s) as a descendant to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to add descendant zone(s).
child_ids: The ID(s) of the zones to add as descendants.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was added as an descendant successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Remove a zone as an descendants to a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"parent_id"},{"value":null,"type":"text","key":"child_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","description":"Remove a zone(s) as an descendants to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to remove descendant zone(s).
child_ids: The ID(s) of the zone to remove as a descendant.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was removed as an descendant successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Remove a zone as an ancestor to a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"child_id"},{"value":null,"type":"text","key":"parent_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","description":"Remove a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to remove ancestors zone(s).
parent_ids: The ID(s) of the zones to remove as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was removed as an ancestor successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Add a zone as an ancestor to a zone","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"child_id"},{"value":null,"type":"text","key":"parent_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","description":"Add a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to add ancestors zone(s).
parent_ids: The ID(s) of the zones to add as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was added as an ancestor successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get shared zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/shared","description":"Get a list of shared zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/shared

Response Messages:
200: The list of shared zones was retrieved successfully.
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Map network elements to security zones","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t \n\t\t 10.8.8.0\n\t\t 255.255.255.0\n\t\t \n\t \n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_zones/","description":"This API maps each network element in the AccessRequestNetworkListDTO (such as IP address, IP address range, object, or group) to all matching Tufin security zones. If the network element is a group, then each zone also identifies all matching group members. The internet referral object can be included in the list, and will always map to the predefined Internet security zone. If the 'Any' element is included in the list it will map to all zones.
Note: if multi-domain mode is enabled, the API calls only checks zones that are in the “Default” domain.

Parameters:
body: AccessRequestNetworkListDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_zones
BODY<network_objects>
     <network_object xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"ip_network\">
         <network xsi:type=\"raw_network_subnet\">
         <ip>10.8.8.0</ip>
         <mask>255.255.255.0</mask>
         </network>
     </network_object>
</network_objects>


Response Messages:
200: Returns mapping of network elements to security zones
400: Access Request Network List is malformed.
403: Access is denied."},"response":[]},{"name":"Delete a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}","description":"Delete an existing zone.

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zone to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/1,2

Response Messages:
204: The specified zone was successfully deleted.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Modify a zone","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t2\n\tDMZ\n\tAll DMZ hosts\n\tfalse\n\tfalse\n\tfalse\n\tfalse\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","description":"Modify an existing zone.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <id>2</id>
    <name>DMZ</name>
    <comment>All DMZ hosts</comment>
    <shared>false</shared>
    <internet>false</internet>
    <user_networks>false</user_networks>
    <unassociated_networks>false</unassociated_networks>
</zone>


Response Messages:
204: The specified zone was successfully modified.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
400: The zone parameters were invalid"},"response":[]},{"name":"Get a specific zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","description":"Get the zone with the specified ID.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to get.
imported: List domains that imported zones. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2

Response Messages:
200: The zone was retrieved successfully.
403: User is not permitted to access the specified domain
403: A zone with the specified ID does not exist."},"response":[]},{"name":"Get configuration usages for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/dependencies","description":"Get a list of configuration usages for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for configuration dependencies.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/dependencies

Response Messages:
200: The zone dependencies were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Import a zone","request":{"method":"POST","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/import/{{ids}}","description":"Import a shared zone into the specified domain

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones to import. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/import/10,20

Response Messages:
200: The zone was imported successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get ancestor zones for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/ancestors","description":"Get a list of ancestor zones for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for ancestor zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/123,234/ancestors

Response Messages:
200: The zone ancestors were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]}]},{"name":"Policies and Sub-Policies","item":[{"name":"Get rules by input and output interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/topology_interfaces","description":"Parameters:
device_id: The unique identifier of target device
inputInterfaceName: Input interface name [optional]
outputInterfaceName: Output interface name [optional]
isIpv6: Is ipv6 policy [optional]

Usage Example
https://192.168.1.1/securetrack/api/bindings/2/topology_interfaces?inputInterfaceName=ethernet1/1&outputInterfaceName=ethernet1/2
"},"response":[]},{"name":"Get sub-policies (bindings) by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/bindings","description":"Returns a list of all of the subpolicies (bindings) for a given revision.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Revision ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
"},"response":[]},{"name":"Get policies by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/policies","description":"Fetches list of policies defined on a given revision ID

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/policies
"},"response":[]},{"name":"Get sub-policies (bindings) by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindings","description":"Returns a list of all of the subpolicies (bindings) for a given device.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Device ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
"},"response":[]},{"name":"Get policies by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/policies","description":"Fetches list of policies defined on a given device ID.
Supported devices: CheckPoint, Panorama Advanced, FortiManager Basic and Advanced, FMC and NSX.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/policies
"},"response":[]},{"name":"Get list of sub-policies (bindings) with input and/or output interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"supremum_version_id"},{"value":null,"type":"text","key":"inputInterfaceName"},{"value":null,"type":"text","key":"outputInterfaceName"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/binding_query","description":"Retrieve list of bindings of input and/or output interfaces

Parameters:
device_id: The unique identifier of target device
supremum_version_id: The unique identifier of target revision
inputInterfaceName: Input interface name
outputInterfaceName: Output interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/binding_query?supremum_version_id=785&inputInterfaceName=Any&outputInterfaceName=Any
"},"response":[]}]},{"name":"Policy Analysis","item":[{"name":"Run Policy Analysis query","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_ids"},{"value":null,"type":"text","key":"sources"},{"value":null,"type":"text","key":"destinations"},{"value":null,"type":"text","key":"services"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/policy_analysis/query/matching_rules","description":"Parameters:
device_ids: Device ids
sources: Source list
destinations: Destination list
services: Service list
exclude_any: Exclude any in the specified, comma-separated fields of source, destination or service. For example: exclude_any = destination,service [optional]
action: Action [optional]

Usage Example
https://192.168.1.1/securetrack/api/policy_analysis/query/matching_rules?device_ids=41&sources=33.33.33.0:24,113.113.113.100&destinations=114.1.1.0:24&services=tcp:80&exclude_any=source,destination

Response Messages:
200: Returns request results.
400: Error in request syntax."},"response":[]}]},{"name":"Policy Browser (formerly Rule Documentation)","item":[{"name":"Get specific rule documentation","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Fetches rule documentation for a single rule given by revision ID and rule ID.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the requested rule

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16373/documentation
"},"response":[]},{"name":"Modify specific rule documentation","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 172\n\t\t 789111\n\t \n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Modify rule documentation for a single rule identified by revision ID and rule ID.
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If no rule documentation exists for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If rule documentation already exists for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.
Record set entries that are automatically created or calculated, for example automatic mapping to a SecureChange ticket, cannot be modified.
The following fields are automatically calculated, and cannot be modified:
Permissiveness, Violations, Last Hit, Last Modified, Shadowing Status, Certification Status, Certification Date, Certification Expiration Date, Application Name, Application Owner

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the changed rule
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>172</id>
         <ticketCr>789111</ticketCr>
     </record_set>
</rule_documentation>

"},"response":[]},{"name":"Delete specific rule documentation","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Delete rule documentation for a single rule given by revision ID and rule ID.
If the rule has automatic mapping to a ticket, the record is not deleted.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Rule id

Usage Example
https://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
"},"response":[]},{"name":"Modify specific rule documentation","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 173\n\t\t 789112\n\t \n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Modify rule documentation for a single rule given by device ID and rule ID
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If there is no existing rule documentation for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If there is existing rule documentation for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>173</id>
         <ticketCr>789112</ticketCr>
     </record_set>
</rule_documentation>

"},"response":[]},{"name":"Delete specific rule documentation","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Delete rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
"},"response":[]},{"name":"Get specific rule documentation","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Fetches rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16373/documentation
"},"response":[]}]},{"name":"Policy Optimization","item":[{"name":"Get cleanups results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup
"},"response":[]},{"name":"Get shadowing rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"shadowed_uids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/shadowing_rules","description":"Find shadowing rules for given shadowed rules of a specific device

Parameters:
device_id: Device ID
shadowed_uids: UIDs of shadowed rules separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/31/shadowing_rules?shadowed_uids=78786a0d-b9cc-478e-b7a2-dea953c976c7
"},"response":[]},{"name":"Get the specific objects or rules identified for the cleanup results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"cleanup_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/instances","description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/instances
"},"response":[]},{"name":"Get devices in cleanup results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"cleanup_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/devices","description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/devices
"},"response":[]},{"name":"Get devices in risk results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"risk_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/devices","description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id

Usage Example
https://192.168.1.1/securetrack/api/risk/1/devices
"},"response":[]},{"name":"Get the specific objects or rules identified for the risk results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"risk_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/instances","description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk/1/instances
"},"response":[]},{"name":"Get risks results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk
"},"response":[]},{"name":"Get cleanups by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"code"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/cleanups","description":"Fetches set of Cleanup calculation results for a device given by ID.
Only fully shadowed rules (cleanup code C01) are supported.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
code: Cleanup category code
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query result allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/cleanups?code=C01
"},"response":[]}]},{"name":"Revisions","item":[{"name":"Get specific revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revId}}","description":"Fetches a revision specified by revision Id.
To get revId for this API, use the 'id' property of RevisionDTO that is returned by 'Get revisions by device' or 'Get latest revision by device' APIs

Parameters:
context: Global MSSP context [optional]
revId: Id of fetched revision

Usage Example
https://192.168.1.1/securetrack/api/revisions/785
"},"response":[]},{"name":"Get latest revision by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/latest_revision","description":"Fetches latest revision for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/105/latest_revision
"},"response":[]},{"name":"Get revisions by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/revisions","description":"Fetches revisions for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/105/revisions
"},"response":[]}]},{"name":"Rule Usage","item":[{"name":"Get last hits for all rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find_all/{{device_id}}","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.

Parameters:
device_id: device id

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find_all/20
"},"response":[]},{"name":"Get last hit for a specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"rule_uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find/{{device_id}}/{{rule_uid}}","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.
The rule_uid is the value from the uid field returned by the /rules API: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Parameters:
device_id: device_id
rule_uid: rule_uid

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find/20/ea9db13e-d058-45c6-a2f0-cd731027c22b
"},"response":[]}]},{"name":"Security Rules","item":[{"name":"Create a CSV file for rules search results","request":{"method":"GET","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/export","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is : for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API exports the results data as a CSV file in the SecureTrack Reports Repository.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export?search_text=shadowed:true
"},"response":[]},{"name":"Get a specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ruleId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rules/{{ruleId}}","description":"Parameters:
ruleId: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/rules/60
"},"response":[]},{"name":"Get rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules","description":"Returns a list of all of the security rules for the specified device.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.
For Cisco ASA devices, when applying a filter you must also add the direction.


Parameters:
context: Global MSSP context [optional]
id: Device ID
policyId: Policy ID [optional]
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Show rules grouping criteria. Can be set only to \"bindings\". Output will be grouped by bindings and section header for Check Point devices, ACL for Cisco devices, and Zones for Juniper, Palo Alto, and Fortinet device [optional]
with_zb: Include zone based rules, values can be 'true' or 'false' [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?subpolicy_name=layer1&is_global=true

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?interface=Loopback99:INSIDE
"},"response":[]},{"name":"Find rules","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/{{device_id}}","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.To get more information regarding objects included in the returned rules (like src_network or dst_network) use their uid, as the objects’ ID might change.
\n By default, if there are less than 3,000 rules - the API will return all the rules.\nIn case there are more than 3,000 rules the API will return an error code 413 with the error message “There are more than 3000 rules, you must use pagination”
“display_rule_number” should return only for Check Point R80 and higher devices.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
device_id: Device id
start: The starting rule to include in the returned results [optional]
count: Number of rules to include in the results [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/31?search_text=source:Sales_192.168.2.60 fromzone:sales tozone:External

Usage Example
https://192.168.1.1/securetrack/api/rule_search/20?search_text=Mobile Access hascomment:false

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=web_server&start=0&count=10

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search/59?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT {
    \"rules\":{
        \"count\":1,
        \"total\":1,
        \"rule\":{
            \"@xsi.type\":\"securityRuleDTO\",
            \"id\":21,
            \"cp_uid\":\"\",
            \"uid\":\"{9259f6ee-47a0-4996-a214-ab7edc14a916}\",
            \"order\":2,
            \"binding\":{
                \"default\":true,
                \"policy\":{
                    \"@xsi.type\":\"managementDomainPolicyDTO\",
                    \"id\":2,
                    \"name\":\"Standard\",
                    \"installable_targets\":\"\"
                },
                \"rule_count\":19,
                \"security_rule_count\":19,
                \"uid\":\"{00-FACED0-00}\"
                },
            \"acceleration_breaker\":false,
            \"action\":\"Accept\",
            \"application\":{
                \"id\":4735,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
            },
            \"authentication_rule\":false,
            \"comment\":\"DO NOT DELETE OR EDIT\",
            \"dst_network\":{
                \"id\":39,
                \"display_name\":\"Net_10.110.65.0\",
                \"name\":\"Net_10.110.65.0\"
                \"uid\":\"{1290f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_networks_negated\":false,
            \"dst_service\":{
                \"id\":7420,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
                \"uid\":\"{2904f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_services_negated\":false,
            \"dst_zone\":\"any\",
            \"disabled\":false,
            \"external\":false,
            \"implicit\":false,
            \"dst_zone_any\":true,
            \"src_zone_any\":true,
            \"name\":\"Accept SSHG\",
            \"option\":\"LOG_SESSION\",
            \"documentation\":{
                \"permissiveness_level\":\"LOW\",
                \"shadowed\":\"Not shadowed\",
                \"last_modified\":\"Today\",
                \"last_hit\":\"N/A\",
                \"violations\":\"\"
            },
            \"rule_location\":\"Shared\",
            \"rule_location_display\":\"Shared - Pre Rule\",
            \"rule_number\":2,
            \"display_rule_number\":\"2.1\",
            \"rule_type\":\"universal\",
            \"src_zone\":\"any\",
            \"src_network\":{
                \"id\":38,
                \"display_name\":\"Net_10.110.64.0\",
                \"name\":\"Net_10.110.64.0\"
                \"uid\":\"{4934f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"src_networks_negated\":false,
            \"src_services_negated\":false,
            \"track\":{
                \"level\":\"LOG\"
            },
            \"type\":\"rule\",
            \"users\":{
                \"id\":5,
                \"display_name\":\"tufin\\\\regina\",
                \"name\":\"tufin\\\\regina@ldap\"
            }
        }
    }
}


Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid
413: Max supported count is 3000
413: There are more than 3000 rules, you must use pagination"},"response":[]},{"name":"Get specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/rules/{{ids}}","description":"Returns a list of rules by revision ID, rule IDs and additional criteria

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \\\"documentation\\\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \\\"bindings\\\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16370
"},"response":[]},{"name":"Get rules by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules","description":"Returns a list of all of the security rules for the specified revision.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.
For Cisco ASA devices, when applying a filter you must also add the direction.


Parameters:
context: Global MSSP context [optional]
id: Revision id
policyId: Policy id [optional]
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]
with_zb: Include zone-based rules [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]
is_alternate_order: OrderBy alternate order, for display Aci rules by contracts [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?subpolicy_name=layer1&is_global=true

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?interface=Loopback99:INSIDE
"},"response":[]},{"name":"Get rule count per device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API will return a list of all the devices, the devices that has rules that match the search criteria will have rule_count that is bigger than 0

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=ICMP application:facebook

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT{
    \"device_list\":{
        \"device\":[
            {
                \"device_id\":512,
                \"revision_id\":6864,
                \"rule_count\":1
            },
            {
                \"device_id\":59,
                \"revision_id\":543,
                \"rule_count\":0
            }
        ]
    }
}

"},"response":[]},{"name":"Get specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/rules/{{ids}}","description":"Returns a list of rules by device ID, rule IDs and additional criteria.
Note: This API retrieves the information from the latest revision.


Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Rule IDs
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16370
"},"response":[]}]},{"name":"Services and Ports","item":[{"name":"Get specific service","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/services/{{ids}}","description":"Fetches list of specific service objects defined in revision given by revision ID and specified by their IDs

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/services/959888
"},"response":[]},{"name":"Get service groups containing specified service objects","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/groups","description":"Returns groups that contain the specified service objects


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.

Usage Example
https://192.168.1.1/securetrack/api/services/69577/groups
"},"response":[]},{"name":"Get specific service","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/services/{{ids}}","description":"Fetches list of specific service objects defined in device given by device ID and specified by their IDs.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Service object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/services/959888,959966
"},"response":[]},{"name":"Get rules containing specified service object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/rules","description":"Returns the security rules that contain the specified service object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.
include_groups: You can add \"include_groups\" to find rules that include the service object and rules that include the groups that include the service object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/65078/rules?include_groups=true
"},"response":[]},{"name":"Get services objects matching specified criteria","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"services\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"service:\": {\n\t\t\t\"id\": 169197,\n\t\t\t\"name\": \"tcp_10\",\n\t\t\t\"display_name\": \"tcp_10\",\n\t\t\t\"class_name\": \"access_role\",\n\t\t\t\"global\": false,\n\t\t\t\"device_id\": 158,\n\t\t\t\"comment\": \"\",\n\t\t\t\"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",\n\t\t\t\"implicit\": false,\n\t\t\t\"max\": false,\n\t\t\t\"min\": false,\n\t\t\t\"protocol\": 6,\n\t\t\t\"timeout\": \"\",\n\t\t\t\"type\": \"tcp_service\",\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/search","description":"You can search for service objects where the name or comment fields have a specified text string,
or you can search for service objects that have an Port or protocol that matches,
or you can search for service objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns service objects where the name or comment fields have a specified text string. \n“protocol” filter returns service objects that have a protocol that matches specified IP protocol number.\n“port” filter returns service objects that have a port that matches specified port number.\n “uid“ filter returns service objects with the specified uid.\n If no filter is specified, the “text” filter is used.
device_id: Returns service objects belonging to the specified device_id. [optional]
name: (For “text” filter) You can specify \"name\" to find service objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find service objects with the specified text in the comment field. [optional]
protocol: Specify Protocolto find service objects that have the specified IP Protocol. [optional]
port: Specify Portto find service objects that have the specified Port. [optional]
uid: (for “uid“ filter) Returns service objects with the specified uid. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=protocol&protocol=6&device_id=68

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=port&port=80

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
URLhttps://192.168.1.1/securetrack/api/services/search?filter=text&name=tcp_10
BODY{
    \"services\": {
        \"count\": 1,
        \"total\": 1,
        \"service:\": {
            \"id\": 169197,
            \"name\": \"tcp_10\",
            \"display_name\": \"tcp_10\",
            \"class_name\": \"access_role\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"max\": false,
            \"min\": false,
            \"protocol\": 6,
            \"timeout\": \"\",
            \"type\": \"tcp_service\",
            }
        }
    }
}

"},"response":[]},{"name":"Get services by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/services","description":"Fetches list of service objects defined on device given by device ID.
The default value for get_total is false. For APIF calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric between 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

"},"response":[]},{"name":"Get services by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/services","description":"Fetches list of service objects defined in revision given by revision ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric betweenm 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/785/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

"},"response":[]}]},{"name":"Time Objects","item":[{"name":"Get specific time object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/time_objects/{{ids}}","description":"Fetches list of time objects by revision ID and rule ID

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Rule IDs

Usage Example
https://192.168.1.1/securetrack/api/revisions/7/time_objects/9
"},"response":[]},{"name":"Get time objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/time_objects","description":"Returns the time objects used in the specified revision.

Parameters:
context: Global MSSP context [optional]
id: Revision ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/time_objects
"},"response":[]},{"name":"Get time objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/time_objects","description":"Returns the time objects used in the specified device.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Starting page for query allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/time_objects
"},"response":[]}]},{"name":"Traffic Policy Matcher","item":[{"name":"Get policy relevance metrics for traffic","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"relevance_metrics\": {\n\t\t\"source_ips\": {\n\t\t\t\"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"dest_ips\": {\n\t\t\t\"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"targets\": {\n\t\t\t\"target\": [4, 10]\n\t\t}\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/traffic_policy/","description":"The response lists all the relevant security groups, tags, relevant instances, and count of unrelated instances for each Amazon VPC in the specified traffic path.
A relevant security group contains at least one instance including either the source or destination IP address.
An unrelated instance is included in the security group but not part of the specified traffic path.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is used only if MSSP mode is enabled. If MSSP mode is disabled context is ignored.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
body: Relevance metrics request

Usage Example
URLhttps://192.168.1.1/securetrack/api/traffic_policy
BODY{
    \"relevance_metrics\": {
        \"source_ips\": {
            \"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]
        },
        \"dest_ips\": {
            \"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]
        },
        \"targets\": {
            \"target\": [4, 10]
        }
    }
}


Response Messages:
200: Successful
403: Insufficient user permissions
404: Device not found
400: Invalid parameters"},"response":[]}]},{"name":"Unified Security Policy - Access Request Violations","item":[{"name":"Get violations for an access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/sync","description":"Calculate the violations for the given access request.
Note: this API may take a while to complete.
See the asynchronous API /violations/access_request/task as an alternative.

Parameters:
body: AccessRequestListDTO
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request supports multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/sync?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
200: Access request violations were calculated.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination).
403: Access is denied."},"response":[]},{"name":"Get violation task results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/result/{{taskId}}","description":"Get result of access requests violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task results were received.
403: Access is denied.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet."},"response":[]},{"name":"Cancel violation task","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task/{{taskId}}","description":"Delete an access request violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/task/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Access request violations task has been aborted successfully.
403: Access is denied.
404: Access request violations task was not found."},"response":[]},{"name":"Start a task to calculate violations for an access request","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t\t true\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t ACCEPT\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task","description":"Create a calculation task to find access requests violations.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
body [optional]
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request uses resources from multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/task?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
             <predefined>true</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
202: Access request violations task was accepted.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination)
400: No network source were specified.
400: No network destination were specified.
403: Access is denied.
503: Access request violations task was rejected."},"response":[]},{"name":"Get violation task status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/status/{{taskId}}","description":"Get access requests violations task status.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task status was received.
403: Access is denied.
404: Access request violations task status was not found."},"response":[]}]},{"name":"Unified Security Policy - Alerts","item":[{"name":"Get alerts","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"start"},{"value":null,"type":"text","key":"count"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","description":"Returns a list of all alerts. If an empty list is returned, it implies that there are no configured alerts for that context.
You must set start and count parameters to limit the number of returned alerts.
Start is zero based - to start from the second rule use start=1, to get rules 51-60 use start=50 and count=10.

Parameters:
context: MSSP context [optional]
start: Returns the results beginning with the specified result number
count: Returns the specified number of results

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts?start=10&count=25

Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid"},"response":[]},{"name":"Create an alert","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": [\n\t\t\t\t\"moshe\",\n\t\t\t\t\"admin\"\n\t\t\t\t]\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","description":"Create an alert for unified security policies.
Returns location with the alert id to get the alert.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": [
                \"moshe\",
                \"admin\"
                ]
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
201: Security policy alert id :|'alertId'| , name : 'alertName'
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
403: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain"},"response":[]},{"name":"Delete alerts by ids","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{ids}}","description":"Delete specified alerts by IDs
To delete multiple alert_ids, use a comma between each ID

Parameters:
context: Delete alerts in the specified domain ID. [optional]
ids: The alert Ids for deletion

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/87

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/86,87,88

Response Messages:
200:
403: Security Policy Alert Ids: :|'alert ids'| don't exist"},"response":[]},{"name":"Get a specific alert","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","description":"Returns a specified alert.
If the alert_id does not exist, an error message is returned.

Parameters:
context: MSSP context [optional]
id: The alert Id

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/1

Response Messages:
403: Alert ID does not exist"},"response":[]},{"name":"Update an alert","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": [\n\t\t\t\t\"moshe\",\n\t\t\t\t\"admin\"\n\t\t\t\t]\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","description":"Update an alert for unified security policies.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
id: The alert ID for updating [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts/1
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": [
                \"moshe\",
                \"admin\"
                ]
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
204: Alert ID: 'alertId' was updated successfully
404: Alert ID: 'alertId' does not exist
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
403: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain"},"response":[]}]},{"name":"Unified Security Policy - Cloud Tag Policy","item":[{"name":"Check if tags are compliant with cloud tag policies","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":" {\n\t\"type\": \"vm\",\n\t\"name\": \"CRM-FE\",\n\t\"os\": \"ubuntu14.4\",\n\t\"image\": \"AMI-12345\",\n\t\"tags\": {\n\t\t\"Role\": \"webserver\",\n\t\t\"Budget\": \"corporate\",\n\t\t\"Owner\": \"Steve.Smith\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violation_check/","description":"Check if the tags of a cloud resource are compliant with the specified cloud tag policy. Specify the tag policy to validate in the TagPolicyViolationsCheckRequestDTO. The tags of a cloud resource are specified as a json object with the attribute 'tags' at the root level. 'tags' attributes can be a list of tag names or a map including both the tag name and value. If no tags are specified or if the tag is specified incorrectly, The compliance check will treat the resource as if it has no tags. If no cloud tag policy violations are found the API returns an empty violations list.

Parameters:
context: Returns results for the specified domain ID [optional]
policy_external_id: Tag policy external identifier
body: Tag policy violation check request

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/violation_check?policy_external_id=policyId
BODY {
    \"type\": \"vm\",
    \"name\": \"CRM-FE\",
    \"os\": \"ubuntu14.4\",
    \"image\": \"AMI-12345\",
    \"tags\": {
        \"Role\": \"webserver\",
        \"Budget\": \"corporate\",
        \"Owner\": \"Steve.Smith\"
    }
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Replace a cloud tag policy","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Replace the cloud tag policy specified by policyID with the new policy attributes.

Use PATCH in order to partially modify a policy. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Replace policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}

"},"response":[]},{"name":"Get cloud tag policy","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"This API retrieves the details of the cloud tag policy specified by policyId.

User must have admin permissions to the policy affiliated domain. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicyName\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryTagsRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Modify a cloud tag policy","request":{"method":"PATCH","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Partially modify a cloud tag policy by stating the modified attributes. Providing requirements replaces the entire list.

Specifying an empty requirement list is not permitted. Modify some attributes of the cloud tag policy specified by policyID with the attributes provided. If one or more \"requirement\" objects is provided, the exsiting \"requirement\" objects will be deleted and replaced with the new objetcs. Specifying an empty requirement list is not permitted.If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Rename policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Delete cloud tag policy","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Delete the cloud tag policy specified by policyId.

If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Delete policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT {
        \"status\": \"OK\",
        \"policy_name\": \"myPolicyName\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Get all cloud tag policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","description":"This API returns the details of all the tag policies.

Results are filtered according to user domain permissions and request context. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicy1\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                },
                {
                        \"policy_id\": \"tp-102\",
                        \"policy_name\": \"myPolicy2\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions"},"response":[]},{"name":"Create a cloud tag policy","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":" {\n\t\"policy_name\": \"Production-VPC-Tag-Policy\",\n\t\"policy_description\": \"Instances tags in production\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_financial_tags\",\n\t\t\t\"requirement_severity\": \"HIGH\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Budget\"\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"requirement_type\": \"valid_values\",\n\t\t\t\"requirement_name\": \"budget_valid_values\",\n\t\t\t\"requirement_severity\": \"CRITICAL\",\n\t\t\t\"tag\": \"Budget\",\n\t\t\t\"values\": [\n\t\t\t\t\"Corporate\",\n\t\t\t\t\"Dev\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","description":"Create a new cloud tag policy. The policyName field specified in the TagPolicyDTO must be unique. Define the requirements enforced by the cloud tag policy in the requirements field of the TagPolicyDTO. The supported value for the \"requirement_type\" field are \"mandatory_tags\" and \"valid_values\"If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Create policy for the specified domain ID [optional]
body: cloud tag policy DTO [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
BODY {
    \"policy_name\": \"Production-VPC-Tag-Policy\",
    \"policy_description\": \"Instances tags in production\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_financial_tags\",
            \"requirement_severity\": \"HIGH\",
            \"tags\": [
                \"Owner\",
                \"Budget\"
            ]
        },
        {
            \"requirement_type\": \"valid_values\",
            \"requirement_name\": \"budget_valid_values\",
            \"requirement_severity\": \"CRITICAL\",
            \"tag\": \"Budget\",
            \"values\": [
                \"Corporate\",
                \"Dev\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
409: Policy name already exists"},"response":[]},{"name":"Get all cloud tag policy violations for a VPC","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"severity"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/tag_violations/","description":"Retrieve all cloud tag policy violations for the specified VPC and severity level.

Parameters:
context: Global MSSP context. [optional]
deviceId: The device ID for which to get violations
severity: Return only violations of this severity
resourceId: The id of the VM instance [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses \"count=100\". [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tag_violations?deviceId=123&severity=CRITICAL
OUTPUT<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<tag_policy_device_violations>
    <violating_resources_count>2</violating_resources_count>
    <device_name>Amazon Test VPC </device_name>
    <severity>critical</severity>
    <violating_resources>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Name' value 'email server' is not valid. Valid values are [R&D, HR]</violation_message>
                    <policy_id>tp-100</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>validValue_constraint2</requirement_name>
                    <requirement_severity>high</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"valid_values\">
                        <tag>Name</tag>
                        <valid_values>
                            <valid_value>R&D</valid_value>
                            <valid_value>HR</valid_value>
                        </valid_values>
                        <invalid_value>email server</invalid_value>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-abc12345</resource_id>
            <resource_name>email server</resource_name>
        </violating_resource>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Application' is missing</violation_message>
                    <policy_id>tp-105</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>mandatory_constraint1</requirement_name>
                    <requirement_severity>critical</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"mandatory_tags\">
                        <missing_tag>Application</missing_tag>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-12345678</resource_id>
            <resource_name>Violations tests server</resource_name>
        </violating_resource>
    </violating_resources>
</tag_policy_device_violations>


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: A device with the specified ID was not found"},"response":[]}]},{"name":"Unified Security Policy - Exceptions","item":[{"name":"Get a specific exception","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","description":"Gets a specific exception for unified security policies.

Parameters:
exceptionId: The ID of the exception to get.
context: Global MSSP context [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
403: User not permitted to access the specified domain
404: A security policy exception with the specified ID was not found."},"response":[]},{"name":"Delete an exception","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","description":"Delete the specific unified security policy exceptions

Parameters:
exceptionId: The ID of the exception to delete.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
404: The security policy with the specified ID does not exist
403: User not permitted to access the specified domain."},"response":[]},{"name":"Start a task to calculate matching rules for an exception","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}/matching_rules/start","description":"Create a calculation task to find matching rules.
The results will be on the relevant devices for each access.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
exceptionId: Security policy Exception ID on which to run the API.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/1/matching_rules/start

Response Messages:
403: User not permitted to Security policy exceptions.
404: A security policy exception with the specified ID was not found."},"response":[]},{"name":"Get matching rules task status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/status/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task status was received.
403: User not permitted to Security policy exceptions.
404: Matching rules task status was not found."},"response":[]},{"name":"Create an exception","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\tadmin\n\tst_user\n\t2015-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\t\n\t\t\n\t\t\tCreating USP exception for ticket 123\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.2\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tLAN\n\t\t\t\t\tcorporate security policy\n\t\t\t\t\tDMZ\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4321\n\t\t\t\t\t\ttcp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t1\n\t\t\t\t\t\t{5aa1c104-bd4d-4635-a281-b3a5442639ba}\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\thttp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t10\n\t\t\t\t\t\t20\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.1\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t2025-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\tadmin\n\t123\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","description":"Create an exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/exceptions
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<security_policy_exception>
    <approved_by>admin</approved_by>
    <created_by>st_user</created_by>
    <creation_date>2015-01-01</creation_date>
    <description>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</description>
    <exempted_traffic_list>
        <exempted_traffic>
            <comment>Creating USP exception for ticket 123</comment>
            <dest_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.2</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </dest_network_collection>
            <security_requirements>
                <zone_to_zone_security_requirement>
                    <from_zone>LAN</from_zone>
                    <policy_name>corporate security policy</policy_name>
                    <to_zone>DMZ</to_zone>
                </zone_to_zone_security_requirement>
            </security_requirements>
            <service_collection>
                <service_items>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"custom\">
                        <port>4321</port>
                        <protocol>tcp</protocol>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"device_service\">
                        <mgmt_id>1</mgmt_id>
                        <service_uid>{5aa1c104-bd4d-4635-a281-b3a5442639ba}</service_uid>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"predefined\">
                        <predefined_service_name>http</predefined_service_name>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"range_service\">
                        <minProtocol>10</minProtocol>
                        <maxProtocol>20</maxProtocol>
                    </service_item>
                </service_items>
            </service_collection>
            <source_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.1</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </source_network_collection>
        </exempted_traffic>
    </exempted_traffic_list>
    <expiration_date>2025-01-01</expiration_date>
    <name>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</name>
    <requested_by>admin</requested_by>
    <ticket_id>123</ticket_id>
</security_policy_exception>


Response Messages:
400: The specified network item is not valid.
400: The specified zone name does not exist.
400: The security policy with the specified name does not exist
400: The security policy 'created by' user is not valid.
400: The security policy with the specified name already exists.
403: User not permitted to access the specified domain."},"response":[]},{"name":"Get all exceptions","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","description":"Gets a list of all unified security policy exceptions.

Parameters:
context: Global MSSP context [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions

Response Messages:
403: User not permitted to access the specified domain"},"response":[]},{"name":"Get matching rules task results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/result/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task results were received.
403: User not permitted to Security policy exceptions.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet."},"response":[]},{"name":"Cancel Matching rules task","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Matching rules task has been aborted successfully.
403: User not permitted to Security policy exceptions.
404: Matching rules task was not found."},"response":[]}]},{"name":"Unified Security Policy - Security Zone Matrix","item":[{"name":"Delete unified security policy","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}","description":"Delete a Security Policy Matrix

Parameters:
context: Returns results for the specified domain ID. [optional]
id: The unique identifier of the security policy matrix to delete

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1
"},"response":[]},{"name":"Get zone to interface mapping","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/mapping","description":"Fetches mapping of SecureTrack zones to device interfaces

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID

Usage Example
https://127.0.0.1/securetrack/api/security_policies/9/mapping

Response Messages:
200: Successful
400: This device does not support zone to interface mapping
403: User not permitted to access the specified domain
404: Device ID: <deviceId> does not exist
404: Access denied for device with ID: <deviceId>"},"response":[]},{"name":"Get unified security policy as CSV","request":{"method":"GET","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}/export","description":"Exports a Security Policy in CSV format

Parameters:
context: Returns results for the specified domain ID. [optional]
id: ID of the security policy. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1/export

Response Messages:
403: User not permitted to access the specified domain
404: Security Policy does not exist"},"response":[]},{"name":"Get unified security policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/","description":"Fetches the security zone matrices defined under Unified Security Policy.

Parameters:
context: Returns results for the specified domain ID. [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies

Response Messages:
403: User not permitted to access the specified domain"},"response":[]},{"name":"Get global unified security policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/global","description":"Fetches the global security zone matrices defined under Unified Security Policy.



Usage Example
https://192.168.1.1/securetrack/api/security_policies/global

Response Messages:
403: User not permitted to access global security policies"},"response":[]},{"name":"Set manual device mapping","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n \n Vlan_30\n \n \n 10\n add\n \n \n \n\n "},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/manual_mapping","description":"Add or remove a zone on a device interface

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID
body: InterfacesManualMappingsDTO

Usage Example
URLhttps://127.0.0.1/securetrack/api/security_policies/10/manual_mapping
BODY<interfaces_manual_mappings>
<interface_manual_mapping>
<interface_name>Vlan_30</interface_name>
<zones_user_actions>
<zone_user_action>
<zoneId>10</zoneId>
<action>add</action>
</zone_user_action>
</zones_user_actions>
</interface_manual_mapping>
</interfaces_manual_mappings>


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Not found error
404: User action not valid (only add/remove)
404: No interface with name for device with id
404: No zone with id
404: No revision for device with id
404: Device ID: <deviceId> does not exist
404: Access denied for device with ID: <deviceId>
404: InterfacesManualMappingsDTO is empty
404: Error on updating security_policy_interface_zone_mapping_user_action table for device with ID"},"response":[]}]},{"name":"Unified Security Policy - Violations","item":[{"name":"Get the amount of violating rules for the specified device.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/count","description":"Parameters:
deviceId: The device ID for which to get violations.

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/count

Response Messages:
200: The violation count was successfully retrieved
404: Device with id: <deviceId> doesn't exist"},"response":[]},{"name":"Get the violating rules for the specified device.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"severity"},{"value":null,"type":"text","key":"type"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/device_violations","description":"policyName is supported for management devices running in Advanced management mode.

Parameters:
deviceId: The device ID for which to get violations
policyName: Return only violations that match this policy [optional]
severity: Return only violations of this severity
type: Return only violations of this type

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/device_violations?policy=policy_name&type=SECURITY_POLICY&severity=MEDIUM

Response Messages:
200: The violations were successfully retrieved
400: The specified value for the violation severity is invalid
400: The specified value for the violation type is invalid
400: You cannot specify a policyName because the device is not running in Advanced management mode
404: A device with the specified ID was not found
404: A policy with the specified policyName was not found for this device"},"response":[]}]}]} \ No newline at end of file diff --git a/Postman Format v2/R20-2 postman collection/tufin.postman_environment b/Postman Format v2/R20-2 postman collection/tufin.postman_environment new file mode 100644 index 0000000..c031d2b --- /dev/null +++ b/Postman Format v2/R20-2 postman collection/tufin.postman_environment @@ -0,0 +1 @@ +{"name":"Tufin environment","values":[{"type":"text","key":"SecureApp_IP"},{"type":"text","key":"SecureChange_IP"},{"type":"text","key":"SecureTrack_IP"},{"type":"text","key":"applicationId"},{"type":"text","key":"applicationInterfaceId"},{"type":"text","key":"application_id"},{"type":"text","key":"application_pack_id"},{"type":"text","key":"assigneeId"},{"type":"text","key":"child_id"},{"type":"text","key":"child_ids"},{"type":"text","key":"cleanup_id"},{"type":"text","key":"cloudId"},{"type":"text","key":"cloud_id"},{"type":"text","key":"connectionId"},{"type":"text","key":"connectionInterfaceId"},{"type":"text","key":"connectionToApplicationId"},{"type":"text","key":"connection_id"},{"type":"text","key":"connection_to_application_pack_id"},{"type":"text","key":"customer_id"},{"type":"text","key":"deviceId"},{"type":"text","key":"device_id"},{"type":"text","key":"domainId"},{"type":"text","key":"exceptionId"},{"type":"text","key":"fieldId"},{"type":"text","key":"id"},{"type":"text","key":"ids"},{"type":"text","key":"inId"},{"type":"text","key":"instructionId"},{"type":"text","key":"interfaceCustomerId"},{"type":"text","key":"layer2DataId"},{"type":"text","key":"managementId"},{"type":"text","key":"mgmtId"},{"type":"text","key":"parent_id"},{"type":"text","key":"parent_ids"},{"type":"text","key":"policyId"},{"type":"text","key":"requestId"},{"type":"text","key":"revId"},{"type":"text","key":"revision_id"},{"type":"text","key":"risk_id"},{"type":"text","key":"routeId"},{"type":"text","key":"ruleId"},{"type":"text","key":"rule_id"},{"type":"text","key":"rule_uid"},{"type":"text","key":"serverId"},{"type":"text","key":"serviceId"},{"type":"text","key":"sourceApplicationId"},{"type":"text","key":"stepId"},{"type":"text","key":"tag_id"},{"type":"text","key":"targetApplicationId"},{"type":"text","key":"taskId"},{"type":"text","key":"task_id"},{"type":"text","key":"task_uid"},{"type":"text","key":"toStepId"},{"type":"text","key":"uid"},{"type":"text","key":"userId"},{"type":"text","key":"vpnId"},{"type":"text","key":"zone_id"},{"type":"text","key":"zone_ids"}]} \ No newline at end of file diff --git a/Postman Format v2/R21-1 postman collection/securechangeworkflow_R21-1-RC1-v2.json b/Postman Format v2/R21-1 postman collection/securechangeworkflow_R21-1-RC1-v2.json new file mode 100644 index 0000000..42c8681 --- /dev/null +++ b/Postman Format v2/R21-1 postman collection/securechangeworkflow_R21-1-RC1-v2.json @@ -0,0 +1 @@ +{"info":{"_postman_id":"2","name":"Tufin Tufin SecureChange/SecureApp R21-1-RC1","description":"Tufin Orchestration Suite - Tufin SecureChange/SecureApp APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securechangeworkflow/apidoc","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json"},"item":[{"name":"Access Portal","item":[{"name":"Update application access requests","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tAPPROVE\n\t\n\t\n\t\t2\n\t\tREJECT\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
body: application access requests

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_requests>
    <application_access_request>
        <id>1</id>
        <action>APPROVE</action>
    </application_access_request>
    <application_access_request>
        <id>2</id>
        <action>REJECT</action>
    </application_access_request>
</application_access_requests>


Response Messages:
200: Application access requests were updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Create application access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t1\n\t1.1.1.1\n\tRequest to join the WebServers server group\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Parameters:
applicationId: The unique identifier of the application
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests
BODY<application_access_request>
    <server_group_id>1</server_group_id>
    <server_ip>1.1.1.1</server_ip>
    <comment>Request to join the WebServers server group</comment>
</application_access_request>


Response Messages:
201: Application access request was submitted.
400: The application was already deleted.
400: Server id cannot be empty.
400: Hostname or IP cannot be empty.
400: The provided server does not exist in application.
400: The provided server is not allowed to access.
400: Request already created
400: Requester cannot be null
400: Group cannot be empty
400: Invalid ip
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve existing application access requests","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests","description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Update an application access request","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tAPPROVE\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","description":"Use this API to approve or reject application access requests

Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request
body: application access request

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1
BODY<application_access_request>
    <action>APPROVE</action>
</application_access_request>


Response Messages:
200: Application access request was updated.
400: The application was already deleted.
400: Invalid ID for access request
400: Cannot update access request with id ID
400: Action cannot be empty in request with id ID
400: Invalid action in request with id ID
400: The Server group is lock for discovery
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve an existing application access request by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"requestId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_access_requests/{{requestId}}","description":"Parameters:
applicationId: The unique identifier of the application
requestId: The unique identifier of the application access request

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_access_requests/1

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Access request with id ID was not found in application with id ID"},"response":[]}]},{"name":"Application Connections","item":[{"name":"Retrieve existing connections, with extended resources information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_extended","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]
start: Return results starting only from the specified index; 0-based index; default value = 0 [optional]
count: Return the specified number of results. Returns all results if no value specified [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_extended?name=Connection Name&start=50&count=100

Response Messages:
400: Start value cannot be a negative number.
400: Count value must be greater than 0.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied.
404: There is no application with the specified ID.
404: There are no connections with the name NAME."},"response":[]},{"name":"Create a ticket to repair a connection","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tRepair connection 2\n\tu1\n\tNormal\n\t\n\t\tWorkflow with topology\n\t\n\t\n\t\t\n\t\t\tOpen request\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tBusiness Justification\n\t\t\t\t\t\t\tI need access to ftp \n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tProject Number\n\t\t\t\t\t\t\tCR124560\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tHyperlink\n\t\t\t\t\t\t\thttp://192.168.1.1/ticket\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tChange Window\n\t\t\t\t\t\t\tMonday\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\tmanager email\n\t\t\t\t\t\t\tmanager@tufin.com\n\t\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connections/{{connection_id}}/repair","description":"Parameters:
application_id: The application ID
connection_id: The connection ID
body: Ticket

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/2/repair
BODY<ticket>
    <subject>Repair connection 2</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <workflow>
        <name>Workflow with topology</name>
    </workflow>
    <steps>
        <step>
            <name>Open request</name>
            <tasks>
                <task>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                            <name>Business Justification</name>
                            <text>I need access to ftp </text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                            <name>Project Number</name>
                            <text>CR124560</text>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                            <name>Hyperlink</name>
                            <url>http://192.168.1.1/ticket</url>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                            <name>Change Window</name>
                            <selection>Monday</selection>
                        </field>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                            <name>manager email</name>
                            <text>manager@tufin.com</text>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Response Messages:
201: Ticket was created.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set.
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: Expiration field is required.
400: Submit ticket enabled only with the first step.
400: First step can be only with one task.
400: The specified workflow does not contain an access request field in the first step.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
403: Logged in user: NAME do not have permission to perform on behalf actions.
403: You are not a participant in the first step of this workflow.
403: Access is denied.
403: To create a ticket you must purchase a valid SecureChange license.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Cannot create a ticket to repair this connection because the connection status is not disconnected.
403: Cannot create a ticket to repair this connection because the connection was edited but a ticket has not been created yet.
403: Cannot create a ticket to repair this connection because there are other open tickets for an application that includes this connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Update a connection","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":" \n\t Connection A\n\t Connection A comment\n\t \n\t\t \n\t\t\t 2\n\t\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n\t \n\t\t \n\t\t\t 1\n\t\t \n\t \n "},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection
body: Connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections/1
BODY <connection>
     <name>Connection A</name>
     <comment>Connection A comment</comment>
     <sources>
         <source>
             <id>2</id>
         </source>
         <source>
             <id>3</id>
         </source>
     </sources>
     <services>
         <service>
             <id>1</id>
         </service>
     </services>
     <destinations>
         <destination>
             <id>1</id>
         </destination>
     </destinations>
</connection>


Response Messages:
200: Connection was modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application that contains the server ID
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Delete connection","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
200: Connection was deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Retrieve an existing connection by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections/{{connectionId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionId: The unique identifier of the connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections/1

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Update connections","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 1\n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t 2\n\t\t Connection B\n\t \n\t \n\t\t 3\n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
body: List of connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <id>1</id>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <id>2</id>
         <name>Connection B</name>
     </connection>
     <connection>
         <id>3</id>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were modified.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection name cannot be empty.
400: Connection name already exists.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application that contains the server ID
403: You do not have permissions to edit this application.
403: Access is denied
403: You cannot edit or delete an external connection.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections?name=Connection Name

Response Messages:
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no connections with the name NAME."},"response":[]},{"name":"Create connections","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t Connection A\n\t\t Connection A comment\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 1\n\t\t\t \n\t\t \n\t \n\t \n\t\t Connection B\n\t \n\t \n\t\t Connection C\n\t\t \n\t\t\t \n\t\t\t\t 2\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections","description":"Parameters:
applicationId: The unique identifier of the application
body: The list of the connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/connections
BODY<connections>
     <connection>
         <name>Connection A</name>
         <comment>Connection A comment</comment>
         <sources>
             <source>
                 <id>2</id>
             </source>
             <source>
                 <id>3</id>
             </source>
         </sources>
         <services>
             <service>
                 <id>1</id>
             </service>
         </services>
         <destinations>
             <destination>
                 <id>1</id>
             </destination>
         </destinations>
     </connection>
     <connection>
         <name>Connection B</name>
     </connection>
     <connection>
         <name>Connection C</name>
         <sources>
             <source>
                 <id>2</id>
             </source>
         </sources>
     </connection>
</connections>


Response Messages:
200: Connections were created.
201: Connection was created.
400: There are no items to add.
400: You cannot add to application NAME because it was decommissioned.
400: Connection name already exists.
400: Reference to service ID is invalid.
400: Reference to source/destination with ID is invalid.
400: Connection NAME contains duplicate destinations.
400: Destination cannot contain users.
400: Resource cannot contain other objects along with Any.
400: Connection NAME contains duplicate sources.
400: You cannot add external resources to interface connections.
400: You cannot have Any in both the source and destination.
400: You cannot add external resources to interface connections.
400: Source cannot contain both users and servers.
400: Connection NAME contains duplicate services.
400: Cannot contain other services along with ANY.
400: Connections can only include objects within the same customer.
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Identities","item":[{"name":"Fetches application identities","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/application_identities","description":"Fetches the list of pre-defined application identities (like facebook) that can be used in a connection.

Parameters:
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/application_identities?name=facebook

Response Messages:
404: There are no application identities with the name NAME.
403: Access is denied."},"response":[]}]},{"name":"Application Interfaces","item":[{"name":"Create interface connections","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tConnection 1\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\t\n\t\t\t\tFacebook\n\t\t\t\n\t\t\n\t\tNew connection\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
body: The interface connections

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections
BODY<interface_connections>
    <interface_connection>
        <name>Connection 1</name>
        <sources>
            <source>
                <id>3</id>
            </source>
        </sources>
        <services>
            <service>
                <id>3</id>
            </service>
            <service>
                <id>Facebook</id>
            </service>
        </services>
        <comment>New connection</comment>
    </interface_connection>
</interface_connections>


Response Messages:
200: Interface connections were created.
201: Interface connection was created.
400: There are no items to add.
400: Cannot create interface connection without a name.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
403: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing interface connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
name: The name of the interface connection [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections?name=Connection 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no connection interfaces with the name NAME.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve existing application interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","description":"To improve response time, set 'calculateIsPublished = false' to avoid calculating 'is_published'.

Parameters:
applicationId: The unique identifier of the application
name: The name of the application interface [optional]
calculateIsPublished: Should calculate is_published value [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces?name=Interface to Application 1

Response Messages:
400: There is no application with the specified ID.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no application interfaces with the name NAME."},"response":[]},{"name":"Create application interface","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tInterface to Application 1\n\tNew application interface\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces","description":"Parameters:
applicationId: The unique identifier of the application
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces
BODY<application_interface>
    <name>Interface to Application 1</name>
    <comment>New application interface</comment>
</application_interface>


Response Messages:
201: Application interface was created.
400: You cannot add to application NAME because it was decommissioned.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Delete interface connection","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"},{"value":null,"type":"text","key":"connectionInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
200: Interface connection was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Update an interface connection","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\t\n\t\t\n\t\t\t19\n\t\t\n\t\n\t\n\t\t\n\t\t\t9\n\t\t\n\t\n\tUpdated connection\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection
body: The interface connection

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1
BODY<interface_connection>
    <name>Updated name</name>
    <sources>
        <source>
            <id>19</id>
        </source>
    </sources>
    <services>
        <service>
            <id>9</id>
        </service>
    </services>
    <comment>Updated connection</comment>
</interface_connection>


Response Messages:
200: Interface connection was modified.
400: Interface connection name cannot be empty.
400: Connection name already exists.
400: You cannot add user to connection interface.
400: You cannot add Any to connection interface.
400: You cannot add Internet to connection interface.
400: Cannot have external servers.
400: Cannot have both sources and destinations.
400: Connection NAME contains duplicate sources.
400: Connection NAME contains duplicate services.
400: Connection NAME contains duplicate destinations.
400: Reference to source/destination with ID is invalid.
400: Reference to service ID is invalid.
403: Access is denied.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve an existing interface connection by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"},{"value":null,"type":"text","key":"connectionInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}/interface_connections/{{connectionInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface
connectionInterfaceId: The unique identifier of the interface connection

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1/interface_connections/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve an existing connection to application by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionToApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Delete connection to application","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"connectionToApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1

Response Messages:
200: Connection to application was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Update a connection to application","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated connection to application\n\t\n\t\t\n\t\t\t4\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications/{{connectionToApplicationId}}","description":"Parameters:
applicationId: The unique identifier of the application
connectionToApplicationId: The unique identifier of the connection to application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications/1
BODY<connection_to_application>
    <name>Updated name</name>
    <comment>Updated connection to application</comment>
    <servers>
        <server>
            <id>4</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
200: Connection to application was modified.
400: Name cannot be empty.
400: Name already exists.
400: Reference to source/destination with ID is invalid.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Connection to application with ID was not found for application interface with ID."},"response":[]},{"name":"Retrieve existing connections to application","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the connection to application [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications?name=Connection to Application 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID.
404: Connection interface with ID was not found for application interface with ID."},"response":[]},{"name":"Create connection to application","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tConnection to Application 1\n\tNew connection to application\n\t1\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/connections_to_applications","description":"Create a connection from this application to an application interface.

Parameters:
applicationId: The unique identifier of the application
body: The connection to application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connections_to_applications
BODY<connection_to_application>
    <name>Connection to Application 1</name>
    <comment>New connection to application</comment>
    <application_interface_id>1</application_interface_id>
    <servers>
        <server>
            <id>3</id>
        </server>
    </servers>
</connection_to_application>


Response Messages:
201: Connection to application was created.
400: You cannot add to application NAME because it was decommissioned.
400: The selected interface cannot be used more than once in the application.
400: Name cannot be empty.
400: Cannot create from local interface.
400: ApplicationInterface didn't got published.
400: Name already exists.
400: Cannot create connection to application without servers, there should be at least one server.
400: Reference to source/destination with ID is invalid.
400: You can use only interface from the same customer.
400: You cannot add ANY to connection to application.
400: You cannot add user to connection to application.
400: You cannot add Internet to connection to application.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found."},"response":[]},{"name":"Update an application interface","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tupdated name\n\tUpdated application interface\n\ttrue\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Update the application interface properties. If is_published is set to true, the application interface is published for use by other users.

Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of The application interface
body: The application interface

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1
BODY<application_interface>
    <name>updated name</name>
    <comment>Updated application interface</comment>
    <is_published>true</is_published>
</application_interface>


Response Messages:
200: Application interface was modified.
400: Application interface is not complete for publish.
400: Name cannot be empty.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Retrieve an existing application interface by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]},{"name":"Delete application interface","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"applicationInterfaceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/application_interfaces/{{applicationInterfaceId}}","description":"Parameters:
applicationId: The unique identifier of the application
applicationInterfaceId: The unique identifier of the application interface

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/application_interfaces/1

Response Messages:
200: Application interface was deleted.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Application interface with ID was not found for application with ID."},"response":[]}]},{"name":"Application Migration","item":[{"name":"Update server mappings for source and target applications","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t6\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","description":"Use id=-1 for target_network_object if new mapping is ���Not Needed���.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The server mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping
BODY<servers_mapping>
    <server_mapping>
        <source_network_object>
            <id>3</id>
        </source_network_object>
        <target_network_object>
            <id>4</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>5</id>
        </source_network_object>
        <target_network_object>
            <id>-1</id>
        </target_network_object>
    </server_mapping>
    <server_mapping>
        <source_network_object>
            <id>6</id>
        </source_network_object>
    </server_mapping>
</servers_mapping>


Response Messages:
200: Server mappings were modified.
400: Source network object cannot be empty.
400: Source network object is not valid
400: Target network object is not valid
400: Source and target network objects must be internal or external both.
400: Cannot use DEVICE application resources as external network objects.
400: Source network object with ID must be used by any connection.
400: Cannot remove mapping of network object with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map to ANY network object.
400: Cannot map Internet network object.
400: Cannot map to Internet network object.
400: Target network object ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found."},"response":[]},{"name":"Retrieve server mappings for source and target applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/servers_mapping","description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
search_servers_type: Search server type [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/servers_mapping?search_servers_type=EXTERNAL

Response Messages:
400: Search migrated servers type parameter must be either internal, external or both.
400: Cannot get mappings between application to itself.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application with ID
403: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"Copy application servers and connections to another application.","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}","description":"This API can be used to:
1. Create applications based on a blueprint (template).
2. Copy applications between environments (dev, test, prod).
3. Migrate applications between data-centers.

Before migrating make sure to map servers and connections to applications (if any exist).\nThis migration uses the configuration specified in the other API calls.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2

Response Messages:
200: Application was migrated.
400: Cannot migrate a decommissioned application.
400: Cannot migrate to a decommissioned application.
400: Cannot migrate an application to itself.
400: Cannot edit target DEVICE application.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
400: The source application has no connections to migrate.
409: You cannot migrate the application because not all servers are mapped.
409: You cannot migrate the application because not all connections to application are mapped.
409: You cannot migrate the application because one of the interfaces in the original application has been changed and has not been published."},"response":[]},{"name":"Update connection to application mappings for source and target applications","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\t\n\t\t\t-1\n\t\t\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","description":"Use id=-1 for target_application_interface if new mapping is ���Not Needed���.
If the source is specified and the target is empty, the mapping that is currently configured will be deleted.

Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application
body: The interface instance mapping list [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping
BODY<connections_to_applications_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>1</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>4</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>2</id>
        </source_connection_to_application>
        <target_application_interface>
            <id>-1</id>
        </target_application_interface>
    </connection_to_application_mapping>
    <connection_to_application_mapping>
        <source_connection_to_application>
            <id>3</id>
        </source_connection_to_application>
    </connection_to_application_mapping>
</connections_to_applications_mapping>


Response Messages:
200: Connection to application mappings were modified.
400: Source interface instance cannot be empty.
400: Source interface instance object is not valid
400: Target application interface is not valid
400: Connection to application with ID: ID was not found.
400: Interface with ID: ID was not found.
400: Cannot remove mapping of instance with ID because it has never been mapped.
400: Cannot migrate application to itself.
400: Cannot map instance to interface with ID ID because the interface exists in target application.
400: Cannot map to duplicate application interfaces
400: Application interface didn't got published
400: Connection to application with id: ID must used by source application
400: You cannot map connection to application ID, because it is contained in a connection to application pack.
400: Application interface ID must be in the same customer as the target application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve connection to application mappings for source and target applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"sourceApplicationId"},{"value":null,"type":"text","key":"targetApplicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/migrate/{{sourceApplicationId}},{{targetApplicationId}}/connections_to_applications_mapping","description":"Parameters:
sourceApplicationId: The unique identifier of the source application
targetApplicationId: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/migrate/1,2/connections_to_applications_mapping

Response Messages:
400: Cannot get mappings between application to itself.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]}]},{"name":"Application Packs","item":[{"name":"Update application interfaces and tag mapping","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","description":"Add application interfaces to application pack, and map a tag to the application interface. If a tag is not specified for the interface, the tag will be set to ���No Tag���.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: List of interface tag mapping to be added or modified

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces
BODY<application_interface_tags>
    <application_interface_tag>
        <application_interface>
            <id>1</id>
        </application_interface>
        <tag>
            <id>3</id>
        </tag>
    </application_interface_tag>
    <application_interface_tag>
        <application_interface>
            <id>2</id>
        </application_interface>
    </application_interface_tag>
</application_interface_tags>


Response Messages:
403: Access is denied
404: There are no application packs with the NAME in customer with ID.
403: You do not have permissions to edit this application pack.
403: You do not have permission to access application that contains the interface ID
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Application Interface can't be null.
400: Empty interface ID is not valid."},"response":[]},{"name":"Remove application interfaces from application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"application_interface_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/application_interfaces","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
application_interface_id: IDs of application interfaces to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/application_interfaces?application_interface_id=1&application_interface_id=2

Response Messages:
200: Application Interface was deleted.
403: Access is denied
403: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Application interface ID was not found in application pack ID."},"response":[]},{"name":"Delete tags from application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"tag_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
tag_id: IDs of tags to remove

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/21/tags?tag_id=1&tag_id=2

Response Messages:
200: Tags were deleted.
403: Access is denied
403: You do not have permissions to edit this application pack.
404: There are no application packs with the ID in customer with ID.
404: Application Package ID was not found.
404: Tag ID was not found in application pack ID.
404: Tag ID is in use so can't be deleted.
404: Removed tag ID can't be empty."},"response":[]},{"name":"List all application pack tags","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags

Response Messages:
403: Access is denied
404: There is no application pack with the ID."},"response":[]},{"name":"Modify tags of an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tTag 1\n\t\n\t\n\t\t2\t\n\t\tTag 2\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Tags to modify

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <id>1</id>
        <name>Tag 1</name>
    </tag>
    <tag>
        <id>2</id>    
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
403: Access is denied
403: You do not have permissions to edit this application pack.
404: Customer with ID was not found.
404: There is no application pack with the ID in customer with ID.
400: Tag with NAME already exists in application pack ID.
400: Updated tag ID can't be empty
400: Updated Tag ID doesn't exist on application pack ID."},"response":[]},{"name":"Create new Tag under an application pack ","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tTag 1\n\t\n\t\n\t\tTag 2\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
body: List of tags

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags
BODY<tags>
    <tag>
        <name>Tag 1</name>
    </tag>
    <tag>
        <name>Tag 2</name>
    </tag>
</tags>


Response Messages:
403: Access is denied
404: There is no application pack with the ID in customer with ID.
400: You cannot edit APPLICATION PACK because it was decommissioned.
400: Tag name must contain at least 2 and no more than 160 characters.
400: Tag with NAME already exists in application pack ID."},"response":[]},{"name":"Retrieve a list of all connection to application pack by application ID.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","description":"Parameters:
application_id: The unique identifier of application
name: The name of the connection to application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs?name=Connection to application pack 1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
404: There are no connection to application pack with the NAME in application with ID."},"response":[]},{"name":"Create new connection to application packs","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tConnection to application pack 1\n\t\tNew Connection to application pack\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t3\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tTag 1\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/","description":"Parameters:
application_id: The unique identifier of application
body: List of connection to application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs
BODY<connection_to_application_packs>
    <connection_to_application_pack>
        <name>Connection to application pack 1</name>
        <comment>New Connection to application pack</comment>
        <application_pack>
            <id>1</id>
        </application_pack>
        <tags_servers>
            <tag_servers>
                <tag>
                    <id>1</id>
                </tag>
                <servers>
                    <server>
                        <id>3</id>
                    </server>
                </servers>
            </tag_servers>
            <tag_servers>
                <tag>
                    <name>Tag 1</name>
                </tag>
                <servers>
                    <server>
                        <id>4</id>
                    </server>
                </servers>
            </tag_servers>
        </tags_servers>
    </connection_to_application_pack>
</connection_to_application_packs>


Response Messages:
400: There are no connection to application packs to add.
400: Application pack ID cannot be empty.
400: Application with ID was not found.
400: There is no application with the specified ID.
400: There is no application pack with the specified ID.
400: Application pack with ID was decommissioned.
400: Application pack with ID was not published.
400: Connection to application pack cannot be created in the domain of the application pack.
400: The application pack cannot be used more than once in the application.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is missing.
400: Tag ID does not exist.
400: Server ID does not exist.
400: Tag ID is not in use in connection to application pack ID, so it cannot be updated.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
403: Access is denied.
403: You do not have permission to access application that contains the server ID
403: You do not have permission to access application pack with ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Tag with NAME was not found."},"response":[]},{"name":"List all application packs","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Parameters:
customer_id: The unique identifier of customer
name: The name of the application pack [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs?name=Application pack 1

Response Messages:
403: Access is denied
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Update application packs","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t1\n\t\tUpdated name\n\t\tUpdated application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\tfalse\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Update the application packs properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <id>1</id>
        <name>Updated name</name>
        <comment>Updated application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <is_published>false</is_published>
    </application_pack>
</application_packs>


Response Messages:
400: There are no application packs to edit.
400: Application pack ID cannot be empty.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
403: Access is denied
403: You do not have permission to access application that contains the interface ID
403: You do not have permissions to edit this application pack.
403: You do not have permissions to change the owner of application pack ID.
403: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Create new application packs","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tApplication pack 1\n\t\tNew application pack\n\t\t\n\t\t\t4\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t3\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\t5\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/","description":"Parameters:
customer_id: The unique identifier of customer
body: List of application packs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs
BODY<application_packs>
    <application_pack>
        <name>Application pack 1</name>
        <comment>New application pack</comment>
        <owner>
            <id>4</id>
        </owner>
        <editors>
            <editor>
                <id>3</id>
            </editor>
        </editors>
        <viewers>
            <viewer>
                <id>5</id>
            </viewer>
        </viewers>
    </application_pack>
</application_packs>


Response Messages:
403: Access is denied
403: You do not have permission to access application that contains the interface ID
400: There are no application packs to add.
400: Application pack can be created only in meshed domain mode.
404: Customer with ID was not found.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: The owner NAME does not have permission to access applications.
400: Application pack was already saved.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned."},"response":[]},{"name":"Retrieve an existing application pack by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
403: Access is denied
403: You do not have permission to access application pack with ID
404: Application pack with ID was not found for customer with ID."},"response":[]},{"name":"Delete application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1

Response Messages:
200: Application pack wes deleted.
403: You do not have permissions to delete this application pack.
400: There is no application pack with the specified ID.
400: Customer with ID doesn't own an application pack with ID.
400: Application Pack ID cannot be deleted. It is in use by applications IDs."},"response":[]},{"name":"Update an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated application pack\n\t\n\t\t4\n\t\n\t\n\t\t\n\t\t\t3\n\t\t\n\t\n\t\n\t\t\n\t\t\t5\n\t\t\n\t\n\ttrue\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}","description":"Update the application pack properties. If is_published is set to true, the application pack is published for use by other users.

Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack to change
body: Application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1
BODY<application_pack>
    <name>Updated name</name>
    <comment>Updated application pack</comment>
    <owner>
        <id>4</id>
    </owner>
    <editors>
        <editor>
            <id>3</id>
        </editor>
    </editors>
    <viewers>
        <viewer>
            <id>5</id>
        </viewer>
    </viewers>
    <is_published>true</is_published>
</application_pack>


Response Messages:
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to owner ID is invalid.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application pack owner cannot also be an editor of the application pack.
400: There is a viewer without an ID or name.
400: The application pack owner cannot also be a viewer of the application pack.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application pack.
400: Application pack NAME already exists.
400: Application pack name must contain at least 2 and no more than 160 characters.
400: Customer NAME is not imported to SecureApp.
400: Customer NAME was decommissioned.
400: Application pack with ID is not ready for publish, or has no changes from the last publish.
403: Access is denied
403: You do not have permission to access application that contains the interface ID
403: You do not have permissions to edit this application pack.
403: You do not have permissions to change the owner of application pack ID.
403: You do not have permissions to change the editors and viewers of application pack ID.
404: There are no application packs with the NAME in customer with ID."},"response":[]},{"name":"Get tag by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"},{"value":null,"type":"text","key":"application_pack_id"},{"value":null,"type":"text","key":"tag_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/customers/{{customer_id}}/application_packs/{{application_pack_id}}/tags/{{tag_id}}","description":"Parameters:
customer_id: The unique identifier of customer
application_pack_id: The unique identifier of an application pack
tag_id: The unique identifier of a tag

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/customers/1/application_packs/1/tags/1

Response Messages:
403: Access is denied
404: There is no tag with ID.
404: Customer with ID doesn't own a tag with ID.
404: Application Pack with ID doesn't own a tag with ID."},"response":[]},{"name":"Delete a connection to application pack","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"connection_to_application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
400: Connection to application pack with ID was not found for application with ID.
400: The connection to application pack was already deleted.
403: Access is denied.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed."},"response":[]},{"name":"Retrieve an existing connection to application pack by ID.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"connection_to_application_pack_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1

Response Messages:
403: Access is denied
403: You do not have permission to access application with ID
404: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID."},"response":[]},{"name":"Update an application pack","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tUpdated name\n\tUpdated Connection to application pack\n\t\n\t\t\n\t\t\t\n\t\t\t\t1\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t3\n\t\t\t\t\n\t\t\t\n\t\t\n\t\t\n\t\t\t\n\t\t\t\tTag 1\n\t\t\t\n\t\t\t\n\t\t\t\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/connection_to_application_packs/{{connection_to_application_pack_id}}","description":"Parameters:
application_id: The unique identifier of application
connection_to_application_pack_id: The unique identifier of the connection to application pack to update
body: Connection to application pack

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/connection_to_application_packs/1
BODY<connection_to_application_pack>
    <name>Updated name</name>
    <comment>Updated Connection to application pack</comment>
    <tags_servers>
        <tag_servers>
            <tag>
                <id>1</id>
            </tag>
            <servers>
                <server>
                    <id>3</id>
                </server>
            </servers>
        </tag_servers>
        <tag_servers>
            <tag>
                <name>Tag 1</name>
            </tag>
            <servers>
            </servers>
        </tag_servers>
    </tags_servers>
</connection_to_application_pack>


Response Messages:
400: There is no application with the specified ID.
400: There is no connection to application pack with the specified ID.
400: Application with ID doesn't own a connection to application pack with ID.
400: Name cannot be empty.
400: Name must contain at least 2 and no more than 160 characters.
400: Name already exists.
400: Tag cannot be empty.
400: Tag ID or name is required.
400: Tag with Name was not found.
400: Server ID cannot be empty.
400: Servers cannot be null.
400: You cannot add ANY to connection to application pack.
400: You cannot add user to connection to application pack.
400: You cannot add Internet to connection to application pack.
403: Access is denied.
403: You do not have permission to access application that contains the server ID
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed."},"response":[]}]},{"name":"Application Pending Changes","item":[{"name":"Retrieve existing access rules","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/access_requests","description":"Parameters:
applicationId: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/87/access_requests

Response Messages:
400: The application was already deleted.
400: There are no changed connections that are ready for creating a ticket.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
400: Application with ID ID was not found."},"response":[]}]},{"name":"Application Servers (across all applications)","item":[{"name":"Fetches server by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects/{{serverId}}","description":"Parameters:
serverId: The ID of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects/87

Response Messages:
400: Server with id ID was not found.
400: Application with ID ID was not found.
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application that contains the server ID
401: No available licenses. Ask your SecureApp administrator for assistance."},"response":[]},{"name":"Fetches servers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/network_objects","description":"Parameters:
name: The name of the servers [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?name=server1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: Server with name NAME was not found.
400: Parameter typeOnDevice is not valid.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There are no servers with the name NAME
404: There are no servers with the typeOnDevice TYPEONDEVICE "},"response":[]}]},{"name":"Application Servers (by application)","item":[{"name":"Move server","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"},{"value":null,"type":"text","key":"server_id"},{"value":null,"type":"text","key":"target_application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/move_server","description":"Parameters:
application_id: The unique identifier of the application
server_id: The unique identifier of the server
target_application_id: The unique identifier of the target application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/move_server?server_id=5&target_application_id=3

Response Messages:
400: Server ID is missing.
400: Target application ID is missing.
400: You cannot move a predefined object.
400: Server with ID is already associated to application with ID.
400: Cannot move server to a different customer.
400: The application was already deleted.
400: You cannot add to application APPLICATION_NAME because it was decommissioned.
400: Group/Server cannot be moved because there is no other application to move it to.
400: Group/Server cannot be moved because it or at least one of its group members is part of these groups: GROUPS_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is locked for discovery.
400: Group/Server cannot be moved because it or at least one of its group members is used in these application interfaces: APPLICATION_INTERFACE_NAME.
400: Group/Server cannot be moved because it or at least one of its group members is used in these connections with another external resource: CONNECTION_NAME
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Create servers","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t \n\t \n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n \t\t 2.2.2.22\n\t \n\t \n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t \n\t \n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t \n\t \n\t\t group comment\n\t\t group1\n\t\t true\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: There are no items to add.
400: The application was already deleted.
400: You cannot add to application NAME because it was decommissioned.
400: Network object was already saved
400: Name cannot be empty
400: Server with NAME already exists.
400: IP is missing
400: Mask is missing
400: Invalid IP
400: Invalid mask
400: Max IP is missing
400: Min IP is missing
400: Invalid min IP
400: Invalid max IP
400: Min IP cannot be larger than max IP
400: Invalid network object type CLASS_NAME.
400: Invalid uid
400: Invalid device ID
400: Virtual server does not exist in SecureTrack
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Cannot save the server because the virtual server does not exist.
400: Cannot save the server because an error occurred
400: The type_on_device value is not valid
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
404: Virtual server was not found in SecureTrack.
503: Not connected to SecureTrack."},"response":[]},{"name":"Update servers","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 1\n\t\t host comment\n\t\t host1\n\t\t 1.1.1.1\n\t\t host\n\t \n\t \n\t\t 2\n\t\t range comment\n\t\t range1\n\t\t 2.2.2.2\n\t\t 2.2.2.22\n\t\t range\n\t \n\t \n\t\t 3\n\t\t subnet comment\n\t\t subnet1\n\t\t 3.3.3.3\n\t\t 255.255.255.0\n\t\t subnet\n\t \n\t \n\t\t 4\n\t\t virtual server comment\n\t\t {e1a7722f-e92e-48f2-9087-9cb1711eb8b9}\n\t\t 12\n\t\t virtual-server\n\t \n\t \n\t\t 5\n\t\t vm1\n\t\t vm instance comment\n\t\t vm_instance\n\t \n\t \n\t\t 6\n\t\t group comment\n\t\t group1\n\t\t true\n\t\t group\n\t\t \n\t\t\t 3\n\t\t \n\t\tedl_ip_list\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
body: List of servers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects
BODY<network_objects xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
     <network_object xsi:type=\"hostNetworkObjectDTO\">
         <id>1</id>
         <comment>host comment</comment>
         <name>host1</name>
         <ip>1.1.1.1</ip>
         <type>host</type>
     </network_object>
     <network_object xsi:type=\"rangeNetworkObjectDTO\">
         <id>2</id>
         <comment>range comment</comment>
         <name>range1</name>
         <first_ip>2.2.2.2</first_ip>
         <last_ip>2.2.2.22</last_ip>
         <type>range</type>
     </network_object>
     <network_object xsi:type=\"subnetNetworkObjectDTO\">
         <id>3</id>
         <comment>subnet comment</comment>
         <name>subnet1</name>
         <ip>3.3.3.3</ip>
         <netmask>255.255.255.0</netmask>
         <type>subnet</type>
     </network_object>
     <network_object xsi:type=\"networkObjectVirtualServerDTO\">
         <id>4</id>
         <comment>virtual server comment</comment>
         <uid>{e1a7722f-e92e-48f2-9087-9cb1711eb8b9}</uid>
         <device_id>12</device_id>
         <type>virtual-server</type>
     </network_object>
     <network_object xsi:type=\"vmInstanceDTO\">
         <id>5</id>
         <name>vm1</name>
         <comment>vm instance comment</comment>
         <type>vm_instance</type>
     </network_object>
     <network_object xsi:type=\"networkObjectGroupDTO\">
         <id>6</id>
         <comment>group comment</comment>
         <name>group1</name>
         <access_allowed>true</access_allowed>
         <type>group</type>
         <member>
             <id>3</id>
         </member>
        <type_on_device>edl_ip_list</type_on_device>     </network_object>
</network_objects>


Response Messages:
400: The application was already deleted.
400: You cannot update a predefined object.
400: Invalid type in server with id ID.
400: Invalid member with id ID
400: Invalid ID
400: Invalid uid
400: Invalid network object type NAME
400: Cannot update user
400: Network object is new
400: Name cannot be empty
400: Server is in discovery
400: Ip is missing
400: Mask is missing
400: Invalid ip
400: Invalid mask
400: Max ip is missing
400: Min ip is missing
400: Invalid min ip
400: Invalid max ip
400: Min ip cannot be larger than max ip
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Internet cannot be a member of a group.
400: Server with NAME already exists.
400: Invalid device ID
400: The type_on_device value is not valid
400: An EDL group can not be modified to a regular group
400: The virtual server already exists in SecureApp as resource NAME: VIRTUAL SERVER NAME VIRTUAL SERVER DEVICE NAME.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: DTO type used for server id ID is incompatible with this vendor.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Virtual server was not found in ST.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID.
503: Not connected to SecureTrack."},"response":[]},{"name":"Retrieve existing servers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the server [optional]
typeOnDevice: The typeOnDevice of the servers [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?name=ServerName

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects?typeOnDevice=edl_ip_list

Response Messages:
400: The application was already deleted.
400: Parameter typeOnDevice is not valid.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no servers with the name NAME.
404: There are no servers with the typeOnDevice TYPEONDEVICE "},"response":[]},{"name":"Export Server Impact Analysis to a CSV file.","request":{"method":"GET","header":[],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/impact_analysis_csv","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/impact_analysis_csv

Response Messages:
400: Server with ID was not found.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"If the identified server is a group, return a list of its members. When the media type is 'text/plain' (default), print each member on a separate line.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}/members","description":"Parameters:
applicationId [optional]
serverId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/6/members

Response Messages:
400: Server with ID is not of type group
403: Access is denied
403: You do not have permissions to view this application
403: No available licenses. Ask your SecureApp administrator for assistance
404: There is no application with the specified ID
404: Server with ID was not found"},"response":[]},{"name":"Retrieve an existing server by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","description":"Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/3

Response Messages:
400: The application was already deleted.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID."},"response":[]},{"name":"Delete server","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serverId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/network_objects/{{serverId}}","description":"To decommission a serer use force=true.

Parameters:
applicationId: The unique identifier of the application
serverId: The unique identifier of the server
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/network_objects/4?force=true

Response Messages:
400: The application was already deleted.
400: You cannot delete a predefined object.
400: Cannot delete an object that is being referenced by other objects
400: Cannot delete a predefined object.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Server with ID was not found in application with ID."},"response":[]}]},{"name":"Application Services (global)","item":[{"name":"Fetches service by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/2

Response Messages:
404: Service with ID <ID> was not found.
403: Access is denied."},"response":[]},{"name":"Delete unused and non predefined global service","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/{{serviceId}}","description":"Parameters:
serviceId: The ID of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services/260

Response Messages:
200: Service was deleted.
404: Global Service with ID was not found.
400: Cannot delete an object that is being referenced by other objects.
400: You cannot delete a predefined object.
403: Access is denied."},"response":[]},{"name":"Modify unused and non predefined global services","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services/","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Service is new.
400: You cannot update a predefined object.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot update a global service that is being referenced by other objects.
400: Cannot update an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Group cannot contain itself as a member.
400: Application identity cannot be a member of a group.
403: Access is denied."},"response":[]},{"name":"Fetches services","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
globals_only: get only globals [optional]
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=AH

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?globals_only=true&name=AH

Response Messages:
404: There are no services with the name NAME.
403: Access is denied."},"response":[]},{"name":"Create global services","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: Service with ID <ID> was not found.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Global Service cannot be associated with an application.
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: Any cannot be a member of a group.
400: Cannot have a local member in global group.
400: Application identity cannot be a member of a group.
403: Access is denied."},"response":[]},{"name":"Delete unused and non predefined global service by name","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"name"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/services","description":"Parameters:
name: The name of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/services?name=Global service

Response Messages:
200: Service was deleted.
404: Service name has not been provided.
404: There are no services with the name NAME.
400: Cannot delete ANY.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: Access is denied."},"response":[]}]},{"name":"Application Services (local)","item":[{"name":"Retrieve existing services","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
name: The name of the service [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services?name=Local service

Response Messages:
400: The application was already deleted.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: There are no services with the name NAME."},"response":[]},{"name":"Create services","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\ticmp service\n\t\tNew service\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\tip service\n\t\tIPSEC Authentication Header Protocol\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\ttcp service\n\t\tDiscard Server Protocol (TCP)\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tudp service\n\t\tDiscard Server Protocol (UDP)\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\tService Group 1\n\t\tNew Service group\n\t\tgroup\n\t\t\n\t\t\t1\n\t\t\n\t\t\n\t\t\t2\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>icmp service</name>
        <comment>New service</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>ip service</name>
        <comment>IPSEC Authentication Header Protocol</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>tcp service</name>
        <comment>Discard Server Protocol (TCP)</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <name>udp service</name>
        <comment>Discard Server Protocol (UDP)</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <name>Service Group 1</name>
        <comment>New Service group</comment>
        <type>group</type>
        <member>
            <id>1</id>
        </member>
        <member>
            <id>2</id>
        </member>
    </service>
</services>


Response Messages:
201: Service was created.
200: Services were created.
400: There are no items to add.
400: Members IDs cannot be empty.
400: Invalid service type <TYPE>
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: Cannot create an empty global group.
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Cannot have members from different applications.
400: Can not have application identity in group
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found.
404: There is no application with the specified ID."},"response":[]},{"name":"Update services","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t250\n\t\ticmp service updated\n\t\tUpdated comment\n\t\ticmp_service\n\t\t3\n\t\t3\n\t\t1\n\t\n\t\n\t\t251\n\t\tip service updated\n\t\tUpdated comment\n\t\tip_service\n\t\t51\n\t\t51\n\t\tdefault\n\t\n\t\n\t\t252\n\t\ttcp service updated\n\t\tUpdated comment\n\t\ttcp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t253\n\t\tudp service updated\n\t\tUpdated comment\n\t\tudp_service\n\t\t9\n\t\t9\n\t\tdefault\n\t\n\t\n\t\t254\n\t\tService Group 1 updated\n\t\tUpdated comment\n\t\tgroup\n\t\t\n\t\t\t3\n\t\t\n\t\t\n\t\t\t4\n\t\t\n\t\n\t\n\t\t255\n\t\tService Group 2 updated\n\t\tUpdated comment\n\t\tgroup\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services","description":"Parameters:
applicationId: The unique identifier of the application
body: List of services

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services
BODY<services>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>250</id>
        <name>icmp service updated</name>
        <comment>Updated comment</comment>
        <type>icmp_service</type>
        <max>3</max>
        <min>3</min>
        <timeout>1</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>251</id>
        <name>ip service updated</name>
        <comment>Updated comment</comment>
        <type>ip_service</type>
        <max>51</max>
        <min>51</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>252</id>
        <name>tcp service updated</name>
        <comment>Updated comment</comment>
        <type>tcp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"singleServiceDTO\">
        <id>253</id>
        <name>udp service updated</name>
        <comment>Updated comment</comment>
        <type>udp_service</type>
        <max>9</max>
        <min>9</min>
        <timeout>default</timeout>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>254</id>
        <name>Service Group 1 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
        <member>
            <id>3</id>
        </member>
        <member>
            <id>4</id>
        </member>
    </service>
    <service xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"serviceGroupDTO\">
        <id>255</id>
        <name>Service Group 2 updated</name>
        <comment>Updated comment</comment>
        <type>group</type>
    </service>
</services>


Response Messages:
200: Services were modified.
400: Members IDs cannot be empty.
400: Service type must be either SingleServiceDTO or ServiceMemberDTO.
400: Local service must be associated with an application.
400: Service is locked for discovery.
400: Service is new.
400: Name <NAME> already exists.
400: Name cannot be empty.
400: Invalid max protocol
400: Invalid min protocol
400: Invalid min icmp type
400: Invalid max icmp type
400: Invalid min port
400: Invalid max port
400: Invalid protocol
400: The group contains duplicate members.
400: ANY cannot be a member of a group.
400: Application identity cannot be a member of a group.
403: Access is denied
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: Service with ID <ID> was not found."},"response":[]},{"name":"Delete service","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","description":"Use force=true to delete a service with decommission.

Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service
force: Force delete [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250?force=true

Response Messages:
400: The application was already deleted.
400: Cannot delete an object that is being referenced by other objects.
400: Cannot delete a predefined object.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID.
404: Service with ID <SERVICE_ID> was not found in application with id <APPLICATION_ID>"},"response":[]},{"name":"Retrieve an existing service by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"},{"value":null,"type":"text","key":"serviceId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/services/{{serviceId}}","description":"Parameters:
applicationId: The unique identifier of the application
serviceId: The unique identifier of the service

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/services/250

Response Messages:
400: The application was already deleted.
403: You do not have permission to access application with ID
404: There is no application with the specified ID.
404: Service with ID was not found."},"response":[]}]},{"name":"Application Users","item":[{"name":"Delete unused user","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"userId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
200: User was deleted.
404: User with ID <ID> was not found.
400: Cannot delete an object that is being referenced by other objects.
403: Access is denied."},"response":[]},{"name":"Fetches user by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"userId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users/{{userId}}","description":"Parameters:
userId: The ID of the user

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users/10

Response Messages:
404: User with ID <ID> was not found.
403: Access is denied."},"response":[]},{"name":"Create users","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\tLocal user 1\n\t\tNew local user\n\t\t8.8.8.8\n\t\n\t\n\t\tLdap user 1\n\t\tNew ldap user\n\t\n\t\n\t\tUser group 1\n\t\tNew user group\n\t\t\n\t\t\t14\n\t\t\n\t\t\n\t\t\t15\n\t\t\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","description":"Parameters:
body: List of users

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/users
BODY<users>
    <user>
        <name>Local user 1</name>
        <comment>New local user</comment>
        <ip>8.8.8.8</ip>
    </user>
    <user>
        <name>Ldap user 1</name>
        <comment>New ldap user</comment>
    </user>
    <user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"userObjectGroupDTO\">
        <name>User group 1</name>
        <comment>New user group</comment>
        <member>
            <id>14</id>
        </member>
        <member>
            <id>15</id>
        </member>
    </user>
</users>


Response Messages:
201: User was created.
200: Users were created.
400: There are no items to add.
400: Members IDs cannot be empty.
404: User with id <ID> was not found.
400: Invalid user type <TYPE>
400: Name cannot be empty.
400: User with name <NAME> already exists.
400: Invalid ip
403: Access is denied."},"response":[]},{"name":"Fetches users","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/users","description":"Parameters:
name: The name of the user [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/users?name=Local user 1

Response Messages:
404: There are no users with the name NAME.
403: Access is denied."},"response":[]}]},{"name":"Applications","item":[{"name":"Move applications to another customer","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t \n\t\t\t1\n\t\t \n\t\t \n\t\t\t 2\n\t\t \n\t \n\t \n\t\t \n\t\t\t2\n\t\t \n\t\t \n\t\t\tDefault\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/move_applications","description":"Parameters:
body: List of applications and customers [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/move_applications
BODY<move_applications>
     <move_application>
         <application>
            <id>1</id>
         </application>
         <customer>
             <id>2</id>
         </customer>
     </move_application>
     <move_application>
         <application>
            <id>2</id>
         </application>
         <customer>
            <name>Default</name>
         </customer>
     </move_application>
</move_applications>


Response Messages:
200: Applications were moved successfully.
400: Multi-Customer mode is not enabled.
400: You cannot move an application pack to a different customer.
400: Reference to application is invalid.
400: APPLICATION already exists in CUSTOMER.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: Reference to CUSTOMER is invalid.
400: CUSTOMER is not imported to SecureApp.
400: CUSTOMER was decommissioned.
400: You must delete virtual servers from CUSTOMER before you move APPLICATION to another customer.
400: You must remove virtual servers from the INTERFACE and publish it before you move APPLICATION to another customer.
400: You cannot move APPLICATION to CUSTOMER because the connection to application pack and the application pack cannot be in the same customer.
400: You cannot move APPLICATION to a different customer because the application interface and the application pack must be in the same customer.
400: You must remove INTERFACE from APPLICATION PACK and publish it before you can move APPLICATION to another customer.
400: CONNECTION TO APPLICATION from APPLICATION must use interface from CUSTOMER.
400: Sources in CONNECTION from APPLICATION must all be from applications in the same customer.
400: Destinations in CONNECTION in APPLICATION must all be from applications in the same customer.
400: Servers in CONNECTION from APPLICATION must all be from CUSTOMER.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from applications in the same customer.
400: Servers in CONNECTION TO APPLICATION from APPLICATION must be from CUSTOMER.
400: Application or application pack with NAME already exists in CUSTOMER.
400: There are no applications to move.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Export Impact Analysis to a CSV file.","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/impact_analysis_csv","description":"To prevent a CSV injection attack when exporting Impact Analysis to a CSV file, if a special character ( = - + @ ) appears at the beginning of any field, a single quote (') is added before the character.

Parameters:
application_id: The unique identifier of the application

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/2/impact_analysis_csv

Response Messages:
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
403: You do not have permissions to edit this application.
404: There is no application with the specified ID."},"response":[]},{"name":"Retrieve security policy violations from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/compliance_violations","description":"Parameters:
applicationId [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/compliance_violations

Response Messages:
400: No valid connections found in APPLICATION.
400: Security policy compliance check is not available because a security policy has not been defined.
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
503: Cannot connect to SecureTrack.
503: Timeout occurred while waiting for response from SecureTrack.
500: An error occurred in SecureTrack when running the security compliance check."},"response":[]},{"name":"Export application history to PDF","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"application_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{application_id}}/history/export_pdf","description":"Parameters:
application_id: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History max rows [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?start_date=2015-07-18&count=2

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history/export_pdf?count=2

Response Messages:
403: Access is denied.
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID.
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date"},"response":[]},{"name":"Retrieve application history","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}/history","description":"Parameters:
applicationId: The unique identifier of the application
start_date: States starting date to fetch history since. Date format expected: yyyy-mm-dd [optional]
end_date: Get history until this date. Date format expected: yyyy-mm-dd [optional]
count: History list length [optional]
start: Offset the count starting point [optional]
type: States the history type to fetch [optional]
user: The username of the user made the changes [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&end_date=2015-12-18

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start_date=2015-07-18&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?start=0&count=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?type=SERVER

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1/history?user=Jack

Response Messages:
400: The date format must be: yyyy-mm-dd
400: Start date must be before End date
400: Count parameter must be a number
400: Start parameter must be a number
400: Start parameter must be less than total
400: Type parameter must be either server, server_group, connection, application, application_interface, connection_interface or connection_to_application
400: User not found
403: Access is denied
403: You do not have permission to access application with ID
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"Change an application","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t 139\n\t UpdatedAppName\n\t UpdatedComment\n\t false\n\t \n\t\t 4\n\t \n\t \n\t\t \n\t\t\t 3\n\t\t \n\t \n\t \n\t\t \n\t\t\t 5\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
applicationId: The unique identifier of an application to change
body: Application

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/139
BODY<application>
     <id>139</id>
     <name>UpdatedAppName</name>
     <comment>UpdatedComment</comment>
     <decommissioned>false</decommissioned>
     <owner>
         <id>4</id>
     </owner>
     <editors>
         <editor>
             <id>3</id>
         </editor>
     </editors>
     <viewers>
         <viewer>
             <id>5</id>
         </viewer>
     </viewers>
</application>


Response Messages:
400: The application was already deleted.
400: Application owner is missing.
400: Owner cannot be empty.
400: Reference to owner ID is invalid.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
403: Access is denied
403: You do not have permissions to change the owner of application ID.
403: You do not have permissions to change the editors and a viewer of application ID.
403: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: This application is publishing and therefore cannot be edited. Redo your changes after publishing is completed.
404: There is no application with the specified ID."},"response":[]},{"name":"Delete an application","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"Parameters:
applicationId: The unique identifier of the application to delete

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
400: The resources of application NAME are used in connections for other applications.
400: You cannot delete application NAME because its application interfaces are used in other applications.
400: You cannot delete application NAME because its application interfaces are used in other application packs.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
400: Application with ID ID was not found.
400: You cannot delete application NAME because there are connection changes pending a ticket in other application."},"response":[]},{"name":"Retrieve an existing application by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"applicationId"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/{{applicationId}}","description":"Parameters:
applicationId: The unique identifier of an application to retrieve

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications/1

Response Messages:
400: The application was already deleted.
401: No available licenses. Ask your SecureApp administrator for assistance.
403: Access is denied
403: You do not have permission to access application with ID
404: There is no application with the specified ID."},"response":[]},{"name":"Create new applications","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t AppName\n\t\t Comment\n\t\t \n\t\t\t 3\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 4\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t\t \n\t\t\t 24\n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"Parameters:
body: List all applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <name>AppName</name>
         <comment>Comment</comment>
         <owner>
             <id>3</id>
         </owner>
         <editors>
             <editor>
                 <id>4</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
         <customer>
             <id>24</id>
         </customer>
     </application>
</applications>


Response Messages:
400: There are no items to add.
400: Application was already saved.
400: Application name must contain at least 2 and no more than 160 characters.
400: Owner cannot be empty.
400: The specified owner does not exist.
400: The owner NAME does not have permission to access applications.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
400: Application with NAME already exists.
400: Application owner is missing.
400: Reference to owner ID is invalid.
400: You must include the owner field.
400: The Owner has no ID or name.
400: Reference to customer ID is invalid.
400: You must specify the name or ID of the customer.
400: The customer has no ID or name.
400: The specified customer does not exist.
400: There is an editor without an ID or name.
403: Access is denied
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no editor with the name NAME."},"response":[]},{"name":"Update applications","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t 140\n\t\t App1\n\t\t true\n\t\t \n\t\t\t 4\n\t\t \n\t \n\t \n\t\t 139\n\t\t UpdatedAppName\n\t\t Updated Comment\n\t\t \n\t\t\t 4\n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 3\n\t\t\t \n\t\t \n\t\t \n\t\t\t \n\t\t\t\t 5\n\t\t\t \n\t\t \n\t \n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"This API can be used to delete or decommission an application.
To decommission an application, send true in decommissioned tag.

Parameters:
body: List of applications

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications
BODY<applications>
     <application>
         <id>140</id>
         <name>App1</name>
         <decommissioned>true</decommissioned>
         <owner>
             <id>4</id>
         </owner>
     </application>
     <application>
         <id>139</id>
         <name>UpdatedAppName</name>
         <comment>Updated Comment</comment>
         <owner>
             <id>4</id>
         </owner>
         <editors>
             <editor>
                 <id>3</id>
             </editor>
         </editors>
         <viewers>
             <viewer>
                 <id>5</id>
             </viewer>
         </viewers>
     </application>
</applications>


Response Messages:
400: Application ID is missing.
400: Application ID is invalid
400: The application was already deleted.
400: You must include the owner field.
400: There is an editor without an ID or name.
400: The application owner cannot also be an editor of the application.
400: There is a viewer without an ID or name.
400: The application owner cannot also be a viewer of the application.
400: User ID was not found.
400: User ID does not have permission to access applications.
400: User cannot be both an editor and a viewer of the application.
403: Access is denied
403: You do not have permissions to change the owner of application ID.
403: You do not have permissions to change the editors and a viewer of application ID.
403: You do not have permissions to decommission this application.
401: No available licenses. Ask your SecureApp administrator for assistance.
404: There is no application with the specified ID."},"response":[]},{"name":"List all applications","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/repository/applications/","description":"Parameters:
userId: Applications by user ID, if not given the default is logged in user id [optional]
name: The name of the application [optional]
app_permissions: Filter applications by the given permissions (separated with commas):\napp_owner - returns applications where the user is the owner\napp_editor - returns applications where the user has been explicitly added as an editor\napp_viewer - returns applications where the user has been explicitly added as a viewer\napp_adminonly - returns applications where the user only has editor access because user has ���edit all applications��� permission, and does not include applications where this user is either the app_owner, app_editor, or app_viewer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?userId=1

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?app_permissions=app_owner,app_editor,app_viewer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications?name=App&app_permissions=app_adminonly

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/repository/applications

Response Messages:
400: Invalid app_permissions value: 'appPermissions'.
403: Access is denied
403: You can't use the parameter 'userId' because you don't have 'View all applications' permission.
404: There are no applications matching your filter.
404: User with ID 'userId' was not found."},"response":[]}]},{"name":"Cloud Console","item":[{"name":"Auto associate cloud servers from SecureTrack with an application","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tApplication\n\ttrue\n\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule","description":"When auto-associate is enabled, user must enter key value

Parameters:
body: Auto association rule

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers/auto_association_rule
BODY<auto_association_rule>
    <key>Application</key>
    <enabled>true</enabled>
</auto_association_rule>


Response Messages:
200: Auto association rule is saved.
400: Enabled rule requires key value.
403: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers."},"response":[]},{"name":"Associate cloud servers from SecureTrack with an application","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t9\n\t\t\n\t\t\t{b503916e-4468-4dc8-981b-2ec534587352}\n\t\t\t{0cc947a5-276f-4a4a-9d12-df5284fce609}\n\t\t\n\t\n\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","description":"Parameters:
application_id: The ID of the application
body: List of device IDs and cloud server UIDs

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?application_id=87
BODY<devices_to_uids>
    <device_to_uids>
        <device_id>9</device_id>
        <uids>
            <uid>{b503916e-4468-4dc8-981b-2ec534587352}</uid>
            <uid>{0cc947a5-276f-4a4a-9d12-df5284fce609}</uid>
        </uids>
    </device_to_uids>
</devices_to_uids>


Response Messages:
201: Servers were imported to SecureApp.
403: Access is denied
400: There is no application with the specified ID.
401: No available licenses. Ask your SecureApp administrator for assistance.
400: You do not have permissions to edit this application.
400: You cannot associate servers with this application, because the application has been decommissioned.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to add cloud servers.
403: UID does not exist in device ID.
403: Device with ID does not exist.
403: Device with ID does not exist in DOMAIN.
403: The AWS instance with UID and device ID has already been imported to application NAME. You cannot import the same instance multiple times."},"response":[]},{"name":"Retrieve cloud server listing from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"vendor"},{"value":null,"type":"text","key":"search_string"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/cloud_console/servers/","description":"Parameters:
customer_id: Customer ID to be filtered by. [optional]
vendor: Vendor to be filtered by.
search_string: Search text.
start: Returning matching result starting from this element in the array (0-based). [optional]
count: Total number of matching servers to return. [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=WebServe

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/cloud_console/servers?vendor=Amazon&search_string=\"WebServer1\"

Response Messages:
403: Access is denied
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to search for cloud servers.
400: Illegal search string.
400: Start is bigger then possible result count.
400: Start and count cannot hold negative values.
400: Vendor query param is required.
400: Vendor should be one of the following: Amazon.
400: Search string query param is required.
400: Customer with ID does not exist in SecureApp
400: Customer with ID was decommissioned."},"response":[]}]},{"name":"Customers","item":[{"name":"List all customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/","description":"Parameters:
name: The name of the customer [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers?name=Customer 1

Response Messages:
400: Not available in single-customer mode.
404: There are no customers with the name NAME."},"response":[]},{"name":"List all imported customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/imported","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/imported

Response Messages:
400: Not available in single-customer mode.
403: Access is denied"},"response":[]},{"name":"Retrieve existing applications for specific domain","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}/applications","description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/2/applications

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
403: Access is denied"},"response":[]},{"name":"import customers","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t2\n\t\n\t\n\t\t3\n\t\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/import","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.

Parameters:
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/import
BODY<customers>
    <customer>
        <id>2</id>
    </customer>
    <customer>
        <id>3</id>
    </customer>
</customers>


Response Messages:
400: Not available in single-customer mode.
400: ID can not be empty.
400: There are some id's that doesn't exist.
403: Access is denied
503: Not connected to SecureTrack."},"response":[]},{"name":"Fetches customer by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"customer_id"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","description":"Parameters:
customer_id: The ID of the customer

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/1

Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found."},"response":[]},{"name":"Update a customer","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tNOT_IMPORTED\n"},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/{{customer_id}}","description":"Parameters:
customer_id: The ID of the customer
body: Customers

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/secureapp/customers/2
BODY<customer>
    <usage_mode>NOT_IMPORTED</usage_mode>
</customer>


Response Messages:
400: Not available in single-customer mode.
400: Customer with id ID was not found.
400: Can not update Default customer.
400: This customer is already not imported.
400: USAGE_MODE is not a valid state. The valid values are: USAGE_MODES
403: Access is denied
500: This customer is not imported.
400: You cannot delete this customer because there are connection changes pending a ticket in another customer.You must decommission this customer first, and then delete it."},"response":[]},{"name":"List all non-imported customers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/customers/not_imported","description":"Only users with 'Create new applications' and 'View all applications' permissions can run this API.



Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/customers/not_imported

Response Messages:
400: Not available in single-customer mode.
403: Access is denied
503: Not connected to SecureTrack."},"response":[]}]},{"name":"Domains","item":[{"name":"List all domains","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/","description":"Parameters:
name: The name of the domain [optional]

Usage Example


Response Messages:
404: There are no domains with the name NAME."},"response":[]},{"name":"synchronize domains","request":{"method":"PUT","header":[],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/synchronize","description":"Retrieves all the domains lists in ST , for use by SC. If a domain was deleted in ST, then it will be removed from SC



Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/domains/synchronize

Response Messages:
500: Multi-Domain mode is disabled in SecureChange. Unable to synchronize with SecureTrack domains"},"response":[]},{"name":"Fetches domain by ID","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"domainId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/domains/{{domainId}}","description":"Parameters:
domainId: The ID of the domain

Usage Example


Response Messages:
400: Domain with id ID was not found."},"response":[]}]},{"name":"External Provider","item":[{"name":"Returns a detailed list of the external network resources available to SeucreChange from external provider (SecureCloud or alternate)","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/externalprovider/resources","description":"Parameters:
name: Filter by name (substring, case insensitive) [optional]
uid: Filter by resource ref ID (exact match, case sensitive) [optional]
count: Limit number of results (default is 100) [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/externalprovider/resources?count=2
OUTPUT{
\"external_resources\":{
    \"external_resource\":[
     {
         \"resource_ref\":{
             \"id\":\"df67af5c-87b3-3e7a-bd50-371f76e9bdf5\",
             \"name\":\"ASG1\",
             \"type\":\"APPLICATION_SECURITY_GROUP\"
         },
         \"ips\":[
             \"2.0.0.0/15\",
             \"3.0.0.0/15\"
         ],
         \"account_ref\":{
             \"id\":\"5fcf0c94-6789-4fae-adb3-6e4226389069\",
             \"name\":\"app-group-prod-account\",
             \"cloud_vendor\":\"AZURE\"
         }
    },
    {
         \"resource_ref\":{
             \"id\":\"1cb7accb-f947-3e7f-b9b0-0b63973b2220\",
             \"name\":\"PM_ASG\",
             \"type\":\"APPLICATION_SECURITY_GROUP\"
         },
         \"ips\":[
             \"2.2.0.0/16\",
             \"3.5.0.0/16\"
         ],
         \"account_ref\":{
             \"id\":\"5fcf0c94-6789-4fae-adb3-6e4226389069\",
             \"name\":\"app-group-prod-account\",
             \"cloud_vendor\":\"AZURE\"
         }
    }
    ]
}}


Response Messages:
403: User has no permissions to view SecureCloud/Alternate provider resources
404: SecureCloud/Alternate provider disabled. Contact your administrator for assistance.
400: name and uid parameters cannot be used in same query."},"response":[]}]},{"name":"Load Balancers","item":[{"name":"Fetches virtual servers from SecureTrack","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ip"}]},"url":"https://{{SecureApp_IP}}/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers","description":"Find virtual servers matching a given IP address.
You can search for the virtual server itself of any of its members.

Parameters:
ip: ip
domainId: The unique identifier of a domain [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/secureapp/external_resources/f5_virtual_servers?ip=2.2.2.2

Response Messages:
400: Invalid IP
400: Invalid Subnet
400: There is no domain with the specified ID.
403: Access is denied
503: Not connected to SecureTrack."},"response":[]}]},{"name":"Rule Recertification","item":[{"name":"Run Update Metadata for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/rule_recertification/update_metadata","description":"A link to the rule recertification field will returned in the location field of the header, for example: /securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/72

Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/rule_recertification/update_metadata

Response Messages:
400: Update Metadata is not defined for the requested field.
400: Update Metadata is not available for the current ticket status.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a rule recertification request field.
403: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]}]},{"name":"SecureChange Devices","item":[{"name":"Returns IDs for specified list of excluded parent management devices and child firewalls in SecureChange","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","description":"For example on this Panorama hierarchy:
DG1 - Excluded
  DG1.1
    FW1
    FW2
    FW3

Calling this API with false value will return only DG1���s id.
Calling this API with true value will return DG1, FW1, FW2, FW3 id���s.


Parameters:
show_all: When set to true - Displays the specified devices and all their child firewalls in the hierarchy, which will be excluded implicitly.
When set to false - Displays only the devices which were explicitly excluded.
Default value is false.
[optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=false
OUTPUT<device_ids>
    <id>10</id>
    <id>11</id>
</device_ids>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded?show_all=true
OUTPUT<device_ids>
    <id>33</id>
    <id>10</id>
    <id>11</id>
    <id>35</id>
    <id>29</id>
    <id>31</id>
</device_ids>

"},"response":[]},{"name":"Update the whole list of excluded devices in SecureChange","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t1\n\t12\n\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/excluded","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/excluded
BODY<device_ids>
    <id>1</id>
    <id>12</id>
</device_ids>

"},"response":[]},{"name":"Get suggested targets for a given access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"access_request\":{\n\t\t\"users\":{\n\t\t\t\"user\":[\n\t\t\t\t\"Any\"\n\t\t\t]\n\t\t},\n\t\t\"sources\":{\n\t\t\t\"source\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.1.1\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"destinations\":{\n\t\t\t\"destination\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"IP\",\n\t\t\t\t\t\"ip_address\":\"10.100.20.2\",\n\t\t\t\t\t\"netmask\":\"255.255.255.255\",\n\t\t\t\t\t\"cidr\":32\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"services\":{\n\t\t\t\"service\":[\n\t\t\t\t{\n\t\t\t\t\t\"@type\":\"ANY\",\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t\t\"action\":\"Accept\",\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/suggest_target","description":"Returns a list of suggested targets for a given access request, based on topology calculations.

Parameters:
body [optional]
domain_name: Domain Name
workflow_name: Workflow Name

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/devices/suggest_target?domain_name=Default&workflow_name=AR
BODY{
    \"access_request\":{
        \"users\":{
            \"user\":[
                \"Any\"
            ]
        },
        \"sources\":{
            \"source\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.1.1\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"destinations\":{
            \"destination\":[
                {
                    \"@type\":\"IP\",
                    \"ip_address\":\"10.100.20.2\",
                    \"netmask\":\"255.255.255.255\",
                    \"cidr\":32
                }
            ]
        },
        \"services\":{
            \"service\":[
                {
                    \"@type\":\"ANY\",
                }
            ]
        },
        \"action\":\"Accept\",
    }
}
OUTPUT{
    \"multi_target\": {
        \"target\": {
            \"@type\": \"Object\",
            \"object_name\": \"Device-1\",
            \"object_type\": \"firewall\",
            \"object_details\": \"10.100.40.1\",
            \"management_id\": 250,
            \"management_name\": \"Panorama/Domain1\"
        }
    }
}


Response Messages:
200: Targets returned successfully
400: User does not have permissions to domain or domain does not exist
403: Access is denied"},"response":[]},{"name":"Get details of target devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/devices/","description":"Parameters:
name: device name or part of a name [optional]
show_targets: show_targets true: Returns the details of devices that can be selected as a target
show_targets false: Returns the details of devices with objects that can be used in tickets [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/devices?name=asa&show_targets=true

Response Messages:
404: Devices not found"},"response":[]}]},{"name":"Server Decommissioning","item":[{"name":"Run Impact Analysis for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/impact_analysis","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/impact_analysis

Response Messages:
400: Impact analysis is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Run server decommission designer for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/designer","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/designer

Response Messages:
400: Server decommission designer is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]},{"name":"Get server decommission designer results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/designer","description":"Use this API to retrieve designer results generated in R17-1 and earlier.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Get verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Get impact analysis results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_server_decommission_request/{{fieldId}}/impact_analysis","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Server Decommission Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/multi_server_decommission_request/261/impact_analysis

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>."},"response":[]},{"name":"Run Verifier for given task","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/multi_server_decommission_request/verifier","description":"Parameters:
id: Ticket ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/multi_server_decommission_request/verifier

Response Messages:
400: Verifier is not defined for the requested field.
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided task lacks a decommission request field.
403: You do not have permission to update this task. Contact your administrator for assistance."},"response":[]}]},{"name":"System Configuration","item":[{"name":"Modify the SecureTrack connection settings and test the connection status","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\t\n\t\t \n\t\t\tadmin\n\t\t\n\t\tfalse\n\t\t30\n\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","description":"Parameters:
testOnly: Test the connection status using the specified settings. The new settings are not saved. The default value is false [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"remoteHost\">
            <IP_or_hostname>192.168.11.1</IP_or_hostname>
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
        <internal_IP_of_secureChange_server>192.168.2.2</internal_IP_of_secureChange_server>
    </secureTrack_settings>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack
BODY    <secureTrack_settings>
        <host xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"localHost\">
            <user_name>admin</user_name>
        </host>
        <show_link_to_secureTrack>false</show_link_to_secureTrack>
        <check_connection_interval>30</check_connection_interval>
    </secureTrack_settings>


Response Messages:
400: Invalid host name or IP address.
400: show_link_to_secureTrack is invalid. It must be 'true', 'false' or empty."},"response":[]},{"name":"Retrieve the SecureTrack connection settings and status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/integration_with_secureTrack/","description":"

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/integration_with_secureTrack?testOnly=false
"},"response":[]}]},{"name":"System Users","item":[{"name":"Import LDAP users to SecureChange by simulating login process","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tx\n\tLDAP\n\t\t\n\t\t\t1\n\t\t\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","description":"This API implicitly imports LDAP users to SecureChange by simulating their login.
To explicitly import LDAP entities- both users and groups, it is recommended to use /users/import API

Parameters:
body: partyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users
BODY<user xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"user\">
    <name>x</name>
    <origin_type>LDAP</origin_type>
        <ldap_configuration>
            <id>1</id>
        </ldap_configuration>
</user>


Response Messages:
403: Access is denied.
400: Name is missing.
400: Origin is missing.
400: User {login_name} already exists, with ID (id} and name {name}.
400: User {login_name} not found in LDAP.
400: Creating a user via REST API is available only if origin is LDAP.
400: Creating a user via REST API is available only if type is User.
400: Ldap configuration with ID {id} not found."},"response":[]},{"name":"Return the list of users","request":{"method":"GET","header":[],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/","description":"user_name: case insensitive, search mode: contains text
exact_name: when set to true, user_name search mode is case sensitive and exact text
email: case insentitive, search mode: exact match
Logical OR between user_name and email.

Parameters:
showIndirectRelation: Members that belong to the selected group only indirectly [optional]
user_name: The user's login name [optional]
email: The user's email [optional]
exact_name: Search user_name as exact match [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users?email=bob@tufin.com&user_name=bob&exact_name=true
"},"response":[]},{"name":"Import user / group from LDAP","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"ldap_party\": {\n\t\t\"ldap_configuration_name\": \"ldap_name\",\n\t\t\"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/import","description":"The imported user / group will be visible in SecureChange GUI under users section.
In multi domain mode, imported entity will be assigned with the domains of \"any user\" group.
Only users with 'view settings tab' permission can run this API.

Parameters:
body: ldapPartyDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/import
BODY{
    \"ldap_party\": {
        \"ldap_configuration_name\": \"ldap_name\",
        \"ldap_dn\": \"CN=alice,OU=Advertising,OU=Marketing,DC=testEnv,DC=com\"
    }
}


Response Messages:
400: The LDAP configuration name does not exist
400: The given ldap_dn does not exist
400: The given ldap_dn is already imported
400: Failed to create the selected user
400: Failed to create the selected group
400: Selected user already exists in SecureChange but is not synchronized with the LDAP server. Go to Settings > LDAP and synchronize with the LDAP
400: This group has a large number of users, and will not be expanded in the users console. To be able to configure roles and step participation for individual users from the group, add them explicitly.
400: Failed to update the selected group
400: Unsupported LDAP object class
400: Unable to establish a connection to server <SERVER_IP>:<SERVER_PORT> within the configured timeout of <TIMEOUT> milliseconds.
403: Access is denied"},"response":[]},{"name":"Change local group members","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"group_change\":{\n\t\t\"member_ids_to_add\": [1,2],\n\t\t\"member_ids_to_remove\":[3,4]\n\t}\n}\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group/{{id}}","description":"Only users with 'view settings tab' permission can run this API.
Only local or imported LDAP users can be added to local groups.

Parameters:
id: Group ID
body: groupChangeDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group/1
BODY{
    \"group_change\":{
        \"member_ids_to_add\": [1,2],
        \"member_ids_to_remove\":[3,4]
    }
}    


Response Messages:
400: Exceeded limit of {MAXIMUM} group member changes
400: These user IDs do not exist: {IDs}
400: These user IDs do not exist or are not group members: {IDs}
400: Group ID {ID} is not a local group
400: Group ID {ID} does not exist
400: Cannot add a group to itself
400: Cannot add a group to a group that it already contains. Group {ID1} contains group {ID2}"},"response":[]},{"name":"Delete the specified User or Group","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","description":"Parameters:
id: User ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User with id {id} does not exist"},"response":[]},{"name":"Return the specified user","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/{{id}}","description":"Parameters:
id: User ID
showIndirectRelation: Members that belong to the selected group only indirectly [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/users/5

Response Messages:
400: User or group was not found."},"response":[]},{"name":"Create local group","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"group\": {\n\t\t\"name\": \"name1\",\n\t\t\"description\": \"description1\",\n\t\t\"email\": \"email1@tufin.com\"\n\t}\n}\t"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/users/group","description":"Only users with 'view settings tab' permission can run this API.

Parameters:
body: CreateGroupDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/users/group
BODY{
    \"group\": {
        \"name\": \"name1\",
        \"description\": \"description1\",
        \"email\": \"email1@tufin.com\"
    }
}    


Response Messages:
400: Input Validation Error : {field name}: {input validation error message}
400: Name already exists"},"response":[]}]},{"name":"Ticket Lifecycle","item":[{"name":"Cancel a ticket","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/cancel","description":"Parameters:
id: The ID of the ticket as shown in SecureChange
requester_id: The user of the ticket's requester, when logged in user is canceling on behalf [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/cancel?requester_id=5

Response Messages:
403: Access is denied.
404: Ticket is already closed
404: Ticket ID was not found"},"response":[]},{"name":"Returns the specified ticket to the specified step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tplease fix source \n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/redo/{{toStepId}}","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
toStepId: To which step we the ticket will return
body: RedoCommentDto

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/redo/1
BODY<redo_step_comment>
    <comment>please fix source </comment>
</redo_step_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
403: User has no permissions to redo ticket steps.
404: There is no ticket with ID.
404: No entity found for query"},"response":[]},{"name":"Change the requester of the specified ticket task to the specified user.","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tuser was deleted moving tickets to Bob\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/change_requester/{{assigneeId}}","description":"Parameters:
id: Ticket ID
assigneeId: The assignee ID
body: CommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/change_requester/4
BODY<comment>
    <comment>user was deleted moving tickets to Bob</comment>
</comment>


Response Messages:
400: The change requester comment must be set in order to change the requester the ticket.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
404: There is no ticket with ID.
404: There is no requester (User) with ID."},"response":[]},{"name":"Returns the history of the specified ticket","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/history","description":"Parameters:
id: Ticket ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/history

Response Messages:
403: User has no permissions to view ticket history
404: You do not have permission to view this task. Contact your administrator for assistance.
404: There is no ticket with ID."},"response":[]},{"name":"Map rules to ticket","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/map_rules","description":"Maps the rules from the ticket to the relevant rules in SecureTrack.
Adds record set entries to the relevant rules metadata.
Link to history is found in the returned location header.
Applicable only for closed tickets in the following workflows: Access Request, Access Request and Modify Group, and Clone Server Policy.
Use handler_id for running on behalf of another user.
To get handler_id, use the System Users API.

Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: Run API on behalf of defined user id [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/map_rules?handler_id=5

Response Messages:
201: Started asynchronous mapping of rules to ticket ID <ID>. Mapping status is displayed in ticket history.
400: Ticket's workflow type does not support this operation
403: Access is denied.
403: You do not have permission to access ticket <ID>
403: On behalf user do not have permission to access ticket <ID>
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>.
412: Ticket is not in closed status"},"response":[]},{"name":"Confirm the request","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tconfirmed\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/confirm","description":"Parameters:
id: Ticket ID
requester_id: The user of the ticket's requester, when logged in user is confirm on behalf [optional]
body: Confirm comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/confirm?requester_id=5
BODY<confirm_comment>
    <comment>confirmed</comment>
</confirm_comment>


Response Messages:
400: User is trying to confirm a ticket that belongs to another user
400: User is not permitted to confirm this ticket on behalf another user
400: The user can not confirm the ticket, because he is not in the domain of the ticket
403: Access is denied.
404: There is no ticket with ID ."},"response":[]},{"name":"Reassigns the specified ticket task to the specified user.","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\tPlease complete the AR\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/reassign/{{assigneeId}}","description":"Values can only be updated for the current step.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
assigneeId: The assignee ID
body: ReassignTaskCommentDTO

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/reassign/4
BODY<reassign_task_comment>
    <comment>Please complete the AR</comment>
</reassign_task_comment>


Response Messages:
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Task <NAME> is no longer active
404: There is no ticket with ID.
404: No entity found for query"},"response":[]},{"name":"Reject a ticket","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\trejected\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/reject","description":"Parameters:
id: The ID of the ticket as shown in SecureChange
handler_id: The user id, when logged in user is rejecting on behalf [optional]
body: Reject comment

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/reject?handler_id=5
BODY<reject_comment>
    <comment>rejected</comment>
</reject_comment>


Response Messages:
400: Ticket status <STATUS> is incorrect to perform this action
400: User <NAME> has no permissions to perform this action
400: Comment cannot be empty
403: User is not permitted to reject this ticket on behalf another user
403: You do not have permission to access ticket <ID>
403: On behalf user do not have permission to access ticket <ID>
403: Access is denied.
404: There is no ticket with ID <ID>.
404: There is no handler (User) with ID <ID>."},"response":[]}]},{"name":"Tickets","item":[{"name":"Returns topology map image (png file) for specific verifier results","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier/topology_map","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier/topology_map

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request.
404: Toplogy map was not found for this field."},"response":[]},{"name":"Get security zones according to field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/security_zones","description":"Use this API to retrieve security zones for multi access result field

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/security_zones

Response Messages:
404: There is no ticket with ID <ID>.
401: Cannot update ticket because it is either closed, rejected or waiting for requester confirmation
400: Task ID <ID> cannot be found in the current step with ID <ID>.
400: You can only update the current step of the ticket. Step ID <ID> does not match the current step ID <ID>.
400: The task with ID <ID> does not contain a field with ID <ID>.
400: The task with ID <ID> does not contain a field of type <ID>.
400: Security zones tool is not enabled for the requested field.
403: You do not have permission to view this task. Contact your administrator for assistance."},"response":[]},{"name":"Modify the Designer suggestions for Access Request or Clone Server Policy","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"rule_placement\": {\"new_value\":\"before\"}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/tasks/{{taskId}}/designer/instruction/{{instructionId}}","description":" GENERAL USE
1. Create a ticket using UI/API.
2. Run the designer using UI/API.
3. Use relevent API to get the designer results.
4. Run this API to modify the required parameters.

*Note: you can modify one parameter at a time.

Change rule location use
a. Modifying the rule order places the new rule before the rule with the specified identifier (rule name or number).
b. Modifying the rule placement to \"last\" places the new rule as last rule or last pre-rule (depending on the vendor convention for the device).
c. For vendors that support \"after\" placement, modifying the rule placement allows positioning the new rule before or after the suggested rule location.
d. For Check Point R80 and above releases, the indented rule numbering format can be applied to globally assigned policies (for example, ���rule_order���: ���4.5���).

track level permitted values:
NONE, LOG, ACCOUNT, ALERT, SNMP, MAIL, USER_DEFINED, EMERGENCIES, ALERTS, CRITICAL, ERRORS, WARNINGS, NOTIFICATIONS, INFORMATIONAL, DEBUGGING, DISABLED, DEFAULT, FULL_LOG, NETWORK_LOG, USER_ALERT_1, USER_ALERT_2, USER_ALERT_3

rule placement permitted values:
BEFORE, AFTER, LAST

Parameters:
body: DesignerInstructionChangeDTO
id: Ticket ID
taskId: Task ID
instructionId: Instruction ID
force: force update when new revision available [optional]

Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196?force=true
BODY{
    \"comment\": {\"new_value\":\"new comment\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_name\": {\"new_value\":\"new rule name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"track_level\": {\"new_value\":\"LOG\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_name\": {\"new_value\":\"new object name\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"log_forwarding_profile\": {\"new_value\":\"new log forwarding profile\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"security_profile_group\": {\"new_value\":\"new security profile group\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"object_replace\": {
             \"new_value\":\"new object uid\",
             \"old_value\":\"old object uid\"
    }
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_order\": {\"new_value\":\"8\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"tags\": {\"values\":[\"tag1\", \"tag2\"]}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"tags\": {\"values\":[]}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"last\"}
}


Usage Example
URLhttps://172.16.203.10/securechangeworkflow/api/securechange/tickets/29/tasks/63/designer/instruction/196
BODY{
    \"rule_placement\": {\"new_value\":\"before\"}
}


Response Messages:
200: New rule will be shadowed
200: New rule will be shadowed or break acceleration
400: Modify Designer Results API is only supported for Access Request and Clone Server Policy workflows
412: Current instruction cannot be modified because either the implementation was successful or failed irrevocably.
412: Current step does not support Designer modification action
404: A ticket with ID <ID> cannot be found.
400: Task ID <ID> cannot be found in the current step with ID <ID>.
403: Changing <TYPE> is not supported on this device
403: This Change is not supported for <INSTRUCTION TYPE> instruction type\"
403: You do not have permission to update this task. Contact your administrator for assistance.
403: New revision is available, cannot modify the Designer results
404: Specified instruction, id: <ID> was not found
404: Designer results were not found in the access request.
400: a valid object name must start with an alphanumeric character and can contain alphanumeric characters, underscore '_'. Hypen '-', dot '.' or spaces
400: For this device, the comment must be less than 100 characters per line.
400: For this device, this field must be less than <NUMBER OF CHARACTERS> characters
400: For this device, this field is required.
400: For this device, a valid object name cannot be <OBJECT NAME> because it is a reserved word
409: Rule name already exists for this device. Please give this rule a unique name.
409: Rule name <NAME> already exists in the device group hierarchy. Choose a unique name for this rule.
400: Comment contains invalid characters.
400: <DEVICE> does not support tracking level <TRACKING LEVEL>
400: <TRACKING LEVEL> is not a valid rule track level value
400: a valid object name cannot contain any of the following characters: <CHARACTERS>
400: a valid object name must be less than <NUMBER OF CHARACTERS> characters
400: a valid object name cannot be empty
400: a valid object name must conform to the following pattern: <STRING PATTERN>
409: Object already exists
400: A security profile group cannot be empty.
404: The security profile group <SECURITY PROFILE GROUP> was not found.
503: Not connected to SecureTrack.
500: An error occurred in SecureTrack while trying to validate the security profile group.
400: A log forwarding profile cannot be empty.
400: Tag list is longer than 20 items.
400: Tag list contains the same tag more than once.
400: These tags don't exist or aren't relevant to the rule on its DG location : <Tags>
404: The log forwarding profile <LOG FORWARDING PROFILE> was not found.
500: An error occurred in SecureTrack while trying to validate the log forwarding profile.
400: Object UID <OLD OBJECT UID> not found in the rule for this instruction.
400: Values of new object UID <NEW OBJECT UID> and old object UID <OLD OBJECT UID> do not match.
400: Rule placement can only be: \"before\", \"after\" or \"last\".
400: You can't change rule placement when there is no rule order. please add rule order first.
400: You can't change rule placement to \"After\" for this type of device.
400: You can't change rule placement to \"Last\" for this type of device."},"response":[]},{"name":"Returns the details of a specified ticket","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1
OUTPUT {
    \"ticket\": {
        \"id\": 1,
        \"subject\": \"AR-Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 11,
            \"name\": \"AR & MG\",
            \"uses_topology\": true
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 209,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 209,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": [
                                    {
                                        \"@xsi.type\": \"multi_access_request\",
                                        \"id\": 1695,
                                        \"name\": \"AR\",
                                        \"read_only\": false,
                                        \"access_request\": {
                                            \"id\": 1706,
                                            \"order\": \"AR1\",
                                            \"risk_analysis_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"verifier_result\": {
                                                \"status\": \"not run\"
                                            },
                                            \"use_topology\": true,
                                            \"targets\": {
                                                \"target\": {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1705
                                                }
                                            },
                                            \"users\": {
                                                \"user\": [
                                                    \"Any\"
                                                ]
                                            },
                                            \"sources\": {
                                                \"source\": [
                                                    {
                                                        \"@type\": \"INTERNET\",
                                                        \"id\": 1701
                                                    },
                                                    {
                                                        \"@type\": \"DNS\",
                                                        \"id\": 1702,
                                                        \"host_name\": \"www.google.com\",
                                                        \"dns_ip_addresses\": {
                                                            \"ip_address\": \"216.58.214.100\"
                                                        }
                                                    },
                                                    {
                                                        \"@type\": \"IP\",
                                                        \"id\": 1703,
                                                        \"ip_address\": \"1.1.1.1\",
                                                        \"netmask\": \"255.255.255.255\",
                                                        \"nat_ip_address\": \"4.4.4.4\",
                                                        \"nat_netmask\": \"255.255.255.255\"
                                                    }
                                                ]
                                            },
                                            \"destinations\": {
                                                \"destination\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1697
                                                    }
                                                ]
                                            },
                                            \"services\": {
                                                \"service\": [
                                                    {
                                                        \"@type\": \"ANY\",
                                                        \"id\": 1699
                                                    }
                                                ]
                                            },
                                            \"action\": \"Accept\",
                                            \"labels\": \"\"
                                        }
                                    },
                                    {
                                        \"@xsi.type\": \"multi_group_change\",
                                        \"id\": 1707,
                                        \"name\": \"MG\",
                                        \"read_only\": false,
                                        \"implementation_status\": \"NOT_SUPPORTED\"
                                    }
                                ]
                            }
                        }
                    }
                },
                {
                    \"id\": 210,
                    \"name\": \"STEP2 - auto AR with designer /update /commit\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 210,
                            \"assignee_id\": 4,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"unlicensed_devices_for_automation\": {
                                \"unlicensed_device_for_automation\": [
                                    {
                                        \"id\": \"2\",
                                        \"name\": \"asa\"
                                    }
                                ]
                            }
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"multi_access_request\",
                                    \"id\": 1709,
                                    \"name\": \"AR\",
                                    \"read_only\": false,
                                    \"access_request\": {
                                        \"id\": 1720,
                                        \"order\": \"AR1\",
                                        \"risk_analysis_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"verifier_result\": {
                                            \"status\": \"not run\"
                                        },
                                        \"use_topology\": true,
                                        \"targets\": {
                                            \"target\": {
                                                \"@type\": \"ANY\",
                                                \"id\": 1719
                                            }
                                        },
                                        \"users\": {
                                            \"user\": [
                                                \"Any\"
                                            ]
                                        },
                                        \"sources\": {
                                            \"source\": [
                                                {
                                                    \"@type\": \"INTERNET\",
                                                    \"id\": 1721
                                                },
                                                {
                                                    \"@type\": \"DNS\",
                                                    \"id\": 1722,
                                                    \"host_name\": \"www.google.com\",
                                                    \"dns_ip_addresses\": {
                                                        \"ip_address\": \"216.58.214.100\"
                                                    }
                                                },
                                                {
                                                    \"@type\": \"IP\",
                                                    \"id\": 1723,
                                                    \"ip_address\": \"1.1.1.1\",
                                                    \"netmask\": \"255.255.255.255\",
                                                    \"nat_ip_address\": \"4.4.4.4\",
                                                    \"nat_netmask\": \"255.255.255.255\"
                                                },
                                                {
                                                    \"@type\": \"RANGE\",
                                                    \"id\": 1724,
                                                    \"range_first_ip\": \"1.1.11.1\",
                                                    \"range_last_ip\": \"1.1.11.10\"
                                                }
                                                {
                                                    \"@type\": \"EXTERNAL_RESOURCE\"\",
                                                    \"id\": 436,
                                                    \"resource_ref\": {
                                                        \"id\": \"4786115a-97c2-3a25-8e31-1d6166263fdd\",
                                                        \"name\": \"asg-web\",
                                                        \"type\": \"APPLICATION_SECURITY_GROUP\"
                                                    },
                                                    \"ips\": {
                                                        \"ip\": [
                                                            \"9.0.0.0/16\"
                                                        ]
                                                    },
                                                    \"account_ref\": {
                                                        \"cloud_vendor\": \"AZURE\",
                                                        \"id\": \"f0499890-708c-46a9-a44a-b7da0d433de3\",
                                                        \"name\": \"app-name\",
                                                    }
                                                }
                                            ]
                                        },
                                        \"destinations\": {
                                            \"destination\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1711
                                                }
                                            ]
                                        },
                                        \"services\": {
                                            \"service\": [
                                                {
                                                    \"@type\": \"ANY\",
                                                    \"id\": 1713
                                                }
                                            ]
                                        },
                                        \"action\": \"Accept\",
                                        \"labels\": \"\"
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 210,
            \"name\": \"STEP2 - auto AR with designer /update /commit\"
        },
        \"comments\": \"\"
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2
OUTPUT {
    \"ticket\": {
        \"id\": 2,
        \"subject\": \"Clone Server Policy Ticket\",
        \"requester\": \"a\",
        \"requester_id\": 12,
        \"priority\": \"Normal\",
        \"status\": \"In Progress\",
        \"referenced_ticket\": {
            \"id\": 1,
            \"name\": \"Ticket Subject Sample\",
            \"link\": {
                \"@href\": \"https://host/securechangeworkflow/api/securechange/tickets/1\"
            }
        },
        \"domain_name\": \"\",
        \"sla_status\": \"NA\",
        \"sla_outcome\": \"NA\",
        \"workflow\": {
            \"id\": 109,
            \"name\": \"sc_12705\",
            \"uses_topology\": false
        },
        \"steps\": {
            \"step\": [
                {
                    \"id\": 78,
                    \"name\": \"Open request\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 78,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"DONE\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 872,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 869,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 871,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                },
                {
                    \"id\": 79,
                    \"name\": \"Business Approval\",
                    \"redone\": false,
                    \"skipped\": false,
                    \"tasks\": {
                        \"task\": {
                            \"id\": 79,
                            \"assignee_id\": 12,
                            \"assignee\": \"a\",
                            \"status\": \"ASSIGNED\",
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"clone_server_policy_request\",
                                    \"id\": 876,
                                    \"name\": \"Clone Server Policy Field\",
                                    \"from_server\": {
                                        \"@type\": \"IP\",
                                        \"id\": 873,
                                        \"ip_address\": \"1.2.2.2\",
                                        \"cidr\": 32
                                    },
                                    \"to_servers\": {
                                        \"server\": {
                                            \"@type\": \"IP\",
                                            \"id\": 875,
                                            \"ip_address\": \"10.100.23.32\",
                                            \"netmask\": \"255.255.255.255\",
                                            \"cidr\": 32
                                        }
                                    },
                                    \"comment\": \"target servers to clone server policy to\"
                                }
                            }
                        }
                    }
                }
            ]
        },
        \"current_step\": {
            \"id\": 79,
            \"name\": \"Business Approval\"
        },
        \"comments\": \"\"
    }
}


Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: No entity found for query"},"response":[]},{"name":"Change multiple field within a task of a ticket in the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_server_decommission_request\">
         <id>7591</id>
         <name>sd</name>
         <server_decommission_request>
             <id>7596</id>
             <order>DR1</order>
             <servers>
                 <server type=\"IP\">
                     <id>7593</id>
                     <ip_address>2.2.2.2</ip_address>
                     <netmask>255.255.255.255</netmask>
                 </server>
             </servers>
             <targets>
                 <target type=\"ANY\">
                     <id>7595</id>
                 </target>
             </targets>
             <comment>change ip from 1.1.1.1 to 2.2.2.2</comment>
         </server_decommission_request>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"date\">
         <id>7786</id>
         <name>date</name>
         <value>2015-12-15</value>
     </field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"time\">
         <id>7787</id>
         <name>time</name>
         <value>12:00</value>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object / device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object / device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Returns the details of a specified ticket stages","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID."},"response":[]},{"name":"Get designer results according to field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer","description":"Use this API to retrieve designer results generated in R17-2 and later.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request."},"response":[]},{"name":"Submit a new ticket to Secure Change","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"ticket\": {\n\t\t\"subject\": \"RM_EXAMPLE\",\n\t\t\"requester\": \"m\",\n\t\t\"requester_id\": 4,\n\t\t\"priority\": \"Normal\",\n\t\t\"domain_name\": \"\",\n\t\t\"workflow\": {\n\t\t\t\"name\": \"RM\",\n\t\t},\n\t\t\"steps\": {\n\t\t\t\"step\": [\n\t\t\t\t{\n\t\t\t\t\t\"tasks\": {\n\t\t\t\t\t\t\"task\": {\n\t\t\t\t\t\t\t\"fields\": {\n\t\t\t\t\t\t\t\t\"field\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\t\t\t\t\t\"devices\": {\n\t\t\t\t\t\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 11,\n\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"id\": 9,\n\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t]\n\t\t},\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","description":" GENERAL USE
When posting a Modify Group ticket, group scope must be configured for FortiManager advanced and Juniper SRX devices.
Juniper SRX devices:
Global address-book will be used unless an existing address-book is given.
Ticket validation will fail in case given Address Book is not configured on the device.
FortiManager advanced devices:
'Any' zone will be used unless an existing zone is given.
Ticket validation will fail in case given zone is not configured on the device.
*Note: Zones and address-books must not be configured for other devices.

Using newly created objects from a different group in the same ticket
The user can add a newly created object from a different group to the selected group, with object_UID equal to the name of the newly created object.
For management devices with hierarchies, the newly created object does not populate other levels of the hierarchies.

Permitted values for @type
Allowed values for @type property included in DestinationDTO and SourceDTO are:
ANY
IP
DNS
Object - Device's existing object
INTERNET
LDAP (SourceDTO only) - LDAP entity

To use a service object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id
2. Both object_name and management_name

To use a network object in a new request you must use two parameters to specify the object. The parameter options are:
1. Both object_UID and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both object_UID and object_name are defined, object_UID takes precedence over object_name

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketDTO
closed: Cannot be done from the API [optional]
count [optional]

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>topology mode_AR1-with topology_AR2-no topology</subject>
    <requester>u1</requester>
    <priority>Normal</priority>
    <domain_name>Default</domain_name>
    <workflow>
         <id>7</id>
         <name>Workflow with topology</name>
    </workflow>
    <steps>
         <step>
             <name>Open request</name>
             <tasks>
                 <task>
                     <fields>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_access_request\">
                             <name>Required Access</name>
                             <access_request>
                                 <use_topology>true</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>ASA</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>host_10.100.10.140</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_UID>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</object_UID>
                                         <management_id>13</management_id>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>h_10.10.10.10</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"PROTOCOL\">
                                         <protocol>TCP</protocol>
                                         <port>80</port>
                                     </service>
                                     <service type=\"APPLICATION_IDENTITY\">
                                         <application_name>Gmail</application_name>
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                             <access_request>
                                 <use_topology>false</use_topology>
                                 <targets>
                                     <target type=\"Object\">
                                         <object_name>inside_access_in</object_name>
                                         <management_name>ASA</management_name>
                                     </target>
                                 </targets>
                                 <users>
                                     <user>Any</user>
                                 </users>
                                 <sources>
                                     <source type=\"Object\">
                                         <object_name>1.1.1.0</object_name>
                                         <management_name>NetScreen</management_name>
                                     </source>
                                     <source type=\"EXTERNAL_RESOURCE\">
                                         <resource_ref>
                                             <name>asg15-api-test</name>
                                         </resource_ref>
                                     </source>
                                 </sources>
                                 <destinations>
                                     <destination type=\"Object\">
                                         <object_name>network_regi3</object_name>
                                         <management_name>ASA</management_name>
                                     </destination>
                                     <destination type=\"EXTERNAL_RESOURCE\">
                                         <resource_ref>
                                             <id>916ca6a9-76e2-3d9f-a35c-134f0981791a</id>
                                         </resource_ref>
                                     </destination>
                                 </destinations>
                                 <services>
                                     <service type=\"ANY\">
                                     </service>
                                 </services>
                                 <action>Accept</action>
                                 <labels/>
                             </access_request>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_area\">
                             <name>Business Justification</name>
                             <text>I need access to ftp </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"text_field\">
                             <name>Project Number</name>
                             <text>CR124560 </text>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"hyperlink\">
                             <name>Hyperlink</name>
                             <url>http://192.168.1.1/ticket</url>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"drop_down_list\">
                             <name>Change Window</name>
                             <selection>Monday</selection>
                         </field>
                         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"manager\">
                             <name>manager email</name>
                             <text>manager@tufin.com</text>
                         </field>
                     </fields>
                 </task>
             </tasks>
        </step>
    </steps>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>New MG ticket</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <status>In Progress</status>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>6</id>
        <name>MG</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>72</id>
            <name>New step</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>72</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>
                    <status>ASSIGNED</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>262</id>
                            <name>MG</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>ExistingGroup</name>
                                <object_UID>{c862fb6f-1314-45da-9e01-56c9b85d001d}</object_UID>
                                <management_id>58</management_id>
                                <management_name>FMG/root</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>157</id>
                                        <name>10.100 net</name>
                                        <object_UID>{37cdc055-7aac-4385-b46b-cc54d95e4b6d}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.100.0.0/255.255.0.0</object_details>
                                        <management_id>58</management_id>
                                        <management_name>FMG/root</management_name>
                                        <status>NOT_CHANGED</status>
                                        <object_updated_status>EXISTING_EDITED</object_updated_status>
                                        <comment>new_comment</comment>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                            <group_change>
                                <name>78.45.12.0</name>
                                <object_UID>{cac64d34-a05e-4a05-b271-64642eb976ff}</object_UID>
                                <management_id>28</management_id>
                                <management_name>SRX-root-lsys</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>158</id>
                                        <name>78.45.12.1</name>
                                        <object_UID>{7912c335-6dbe-47de-b872-1322f9015b2f}</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>78.45.12.1/255.255.255.255</object_details>
                                        <management_id>28</management_id>
                                        <management_name>SRX-root-lsys</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                                <address_book>
                                    <name>global</name>
                                </address_book>
                            </group_change>
                            <group_change>
                                <name>10.10.0.0/16</name>
                                <object_UID>{5dff0bd8-51e4-4a83-8138-d54dd18ca52b}</object_UID>
                                <management_id>24</management_id>
                                <management_name>NSX-Distributed Firewall</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>161</id>
                                        <name>10.10.0.0/16</name>
                                        <object_UID>{5d7b826c-f053-40fd-81bd-7a6f44cf15ef}</object_UID>
                                        <object_type>Network</object_type>
                                        <object_details>10.10.0.0/255.255.0.0</object_details>
                                        <management_id>24</management_id>
                                        <management_name>NSX-Distributed Firewall</management_name>
                                        <status>NOT_CHANGED</status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY<ticket>
    <subject>test API</subject>
    <requester>a</requester>
    <requester_id>4</requester_id>
    <priority>Normal</priority>
    <domain_name/>
    <sla_status>NA</sla_status>
    <sla_outcome>NA</sla_outcome>
    <workflow>
        <id>8</id>
        <name>Modify group</name>
        <uses_topology>false</uses_topology>
    </workflow>
    <steps>
        <step>
            <id>11</id>
            <name>Open request</name>
            <redone>false</redone>
            <skipped>false</skipped>
            <tasks>
                <task>
                    <id>11</id>
                    <assignee_id>4</assignee_id>
                    <assignee>a</assignee>                    <status>DONE</status>
                    <fields>
                        <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
                            <id>137</id>
                            <name>ff</name>
                            <read_only>false</read_only>
                            <implementation_status>NOT_SUPPORTED</implementation_status>
                            <group_change>
                                <name>port1Group</name>
                                <object_UID>{d5b4459b-6b27-4012-9924-b244c250520f}</object_UID>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"HOST\">
                                        <id>69</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <status>ADDED</status>
                                        <comment/>
                                        <object_updated_status>NEW</object_updated_status>
                                    </member>
                                </members>
                                <change_action>UPDATE</change_action>
                            </group_change>
                            <group_change>
                                <name>gfd</name>
                                <management_id>64</management_id>
                                <management_name>10.100.111.8/ADOM_5_2</management_name>
                                <change_implementation_status>NOT_SUPPORTED</change_implementation_status>
                                <members>
                                    <member type=\"Object\">
                                        <id>70</id>
                                        <name>obj_1</name>
                                        <object_UID>obj_1</object_UID>
                                        <object_type>Host</object_type>
                                        <object_details>6.6.6.6/255.255.255.255</object_details>
                                        <management_id>64</management_id>
                                        <management_name>10.100.111.8/ADOM_5_2</management_name>
                                        <status>ADDED</status>
                                        <object_updated_status>EXISTING_NOT_EDITED</object_updated_status>
                                    </member>
                                </members>
                                <change_action>CREATE</change_action>
                                <zone>
                                    <is_global>true</is_global>
                                    <name>any</name>
                                </zone>
                            </group_change>
                        </field>
                    </fields>
                </task>
            </tasks>
        </step>
    </steps>
    <current_step>
        <id>12</id>
        <name>Copy of Open request</name>
    </current_step>
    <comments/>
</ticket>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"application_details\": { \"id\": \"1\" },
        \"referenced_ticket\": { \"id\": \"3\" },
        \"subject\": \"topology mode_AR1-with topology_AR2-no topology\",
        \"priority\": \"Normal\",
        \"workflow\": { \"name\": \"ar\" }
    }
}


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets
BODY{
    \"ticket\": {
        \"subject\": \"RM_EXAMPLE\",
        \"requester\": \"m\",
        \"requester_id\": 4,
        \"priority\": \"Normal\",
        \"domain_name\": \"\",
        \"workflow\": {
            \"name\": \"RM\",
        },
        \"steps\": {
            \"step\": [
                {
                    \"tasks\": {
                        \"task\": {
                            \"fields\": {
                                \"field\": {
                                    \"@xsi.type\": \"rule_modification_field\",
                                    \"devices\": {
                                        \"device\": {
                                            \"revision_id\": 24,
                                            \"management_id\": 5,
                                            \"bindings\": {
                                                \"binding\": {
                                                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                    \"binding\": {
                                                        \"@xsi.type\": \"policy__binding\",
                                                        \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                                    },
                                                    \"rules\": {
                                                        \"rule\": {
                                                            \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                                            \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                                        }
                                                    }
                                                }
                                            }
                                        }
                                    },
                                    \"rule_modifications\": {
                                        \"rule_modification\": {
                                            \"@xsi.type\": \"modify_rule_modification\",
                                            \"rule_key\": {
                                                \"device_id\": 5,
                                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                                \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                            },
                                            \"source_modifications\": {
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                                        \"name\": \"RANGE_1\",
                                                                        \"comment\": \"EXAMPLE_RANGE\",
                                                                        \"min_ip\": \"3.3.3.3\",
                                                                        \"max_ip\": \"5.5.5.5\"
                                                                    }
                                                                ]
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                                        \"name\": \"NET_1\",
                                                                        \"comment\": \"\",
                                                                        \"ip\": \"3.3.3.3\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"destination_modifications\": {
                                                \"id\": 11,
                                                \"network_object_cell_modifications\": {
                                                    \"network_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_network_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"network_object\": [
                                                                    {
                                                                        \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                                        \"name\": \"Host123\",
                                                                        \"comment\": \"cccHost\",
                                                                        \"ip\": \"1.2.3.4\",
                                                                        \"netmask\": \"255.255.255.255\"
                                                                    }
                                                                ]
                                                            }
                                                        }
                                                    ]
                                                }
                                            },
                                            \"service_modifications\": {
                                                \"id\": 9,
                                                \"service_object_cell_modifications\": {
                                                    \"service_object_cell_modification\": [
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                                    \"name\": \"ICMP_1\",
                                                                    \"comment\": \"EXAMPLE_ICMP\",
                                                                    \"type\": {
                                                                        \"from\": 55,
                                                                        \"to\": 55
                                                                    }
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"UDP_1\",
                                                                    \"comment\": \"EXAMPLE_UDP\",
                                                                    \"port\": {
                                                                        \"from\": 3,
                                                                        \"to\": 3
                                                                    },
                                                                    \"protocol\": \"UDP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"new\"
                                                                },
                                                                \"service_object\": {
                                                                    \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                                    \"name\": \"TCP_1\",
                                                                    \"comment\": \"EXAMPLE_TCP\",
                                                                    \"port\": {
                                                                        \"from\": 1234,
                                                                        \"to\": 1234
                                                                    },
                                                                    \"protocol\": \"TCP\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"ADD\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                                                }
                                                            }
                                                        },
                                                        {
                                                            \"action\": \"REMOVE\",
                                                            \"device_service_object\": {
                                                                \"device_id\": 5,
                                                                \"status\": {
                                                                    \"@xsi.type\": \"existing\",
                                                                    \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                                                }
                                                            }
                                                        }
                                                    ]
                                                }
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            ]
        },
    }
}


Response Messages:
400: Application ID is missing.
400: Create closed ticket is enabled only from SecureApp application.
400: The application was already deleted.
400: The requester must be the currently logged in user.
400: Workflow was not found.
400: Workflow is not active.
400: Workflow configuration is not valid.
400: Workflow is not set
400: You cannot enter a status for a new ticket.
400: Requester cannot open a ticket in domain.
400: Invalid ticket priority.
400: You cannot open a new ticket with an empty subject.
400: Expiration field is required.
400: Submit ticket enabled only with the first step
400: First step can be only with one task
400: The specified workflow does not contain an access request field in the first step.
400: There are no changed connections that are ready for creating a ticket.
400: You cannot use an access request field to create a ticket from SecureApp.
400: The ticket fields do not match the fields in the current step of the workflow.
400: You cannot change the value of a field because it is read-only.
400: Managed tasks are not initialized or done
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (Rule Modification workflow is not supported for this device)
403: You do not have permissions to edit this application.
403: Logged in user: NAME do not have permission to perform on behalf actions
403: You are not a participant in the first step of this workflow
403: UNAUTHORIZED
404: There is no application with the specified ID
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (Network object cell modification missing action)
400: Invalid value for field: <FIELD_NAME> (Network object cell modification element cannot be empty)
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
400: Workflow does not support referenced ticket
400: The referenced ticket cannot be the ticket itself
406: Invalid format detected: <subject|name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: <subject|name> - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: <subject|name> - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Returns the details of a specified tickets (max 100 tickets in a single query)","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
status: The status of the tickets [optional]
count: Tickets list max pagination length (max value is 100) [optional]
start: Offset the count starting point [optional]
desc: Get the list in descending order [optional]
expand_links: See expanded view of the objects [optional]
showStepsDetails: Include steps' details in the response [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets?status=In Progress&count=10&start=3&expand_links=false

Response Messages:
400: Status is not a valid. The valid values are: TICKET_STATUSES
400: Can not fetch more than 100 tickets in 1 time
403: Access is denied"},"response":[]},{"name":"Returns the details of a specified task","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2?expand_links=true

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID ."},"response":[]},{"name":"Change a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4
BODY<task>
     <status>ASSIGNED</status>
     <fields>
         <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_group_change\">
             <id>7599</id>
             <name>mf</name>
             <read_only>false</read_only>
             <implementation_status>NOT_STARTED</implementation_status>
             <group_change>
                        <name>ggg</name>
                        <st_uid>{A12AE330-0DBD-11E5-B841-7F0000010E0E}</st_uid>
                        <management_id>42</management_id>
                        <management_name>cp239</management_name>
                        <members>
                             <member type=\"Object\">
                                 <id>8</id>
                                 <name>yaakovs_host</name>
                                 <st_uid>{BDAA378C-C90B-4D12-B598-1AFED2D1DA14}</st_uid>
                                 <object_type>Host</object_type>
                                 <object_details>1.1.1.1/255.255.255.255</object_details>
                         <management_id>42</management_id>
                         <management_name>cp239</management_name>
                                 <status>NOT_CHANGED</status>
                             </member>
                             <member type=\"Object\">
                                 <id>9</id>
                                    <name>Avi_10.100.120.254</name>
                                    <st_uid>{8F195CDC-F426-47B6-9E8A-1FF14C17E54F}</st_uid>
                                     <object_type>Host</object_type>
                                     <object_details>10.100.120.254/255.255.255.255</object_details>
                                     <management_id>42</management_id>
                                     <management_name>cp239</management_name>
                                     <status>NOT_CHANGED</status>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>2.2.2.2/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                                 <member type=\"HOST\">
                                     <id>10</id>
                                     <name>h22</name>
                                     <object_type>Host</object_type>
                                     <object_details>3.3.3.3/255.255.255.255</object_details>
                                     <status>ADDED</status>
                                     <comment/>
                                 </member>
                 </members>
                 <change_implementation_status>NOT_RUN</change_implementation_status>
                    </group_change>
            </field>
     </fields>
</task>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Change a field within a task of a ticket at the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}/fields/{{fieldId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/7642
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"approve_reject\">
         <id>7661</id>
         <name>approve access</name>
         <approved>true</approved>
         <reason>Request approved</reason>
    </field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Change a task of a ticket at the current step","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"task\": {\n\t\t\"status\": \"ASSIGNED\",\n\t\t\"fields\": {\n\t\t\t\"field\": {\n\t\t\t\t\"@xsi.type\": \"rule_modification_field\",\n\t\t\t\t\"id\": 743,\n\t\t\t\t\"devices\": {\n\t\t\t\t\t\"device\": {\n\t\t\t\t\t\t\"revision_id\": 24,\n\t\t\t\t\t\t\"management_id\": 5,\n\t\t\t\t\t\t\"bindings\": {\n\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"rule_modifications\": {\n\t\t\t\t\t\"rule_modification\": {\n\t\t\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/current/tasks/{{taskId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: ticketTaskDTO
id: Ticket ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY<task>
    <status>DONE</status>
    <fields/>
</task>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/current/tasks/4
BODY{
    \"task\": {
        \"status\": \"ASSIGNED\",
        \"fields\": {
            \"field\": {
                \"@xsi.type\": \"rule_modification_field\",
                \"id\": 743,
                \"devices\": {
                    \"device\": {
                        \"revision_id\": 24,
                        \"management_id\": 5,
                        \"bindings\": {
                            \"binding\": {
                                \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                                \"binding\": {
                                    \"@xsi.type\": \"policy__binding\",
                                    \"policy_name\": \"FortiGate-VM64-111-10_3\"
                                },
                                \"rules\": {
                                    \"rule\": {
                                        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                                    }
                                }
                            }
                        }
                    }
                },
                \"rule_modifications\": {
                    \"rule_modification\": {
                        \"@xsi.type\": \"modify_rule_modification\",
                        \"rule_key\": {
                            \"device_id\": 5,
                            \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                            \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                        },
                        \"source_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                                    \"name\": \"RANGE_1\",
                                                    \"comment\": \"EXAMPLE_RANGE\",
                                                    \"min_ip\": \"3.3.3.3\",
                                                    \"max_ip\": \"5.5.5.5\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                                    \"name\": \"NET_1\",
                                                    \"comment\": \"\",
                                                    \"ip\": \"3.3.3.3\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    }
                                ]
                            }
                        },
                        \"destination_modifications\": {
                            \"network_object_cell_modifications\": {
                                \"network_object_cell_modification\": [
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                    \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"network_object\": [
                                                {
                                                    \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                                    \"name\": \"Host123\",
                                                    \"comment\": \"cccHost\",
                                                    \"ip\": \"1.2.3.4\",
                                                    \"netmask\": \"255.255.255.255\"
                                                }
                                            ]
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_network_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                            }
                                        }
                                    }
                                ]
                            }
                        },
                        \"service_modifications\": {
                            \"service_object_cell_modifications\": {
                                \"service_object_cell_modification\": [
                                    {
                                        \"action\": \"REMOVE\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                                \"name\": \"ICMP_1\",
                                                \"comment\": \"EXAMPLE_ICMP\",
                                                \"type\": {
                                                    \"from\": 55,
                                                    \"to\": 55
                                                }
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"existing\",
                                                \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"TCP_1\",
                                                \"comment\": \"EXAMPLE_TCP\",
                                                \"port\": {
                                                    \"from\": 1234,
                                                    \"to\": 1234
                                                },
                                                \"protocol\": \"TCP\"
                                            }
                                        }
                                    },
                                    {
                                        \"action\": \"ADD\",
                                        \"device_service_object\": {
                                            \"device_id\": 5,
                                            \"status\": {
                                                \"@xsi.type\": \"new\"
                                            },
                                            \"service_object\": {
                                                \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                                \"name\": \"UDP_1\",
                                                \"comment\": \"EXAMPLE_UDP\",
                                                \"port\": {
                                                    \"from\": 3,
                                                    \"to\": 3
                                                },
                                                \"protocol\": \"UDP\"
                                            }
                                        }
                                    }
                                ]
                            }
                        }
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Task status does not exist.
400: Task status is not set to ASSIGNED or DONE.
400: The API is not available for ticket with a status of pending, or if the pre-assignment script is currently executing
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
403: Task can not be done because there are unlicensed devices for change automation
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Get commands for device from designer results of a specific field id","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/device/{{deviceId}}/commands","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
deviceId: Device ID
fieldId: Field ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/device/136/commands

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the access request.
404: Device with ID <ID> was not found in Designer result.
404: Device with ID <ID> does not support Commands feature."},"response":[]},{"name":"Returns the details of the tasks","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID."},"response":[]},{"name":"Change multiple fields within a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\"fields\": {\n\"field\": {\n\"@xsi.type\": \"rule_modification_field\",\n\"id\": 746,\n\"name\": \"rm\",\n\"devices\": {\n\t\"device\": {\n\t\"revision_id\": 24,\n\t\"management_id\": 5,\n\t\"bindings\": {\n\t\"binding\": {\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"binding\": {\n\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t},\n\t\"rules\": {\n\t\t\"rule\": {\n\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t}\n\t}\n\t}\n\t}\n\t}\n},\n\"rule_modifications\": {\n\t\"rule_modification\": {\n\t\"@xsi.type\": \"modify_rule_modification\",\n\t\"rule_key\": {\n\t\"device_id\": 5,\n\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t},\n\t\"source_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\"name\": \"NET_1\",\n\t\t\t\"comment\": \"\",\n\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"destination_modifications\": {\n\t\"network_object_cell_modifications\": {\n\t\"network_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_network_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"network_object\": [\n\t\t{\n\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\"name\": \"Host123\",\n\t\t\t\"comment\": \"cccHost\",\n\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t}\n\t\t]\n\t\t}\n\t\t}\n\t]\n\t}\n\t},\n\t\"service_modifications\": {\n\t\"service_object_cell_modifications\": {\n\t\"service_object_cell_modification\": [\n\t\t{\n\t\t\"action\": \"REMOVE\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"existing\",\n\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\"name\": \"ICMP_1\",\n\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\"type\": {\n\t\t\t\"from\": 55,\n\t\t\t\"to\": 55\n\t\t}\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"TCP_1\",\n\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\"port\": {\n\t\t\t\"from\": 1234,\n\t\t\t\"to\": 1234\n\t\t},\n\t\t\"protocol\": \"TCP\"\n\t\t}\n\t\t}\n\t\t},\n\t\t{\n\t\t\"action\": \"ADD\",\n\t\t\"device_service_object\": {\n\t\t\"device_id\": 5,\n\t\t\"status\": {\n\t\t\"@xsi.type\": \"new\"\n\t\t},\n\t\t\"service_object\": {\n\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\"name\": \"UDP_1\",\n\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\"port\": {\n\t\t\t\"from\": 3,\n\t\t\t\"to\": 3\n\t\t},\n\t\t\"protocol\": \"UDP\"\n\t\t}\n\t\t}\n\t\t}\n\t]\n\t}\n\t}\n\t}\n}\n}\n}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldListDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields
BODY<fields>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_network_object\">
         <id>7885</id>
         <name>n_obj</name>
         <network_object type=\"Object\">
             <object_name>Host_10.1.1.1</object_name>
             <management_name>cp239</management_name>
         </network_object>
         <network_object type=\"Object\">
             <st_uid>{55908141-c341-4990-9cc6-a3fd2dfb49e1}</st_uid>
             <management_id>2</management_id>
         </network_object>
         <network_object type=\"DNS\">
             <host_name>tufin.com</host_name>
         </network_object>
     <field>
     <field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multi_service\">
         <id>7887</id>
         <name>service</name>
         <service type=\"PROTOCOL\">
             <protocol>TCP</protocol>
             <port>80</port>
         </service>
         <service type=\"Object\">
             <object_name>AOL</object_name>
             <management_name>cp239</management_name>
         </service>
     </field>
</fields>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields
BODY{
\"fields\": {
\"field\": {
\"@xsi.type\": \"rule_modification_field\",
\"id\": 746,
\"name\": \"rm\",
\"devices\": {
    \"device\": {
    \"revision_id\": 24,
    \"management_id\": 5,
    \"bindings\": {
    \"binding\": {
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"binding\": {
        \"@xsi.type\": \"policy__binding\",
        \"policy_name\": \"FortiGate-VM64-111-10_3\"
    },
    \"rules\": {
        \"rule\": {
        \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
        \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
        }
    }
    }
    }
    }
},
\"rule_modifications\": {
    \"rule_modification\": {
    \"@xsi.type\": \"modify_rule_modification\",
    \"rule_key\": {
    \"device_id\": 5,
    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
    },
    \"source_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
            \"name\": \"NET_1\",
            \"comment\": \"\",
            \"ip\": \"3.3.3.3\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
            \"name\": \"RANGE_1\",
            \"comment\": \"EXAMPLE_RANGE\",
            \"min_ip\": \"3.3.3.3\",
            \"max_ip\": \"5.5.5.5\"
        }
        ]
        }
        }
    ]
    }
    },
    \"destination_modifications\": {
    \"network_object_cell_modifications\": {
    \"network_object_cell_modification\": [
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
        }
        }
        },
        {
        \"action\": \"REMOVE\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_network_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"network_object\": [
        {
            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
            \"name\": \"Host123\",
            \"comment\": \"cccHost\",
            \"ip\": \"1.2.3.4\",
            \"netmask\": \"255.255.255.255\"
        }
        ]
        }
        }
    ]
    }
    },
    \"service_modifications\": {
    \"service_object_cell_modifications\": {
    \"service_object_cell_modification\": [
        {
        \"action\": \"REMOVE\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"existing\",
        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
        \"name\": \"ICMP_1\",
        \"comment\": \"EXAMPLE_ICMP\",
        \"type\": {
            \"from\": 55,
            \"to\": 55
        }
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"TCP_1\",
        \"comment\": \"EXAMPLE_TCP\",
        \"port\": {
            \"from\": 1234,
            \"to\": 1234
        },
        \"protocol\": \"TCP\"
        }
        }
        },
        {
        \"action\": \"ADD\",
        \"device_service_object\": {
        \"device_id\": 5,
        \"status\": {
        \"@xsi.type\": \"new\"
        },
        \"service_object\": {
        \"@xsi.type\": \"ns_sc_policy:transport_service\",
        \"name\": \"UDP_1\",
        \"comment\": \"EXAMPLE_UDP\",
        \"port\": {
            \"from\": 3,
            \"to\": 3
        },
        \"protocol\": \"UDP\"
        }
        }
        }
    ]
    }
    }
    }
}
}
}
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (Network Object with device ID <DEVICE_ID> and ST UID <ST_UID> is not available for the action specified. Check the Knowledge Center or API Implementation Notes for more information
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Returns the details of a the fields","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID ."},"response":[]},{"name":"Returns a list of tickets by search parameters","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/free_text_search","description":"Parameters:
parameter: Free text search parameter (Search syntax details) [optional]
start: Offset the count starting point [optional]
count: Tickets list max length (max value is 1000) [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/free_text_search/?parameter=taskstatus:ASSIGNED AND priority:High

Response Messages:
400: Can not fetch more than 1000 tickets in 1 time
403: Access is denied.
404: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED
404: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
404: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal count value entered. Max value is 1000
404: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
404: No entity found for query"},"response":[]},{"name":"Get access request verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/multi_access_request/{{fieldId}}/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Request ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/multi_access_request/2022/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the access request."},"response":[]},{"name":"Get rule decommision verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/rule_decommission/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/rule_decommission/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type <TYPE>.
404: Verifier results were not found in the request."},"response":[]},{"name":"Get server clone policy verifier results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/clone_server_policy/verifier","description":"Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/clone_server_policy/verifier

Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: The given TYPE does not contain a field with ID <ID>.
404: Verifier results were not found in the server clone policy request."},"response":[]},{"name":"Change the ticket properties","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t\t\n\t\n\t\n\t\t\n\t\n\t\n"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/ticket_properties","description":"Change the ticket properties listed in the TicketPropertiesDTO.
When specifying the notification_group property you must use the ID of the group or leave the ID empty to remove the group. This property can be updated on a closed ticket.
When specifying the referenced_ticket property you must use the ID of the ticket or leave the ID empty to remove the ticket.
When specifying the expiration_date property, you must use a yyyy-mm-dd format, or leave the value empty to remove the expiration date. To ignore the field, do not include it in the request. This property can be updated on a closed ticket.

Parameters:
body: ticketPropertiesDTO
id: The ID number of the ticket as shown in SecureChange

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <referenced_ticket>
        <id>9</id>
    </referenced_ticket>
    <notification_group>
        <id>10</id>
    </notification_group>
    <expiration_date>2022-12-10</expiration_date>
</ticket_properties>


Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/ticket_properties
BODY<ticket_properties>
    <notification_group>
        <id/>
    </notification_group>
    <referenced_ticket>
        <id/>
    </referenced_ticket>
    <expiration_date/>
</ticket_properties>


Response Messages:
400: Notification Group <ID> is a user and not a user group
400: Notification Group <ID> exceeds the configured maximum allowed number of users for notifications
400: <ID> (���Any User���) is not allowed as a Notification Group
400: Notification Group <ID> does not have permission of 'Group members can perform actions on requests submitted by other members'
400: Notification Group <ID> is not a member in the first step of the workflow
400: Notification Group is not enabled in this workflow
403: You do not have permission to change the Notification Group
404: There is no group with ID <ID>.
404: There is no ticket with ID <ID>.
400: Referenced ticket id cannot be the same as ticket id
400: invalid id format for referenced ticket
400: Cannot update properties [<Property A>, <Property B>] for ticket with status <STATUS>
403: You do not have permission to update this ticket at this stage. Contact your administrator for assistance.
403: The user is not allowed to add the specified referenced ticket.
400: Workflow does not support referenced ticket
400: Cannot delete expiration date on this workflow due to it being a mandatory field
400: Invalid date. Cannot update expiration to a date that has passed
400: Invalid value for field: expiration_date (The date format must be: yyyy-mm-dd)
400: Invalid value for field: expiration_date (The date is not valid)
400: This workflow does not support expiration dates"},"response":[]},{"name":"Change a field within a task of a ticket","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"{\n\t\"rule_modification_field\": {\n\t\t\"devices\": {\n\t\t\t\"device\": {\n\t\t\t\t\"management_id\": 5,\n\t\t\t\t\"bindings\": {\n\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\t\"binding\": {\n\t\t\t\t\t\t\t\"@xsi.type\": \"policy__binding\",\n\t\t\t\t\t\t\t\"policy_name\": \"FortiGate-VM64-111-10_3\"\n\t\t\t\t\t\t},\n\t\t\t\t\t\t\"rules\": {\n\t\t\t\t\t\t\t\"rule\": {\n\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",\n\t\t\t\t\t\t\t\t\"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t\t\"rule_modifications\": {\n\t\t\t\"rule_modification\": {\n\t\t\t\t\"@xsi.type\": \"modify_rule_modification\",\n\t\t\t\t\"rule_key\": {\n\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",\n\t\t\t\t\t\"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"\n\t\t\t\t},\n\t\t\t\t\"source_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:subnet_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"NET_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:range_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"RANGE_1\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_RANGE\",\n\t\t\t\t\t\t\t\t\t\t\t\"min_ip\": \"3.3.3.3\",\n\t\t\t\t\t\t\t\t\t\t\t\"max_ip\": \"5.5.5.5\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"destination_modifications\": {\n\t\t\t\t\t\"network_object_cell_modifications\": {\n\t\t\t\t\t\t\"network_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"network_object\": [\n\t\t\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:host_network_object\",\n\t\t\t\t\t\t\t\t\t\t\t\"name\": \"Host123\",\n\t\t\t\t\t\t\t\t\t\t\t\"comment\": \"cccHost\",\n\t\t\t\t\t\t\t\t\t\t\t\"ip\": \"1.2.3.4\",\n\t\t\t\t\t\t\t\t\t\t\t\"netmask\": \"255.255.255.255\"\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t]\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_network_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"service_modifications\": {\n\t\t\t\t\t\"service_object_cell_modifications\": {\n\t\t\t\t\t\t\"service_object_cell_modification\": [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"TCP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_TCP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 1234,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 1234\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"TCP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"REMOVE\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:transport_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"UDP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_UDP\",\n\t\t\t\t\t\t\t\t\t\t\"port\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 3,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 3\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\"protocol\": \"UDP\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"new\"\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\"service_object\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"ns_sc_policy:icmp_service\",\n\t\t\t\t\t\t\t\t\t\t\"name\": \"ICMP_1\",\n\t\t\t\t\t\t\t\t\t\t\"comment\": \"EXAMPLE_ICMP\",\n\t\t\t\t\t\t\t\t\t\t\"type\": {\n\t\t\t\t\t\t\t\t\t\t\t\"from\": 55,\n\t\t\t\t\t\t\t\t\t\t\t\"to\": 55\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\"action\": \"ADD\",\n\t\t\t\t\t\t\t\t\"device_service_object\": {\n\t\t\t\t\t\t\t\t\t\"device_id\": 5,\n\t\t\t\t\t\t\t\t\t\"status\": {\n\t\t\t\t\t\t\t\t\t\t\"@xsi.type\": \"existing\",\n\t\t\t\t\t\t\t\t\t\t\"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t]\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","description":"
To use a service object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id
2. Both object_name and management_name

To use a network object in an existing request you must use two parameters to specify the object. The parameter options are:
1. Both st_uid and management_id (for Access Request and Group Change workflow)
2. Both object_name and management_name (only for Access Request workflow)
3. Both object_name and management_id (only for Group Change workflow)
**Note: If both st_uid and object_name are defined, st_uid takes precedence over object_name

For the Modify Group workflow, verifies that the fields listed in the API call have valid values.
Other fields that are included in the step are not affected by the validation and retain their existing values.
Updates applied to values in global fields are carried forward from this step and do not affect values in previous steps.

The Rule Modification workflow supports adding an existing device network object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Network object types:
    SecureTrack API element <class_name> includes one of the following types:
    gateway_ckp, host_ckp, connectra, interspect, gateway_cluster, cluster_member, sofaware_gateway, sofaware_gateway_profile, vsx_box, vs_cluster_member, vs_cluster_netobj, vsx_cluster_member, vsx_cluster_netobj, vs_netobj, mygw_EVR, vsx_netobj, embedded_device, host_plain, interface, network, network_object_group, group_with_exception, gsn_handover_group, address_range
* Device network object types:
    SecureTrack API element <type_on_device> cannot include the following types:
    netlink, Vnic, VirtualMachine, VirtualApp, ResourcePool, Datacenter, DistributedVirtualPortgroup, ClusterComputeResource, VirtualWire, LogicalSwitch, Segment, LogicalPort, VirtualNetwork, ALL_EDGES, APPLIED_TO_ANY, DISTRIBUTED_FIREWALL, Edge, HostSystem, edl_ip_list, edl_generic
* Network object IP types:
    SecureTrack API element <ip_type> includes one of the following types:
    IPv4, Other, IPv4_IPv6
* The device network object is available in the latest revision

The Rule Modification workflow supports adding an existing device service object to the rule when the object meets the following conditions:
* Explicit object:
    SecureTrack API element <implicit> is false
* Service object types:
    SecureTrack API element <class_name> includes one of the following types:
    icmp_service, service_group, sctp_service, other_service, tcp_service, udp_service
* Device service object types:
    SecureTrack API element <type_on_device> cannot include rpc_service_group device object type
* The device service object is available in the latest revision

The Rule Modification workflow supports adding the same new object to more than one rule by defining an ���add new object' action for each of the relevant rules, with the same object properties. SecureChange will identify that the same object properties are specified for all the rules and so will create it only once, before adding it to all relevant rules. This will only work if the object has the same name and identical properties for all the rules, otherwise the action will fail due to a name uniqueness violation and no rules will be updated.

Parameters:
body: fieldDTO
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/2/tasks/4/fields/7742
BODY<field xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"multiple_selection\">
     <id>7742</id>
     <name>filter type</name>
     <selected_options>
         <selected_option>
             <value>FTP</value>
         </selected_option>
     </selected_options>
</field>



Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/2/steps/4/tasks/4/fields/71
BODY{
    \"rule_modification_field\": {
        \"devices\": {
            \"device\": {
                \"management_id\": 5,
                \"bindings\": {
                    \"binding\": {
                        \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                        \"binding\": {
                            \"@xsi.type\": \"policy__binding\",
                            \"policy_name\": \"FortiGate-VM64-111-10_3\"
                        },
                        \"rules\": {
                            \"rule\": {
                                \"@xsi.type\": \"ns3:slimRuleWithMetadataDTO\",
                                \"uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                            }
                        }
                    }
                }
            }
        },
        \"rule_modifications\": {
            \"rule_modification\": {
                \"@xsi.type\": \"modify_rule_modification\",
                \"rule_key\": {
                    \"device_id\": 5,
                    \"binding_uid\": \"{103f17d1-ef87-422d-a145-c6a195752808}\",
                    \"rule_uid\": \"{d2ba3026-cab9-43f8-9812-fa7ea45db974}\"
                },
                \"source_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:subnet_network_object\",
                                            \"name\": \"NET_1\",
                                            \"comment\": \"\",
                                            \"ip\": \"3.3.3.3\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:range_network_object\",
                                            \"name\": \"RANGE_1\",
                                            \"comment\": \"EXAMPLE_RANGE\",
                                            \"min_ip\": \"3.3.3.3\",
                                            \"max_ip\": \"5.5.5.5\"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                },
                \"destination_modifications\": {
                    \"network_object_cell_modifications\": {
                        \"network_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"network_object\": [
                                        {
                                            \"@xsi.type\": \"ns_sc_policy:host_network_object\",
                                            \"name\": \"Host123\",
                                            \"comment\": \"cccHost\",
                                            \"ip\": \"1.2.3.4\",
                                            \"netmask\": \"255.255.255.255\"
                                        }
                                    ]
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{7826af84-23b6-4d55-ae51-613a0d32697b}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_network_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{aa7f8a4e-056a-4b1a-baa7-916785f5ce5e}\"
                                    }
                                }
                            }
                        ]
                    }
                },
                \"service_modifications\": {
                    \"service_object_cell_modifications\": {
                        \"service_object_cell_modification\": [
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"TCP_1\",
                                        \"comment\": \"EXAMPLE_TCP\",
                                        \"port\": {
                                            \"from\": 1234,
                                            \"to\": 1234
                                        },
                                        \"protocol\": \"TCP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"REMOVE\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{6b9300af-9f9e-4901-8c9c-1ba5cf82b619}\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"uid\": \"551556da-22dc-46f4-9253-a7ceee70394b\",
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:transport_service\",
                                        \"name\": \"UDP_1\",
                                        \"comment\": \"EXAMPLE_UDP\",
                                        \"port\": {
                                            \"from\": 3,
                                            \"to\": 3
                                        },
                                        \"protocol\": \"UDP\"
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"new\"
                                    },
                                    \"service_object\": {
                                        \"@xsi.type\": \"ns_sc_policy:icmp_service\",
                                        \"name\": \"ICMP_1\",
                                        \"comment\": \"EXAMPLE_ICMP\",
                                        \"type\": {
                                            \"from\": 55,
                                            \"to\": 55
                                        }
                                    }
                                }
                            },
                            {
                                \"action\": \"ADD\",
                                \"device_service_object\": {
                                    \"device_id\": 5,
                                    \"status\": {
                                        \"@xsi.type\": \"existing\",
                                        \"st_uid\": \"{9ad89ab6-95ff-48e4-a4e3-b737a19224ea}\"
                                    }
                                }
                            }
                        ]
                    }
                }
            }
        }
    }
}


Response Messages:
400: The provided ticket does not exist.
400: The provided ticket step does not exist, or is not the current step
400: The provided ticket task does not exist in the current step
400: The provided field does not exist in the task.
400: The name or type of the field does not match the field in workflow.
400: You cannot change the value of the field because it is read-only.
400: Approved value of the Approve/Reject field must be either true or false
400: Checkbox field must be either true or false
400: The date format must be: yyyy-mm-dd
400: The date is not valid
400: The time format must be: hh:mm
400: general_invalid_field is not a valid target type)
400: Invalid value for the field and is not a valid NetworkObject type.
400: Range is not a valid type for NetworkObject field.
400: Not a valid service type.
400: Not a valid protocol type.
400: Predefined is not a valid type for service field.
400: Other is not a valid protocol type for service field.
400: You cannot open an access request with this action.
400: Field is not type of MultiChangeGroupField
400: Application Change field cannot be managed via this REST API
400: Deleting rule recertification info is not allowed
400: Application Change field cannot be managed via this REST API
400: Rule associated with successfully updated recertification info cannot be removed
400: Rule was already updated
400: Rule does not exist
400: Invalid value for field: <FIELD_NAME> (The new <DEVICE_OBJECT> (<NAME>) device ID (<DEVICE_ID>) does not match the rule key device ID (<DEVICE_ID>). The device IDs must be the same.)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <NAME> (name))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: status=new is not allowed for action=REMOVE on a <CELL_MODIFICATION>)
400: Invalid value for field: <FIELD_NAME> (Network Object appears more than once in same rule modification action: Check <source / destination> for <ST_UID> (st_uid))
400: Invalid value for field: <FIELD_NAME> (<cell> for rule modification with rule key: (device id: <ID>, binding uid: <UUID>, rule uid: <UUID>) cannot be empty. (cell))
400: Invalid value for field: <FIELD_NAME> (<device network object /device service object> is invalid: There are multiple objects with this name in the network)
400: Network object cell modification missing action
400: Network object cell modification element cannot be empty
403: You do not have permission to update this task. Contact your administrator for assistance.
400: Invalid value for field: <FIELD_NAME> (<OBJECT> is missing the required property: <PROPERTY>)
400: Invalid value for field: <FIELD_NAME> (<DEVICE_OBJECT> with device ID <DEVICE_ID> and ST UID <ST_UID> is not eligible for the specified action. See the Knowledge Center or API Implementation Notes for more information.
400: Invalid value for field: <FIELD_NAME> (<Source|Destination|Service> for a Rule Modification ticket cannot be empty)
400: Invalid value for field: <FIELD_NAME> (Invalid icmp type <TYPE>)
400: Invalid value for field: <FIELD_NAME> (Invalid service protocol <PROTOCOL>)
400: Invalid value for field: <FIELD_NAME> (Invalid service port <PORT>)
400: Invalid value for field: <FIELD_NAME> (Unsupported type: <TYPE>)
400: Invalid value for field: <FIELD_NAME> (a valid object comment can have up to <MAX> characters)
400: The lower bound is greater then upper!
400: The \"from\" or \"to\" field cannot be a string or a null value. Enter a positive integer value
406: Invalid format detected: <name|binding_uid|rule_uid> - This field cannot be empty / contain only spaces / have a null value. Enter a value with the relevant tags
406: Invalid format detected: name - <VALUE> is invalid. Text must include <1-255> characters
406: Invalid format detected: <rule_uid|binding_uid> - <VALUE> is invalid. Text must include <1-4096> characters
406: Invalid format detected: comment - <VALUE> is invalid. Text must include <0-4096> characters
406: Invalid format detected: name - <VALUE> is invalid. Enter a value that uses alphanumeric characters, digits, spaces, or any of the following characters + - , _ # @ . : = ! ^ ( )
406: Invalid format detected: <rule_uid|binding_uid|comment> - <VALUE> is invalid. Text includes invalid expressions such as HTML tags or command line operations
406: Invalid format detected: <ip|netMask|minIp|maxIp> - <VALUE> is an invalid IP"},"response":[]},{"name":"Returns the details of a specified field","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
stepId: The ID number of the step as shown in SecureChange
taskId: The ID number of the task as shown in SecureChange
fieldId: The ID number of the field as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/229

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found
404: Stage ID was not found in ticket ID.
404: Task with ID was not found in Stage ID in ticket ID .
404: Field ID was not found in Task ID in Stage ID in ticket ID ."},"response":[]},{"name":"Returns a list of tickets by search parameters","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/search","description":"If the query is succesful but no results are found (for example, if there is no ticket for the specified Ticket ID) then the return code will be 200 and the results will be empty.

Parameters:
id: The ID number of the ticket as shown in SecureChange [optional]
subject: The subject of the ticket [optional]
requester: The requester of the ticket [optional]
group: The group handling the ticket [optional]
assigned_to: The user name of the person assigned to the ticket [optional]
priority: The priority of the ticket [optional]
status: The status of the ticket [optional]
sla_status: The SLA status of the ticket [optional]
field_name: Field name to search by [optional]
field_value: Field value to search by [optional]
current_step: Current step name [optional]
expiration_date_from: Search requests with expiration date from this date [optional]
expiration_date_to: Search requests with expiration date until this date [optional]
domain_name: The Domain of the ticket [optional]
start: Offset the count starting point [optional]
count: Ticket list length [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/search?id=1&status=IN_PROGRESS,REJECTED

Response Messages:
403: Access is denied.
400: Illegal ticket status entered. Permitted values are: IN_PROGRESS, REJECTED, CLOSED, CANCELLED, RESOLVED, WAITING_TO_BE_ASSIGNED, ASSIGNED, WAITING_FOR_MORE_INFO, DONE, INVALID, PENDING, PENDING_LICENS
400: Illegal ticket SLA status entered. Permitted values are: NA, OK, WARNING, ALERT, ESCALATION
400: Illegal ticket priority entered. Permitted values are: LOW, NORMAL, HIGH, CRITICAL
400: Illegal ticket expiration date entered. Permitted date format is: ddMMyyyy (ex. 20.11.2001)
400: Cannot find specified domain <DOMAIN_NAME>"},"response":[]},{"name":"Returns the results of the Commit action","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"stepId"},{"value":null,"type":"text","key":"taskId"},{"value":null,"type":"text","key":"fieldId"},{"value":null,"type":"text","key":"managementId"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps/{{stepId}}/tasks/{{taskId}}/fields/{{fieldId}}/designer/commit_report/{{managementId}}","description":"GENERAL USE
The report returns the Commit results for the device with the specified management ID and for the devices suggested in the Designer results. The report also includes results for devices that are in the related hierarchy of these devices.

Parameters:
id: Ticket ID
stepId: Step ID
taskId: Task ID
fieldId: Field ID
managementId: Management ID

Usage Example
URLhttps://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps/2/tasks/2/fields/3/designer/commit_report/3
OUTPUT{
    \"commit_report\": {
        \"ticketId\": 27,
        \"statTime\": \"24-Oct-2018 08:55 AM\",
        \"endTime\": \"24-Oct-2018 08:56 AM\",
        \"duration\": \"00:00:30\",
        \"vendorName\": \"PALO ALTO NETWORKS\",
        \"managmentName\": \"pano211\",
        \"devices\": {
            \"device\": [
                {
                    \"name\": \"DG1.1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                },
                {
                    \"name\": \"DG1\",
                    \"status\": \"success_with_warnings\",
                    \"warnings\": {
                        \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                    },
                    \"policies\": \"\"
                }
            ]
        }
    }
}


Response Messages:
404: There is no ticket with ID <ID>.
404: Stage ID <ID> was not found in ticket ID <ID>.
404: Task with ID <ID> was not found in Stage ID <ID> in ticket ID <ID>.
404: The task with ID <ID> does not contain a field of type TYPE.
404: Specified field, id: <ID> , name: <NAME>, cannot contain designer result
404: Designer results were not found in the request."},"response":[]},{"name":"Returns the details of a specified ticket stages","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureChange_IP}}/securechangeworkflow/api/securechange/tickets/{{id}}/steps","description":"For a ticket that includes Commit Now Results, when the expand_links parameter is true, the API does not return a link for the Commit Now Results report

Parameters:
id: The ID number of the ticket as shown in SecureChange
expand_links: See expanded view of the objects [optional]

Usage Example
https://192.168.1.1/securechangeworkflow/api/securechange/tickets/1/steps

Response Messages:
403: You do not have permission to view this task. Contact your administrator for assistance.
404: Ticket ID was not found"},"response":[]}]}]} \ No newline at end of file diff --git a/Postman Format v2/R21-1 postman collection/securetrack_R21-1-RC1-v2.json b/Postman Format v2/R21-1 postman collection/securetrack_R21-1-RC1-v2.json new file mode 100644 index 0000000..4602be6 --- /dev/null +++ b/Postman Format v2/R21-1 postman collection/securetrack_R21-1-RC1-v2.json @@ -0,0 +1 @@ +{"info":{"_postman_id":"1","name":"Tufin Tufin SecureTrack R21-1-RC1","description":"Tufin Orchestration Suite - Tufin SecureTrack APIs.
For detailed information about the APIs please see the documentation at:
https://your-securetrack-server/securetrack/apidoc","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json"},"item":[{"name":"Additional Policy Fields","item":[{"name":"Get all URL Categories by revision.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories","description":"Fetches list of URL Categories defined in a revision given by ID.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories
"},"response":[]},{"name":"Get additional parameters identities by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
type: Additional parameter type [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group

Response Messages:
200: Successful
400: Invalid request"},"response":[]},{"name":"Get specific additional parameter identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/additional_parameters/{{ids}}","description":"Some firewall vendors use special fields in their security policy.
For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations.
SecureTrack refers to these fields as “Additional Parameters”.
The additional parameters API retrieves the possible values of these fields.
This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Additional parameter IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760
"},"response":[]},{"name":"Get a URL Category.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/url_categories/{{ids}}","description":"Fetches one or more URL Categories.
This API is supported for Panorama in advanced mode and Panorama Device Groups.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Url Category IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760
"},"response":[]}]},{"name":"Application IDs","item":[{"name":"Get applications identities by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/applications","description":"Fetches list of applications defined in a revision given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 1,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

"},"response":[]},{"name":"Get specific application identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/applications/{{ids}}","description":"Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760
"},"response":[]},{"name":"Get application identities by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications","description":"Fetches list of applications defined on device given by ID.
This API is currently supported for Palo Alto Networks firewalls.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/applications?get_total=true
OUTPUT {
    \"applications\": {
        \"count\": 50,
        \"total\": 100,
        \"application\": [{
            \"@xsi.type\": \"singleApplicationDTO\",
            \"id\": 2095027,
            \"name\": \"any\",
            \"display_name\": \"any\",
            \"class_name\": \"application_object\",
            \"comment\": \"\",
            \"uid\": \"{61B7771C-8B0B-90D6-ED55-B6698691BEED}\",
            \"overrides\": false,
            \"service\": {
                \"id\": 5048925,
                \"uid\": \"{4BC8F8B5-7671-A61B-5DD2-8CA235955162}\",
                \"display_name\": \"any\",
                \"name\": \"any\"
            }
        }]
    }
}

"},"response":[]},{"name":"Get specific application identity","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/applications/{{ids}}","description":"Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list.
This API is currently supported for Palo Alto Networks firewalls.
Note: This API retrieves the information from the latest revision.
In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value.


Parameters:
context: Global MSSP context [optional]
id: Device ID
ids: Application IDs separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/1/applications/701
"},"response":[]}]},{"name":"Change Authorization","item":[{"name":"Compare revisions on two different devices in terms of traffic.","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_traffic_comparison_request\": {\n\t\t\"oldVersionId\": \"234\",\n\t\t\"newVersionId\": \"179\",\n\t\t\"oldId2newIdMap\": [\n\t\t\t{\n\t\t\t\t\"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",\n\t\t\t\t\"newId\" : \"{00-FACED0-00}\"\n\t\t\t}\n\t\t],\n\t\t\"withTraffic\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/policyTrafficComparison","description":"This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic.
The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions.
The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions.
Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared.
Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules
Note 3: The format of the result is the same as the one returned by /change_authorization
Note 4: The API accepts in request body only one pair of oldId - newId map
Note 5: The request is valid only if the mapping ids are found in the active policies

Parameters:
body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions.

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison
BODY{
    \"policy_traffic_comparison_request\": {
        \"oldVersionId\": \"234\",
        \"newVersionId\": \"179\",
        \"oldId2newIdMap\": [
            {
                \"oldId\": \"{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}\",
                \"newId\" : \"{00-FACED0-00}\"
            }
        ],
        \"withTraffic\": true
    }
}


Response Messages:
200: Policies diff was successfully calculated
400: Could not find the requested revisions for comparison"},"response":[]},{"name":"Determine if changes between two revisions are authorized","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"new_version"},{"value":null,"type":"text","key":"old_version"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_authorization/","description":"This API checks for unauthorized changes between any two versions of a firewall policy.
The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets.
The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket.

The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove).
The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes.

Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing.
Note 2: Use the ID returned by the /revisions API for new_version and old_version.
Note 3: The default value for traffic_details and ignore_tickets is false.
Note 4: Traffic that is handled by an implicit rule will not have a rule ID.

Parameters:
new_version: New version ID
old_version: Old version ID
traffic_details: Return unauthorized traffic change details for all modified rules [optional]
ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional]

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2

Usage Example
https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true

Response Messages:
200: Change authorization has been successfully calculated
400: Input parameters are not valid
400: Could not find the requested revisions for comparison"},"response":[]}]},{"name":"Change Windows","item":[{"name":"Get scheduling and device details for a specific change window","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"uid"},{"value":null,"type":"text","key":"task_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks/{{task_id}}","description":"Retrieves scheduling and device details for a specific change window.

Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
task_id: Task Id

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1
OUTPUT {
    \"commit_task\": {
        \"id\": 1,
        \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
        \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
        \"errors\": \"\",
        \"device_commits\": {
            \"device_commit\": [
                {
                    \"id\": 1,
                    \"result\": {
                        \"errors\": {
                            \"error\": \"got_error_from_dcs\"
                        },
                        \"device\": {
                            \"id\": 17,
                            \"status\": \"FAILURE\",
                            \"revision_id\": 1,
                            \"errors\": {
                                \"error\": \"Login error\"
                            }
                        }
                    }
                },
                {
                    \"id\": 2,
                    \"result\": {
                        \"errors\": \"\",
                        \"device\": {
                            \"id\": 19,
                            \"status\": \"SUCCESS_WITH_WARNINGS\",
                            \"revision_id\": 1,
                            \"warnings\": {
                                \"warning\": \"Commit not performed: This device had no policies to install on its managed firewalls\"
                            }
                        }
                    }
                }
            ]
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain
404: Fail to find task for change window "},"response":[]},{"name":"Get a list of completed policy changes for a specific change window","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/{{uid}}/tasks","description":"Retrieves a list of completed policy changes for a specific change window.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
uid: Change window uuid
start: Starting result for query allowable value is numeric [optional]
count: Number of tasks for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true
OUTPUT {
    \"commit_tasks\": {
        \"count\": 1,
        \"total\": 1,
        \"commit_task\": {
            \"id\": 1,
            \"start_date\": \"04-Nov-2018 01:30:00PM +0200\",
            \"end_date\": \"04-Nov-2018 01:32:01PM +0200\",
            \"errors\": \"\"
        }
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context
404: Change window with uuid was not found
404: Change window with uuid was not found in domain "},"response":[]},{"name":"Get name and status for all change windows","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/change_windows/","description":"Retrieves a list of all change windows.
For valid pagination, both start and count should be provided. Otherwise, pagination is turned off.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call.
Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results.
To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
start: Starting result for query allowable value is numeric [optional]
count: Number of change windows for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true
OUTPUT {
    \"change_windows\": {
        \"count\": 2,
        \"total\": 2,
        \"change_window\": [
            {
                \"uuid\": \"6ae41504-a95c-4f23-98a2-f18b2efadb9d\",
                \"name\": \"cw1\",
                \"domain_id\": 1,
                \"enabled\": true
            },
            {
                \"uuid\": \"fc7b167c-29ea-49a1-9ee3-efb6d1351343\",
                \"name\": \"cw2\",
                \"domain_id\": 1,
                \"enabled\": true
            }
        ]
    }
}


Response Messages:
200: OK
400: For correct pagination provide a value for the start and count parameters
400: Start parameter must be a non-negative value
400: Count parameter must be a positive value
403: Not permitted to access this context "},"response":[]}]},{"name":"Device Interfaces and Zones","item":[{"name":"Get device zones by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/zones","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/zones
"},"response":[]},{"name":"Get device zones by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/zones","description":"Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision.
Note: this API returns device zones, not Tufin zones.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/787/zones
"},"response":[]},{"name":"Get network interfaces by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/interfaces","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/interfaces
"},"response":[]},{"name":"Get zones and network interfaces that participate in sub-policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindable_objects","description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/104/bindable_objects
"},"response":[]},{"name":"Get network interfaces by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/interfaces","description":"Reflects static data from the running-config.
For dynamic information see the /topology_interfaces API.
This API is not applicable for Check Point.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/10/interfaces
"},"response":[]}]},{"name":"Domains","item":[{"name":"Get all domains","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","description":"

Usage Example
https://192.168.1.1/securetrack/api/domains

Response Messages:
403: User not permitted to access domains"},"response":[]},{"name":"Add a domain","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"domain\": {\n\t\t\"name\": \"domain1\",\n\t\t\"address\": \"address\",\n\t\t\"description\": \"description\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/","description":"Parameters:
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains
BODY{
    \"domain\": {
        \"name\": \"domain1\",
        \"address\": \"address\",
        \"description\": \"description\"
    }
}


Response Messages:
403: User not permitted to access domains
400: Domain with this name already exists
400: Domain name is empty"},"response":[]},{"name":"Get domain","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","description":"Parameters:
context: Global MSSP context [optional]
id: Domain id

Usage Example
https://192.168.1.1/securetrack/api/domains/1

Response Messages:
403: User not permitted to access domains
400: Domain with ID was not found"},"response":[]},{"name":"Update a domain","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"domain\": {\n\t\t\"name\": \"edited name\",\n\t\t\"address\": \"edited address\",\n\t\t\"description\": \"edited description\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/domains/{{id}}","description":"Parameters:
id: Domain id
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/domains/2
BODY{
    \"domain\": {
        \"name\": \"edited name\",
        \"address\": \"edited address\",
        \"description\": \"edited description\"
    }
}


Response Messages:
403: User not permitted to access domains
400: Domain with ID was not found
400: Domain with this name already exists
400: Domain name is empty
400: Default domain cannot be changed"},"response":[]}]},{"name":"General Properties","item":[{"name":"Get general properties","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/properties/","description":"This API requires 'Super admin' privileges



Usage Example
URLhttps://192.168.1.1/securetrack/api/properties
OUTPUT{
    \"properties\": {
        \"sc_addresses\": {
            \"sc_address\": [
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"external\"
                },
                {
                    \"ip_address\": \"127.0.0.1\",
                    \"type\": \"internal\"
                }
            ]
        }
    }
}


Response Messages:
403: User not permitted to view properties"},"response":[]}]},{"name":"IPsec VPN","item":[{"name":"Get Check Point VPN (IPSec) communities and gateways","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_communities","description":"Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities.
Works on clusters and gateways, not on management servers.

Parameters:
device_id: The unique identifier of target device

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities
"},"response":[]},{"name":"Get Cisco IPsec policy and peers","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"outputInterfaceName"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/ipsec_tunnels","description":"Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config.
You can retrieve the interface names by calling the /devices/id/interfaces API.

Parameters:
device_id: The unique identifier of target device
outputInterfaceName: Interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1
"},"response":[]},{"name":"Get Cisco cryptographic maps by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/crypto_maps","description":"Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://191.168.1.1/securetrack/api/revisions/18/crypto_maps
"},"response":[]},{"name":"Get Cisco cryptographic maps by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/crypto_maps","description":"Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/19/crypto_maps
"},"response":[]}]},{"name":"Internet Objects","item":[{"name":"Get resolved Internet representation for device","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}/object","description":"The order of precedence used to resolve the Internet object is:
Step 1: Identify the Internet referral:
Search for a defined Internet referral on the specified device.
If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral.
If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2.
If an Internet referral is not found, it resolves to “Any”.
Step 2: Resolve the object by name:
Search the specified device for a defined network object that matches the name returned in Step 1.
If a matching network object is not found, an error will be returned.

Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2/object

Response Messages:
200: Resolved Internet referral object for device is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Configured object was not found on the device
403: Access is denied."},"response":[]},{"name":"Update Internet representation for device","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_10.11.73.1\"\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Updates the Internet referral configuration for the device.
If there was no previous configuration, it will be created.

Parameters:
deviceId: SecureTrack Device ID
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_10.11.73.1\"
    }
}


Response Messages:
200: Internet referral configuration was updated
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
403: Access is denied."},"response":[]},{"name":"Get Internet representation for device","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration is returned
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
404: Internet referral configuration was not found for device ID
403: Access is denied."},"response":[]},{"name":"Delete Internet representation for device","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/{{deviceId}}","description":"Parameters:
deviceId: SecureTrack Device ID

Usage Example
https://192.168.1.1/securetrack/api/internet_referral/2

Response Messages:
200: Internet referral configuration was deleted
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration for device ID does not exist
403: Access is denied."},"response":[]},{"name":"Create new Internet representation for a device","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"internet_referral\": {\n\t\t\"@xsi.type\": \"internetReferralObjectNameDTO\",\n\t\t\"device_id\": 2,\n\t\t\"object_name\": \"Host_2.2.2.2\"\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/internet_referral/","description":"The internet referral lets you represent the Internet as an object on a device.
See REST API: /internet_referral/{deviceId:[0-9]+}/object for a description of how internet referral is resolved.

Parameters:
body: Internet referral configuration

Usage Example
URLhttps://192.168.1.1/securetrack/api/internet_referral
BODY{
    \"internet_referral\": {
        \"@xsi.type\": \"internetReferralObjectNameDTO\",
        \"device_id\": 2,
        \"object_name\": \"Host_2.2.2.2\"
    }
}


Response Messages:
201: Internet referral configuration was created
400: Device with given ID does not exist
400: Internet referral object can only be configured for StoneSoft (except master engine) or Check Point SMC/CMA devices
400: Internet referral configuration was malformed
400: Internet referral configuration for given device ID already exists
403: Access is denied."},"response":[]}]},{"name":"LDAP","item":[{"name":"Get LDAP entry details by DN","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"dn"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntryByDN","description":"Returns the UID, DN and Name of a LDAP entry specified by the DN.

Parameters:
dn: LDAP DN

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntryByDN?dn=CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com
OUTPUT{
    \"ldap_entry\": {
        \"uid\": \"mYbWQms7p0q5YinEyW5Byw==\",
        \"dn\": \"CN=Manufacturing,OU=RSA_Demo,DC=tufintest,DC=com\",
        \"name\": \"Manufacturing\"
    }
}


Response Messages:
200: OK
400: Invalid DN format
404: Entry matching the DN cannot be found
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Return entries that exactly match one of the given strings","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"search_by_name_criteria\": {\n\t\t\"search_texts\": {\n\t\t\t\"search_text\": [\n\t\t\t\t\"Finance\",\n\t\t\t\t\"Marketing\",\n\t\t\t\t\"Management\"\n\t\t\t]\n\t\t},\n\t\t\"ldap_entry_types\": {\n\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\"GROUP\"\n\t\t\t]\n\t\t},\n\t\t\"max_search_result\": 20\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getEntriesByNames","description":"Return list of LDAP entries which match the exact given multiple search_text.

Parameters:
body: Names to search

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getEntriesByNames
BODY{
    \"search_by_name_criteria\": {
        \"search_texts\": {
            \"search_text\": [
                \"Finance\",
                \"Marketing\",
                \"Management\"
            ]
        },
        \"ldap_entry_types\": {
            \"ldap_entry_type\": [
                \"GROUP\"
            ]
        },
        \"max_search_result\": 20
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Finance,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"uOvJTpYRD0aTjEENA87N5A==\",
                    \"displayName\": \"Finance\"
                },
                {
                    \"@xsi.type\": \"LdapGroup\",
                    \"dn\": \"CN=Management,OU=SecureTrack,DC=tufintest,DC=com\",
                    \"uid\": \"jdf778skfsgs730fksdHHs==\",
                    \"displayName\": \"Management\"
                }
            ]
        },
        \"has_more_results_to_return\": false
    }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal value)
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Return LDAP entries which match the given search criteria","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"search_criteria\": {\n\t\t\"search_base_dn\": \"DC=tufintest,DC=com\",\n\t\t\"search_text\": \"test\",\n\t\t\"ldap_search_options\": {\n\t\t\t\"ldap_entry_types\": {\n\t\t\t\t\"ldap_entry_type\": [\n\t\t\t\t\t\"OU\",\n\t\t\t\t\t\"USER\"\n\t\t\t\t]\n\t\t\t},\n\t\t\t\"search_mode\": \"CONTAINS\",\n\t\t\t\"max_search_result\": 3\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/search","description":"Return list of LDAP entries which match the given search criteria according to the search mode (EXACT, CONTAINS, STARTS_WITH, ENDS_WITH).
The search is case insensitive.
The limit of max_search_result is 1000.

Parameters:
body: Search criteria

Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/search
BODY{
    \"search_criteria\": {
        \"search_base_dn\": \"DC=tufintest,DC=com\",
        \"search_text\": \"test\",
        \"ldap_search_options\": {
            \"ldap_entry_types\": {
                \"ldap_entry_type\": [
                    \"OU\",
                    \"USER\"
                ]
            },
            \"search_mode\": \"CONTAINS\",
            \"max_search_result\": 3
        }
    }
}
OUTPUT{
    \"search_result\": {
        \"ldap_entries\": {
            \"ldap_entry\": [
            {
                \"dn\": \"CN=User15ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"ZRuKW3XqIEOIxCwlfgJQYA==\",
                \"displayName\": \"User15ATTesting1\"
            },
            {
                \"dn\": \"CN=IWAM_TEST2003,CN=Users,DC=tufintest,DC=com\",
                \"uid\": \"bYVqqcZXsUSF51hiP4W7Yw==\",
                \"displayName\": \"Testing1\"
            },
            {
                \"dn\": \"CN=User1ATTesting1,OU=Testing1,OU=new OU,OU=SC_Users,DC=tufintest,DC=com\",
                \"uid\": \"2ma3TrgeHEWQDITwvcRqlg==\",
                \"displayName\": \"test\"
            }
            ]
        },
            \"has_more_results_to_return\": \"true\"
        }
}


Response Messages:
200: OK
400: Bad request (one of the request fields has an illegal or invalid value)
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]},{"name":"Get the base DN entry details","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/ldap/getBaseDNEntry","description":"The returned \"base DN\" is used by GetEntriesByNames API as the search start entry.



Usage Example
URLhttps://192.168.1.1/securetrack/api/ldap/getBaseDNEntry
OUTPUT{
    \"ldap_entry\": {
        \"dn\": \"DC=tufintest,DC=com\",
        \"uid\": \"nABbRP/lPUKlteNRI4j6iA==\"
    }
}


Response Messages:
200: OK
404: Base Entry cannot be found
501: LDAP server is not configured
503: No connection to LDAP server"},"response":[]}]},{"name":"Monitored Devices","item":[{"name":"Add devices to SecureTrack","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n \t\t \"devices\": [{ \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"r80_version\":\"false\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"CMA\",\n \t\t\t \"vendor\":\"Checkpoint\",\n \t\t\t \"display_name\":\"Europe-CMA\",\n \t\t\t \"ip_address\":\"192.168.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"securetrack_domain\":\"Default\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"lea_authentication_port\":\"65000\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"opsec_application\":\"ST-Opsec\",\n \t\t\t\t \"activation_key\":\"ST-Activation\",\n \t\t\t\t \"user_name\":\"admin\",\n \t\t\t\t \"password\":\"1234\",\n \t\t\t\t \"r80_version\":\"true\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"ASA\",\n \t\t\t \"vendor\":\"Cisco\",\n \t\t\t \"securetrack_domain\":\"Domain-A\",\n \t\t\t \"display_name\":\"Ireland-ASA\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t \"enable_virtual_contexts\":\"true\",\n \t\t\t \"import_all\":\"false\",\n \t\t\t \"import_devices\": \n \t\t\t\t\t [\"VC1\",\"VC2\"],\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"enable_password\":\"st-enable-password\"\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"model\":\"Panorama\",\n \t\t\t \"vendor\":\"PaloAltoNetworks\",\n \t\t\t \"display_name\":\"First-Device-example\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t {\n \t\t\t \"model\":\"FortiManager\",\n \t\t\t \"vendor\":\"Fortinet\",\n \t\t\t \"display_name\":\"Spain-FortiManager\",\n \t\t\t \"securetrack_server\":\"RemoteControlServerName\",\n \t\t\t \"ip_address\":\"172.16.1.1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"false\",\n \t\t\t\t \"user_name\":\"St-Super-use\",\n \t\t\t\t \"password\":\"st-super-password\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_all\": \"false\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t\t { \n \t\t\t\t \"name\": \"AdomX\",\n \t\t\t\t \"import_all\": \"false\", \n \t\t\t\t \"managed_devices\": [\"FW1\"]\n \t\t\t\t\t\t}\n \t\t\t\t\t]\n \t\t\t\t}\n \t\t\t}\n \t\t]\n \t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","description":"Use this API to add a single device or a list of devices to SecureTrack.
The following devices can be added: Check Point CMA R77, CMA R80, SMC R77, SMC R80; Cisco ASA; Palo Alto Panorama NG; Fortinet FortiManager.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
Currently supported types: CMA, SMC, ASA, Panorama NG and FortiManager.

This API verifies connection to the provided device, before adding a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be added.
Only \"live\" device with correct credentials can be added using this API.
To add Checkpoint R77 devices, use \"r80_version\" : \"false\".


Parameters:
body: device_list

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"r80_version\":\"false\"
             }
         },
         {
             \"model\":\"CMA\",
             \"vendor\":\"Checkpoint\",
             \"display_name\":\"Europe-CMA\",
             \"ip_address\":\"192.168.1.1\",
             \"enable_topology\": \"true\",
             \"securetrack_domain\":\"Default\",
             \"device_data\":{
                 \"lea_authentication_port\":\"65000\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"opsec_application\":\"ST-Opsec\",
                 \"activation_key\":\"ST-Activation\",
                 \"user_name\":\"admin\",
                 \"password\":\"1234\",
                 \"r80_version\":\"true\"
             }
         },
         {
             \"model\":\"ASA\",
             \"vendor\":\"Cisco\",
             \"securetrack_domain\":\"Domain-A\",
             \"display_name\":\"Ireland-ASA\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
             \"enable_virtual_contexts\":\"true\",
             \"import_all\":\"false\",
             \"import_devices\":
                     [\"VC1\",\"VC2\"],
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"collect_dynamic_topology\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"enable_password\":\"st-enable-password\"
             }
         },
         {
             \"model\":\"Panorama\",
             \"vendor\":\"PaloAltoNetworks\",
             \"display_name\":\"First-Device-example\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"model\":\"FortiManager\",
             \"vendor\":\"Fortinet\",
             \"display_name\":\"Spain-FortiManager\",
             \"securetrack_server\":\"RemoteControlServerName\",
             \"ip_address\":\"172.16.1.1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"false\",
                 \"user_name\":\"St-Super-use\",
                 \"password\":\"st-super-password\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_all\": \"false\",
                 \"import_devices\": [
                         {
                 \"name\": \"AdomX\",
                 \"import_all\": \"false\",
                 \"managed_devices\": [\"FW1\"]
                        }
                    ]
                }
            }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Edit Securetrack device","request":{"method":"PATCH","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n\t\t \"devices\": [{\n\t\t\t \"device_id\": 1,\n\t\t\t \"display_name\": \"CheckPoint-R77-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.1\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"authentication_mode\": \"LEA\",\n\t\t\t\t \"lea_authentication_mode\": \"ssl_opsec\",\n\t\t\t\t \"lea_authentication_port\": \"2488\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 2,\n\t\t\t \"display_name\": \"CheckPoint-R80-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"1.1.1.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"opsec_application\": \"ST-Opsec\",\n\t\t\t\t \"activation_key\": \"ST-Activation\",\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 3,\n\t\t\t \"display_name\": \"Cisco-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\",\n\t\t\t\t \"enable_password\": \"st-super-password\",\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 4,\n\t\t\t \"display_name\": \"PaloAlto-PanoramaNg-Device\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 5,\n\t\t\t \"display_name\": \"PaloAlto-DeviceGroup\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 6,\n\t\t\t \"display_name\": \"PaloAlto-FireWall-Device\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 7,\n\t\t\t \"display_name\": \"Spain-FortiManager\",\n\t\t\t \"ip_address\": \"2.2.2.2\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"user_name\": \"St-Super-use\",\n\t\t\t\t \"password\": \"st-super-password\"\n\t\t\t }\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 8,\n\t\t\t \"display_name\": \"FortiManager-Adom\"\n\t\t },\n\t\t { \n\t\t\t \"device_id\": 9,\n\t\t\t \"display_name\": \"FortiManager-FireWall\",\n\t\t\t \"enable_topology\": \"true\",\n\t\t\t \"device_data\": {\n\t\t\t\t \"collect_rule_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_object_usage_traffic_logs\": \"true\",\n\t\t\t\t \"collect_dynamic_topology\": \"true\"\n\t\t\t }\n\t\t }\n\t\t]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/","description":"Use this API to edit the settings of a management device, including changing multiple parameters in the same call.
The API body should include a JSON file with the mandatory parameters for the operation.
String parameters contain only lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^().
The following devices can be edited: Check Point CMA R77, Check Point SMC R77, Cisco ASA, Panorama NG and FortiManager.
Note: This API cannot be used to edit SecureTrack Domains and SecureTrack Servers.
This API verifies connection to the provided device, before updating a device.
This is done by:
  Cisco - Connect with SSH and see that the credentials are correct.
  Check Point - Test OPSEC connectivity. For R80 devices, this also verifies the connectivity for API login.
  Panorama - Login through the API to check connectivity.
  Fortimanager - Login through the API to check connectivity.
If the connection test fails the device will not be updated.
Only \"live\" device with correct credentials can be updated using this API.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk
BODY{
     \"devices_list\":{
         \"devices\": [{
             \"device_id\": 1,
             \"display_name\": \"CheckPoint-R77-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.1\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"authentication_mode\": \"LEA\",
                 \"lea_authentication_mode\": \"ssl_opsec\",
                 \"lea_authentication_port\": \"2488\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 2,
             \"display_name\": \"CheckPoint-R80-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"1.1.1.2\",
             \"device_data\": {
                 \"opsec_application\": \"ST-Opsec\",
                 \"activation_key\": \"ST-Activation\",
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 3,
             \"display_name\": \"Cisco-Device\",
             \"enable_topology\": \"true\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\",
                 \"enable_password\": \"st-super-password\",
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\"
             }
         },
         {
             \"device_id\": 4,
             \"display_name\": \"PaloAlto-PanoramaNg-Device\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 5,
             \"display_name\": \"PaloAlto-DeviceGroup\"
         },
         {
             \"device_id\": 6,
             \"display_name\": \"PaloAlto-FireWall-Device\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         },
         {
             \"device_id\": 7,
             \"display_name\": \"Spain-FortiManager\",
             \"ip_address\": \"2.2.2.2\",
             \"device_data\": {
                 \"user_name\": \"St-Super-use\",
                 \"password\": \"st-super-password\"
             }
         },
         {
             \"device_id\": 8,
             \"display_name\": \"FortiManager-Adom\"
         },
         {
             \"device_id\": 9,
             \"display_name\": \"FortiManager-FireWall\",
             \"enable_topology\": \"true\",
             \"device_data\": {
                 \"collect_rule_usage_traffic_logs\": \"true\",
                 \"collect_object_usage_traffic_logs\": \"true\",
                 \"collect_dynamic_topology\": \"true\"
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Get specific device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}","description":"Returns the vendor, model, name, domain and ID for the specified device.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
id: Device ID
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/60

Usage Example
https://192.168.1.1/securetrack/api/devices/20?show_os_version=true
"},"response":[]},{"name":"Get textual configuration by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/config","description":"Get latest revision of running configuration for a given device Id.


Parameters:
context: global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/111/config
"},"response":[]},{"name":"Import managed devices","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n \t \"devices_list\":{ \n \t\t \"devices\":[ \n \t\t { \n \t\t\t \"device_id\":\"1\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_dynamic_topology\":\"false\",\n \t\t\t\t \"import_devices\":[\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"DG3\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [] \n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"2\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom1\",\n \t\t\t\t\t\t \"import_all\":\"false\",\n \t\t\t\t\t\t \"managed_devices\": [\"firewall1\", \"firewall2\"] \n \t\t\t\t\t },\n \t\t\t\t\t { \n \t\t\t\t\t\t \"name\":\"Adom2\",\n \t\t\t\t\t\t \"import_all\":\"true\"\n \t\t\t\t\t }\n \t\t\t\t ]\n \t\t\t }\n \t\t },\n \t\t { \n \t\t\t \"device_id\":\"3\",\n \t\t\t \"enable_topology\": \"true\",\n \t\t\t \"device_data\":{ \n \t\t\t\t \"import_all\":\"false\",\n \t\t\t\t \"collect_rule_usage_traffic_logs\":\"true\",\n \t\t\t\t \"collect_object_usage_traffic_logs\":\"true\",\n \t\t\t\t \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"] \n \t\t\t }\n \t\t }\n \t\t]\n \t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/import","description":"Use this API to import more managed devices to SecureTrack.
The following devices can be added: Device Groups (for Panorama), Administrative Domains (for FortiManager).\nCurrently supported types: Panorama, FortiManager, Cisco ASA.
Please see examples below per device id: device id 1 for Panorama, device 2 for FortiManager, device id 3 for Cisco ASA.

Parameters:
body: device_list

Usage Example
URL https://192.168.1.1/securetrack/api/devices/bulk/import
BODY{
     \"devices_list\":{
         \"devices\":[
         {
             \"device_id\":\"1\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"collect_dynamic_topology\":\"false\",
                 \"import_devices\":[
                     {
                         \"name\":\"DG1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"wantedDg\", \"anotherWantedDg\"]
                     },
                     {
                         \"name\":\"DG2\",
                         \"import_all\":\"true\"
                     },
                     {
                         \"name\":\"DG3\",
                         \"import_all\":\"false\",
                         \"managed_devices\": []
                     }
                 ]
             }
         },
         {
             \"device_id\":\"2\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [
                     {
                         \"name\":\"Adom1\",
                         \"import_all\":\"false\",
                         \"managed_devices\": [\"firewall1\", \"firewall2\"]
                     },
                     {
                         \"name\":\"Adom2\",
                         \"import_all\":\"true\"
                     }
                 ]
             }
         },
         {
             \"device_id\":\"3\",
             \"enable_topology\": \"true\",
             \"device_data\":{
                 \"import_all\":\"false\",
                 \"collect_rule_usage_traffic_logs\":\"true\",
                 \"collect_object_usage_traffic_logs\":\"true\",
                 \"import_devices\": [\"wantedVirtualContext\", \"anotherWantedVirtualContext\"]
             }
         }
        ]
    }
}


Response Messages:
202: Accepted
408: Request timed out
500: Internal server error
503: Task with UID already running"},"response":[]},{"name":"Get specific task results of bulk operations on devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"task_uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/bulk/tasks/{{task_uid}}","description":"Use this API to track and display the current progress of the devices being edited or added to\nSecureTrack for a specific Task ID.
For a list of devices, the status of each device is displayed.

A device that was not added due to some reason will be added to \"failed\" list with status element containing a description.
For example:
\"description\": \"No connection to device\".

Parameters:
task_uid: Task UID

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/bulk/tasks/d7e88799-a6e5-45da-8c72-c979a5dbe235
OUTPUT{
    \"task_result\":{
        \"total_succeeded\":\"0\",
        \"total_in_progress\":\"2\",
        \"total_failed\":\"0\",
        \"succeeded\":{
            \"count\":\"0\"
        },
        \"in_progress\":{
            \"count\":\"2\",
            \"devices\":[
                {
                    \"device_id\":\"1\",
                    \"display_name\":\"Europe-CMA\",
                    \"ip_address\":\"192.168.1.1\",
                    \"status\":{
                    }
                },
                {
                    \"device_id\":\"2\",
                    \"display_name\":\"Ireland-ASA\",
                    \"ip_address\":\"172.16.1.1\",
                    \"status\":{
                    }
                }
            ]
        },
        \"failed\":{
            \"count\":\"0\"
        }
    }
}


Response Messages:
404: The task with the given UID was not found
400: Bad request
200: Accepted
408: Request timed out
500: Internal server error"},"response":[]},{"name":"Add configuration for offline device","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"configuration_file"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/tasks/add_device_config_task","description":"Parameters:
device_id: Device ID
configuration_file: Configuration File

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"device_id=1\" https://192.168.1.1/securetrack/api/tasks/add_device_config_task

Response Messages:
200: Configuration added successfully."},"response":[]},{"name":"Update offline device","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t API OFFLINE ASA2\n\t true\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}","description":"Device name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
device_id: Device ID
body: Device to be updated

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/1
BODY<device>
     <name>API OFFLINE ASA2</name>
     <topology>true</topology>
</device>

"},"response":[]},{"name":"Get devices","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","description":"Returns the list of devices that are configured in SecureTrack, including the vendor, model, name, domain and device ID.
The results can be sorted by ip, name, vendor and model.
For more information on supported devices, supported models and virtual types please refer to 'Device and Revision Resources' section in the Tufin Knowledge Center .

Parameters:
context: Global MSSP context [optional]
name: Device name [optional]
ip: Device IP address [optional]
vendor: Device vendor [optional]
model: Device model [optional]
sort: Sort ascending or descending allowable types are: asc or desc [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]
show_os_version: Show os version as apart of the response [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices

Usage Example
https://192.168.1.1/securetrack/api/devices?vendor=VMware

Usage Example
https://192.168.1.1/securetrack/api/devices?sort=ip:asc

Usage Example
https://192.168.1.1/securetrack/api/devices?show_os_version=true
"},"response":[]},{"name":"Add offline device","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t asa \n\t Cisco\n\t 1\n\t Default\n\t API OFFLINE ASA1\n\t true\n\t true\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/","description":"You can choose to select the domain either by name or id using the domain_id or domain_name tags.\nDevice name should contain only Lower and upper case letters, digits, space, dot, backward slash, forward slash, underscore or one of the following signs: #@:;=!^()

Parameters:
body: Device to be added

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices
BODY<device>
     <model>asa</model>
     <vendor>Cisco</vendor>
     <domain_id>1</domain_id>
     <domain_name>Default</domain_name>
     <name>API OFFLINE ASA1</name>
     <offline>true</offline>
     <topology>true</topology>
</device>

"},"response":[]},{"name":"Get textual configuration by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/config","description":"Returns textual configuration for the specified revision Id.


Parameters:
context: Global MSSP context [optional]
id: Revision id

Usage Example
https://192.168.1.1/securetrack/api/revisions/227/config
"},"response":[]}]},{"name":"NAT Policies","item":[{"name":"Get NAT objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/nat_objects","description":"Fetches a list of NAT objects for a given revision
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Version ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/nat_objects?get_total=true
"},"response":[]},{"name":"Get NAT objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_objects","description":"Fetches a list of NAT objects defined on device given by device ID
Note: NAT objects are only relevant for Check Point management servers and Juniper Netscreen devices.
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable value is numeric [optional]
count: Starting page for query allowable value is numeric [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects

Usage Example
https://192.168.1.1/securetrack/api/devices/20/nat_objects?get_total=true
"},"response":[]},{"name":"Get NAT rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/nat_rules/bindings","description":"Fetches list of NAT rules for device given by device ID

input_interface and output_interface are not supported for Panorama running in Advanced management mode
nat_stage is supported for Netscreen and JunOS
nat_type is supported for FortiManager
Note: For Check Point, NAT rules are available from the modules (not managements)
Note: For Palo Alto, filtering NAT rules by interface is only available for firewall devices

Parameters:
context: Global MSSP context [optional]
id: Device ID
input_interface: Input interface for NAT rules, \"any\" for all interfaces [optional]
output_interface: output interface for NAT rules, \"any\" for all interfaces [optional]
nat_stage: NAT stage for NAT rules allowable values: \"pre_policy\" , \"post_policy\" or \"both\" [optional]
nat_type: NAT stage for NAT rules allowable values: \"vip\" or \"reverse_vip\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/10/nat_rules/bindings?input_interface=Any
"},"response":[]}]},{"name":"Network Objects","item":[{"name":"Get network groups containing specified network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/groups","description":"Returns groups that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.

Usage Example
https://192.168.1.1/securetrack/api/network_objects/69577/groups
"},"response":[]},{"name":"Get rules containing specified network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/{{id}}/rules","description":"Returns the security rules that contain the specified network object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the network object.
include_groups: You can add \"include_groups\" to find rules that include the network object and rules that include the groups that include the network object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/65078/rules?include_groups=true
"},"response":[]},{"name":"Get network objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/network_objects","description":"Fetches list of network objects defined on device given by ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]
add_parent_objects: Panorama only: Get objects from parent DGs (default true) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169178,
                \"name\": \"Access_role\",
                \"display_name\": \"Access_role\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": false,
                \"comment\": \"\",
                \"uid\": \"{FC267948-DA8C-4FB6-A736-76B5254BF825}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14320,
                        \"name\": \"ad_group_auto_30K_grp1\",
                        \"display_name\": \"auto_30K_grp1\",
                        \"class_name\": \"ad_group\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{CAB92DCC-CF63-4E47-B8E3-1E1231996D5E}\",
                        \"dn\": \"CN=auto_30K_grp1,OU=OU_30K_Groups,DC=rnd,DC=local\"
                    }
                }
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid"},"response":[]},{"name":"Get network objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/network_objects","description":"Fetches list of network objects from specific revision
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.
The show_members parameter is only relevant if type=group.
If type=group, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
id: Revision id
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
name: Network object name [optional]
type: Network object type [optional]
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
contains_ip: Get only network objects containing this IP [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: Get EDL groups [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]
add_parent_objects: Panorama only: Get objects from parent DGs (default true) [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects?get_total=true
OUTPUT {
    \"network_objects\": {
    \"count\": 1,
    \"total\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"hostNetworkObjectDTO\",
                \"id\": 499226,
                \"name\": \"1.1.1.2 not shared\",
                \"display_name\": \"1.1.1.2 not shared\",
                \"class_name\": \"host_plain\",
                \"type\": \"host\",
                \"comment\": \"\",
                \"uid\": \"{EFE8E61B-EE2A-2F55-4C5C-56508661EAA7}\",
                \"implicit\": false,
                \"management_domain\": \"Shared\",
                \"overrides\": false,
                \"ip\": \"1.1.1.2\"
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"identityAwarenessDTO\",
                \"id\": 169183,
                \"name\": \"Access role 1\",
                \"display_name\": \"Access role 1\",
                \"class_name\": \"access_role\",
                \"type\": \"identity_awareness\",
                \"global\": true,
                \"comment\": \"\",
                \"uid\": \"{1E4C35A0-1FE4-4101-8A38-FDE656BCDCFB}\",
                \"implicit\": false,
                \"overrides\": false,
                \"type_on_device\": \"\",
                \"networks\": {
                    \"network\": {
                        \"@xsi.type\": \"basicNetworkObjectDTO\",
                        \"id\": 168419,
                        \"name\": \"Any\",
                        \"display_name\": \"Any\",
                        \"class_name\": \"any_object\",
                        \"type\": \"basic\",
                        \"global\": false,
                        \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                        \"implicit\": false,
                        \"overrides\": false
                    }
                },
                \"users\": {
                    \"user\": {
                        \"id\": 14346,
                        \"name\": \"all identified\",
                        \"display_name\": \"all identified\",
                        \"class_name\": \"all_identified\",
                        \"global\": false,
                        \"comment\": \"\",
                        \"uid\": \"{17A972AC-4B4A-4715-859F-867128707F59}\",
                        \"dn\": \"\"
                    }
                }
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?type=group&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 100,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 105934,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/network_objects?typeOnDevice=edl_ip_list&show_members=false
OUTPUT{
    \"network_objects\": {
    \"count\": 1,
        \"network_object\": [
            {
                \"@xsi.type\": \"networkObjectGroupDTO\",
                \"id\": 123123,
                \"name\": \"aW50ZXJmYWNlAA==;aW50ZXJmYWNlIG1nbXQA\",
                \"display_name\": \"group_1\",
                \"class_name\": \"network_object_group\",
                \"type\": \"group\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": true,
                \"ip_type\": \"other\",
                \"overrides\": false,
                \"member\":
                    \"id\": 105936,
                    \"type_on_device\": edl_ip_list,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"interface_1\",
            }
        ]
    }
}


Response Messages:
400: The typeOnDevice value is not valid"},"response":[]},{"name":"Get specific network objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/network_objects/{{ids}}","description":"Fetches a single or partial list of the network objects for a given revision.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/revisions/779/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/779/network_objects/69547?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169185,
            \"name\": \"Access_Role_Domain Controllers\",
            \"display_name\": \"Access_Role_Domain Controllers\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{140B8F32-188D-414C-A7BE-F4A7D7E9A169}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14237,
                    \"name\": \"ad_group_Domain_Controllers\",
                    \"display_name\": \"Domain Controllers\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{0A8A459E-58E8-45DC-981E-16BBF2BD1922}\",
                    \"dn\": \"CN=Domain Controllers,CN=Users,DC=rnd,DC=local\"
                }
            }
        }
    }
}

"},"response":[]},{"name":"Get network objects matching specified criteria","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"filter"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/network_objects/search","description":"You can search for network objects where the IP address, name or comment fields have a specified text string,
or you can search for network objects that have an IP address that matches, contains or is contained in a specified IP subnet,
or you can search for network objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns network objects where the IP address, name or comment fields have a specified text string. “subnet” filter returns network objects that have an IP address that matches, contains or is contained in a specified IP subnet. “uid“ filter returns network objects with the specified uid. If no filter is specified, the “text” filter is used.
device_id: Returns network objects belonging to the specified device_id. [optional]
ip: (For “text” filter) You can specify \"ip\" to find network objects with the specified text in the IP address field. [optional]
name: (For “text” filter) You can specify \"name\" to find network objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find network objects with the specified text in the comment field. [optional]
any_field: (For “text” filter) You can specify \"any_field\" to find network objects with the specified text in the IP address, name or comment fields. [optional]
exact_match: (For “text” filter) You can add \"exact_match=true\" to find network objects with the specified text in the comment field. If this field is not specified, the query uses \"exact_match=false\". [optional]
contained_in: (For “subnet” filter) You can specify \"contained_in\" to find network objects that are contained in the specified IP subnet. For example, 10.1.0.0 is contained in 10.0.0.0. [optional]
contains: (For “subnet” filter) You can specify \"contains\" to find network objects that contain the specified IP subnet. For example, 10.0.0.0 contains 10.1.0.0. [optional]
exact_subnet: (For “subnet” filter) You can specify \"exact_subnet\" to find network objects that have the specified IP address. [optional]
uid: (for “uid“ filter) Returns network objects with the specified uid. [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]
typeOnDevice: You can specify \"typeOnDevice\" to find network object groups that are EDL. [optional]

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=host&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=text&any_field=host&count=10&exact_match=true

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&contains=10.1.1.0

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=subnet&count=10&exact_subnet=1.1.1.1

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
https://192.168.1.1/securetrack/api/network_objects/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191&device_id=4

Usage Example
URLhttps://192.168.1.1/securetrack/api/network_objects/search?filter=text&name=Access_Role&identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"count\": 1,
        \"total\": 1,
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169197,
            \"name\": \"Access_Role_aaa\",
            \"display_name\": \"Access_Role_aaa\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14317,
                    \"name\": \"ad_group_aaa\",
                    \"display_name\": \"aaa\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{5D16859C-0256-4673-A402-4254588B8F40}\",
                    \"dn\": \"CN=aaa,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}


Response Messages:
400: The typeOnDevice value is not valid.Use edl_ip_list as value to search EDL groups."},"response":[]},{"name":"Get specific network object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/network_objects/{{ids}}","description":"Fetches a single or partial list of the network objects for a given device ID.
For group network objects, the returned results will also include full details of every group member.
Set show_members=false to return only the name and ID of the members, and omit the full details of the group members.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Network object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]
identity_awareness: Get access role objects as \"identity_awareness\" if identity_awareness parameter is \"supported\". Default type returned is \"identity_role\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69548

Usage Example
https://192.168.1.1/securetrack/api/devices/31/network_objects/69547,69548,69550

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/network_objects/169184?identity_awareness=supported
OUTPUT{
    \"network_objects\": {
        \"network_object\": {
            \"@xsi.type\": \"identityAwarenessDTO\",
            \"id\": 169184,
            \"name\": \"Access_Role_@grp\",
            \"display_name\": \"Access_Role_@grp\",
            \"class_name\": \"access_role\",
            \"type\": \"identity_awareness\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{1870612C-0922-4AEE-81FF-5472DB7C32E1}\",
            \"implicit\": false,
            \"overrides\": false,
            \"type_on_device\": \"\",
            \"networks\": {
                \"network\": {
                    \"@xsi.type\": \"basicNetworkObjectDTO\",
                    \"id\": 168419,
                    \"name\": \"Any\",
                    \"display_name\": \"Any\",
                    \"class_name\": \"any_object\",
                    \"type\": \"basic\",
                    \"global\": false,
                    \"uid\": \"{97AEB369-9AEA-11D5-BD16-0090272CCB30}\",
                    \"implicit\": false,
                    \"overrides\": false
                }
            },
            \"users\": {
                \"user\": {
                    \"id\": 14338,
                    \"name\": \"ad_group_grp\",
                    \"display_name\": \"@grp\",
                    \"class_name\": \"ad_group\",
                    \"global\": false,
                    \"comment\": \"\",
                    \"uid\": \"{C5740C23-F36E-4D2E-8B17-1F99C239C12A}\",
                    \"dn\": \"CN=@grp,OU=SC_Users,DC=test,DC=com\"
                }
            }
        }
    }
}

"},"response":[]}]},{"name":"Network Topology","item":[{"name":"Get generic devices that are configured in ST","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","description":"Returns a list of the generic devices included in all the domains that the user has permission to.
Use context and/or name optional parameters to get more specific results.
To get context optional parameter, you can call /domains/ API and use the id included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
name: Generic device name [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices
"},"response":[]},{"name":"Add generic device to Topology model","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"configuration_file"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/","description":"Upload a configuration file that will be used to add a generic device to the Topology model.
The context field is the domain ID to which the generic device is added: If not provided, the device is added to the global domain.
configuration_file must include a valid generic device configuration.
The specified path must point to a file on the computer being sue to make the REST API call.
If update update_topology = true, then the Topology model will be updated immediately after the device is added.
For maximum efficiency, if you are adding multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.Default value for update_topology = true.
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
body: Generic device to be added
configuration_file: Configuration File for generic device
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X POST -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"my_generic_device\", \"customer_id\": 1}};type=application/json' -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices\n

Response Messages:
201: The generic device was created successfully
403: User is not permitted to access the specified domain
400: Failed to create generic device "},"response":[]},{"name":"Get topology subnets","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets","description":"Returns a list of the topology subnets for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology subnet names that match the search criteria provided, as follows:
1. If you provide only a mask, then an exact match search is done on the mask portion of the name
e.g. if name=/2, the results will include 1.2.3.4/2, but not 1.2.3.4/22
2. If you provide only a partial or complete IP address, then a contains search is done in the IPv4 block portion of the name
e.g. name=32, the results will include 192.168.205.32/24 and 55.192.32.22/16, but will not include 55.168.205.5/32
3. If you provide both an IPv4 address (either partial or complete) and a mask, then an exact match search is done
e.g. if name=23.4/2, then the results will include 192.168.23.4/2, but will not include 192.168.23.4/23 or 23.4.192.168/2

Use the optional ip parameter to restrict the results to topology subnets that contain this ip, see example below.

User can use ip or name parameter, not both.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
name: Subnet name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]
ip: Ip host [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=10.27
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.20/32\",
                \"ip\": \"10.27.122.20\",
                \"mask\": \"255.255.255.255\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 616,
                \"name\": \"10.27.122.60/32\",
                \"ip\": \"10.27.122.60\",
                \"mask\": \"255.255.255.255\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 619,
                \"name\": \"10.27.122.0/30\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 620,
                \"name\": \"10.27.122.4/30\",
                \"ip\": \"10.27.122.4\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?name=144/30
OUTPUT{
    \"topology_subnets\": {
        \"count\": 2,
        \"total\": 2,
        \"subnets\": [
            {
                \"id\": 773,
                \"name\": \"10.13.64.144/30\",
                \"ip\": \"10.13.64.144\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 825,
                \"name\": \"10.15.64.144/30\",
                \"ip\": \"10.15.64.144\",
                \"mask\": \"255.255.255.252\",
                \"domainIdTag\": 1
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets?ip=10.27.122.3
OUTPUT{
    \"topology_subnets\": {
        \"count\": 4,
        \"total\": 4,
        \"subnets\": [
            {
                \"id\": 615,
                \"name\": \"10.27.122.0/24\",
                \"ip\": \"10.27.122.0\",
                \"mask\": \"255.255.255.0\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 616,
                \"name\": \"10.27.0.0/16\",
                \"ip\": \"10.27.0.0\",
                \"mask\": \"255.255.0.0\",
                \"domainIdTag\": 1
            },
            {
                \"id\": 619,
                \"name\": \"10.0.0.0/8\",
                \"ip\": \"10.0.0.0\",
                \"mask\": \"255.0.0.0\",
                \"domainIdTag\": 1
            },
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
403: Using name and ip parameters is not allowed
403: Using Ipv6 in ip parameter is not supported
403: Ip parameter is not valid"},"response":[]},{"name":"Get topology generic VPN connections","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":{"raw":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic_vpns{device_id:(/device_id)?}","protocol":"https","host":["{{SecureTrack_IP}}"],"path":["securetrack","api","topology","generic_vpns{device_id:(","device_id)"],"query":[{"key":"}","value":null}]},"description":"Returns a list of the generic vpn connections in the Topology map, for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology generic vpn connections that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
is_generic: Get generic devices [optional]
device_id: Device id [optional]
name: VPN connection name (accepts '*', '?' as wildcards) [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns
OUTPUT{
    \"generic_vpns\": {
        \"count\": 3,
        \"total\": 3,
        \"generic_vpn\": [
            {
                \"device_id\": 222,
                \"generic\": false,
                \"id\": 3,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.155\",
                \"tunnel_src_ip\": \"84.200.6.1\",
                \"vpn_name\": \"Palo_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/generic_vpns?is_generic=true
OUTPUT{
    \"generic_vpns\": {
        \"count\": 2,
        \"total\": 2,
        \"generic_vpn\": [
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 4,
                \"interface_name\": \"tunnel.1\",
                \"tunnel_dest_ip\": \"54.239.63.156\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
            {
                \"device_id\": 13,
                \"generic\": true,
                \"id\": 5,
                \"interface_name\": \"tunnel.2\",
                \"tunnel_dest_ip\": \"54.239.63.157\",
                \"tunnel_src_ip\": \"84.200.66.1\",
                \"vpn_name\": \"Generic_to_AWS\"
            },
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined"},"response":[]},{"name":"Get Cloud Internal Networks","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_internal_networks/{{id}}","description":"Returns the internal networks for the specified Cloud management id.
This API requires 'Super admin' privileges.

Parameters:
id: Cloud management id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_internal_networks/20
OUTPUT{
    \"network_list\":
    {
        \"count\": 3,
        \"total\": 3,
        \"network\":
        {
            \"ip\": \"10.27.122.20\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.60\",
            \"mask\": \"255.255.255.255\"
        },
        \"network\":
        {
            \"ip\": \"10.27.122.4\",
            \"mask\": \"255.255.255.252\"
        }
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for NSX with id ID
403: Device ID specified is not supported
404: The specified device ID was not found
404: The specified device ID was not found in Topology"},"response":[]},{"name":"Get most specific network interfaces from which a host IP is accessible","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"host"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/interfaces/last_hop","description":"Parameters:
context: Global MSSP context [optional]
host: IP address of device for a query

Usage Example
https://192.168.1.1/securetrack/api/devices/interfaces/last_hop?host=192.168.1.66
"},"response":[]},{"name":"Create generic Vpns","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","description":"Create generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Update generic Vpns","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericVpns\": [\n\t{\n\t\t\"id\": 24,\n\t\t\"generic\": true,\n\t\t\"deviceId\": 3,\n\t\t\"interfaceName\": \"new33\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"3.3.3.33\",\n\t\t\"tunnelDestIpAddr\": \"1.1.1.11\"\n\t},\n\t{\n\t\t\"id\": 25,\n\t\t\"generic\": false,\n\t\t\"deviceId\": 1,\n\t\t\"interfaceName\": \"new111\",\n\t\t\"vpnName\": null,\n\t\t\"tunnelSourceIpAddr\": \"1.1.1.11\",\n\t\t\"tunnelDestIpAddr\": \"3.3.3.33\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/","description":"Update generic Vpns.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn
BODY{
    \"GenericVpns\": [
    {
        \"id\": 24,
        \"generic\": true,
        \"deviceId\": 3,
        \"interfaceName\": \"new33\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"3.3.3.33\",
        \"tunnelDestIpAddr\": \"1.1.1.11\"
    },
    {
        \"id\": 25,
        \"generic\": false,
        \"deviceId\": 1,
        \"interfaceName\": \"new111\",
        \"vpnName\": null,
        \"tunnelSourceIpAddr\": \"1.1.1.11\",
        \"tunnelDestIpAddr\": \"3.3.3.33\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Vpn/Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Get Specific topology subnet","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/subnets/{{id}}","description":"Returns the subnet for the specified id, including information regarding attached devices and join candidates.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the subnet resides.

Parameters:
id: Subnet id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/subnets/20
OUTPUT{
    \"subnet\": {
        \"id\": 18,
        \"name\": \"90.0.0.0/24\",
        \"ip\": \"90.0.0.0\",
        \"mask\": \"255.255.255.0\",
        \"attached_devices\": {
            \"attached_device\": [
                {
                    \"is_generic\": false,
                    \"id\": 10,
                    \"name\": \"srx\",
                    \"interface_id\": 4,
                    \"interface_name\": \"eth0\",
                    \"interface_ip\": \"90.0.0.1\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 13,
                    \"name\": \"ZBFW\",
                    \"interface_id\": 5,
                    \"interface_name\": \"eth1\",
                    \"interface_ip\": \"90.0.0.124\"
                },
                {
                    \"is_generic\": false,
                    \"id\": 85,
                    \"name\": \"netscreen\",
                    \"interface_id\": 6,
                    \"interface_name\": \"eth2\",
                    \"interface_ip\": \"90.0.0.50\"
                }
            ]
        },
        \"join_candidates\": {
            \"join_candidate\": {
                \"is_generic\": false,
                \"id\": 72,
                \"name\": \"CP25\",
                \"interface_id\": 14,
                \"interface_name\": \"eth24/1\",
                \"interface_ip\": \"90.0.0.83\"
            }
        }
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for subnet with id ID
404: No subnet was found for the provided ID"},"response":[]},{"name":"Create generic Routes","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","description":"Create generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"mgmtId\": 1,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"mgmtId\": 2,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Update generic Routes","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericRoutes\": [\n\t{\n\t\t\"id\": 29,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"111.100.10.11\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"YOLO3\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t},\n\t{\n\t\t\"id\": 30,\n\t\t\"mgmtId\": 3,\n\t\t\"destination\": \"222.100.10.22\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"interfaceName\": \"catch22\",\n\t\t\"nextHop\": \"100.100.10.10\",\n\t\t\"nextHopType\": \"IP\",\n\t\t\"vrf\": \"V103-KO\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/","description":"Update generic Routes.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route
BODY{
    \"GenericRoutes\": [
    {
        \"id\": 29,
        \"mgmtId\": 3,
        \"destination\": \"111.100.10.11\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"YOLO3\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    },
    {
        \"id\": 30,
        \"mgmtId\": 3,
        \"destination\": \"222.100.10.22\",
        \"mask\": \"255.255.0.0\",
        \"interfaceName\": \"catch22\",
        \"nextHop\": \"100.100.10.10\",
        \"nextHopType\": \"IP\",
        \"vrf\": \"V103-KO\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Interface/Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get cloud information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 2,\n\t\t\"total\": 2,\n\t\t\"cloud\": [\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW1\",\n\t\t\t\t\"management_id\": 20,\n\t\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\t\"cloud_id\": 120,\n\t\t\t\t\"vertex_id\": 250,\n\t\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\t\"routes_count\": 5,\n\t\t\t\t\"is_parent\": false\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"management_name\": \"FW2\",\n\t\t\t\t\"management_id\": 21,\n\t\t\t\t\"cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t\t\"cloud_id\": 125,\n\t\t\t\t\"vertex_id\": 270,\n\t\t\t\t\"ip\": \"172.16.0.1\",\n\t\t\t\t\"routes_count\": 7,\n\t\t\t\t\"is_parent\": false,\n\t\t\t\t\"parent_vertex_id\": 40\n\t\t\t\t\"parent_cloud_id\": 45\n\t\t\t\t\"parent_cloud_name\": \"Cloud 172.16.0.1\",\n\t\t\t}\n\t\t]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions","description":"Returns information about all clouds in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
context: Global MSSP context [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions
BODY{
    \"suggested_clouds\": {
        \"count\": 2,
        \"total\": 2,
        \"cloud\": [
            {
                \"management_name\": \"FW1\",
                \"management_id\": 20,
                \"cloud_name\": \"Cloud 10.100.0.1\",
                \"cloud_id\": 120,
                \"vertex_id\": 250,
                \"ip\": \"10.100.0.1\",
                \"routes_count\": 5,
                \"is_parent\": false
            },
            {
                \"management_name\": \"FW2\",
                \"management_id\": 21,
                \"cloud_name\": \"Cloud 172.16.0.1\",
                \"cloud_id\": 125,
                \"vertex_id\": 270,
                \"ip\": \"172.16.0.1\",
                \"routes_count\": 7,
                \"is_parent\": false,
                \"parent_vertex_id\": 40
                \"parent_cloud_id\": 45
                \"parent_cloud_name\": \"Cloud 172.16.0.1\",
            }
        ]
    }
}


Response Messages:
202: Accepted
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Update an existing generic device in the Topology model","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","description":"Modify an existing generic device by uploading a new configuration file and/or specifying a new name.
If name field is specified, the generic device will be renamed.
configuration_file is optional, if provided it must include a valid generic device configuration.
The specified path points to a file in the client machine.
If a generic device name is changed and a new configuration file is not provided, topology will not be synchronized (update_topology flag is ignored).
Default value for update_topology = true.
To save time when there are several consecutive api calls: For the last call, set update_topology = true (for all other calls, update_topology = false).
For more information on input file formats, refer to Knowledge Center topic 'Adding and Updating a Generic Device'.

Parameters:
id: Generic device id
body: Generic device to be updated [optional]
configuration_file: Configuration File for generic device [optional]
update_topology: Synchronize And Update Topology [optional]

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F \"configuration_file=@/tmp/config.txt;type=application/octet-stream\" -F \"update_topology=true\" https://192.168.1.1/securetrack/api/generic_devices/24

Usage Example
curl -X PUT -u user:password -H \"Content-Type: multipart/form-data\" --tlsv1 -L -k1 --http1.0 -F 'device_data={\"generic_device\":{\"name\": \"new_generic_device_name\"}};type=application/json' -F \"update_topology=false\" https://192.168.1.1/securetrack/api/generic_devices/72

Response Messages:
204: The generic device was updated successfully.
400: A new name or a new configuration file must be indicated in order to update generic device with id {}
400: Failed to update generic device with id {}
404: A 'Generic Device' with the specified ID was not found"},"response":[]},{"name":"Delete generic device from Topology model","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/generic_devices/{{id}}","description":"Delete a generic device from the Topology model.
The ID must be for a valid generic device listed in the Topology Model.
If update update_topology = true, then the Topology model will be updated immediately after the device is deleted.
For maximum efficiency, if you are deleting multiple generic devices in consecutive API calls, you can set update_topology = false on all API calls except for the last one. On the last call, set update_toplogy = true.
Default value for update_topology = true.

Parameters:
id: Generic device id
update_topology: Synchronize And Update Topology [optional]

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/1

Usage Example
https://192.168.1.1/securetrack/api/generic_devices/10?update_topology=false

Response Messages:
204: Generic Device deleted successfully.
400: Failed to delete generic device with id {}
404: A 'Generic Device' with the specified ID was not found"},"response":[]},{"name":"Get path image for specified traffic","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_image","description":"Returns an image containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80

Usage Example
https://192.168.1.1/securetrack/api/topology/path_image?src=netobj:422:GW_123.120&dst=netobj:483:uni/tn-common/out-CommonL3Out/lnodep-LNP&service=any
"},"response":[]},{"name":"Get generic Route","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","description":"Get a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/30
OUTPUT{
    GenericRoute: {
        id: 30,
        mgmtId: 2,
        destination: \"222.100.10.22\",
        mask: \"255.255.0.0\",
        interfaceName: \"catch22\",
        nextHop: \"100.100.10.10\",
        nextHopType: \"IP\",
        vrf: \"V102-YO\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Route Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Route","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/{{routeId}}","description":"Delete a generic Route by Id.

Parameters:
routeId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Route Not Found.
500: General error occurred."},"response":[]},{"name":"Create generic Interfaces","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"Bob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-PA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t},\n\t{\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"Bob2\",\n\t\t\"ip\": \"100.100.45.66\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-BA\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","description":"Create generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"mgmtId\": 1,
        \"name\": \"Bob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-PA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    },
    {
        \"mgmtId\": 2,
        \"name\": \"Bob2\",
        \"ip\": \"100.100.45.66\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-BA\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Update generic Interfaces","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"GenericInterfaces\": [\n\t{\n\t\t\"id\": 204,\n\t\t\"mgmtId\": 1,\n\t\t\"name\": \"NewBob1\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.0.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": null\n\t},\n\t{\n\t\t\"id\": 205,\n\t\t\"mgmtId\": 2,\n\t\t\"name\": \"NewBob2\",\n\t\t\"ip\": \"100.100.45.55\",\n\t\t\"mask\": \"255.255.255.0\",\n\t\t\"vrf\": \"V101-LV\",\n\t\t\"mpls\": false,\n\t\t\"unnumbered\": false,\n\t\t\"type\": \"external\"\n\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface","description":"Update generic Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface
BODY{
    \"GenericInterfaces\": [
    {
        \"id\": 204,
        \"mgmtId\": 1,
        \"name\": \"NewBob1\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.0.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": null
    },
    {
        \"id\": 205,
        \"mgmtId\": 2,
        \"name\": \"NewBob2\",
        \"ip\": \"100.100.45.55\",
        \"mask\": \"255.255.255.0\",
        \"vrf\": \"V101-LV\",
        \"mpls\": false,
        \"unnumbered\": false,
        \"type\": \"external\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Interface/Management Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Interfaces","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","description":"Delete all generic Interfaces from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/mgmt/2\n

Response Messages:
200: 11 Generic Interfaces were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/mgmt/{{mgmtId}}","description":"Get generic Interfaces of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/mgmt/1
OUTPUT{
    GenericInterfaces: [
    {
        id: 206,
        mgmtId: 1,
        name: \"newApo3\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    },
    {
        id: 208,
        mgmtId: 1,
        name: \"newApo4\",
        ip: \"100.103.33.34\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PA\",
        mpls: false,
        unnumbered: false,
        type: \"internal\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Interface","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","description":"Get a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interface/212
OUTPUT{
    GenericInterface: {
        id: 212,
        mgmtId: 1,
        name: \"newApo5\",
        ip: \"100.103.33.33\",
        mask: \"255.255.255.0\",
        vrf: \"V101-PAL\",
        mpls: false,
        unnumbered: false,
        type: \"external\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Interface Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Interface","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interface/{{inId}}","description":"Delete a generic Interface by Id.

Parameters:
inId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interface/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Interface Not Found.
500: General error occurred."},"response":[]},{"name":"Update a cloud","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"new cloud\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","description":"Modify the name of a topology cloud, and add/remove members of a joined cloud.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain context of the joined cloud, and any members specified in the body.
To change the name of a topology cloud, enter a value in the name field of the body.
To add/remove members of a joined cloud, specify the action and specify the clouds in the members list of the body.
The action is used only if the body contains a members list. If a members list is provided but no actions is specified, then the default action is ‘add’.
When adding cloud members, clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
When removing cloud members, if only zero or one member remains in the joined cloud, it will be deleted from the Interactive Map.

Parameters:
id: cloud id
action: action [optional]
body: Cloud data
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLfor renaming of any cloud - https://192.168.1.1/securetrack/api/topology/clouds/436
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\"
    }
}


Usage Example
URLfor renaming and members updating of a joined cloud - https://192.168.1.1/securetrack/api/topology/clouds/436?action=remove
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"new cloud\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
204: Cloud updated successfully
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: Cloud with id ID is a not joined cloud
412: Cloud id: cloudId does not belong to domain: Context
412: Provided clouds don't belongs to the same domain
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud
412: Member cloud with id ID cannot be removed - it is not a member of a joined cloud"},"response":[]},{"name":"Get Specific topology cloud","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds/{{id}}","description":"Returns the topology cloud data for the specified id.
This API requires 'Super admin' or 'Multi-Domain admin' privileges.
Multi-Domain user must have access permission to the domain where the cloud resides.

Parameters:
id: Cloud id

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/48
OUTPUT{
    \"topology_cloud\": {
        \"id\": 48,
        \"name\": \"Cloud 69.70.120.155\",
        \"domain\": 1,
        \"type\": \"NON_JOINED\",
        \"ip\": \"69.70.120.155\"
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds/66
OUTPUT{
    \"topology_cloud\": {
        \"id\": 66,
        \"name\": \"Cloud 10.100.10.14\",
        \"domain\": 1,
        \"type\": \"JOINED\",
        \"members\": [
            {
                \"id\": 50,
                \"ip\": \"10.100.6.238\",
                \"name\": \"Cloud 10.100.6.238\"
            },
            {
                \"id\": 73,
                \"ip\": \"10.100.10.14\",
                \"name\": \"Cloud 10.100.10.14\"
            },
            {
                \"id\": 74,
                \"ip\": \"10.100.9.9\",
                \"name\": \"Cloud 10.100.9.9\"
            }
        ]
    }
}


Response Messages:
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: No cloud was found for the provided ID"},"response":[]},{"name":"Get generic Routes","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","description":"Get generic Routes of management Id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/route/mgmt/2
OUTPUT{
    GenericRoutes: [
    {
        id: 27,
        mgmtId: 2,
        destination: \"10.4.4.4\",
        mask: \"255.0.0.0\",
        interfaceName: \"\",
        nextHop: \"AA\",
        nextHopType: \"VR\",
        vrf: \"V102-YO\"
    },
    {
        id: 28,
        mgmtId: 2,
        destination: \"10.4.5.5\",
        mask: \"255.0.0.0\",
        interfaceName: \"eeee\",
        nextHop: \"\",
        nextHopType: \"IP\",
        vrf: \"V101-PA\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Routes","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/route/mgmt/{{mgmtId}}","description":"Delete all generic Routes from management Id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/route/mgmt/2\n

Response Messages:
200: 11 Generic Routes were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management Not Found.
500: General error occurred."},"response":[]},{"name":"Get path domains for specified traffic","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path_domains","description":"Returns one or more domain entries for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path_domains?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path_domains?src=10.0.2.1&dst=10.0.1.1&service=Facebook,tcp:80
OUTPUT {
    \"path_domain_entries\": {
        \"path_domain_entry\": [
                {
                        \"domainId\": \"1\",
                        \"vertex\": \"Subnet 10.0.2.0/24\",
                        \"entryType\": \"STARTING_POINT\",
                }
                {
                        \"domainId\": \"1\",
                        \"vertex\": \"Subnet 10.0.1.0/24\",
                        \"entryType\": \"ENDING_POINT\",
                }
    ]
}

"},"response":[]},{"name":"Update manual Interface CustomerTags","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"id\": 73,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port5\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"id\": 74,\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","description":"Update manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"id\": 73,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port5\",
            \"customerId\": 2
        },
        {
            \"id\": 74,
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
403: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred."},"response":[]},{"name":"Create manual Interface CustomerTags","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"InterfaceCustomerTags\": \n\t[\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 5,\n\t\t\t\"interfaceName\": \"port4\",\n\t\t\t\"customerId\": 2\n\t\t},\n\t\t{\n\t\t\t\"generic\": false,\n\t\t\t\"deviceId\": 6,\n\t\t\t\"interfaceName\": \"port3\",\n\t\t\t\"customerId\": 3\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/","description":"Create manual Interface CustomerTags.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer
BODY{
    \"InterfaceCustomerTags\":
    [
        {
            \"generic\": false,
            \"deviceId\": 5,
            \"interfaceName\": \"port4\",
            \"customerId\": 2
        },
        {
            \"generic\": false,
            \"deviceId\": 6,
            \"interfaceName\": \"port3\",
            \"customerId\": 3
        }
    ]
}


Response Messages:
200: OK.
400: Interface CustomerTag already exist for deviceId-InterfaceName/Interface not found on deviceId
403: Access is denied.
404: Management/GenericDevice Not Found./Customer Id not found.
500: General error occurred."},"response":[]},{"name":"Delete Transparent Firewall","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/{{layer2DataId}}","description":"Delete Transparent Firewall by Id.

Parameters:
layer2DataId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/17\n

Response Messages:
200: layer2DataId 17 deleted.
400: Bad Request.
403: Access is denied.
404: Layer2Data Id 17 not found.
500: General error occurred."},"response":[]},{"name":"Delete Ignored Interfaces.","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","description":"Delete Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10\n

Response Messages:
200: 2 entries deleted where mgmtId = 10
400: Bad Request.
403: Access is denied.
404: Management Id 10 not found.
500: General error occurred."},"response":[]},{"name":"Get Ignored Interfaces.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface/mgmt/{{mgmtId}}","description":"Get Ignored Interfaces by management id.

Parameters:
mgmtId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface/mgmt/10
OUTPUT{
    IgnoredInterfaces: [
        {
            interfaceName: \"eth2\",
            mgmtId: 10,
            ip: \"0.0.0.0\"
        },
        {
            interfaceName: \"loopback100\",
            mgmtId: 10,
            ip: \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
500: General error occurred."},"response":[]},{"name":"Delete manual Interface CustomerTags","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","description":"Delete all manual Interface CustomerTags from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/6?generic=false\n

Response Messages:
200: 2 Interface Customers were deleted from deviceId 6.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Get manual Interface CustomerTags","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/device/{{deviceId}}","description":"Get manual Interface CustomerTags of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/device/5?generic=false
OUTPUT{
    InterfaceCustomerTags: [
        {
            id: 73,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4\",
            customerId: 2
        },
        {
            id: 74,
            generic: false,
            deviceId: 5,
            interfaceName: \"port4.1\",
            customerId: 3
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Create Transparent Firewalls","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback0\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","description":"Create Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback0\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Device Id 23 not found.
500: General error occurred."},"response":[]},{"name":"Update Transparent Firewalls","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"TransparentFirewalls\": \n\t[\n\t {\n\t\t\t\"id\" : 25,\n\t\t\t\"outputL3DeviceId\" : 22,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet0/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 21,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 20,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"Loopback2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t},\n\t\t{\n\t\t\t\"id\" : 27,\n\t\t\t\"outputL3DeviceId\" : 23,\n\t\t\t\"outputL3IsGenericDevice\" : false,\n\t\t\t\"outputL3InterfaceName\" : \"FastEthernet2/0\",\n\t\t\t\"outputL3InterfaceIp\" : \"\",\n\t\t\t\"layer2DeviceId\" : 9,\n\t\t\t\"inputL2InterfaceName\" : \"inside\",\n\t\t\t\"outputL2InterfaceName\" : \"outside\",\n\t\t\t\"inputL3DeviceId\" : 17,\n\t\t\t\"inputL3IsGenericDevice\" : false,\n\t\t\t\"inputL3InterfaceName\" : \"mgmt2\",\n\t\t\t\"inputL3InterfaceIp\" : \"\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw","description":"Update Transparent Firewalls.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw
BODY{
    \"TransparentFirewalls\":
    [
     {
            \"id\" : 25,
            \"outputL3DeviceId\" : 22,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet0/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 21,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 20,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"Loopback2\",
            \"inputL3InterfaceIp\" : \"\"
        },
        {
            \"id\" : 27,
            \"outputL3DeviceId\" : 23,
            \"outputL3IsGenericDevice\" : false,
            \"outputL3InterfaceName\" : \"FastEthernet2/0\",
            \"outputL3InterfaceIp\" : \"\",
            \"layer2DeviceId\" : 9,
            \"inputL2InterfaceName\" : \"inside\",
            \"outputL2InterfaceName\" : \"outside\",
            \"inputL3DeviceId\" : 17,
            \"inputL3IsGenericDevice\" : false,
            \"inputL3InterfaceName\" : \"mgmt2\",
            \"inputL3InterfaceIp\" : \"\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Device Id 23 not found.
500: General error occurred."},"response":[]},{"name":"Create Ignored Interfaces.","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"IgnoredInterfaces\": \n\t[\n\t\t{\n\t\t\t\"interfaceName\" : \"eth2\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"0.0.0.0\"\n\t\t},\n\t\t{\n\t\t\t\"interfaceName\" : \"loopback100\",\n\t\t\t\"mgmtId\" : 10,\n\t\t\t\"ip\" : \"34.34.34.34\"\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/ignoredinterface","description":"Create Ignored Interfaces.

Parameters:
body [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/ignoredinterface
BODY{
    \"IgnoredInterfaces\":
    [
        {
            \"interfaceName\" : \"eth2\",
            \"mgmtId\" : 10,
            \"ip\" : \"0.0.0.0\"
        },
        {
            \"interfaceName\" : \"loopback100\",
            \"mgmtId\" : 10,
            \"ip\" : \"34.34.34.34\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management Id 10 not found.
500: General error occurred."},"response":[]},{"name":"Delete manual Interface CustomerTag","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","description":"Delete a manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/interfacecustomer/66\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: InterfaceCustomer Id 66 not found
500: General error occurred."},"response":[]},{"name":"Get manual Interface CustomerTag","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/interfacecustomer/{{interfaceCustomerId}}","description":"Get manual Interface CustomerTag by Id.

Parameters:
interfaceCustomerId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/interfacecustomer/74
OUTPUT{
    InterfaceCustomerTag: {
        id: 74,
        generic: false,
        deviceId: 5,
        interfaceName: \"port4.1\",
        customerId: 3
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: InterfaceCustomer Id 74 not found.
500: General error occurred."},"response":[]},{"name":"Get topology routing tables for a given device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"mgmtId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_routes","description":"The returned routing tables are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_routes?mgmtId=1&is_generic=true
"},"response":[]},{"name":"Get topology network interfaces by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"mgmtId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/topology_interfaces","description":"The returned interfaces are taken from the topology data and will include only devices that are topology enabled.
When adding a device, the user can can choose whether to use dynamic or static topology for the device,
this choice will determine which kind of data is stored in the topology graph and returned by this API.

The parameter mgmtId should be a cluster or a gateway, not a management server.
You may provide a generic device Id (see generic_devices API under 'Monitored Devices' category) -
in this case make sure you set 'is_generic' parameter to 'true'

Parameters:
context: Global MSSP context [optional]
mgmtId: Management Id or Generic Device Id to query
is_generic: Should be set to 'true' if the provided mgmtId is related to generic device [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=10

Usage Example
https://192.168.1.1/securetrack/api/devices/topology_interfaces?mgmtId=1&is_generic=true
"},"response":[]},{"name":"Get path for specified traffic","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/path","description":"Returns one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
includeIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be included, even if the node cannot reach the destination, or if the source and destination are the same.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
includeIncompletePaths: Include incomplete paths [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/path?src=29.29.29.1&dst=25.25.25.1&service=Facebook,tcp:80
OUTPUT {
    \"path_calc_results\": {
        \"traffic_allowed\": false,
        \"device_info\": {
            \"id\": \"17\",
            \"name\": \"PA-VM-111.6 (Cluster)\",
            \"type\": \"mgmt\",
            \"vendor\": \"Palo Alto Networks\",
            \"incomingInterfaces\": {
                \"incomingVrf\": \"default\",
                \"ip\": \"29.29.29.1/255.255.255.252\",
                \"name\": \"tunnel.11\"
            },
            \"nextDevices\": {
                \"name\": \"DIRECTLY_CONNECTED\",
                \"routes\": {
                    \"outgoingInterfaceName\": \"ethernet1/5\",
                    \"outgoingVrf\": \"default\",
                    \"routeDestination\": \"25.25.25.1/255.255.255.0\"
                }
            },
            \"bindings\": {
                \"name\": \"\",
                \"rules\": [
                    {
                        \"action\": \"Accept\",
                        \"applications\": \"facebook\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 43,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    },
                    {
                        \"action\": \"Deny\",
                        \"applications\": \"Any\",
                        \"destNegated\": false,
                        \"destinations\": \"Any\",
                        \"ruleIdentifier\": 62,
                        \"serviceNegated\": false,
                        \"services\": \"Any\",
                        \"sourceNegated\": false,
                        \"sources\": \"Any\",
                        \"users\": \"Any\"
                    }
                ]
            }
        }
    }
}


Usage Example
https://192.168.1.1/securetrack/api/topology/path?src=netobj:422:GW_123.120&dst=netobj:483:uni/tn-common/out-CommonL3Out/lnodep-LNP&service=any
"},"response":[]},{"name":"Get Join Cloud","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","description":"Get Join Cloud by Id.

Parameters:
cloudId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds/67
OUTPUT{
    id: 67,
    name: \"Yami\",
    clouds: [
        1,
        2,
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Delete Join Cloud","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/{{cloudId}}","description":"Delete Join Cloud by Id.

Parameters:
cloudId [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
https://{st_host}/securetrack/api/topology/join/clouds/67\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Get cloud information","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"suggested_clouds\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"cloud\": {\n\t\t\t\"management_name\": \"FW1\",\n\t\t\t\"management_id\": 20,\n\t\t\t\"cloud_name\": \"Cloud 10.100.0.1\",\n\t\t\t\"cloud_id\": 120,\n\t\t\t\"vertex_id\": 250,\n\t\t\t\"ip\": \"10.100.0.1\",\n\t\t\t\"routes_count\": 5,\n\t\t\t\"is_parent\": false\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/cloud_suggestions/{{cloud_id}}","description":"Returns information about a specific cloud in the topology.
This API includes the ID of the cloud, the number of routes that point to the cloud, and the relevant devices (including the management_id) that have routes that point to the cloud.
This information can be used to identify missing devices that may need to be added to the topology or to identify clouds that are candidates for being joined.

Parameters:
cloud_id: cloud id
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/cloud_suggestions/120
BODY{
    \"suggested_clouds\": {
        \"count\": 1,
        \"total\": 1,
        \"cloud\": {
            \"management_name\": \"FW1\",
            \"management_id\": 20,
            \"cloud_name\": \"Cloud 10.100.0.1\",
            \"cloud_id\": 120,
            \"vertex_id\": 250,
            \"ip\": \"10.100.0.1\",
            \"routes_count\": 5,
            \"is_parent\": false
        }
    }
}


Response Messages:
202: Accepted
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Get path pdf report for specified traffic","request":{"method":"GET","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"src"},{"value":null,"type":"text","key":"dst"},{"value":null,"type":"text","key":"service"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/export_path_results.pdf","description":"Returns an pdf report containing one or more paths for the specified traffic.
src and dst parameters may contain multiple, comma separated values.
Service parameter can be a port (for example, “tcp:80”, “any”) or an application (for example, “Skype”, “Facebook”).
Application names are case sensitive.
Service parameter can also be a combination of ports and applications, for example “tcp:80, Skype, Facebook”
If sourceDomainIdTag is provided, the path starting points will be restricted to the specified domain ID. sourceDomainIdTag is valid only if overlapping IP mode is enabled.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is valid only if MSSP mode is enabled.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.
displayIncompletePaths parameter default value is false, if this parameter is set to true -
all nodes on the path will be displayed, even if the node cannot reach the destination, or if the source and destination are the same.
displayBlockedStatus parameter default value is false, if this parameter is set to true -
blocked traffic icons will be displayed next to devices blocking the traffic.
simulateNat parameter default value is true if this parameter is set to false - NAT simulation will not be used when calculating the path.
lastInstall parameter default value is true, which means simulation would use last installed policies. If this parameter is set to false - simulation would use last saved policies.
pathIds parameter default value is empty, which means that all paths would be exported to the report.
This API cannot be executed more than 10 times in parallel.

Parameters:
context: Global MSSP context [optional]
src: Source address/addresses
dst: Destination address/addresses
service: Service/services
sourceDomainIdTag: Path starting point Domain Id [optional]
displayIncompletePaths: Display incomplete paths [optional]
displayBlockedStatus: Display blocked traffic status icons [optional]
simulateNat: Simulate NAT [optional]
lastInstall: Last Installed [optional]
pathIds: Path Ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/export_path_results.pdf?src=10.10.10.1&dst=3.3.3.3:32&service=any

Usage Example
https://192.168.1.1/securetrack/api/topology/export_path_results.pdf?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80&pathIds=1,3

Usage Example
https://192.168.1.1/securetrack/api/topology/export_path_results.pdf?src=10.10.10.1&dst=3.3.3.3:32&service=Facebook,tcp:80&pathIds=3

Usage Example
https://192.168.1.1/securetrack/api/topology/export_path_results.pdf?src=netobj:422:GW_123.120&dst=netobj:483:uni/tn-common/out-CommonL3Out/lnodep-LNP&service=any
"},"response":[]},{"name":"Delete Transparent Firewalls.","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","description":"Delete Transparent Firewalls for participated layer 2 deviceId

Parameters:
deviceId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/transparentfw/device/9\n

Response Messages:
200: 4 entries deleted where layer2 deviceId = 9
400: Bad Request.
403: Access is denied.
404: DeviceId 9 not found.
500: General error occurred."},"response":[]},{"name":"Get Transparent Firewalls","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/transparentfw/device/{{deviceId}}","description":"Get Transparent Firewalls for participated managed/generic DeviceId

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/transparentfw/device/9?generic=false
OUTPUT{
    TransparentFirewalls: [
        {
            id: 17,
            outputL3DeviceId: 22,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet0/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 1,
            inputL3IsGenericDevice: true,
            inputL3InterfaceName: \"interface2\"
        },
        {
            id: 23,
            outputL3DeviceId: 23,
            outputL3IsGenericDevice: false,
            outputL3InterfaceName: \"FastEthernet2/0\",
            layer2DeviceId: 9,
            inputL2InterfaceName: \"inside\",
            outputL2InterfaceName: \"outside\",
            inputL3DeviceId: 17,
            inputL3IsGenericDevice: false,
            inputL3InterfaceName: \"mgmt\"
        }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Create a joined topology cloud","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"cloud_data\":{\n\t\t\"cloud_name\" : \"optional new cloud name\",\n\t\t\"cloud_members\" : [118,179,258]\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","description":"Create a new topology cloud in the Interactive Map by joining existing clouds together.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
The body must include at least two topology cloud ids that are on a single domain.
If the context parameter is not provided, then the API will use the context id of the first member of the members list in the body.
Clouds included in the members list of the body must not be joined clouds or members of another joined cloud.
If the provided body does not specify a joined cloud name, the newly created topology cloud will be given the name of the first member of the members list in the body.


Parameters:
context: Global MSSP context [optional]
body: Cloud data
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
BODY{
    \"cloud_data\":{
        \"cloud_name\" : \"optional new cloud name\",
        \"cloud_members\" : [118,179,258]
    }
}


Response Messages:
201: Joined cloud created successfully
403: Access is denied
403: You do not have access permission to the domain for cloud with id ID
404: Cloud with id ID was not found in the provided MSSP domain
412: You must provide 2 or more clouds
412: Cloud id: cloudId does not belong to domain: Context
412: Cloud with id ID is a joined cloud
412: Cloud with id ID is a member of a joined cloud"},"response":[]},{"name":"Get topology clouds","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/clouds","description":"Returns a list of the topology clouds for all the domains for which the user has permission to access.
This API requires either 'Super admin' or 'Multi-Domain admin' privileges.
For users with ‘Super admin’ permission, the context parameter is optional. If a context is not specified, the Global context will be used.
For users with ‘Multi-Domain’ privilege, the context parameter is required.
To get the context parameter, call the /domains/ API and use the id included in the returned domain DTO.
Use the optional name parameter to restrict the results to topology clouds that contain the specified string.
The default pagination is start=0 and count=50.

Parameters:
context: Global MSSP context [optional]
type: Required clouds type [optional]
name: Cloud name [optional]
start: The starting element to include in the returned results [optional]
count: Number of elements to include in the results [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds
OUTPUT{
    \"topology_clouds\": {
        \"count\": 3,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"MEMBER\",
                \"ip\": \"10.100.6.238\"
            },
            {
                \"id\": 66,
                \"name\": \"Cloud 10.100.10.14\",
                \"domain\": 1,
                \"type\": \"JOINED\",
                \"members\": [
                    {
                        \"id\": 50,
                        \"ip\": \"10.100.6.238\",
                        \"name\": \"Cloud 10.100.6.238\"
                    },
                    {
                        \"id\": 73,
                        \"ip\": \"10.100.10.14\",
                        \"name\": \"Cloud 10.100.10.14\"
                    },
                    {
                        \"id\": 74,
                        \"ip\": \"10.100.9.9\",
                        \"name\": \"Cloud 10.100.9.9\"
                    }
                ]
            }
        ]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/topology/clouds?type=non-joined
OUTPUT{
    \"topology_clouds\": {
        \"count\": 2,
        \"total\": 3,
        \"topology_cloud\": [
            {
                \"id\": 48,
                \"name\": \"Cloud 69.70.120.155\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"69.70.120.155\"
            },
            {
                \"id\": 50,
                \"name\": \"Cloud 10.100.6.238\",
                \"domain\": 1,
                \"type\": \"NON_JOINED\",
                \"ip\": \"10.100.6.238\"
            }
        ]
    }
}


Response Messages:
403: Access is denied
403: Only users with ‘Super admin’ permissions can access Global domain map
403: You do not have access permission to domain id: domainId
400: Wrong type provided - allowable values are: joined or non-joined"},"response":[]},{"name":"Synchronize the Topology model","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize","description":"Invoke of the Topology Model Synchronization.
full_sync=false - Builds the topology model from the information stored in the Tufin database.
full_sync=true - Retrieves the current data from devices and builds the topology model.
Default value for full_sync = false.

Parameters:
full_sync: Perform full sync [optional]

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize

Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize?full_sync=true

Response Messages:
200: The topology synchronization was invoked successfully.
403: Access is denied
500: Error Synchronizing Topology Model
503: Service unavailable, Graph builder is currently running"},"response":[]},{"name":"Get Topology Synchronization status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/synchronize/status","description":"Returns the progress status of the Topology Model Synchronization.



Usage Example
https://192.168.1.1/securetrack/api/topology/synchronize/status

Response Messages:
200: The topology synchronization was invoked successfully.
403: Access is denied
500: Error getting synchronize progress"},"response":[]},{"name":"Create Join Cloud","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"name\" : \"Yami\",\n\t\t\"clouds\" : [1, 2]\n\t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","description":"Create Join Cloud.

Parameters:
body [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"name\" : \"Yami\",
        \"clouds\" : [1, 2]
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Update Join Cloud","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{ \n\t\"JoinCloud\" : \n\t{\n\t\t\"id\" : 67,\n\t\t\"name\" : \"Yamile\",\n\t\t\"clouds\" : [1, 2, 57]\n\t}\n} "},"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/join/clouds/","description":"Update Join Clouds.

Parameters:
body [optional]
forceTopologyInit: Force Topology Init [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/join/clouds
BODY{
    \"JoinCloud\" :
    {
        \"id\" : 67,
        \"name\" : \"Yamile\",
        \"clouds\" : [1, 2, 57]
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Cloud Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Vpn","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","description":"Get a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/18
OUTPUT{
    GenericVpn: {
        id: 18,
        generic: false,
        deviceId: 2,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.77\",
        tunnelDestIpAddr: \"1.1.1.88\"
    }
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Vpn","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/{{vpnId}}","description":"Delete a generic Vpn by Id.

Parameters:
vpnId [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/5\n

Response Messages:
204: No Content.
400: Bad Request.
403: Access is denied.
404: Generic Vpn Not Found.
500: General error occurred."},"response":[]},{"name":"Delete generic Vpns","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","description":"Delete all generic Vpns from management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
https://{st_host}/securetrack/api/topology/generic/vpn/device/2?generic=false\n

Response Messages:
200: 4 Generic Vpns were deleted from mgmtId 2.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]},{"name":"Get generic Vpns","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/topology/generic/vpn/device/{{deviceId}}","description":"Get generic Vpns of management/genericDevice Id.

Parameters:
deviceId [optional]
generic [optional]

Usage Example
URLhttps://{st_host}/securetrack/api/topology/generic/vpn/device/3?generic=true
OUTPUT{
    GenericVpns: [
    {
        id: 17,
        generic: true,
        deviceId: 3,
        interfaceName: \"777\",
        tunnelSourceIpAddr: \"1.1.1.177\",
        tunnelDestIpAddr: \"1.1.1.188\"
    },
    {
        id: 22,
        generic: true,
        deviceId: 3,
        interfaceName: \"111\",
        tunnelSourceIpAddr: \"1.1.1.188\",
        tunnelDestIpAddr: \"1.1.1.177\"
    }
    ]
}


Response Messages:
200: OK.
400: Bad Request.
403: Access is denied.
404: Management/GenericDevice Not Found.
500: General error occurred."},"response":[]}]},{"name":"Network Zone Manager - Patterns","item":[{"name":"Create a zone pattern entry in a specific zone","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t\n\t\t1\n\t\t2\n\t\t\n\t\t\t1\n\t\t\tDefault\n\t\t\n\t\tWEB\n\t\tsecurity_group_by_name\n\t\tThis is a comment\n\t\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries","description":"Create a zone pattern entry in a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone pattern entry.
body: The zone pattern entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<create_pattern_match_entry>
    <pattern_match_entry>
        <id>1</id>
        <zone_id>2</zone_id>
        <domain>
            <id>1</id>
            <name>Default</name>
        </domain>
        <pattern>WEB</pattern>
        <type>security_group_by_name</type>
        <comment>This is a comment</comment>
    </pattern_match_entry>
</create_pattern_match_entry>


Response Messages:
201: The zone pattern entry was created successfully.
403: User is not permitted to access the specified domain
400: Some of pattern entry parameters were invalid or missing
404: A zone with the specified identifier was not found."},"response":[]},{"name":"Get all pattern entries for specific zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t\n\t\t0\n\t\t2\n\t\t2\n\t\n\t\n\t\t\n\t\t\t2\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEB\n\t\t\t1\n\t\t\n\t\t\n\t\t\t3\n\t\t\tsecurity_group_by_name\n\t\t\tThis is a comment\n\t\t\tWEo\n\t\t\t2\n\t\t\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/pattern-entries","description":"Get the list of zone pattern entries for specific zones by identifiers

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the pattern entry results. [optional]
pattern: Filter by pattern string for the zone entry results. [optional]
name: Filter by zone name for the pattern entry results. [optional]
comment: Filter by comment for the pattern entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/1,2/pattern-entries
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entries_find_result>
    <paging_info>
        <start>0</start>
        <count>2</count>
        <total>2</total>
    </paging_info>
    <pattern_match_entries>
        <pattern_match_entry>
            <id>2</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEB</pattern>
            <zone_id>1</zone_id>
        </pattern_match_entry>
        <pattern_match_entry>
            <id>3</id>
            <type>security_group_by_name</type>
            <comment>This is a comment</comment>
            <pattern>WEo</pattern>
            <zone_id>2</zone_id>
        </pattern_match_entry>
    </pattern_match_entries>
</pattern_match_entries_find_result>


Response Messages:
200: The zone pattern entries were successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get a specific zone pattern entry for a specific zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t2\tsecurity_group_by_name\n\tThis is a comment\n\tWEB\n\t75\n\tZone_10_0_0_1\n\t\n\t\t
koko
\n\t\tbobo\n\t\t1\n\t\tDefault\n\t
\n
\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/pattern-entries/{{id}}","description":"Get a specific zone pattern entry for a specific zone by identifier

Parameters:
context: Global MSSP context. [optional]
zone_id: Identifier of the zone containing the zone entry.
id: Identifier of the zone pattern entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/75/pattern-entries/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<pattern_match_entry>
    <id>2</id>    <type>security_group_by_name</type>
    <comment>This is a comment</comment>
    <pattern>WEB</pattern>
    <zone_id>75</zone_id>
    <zone_name>Zone_10_0_0_1</zone_name>
    <domain>
        <address>koko</address>
        <description>bobo</description>
        <id>1</id>
        <name>Default</name>
    </domain>
</pattern_match_entry>


Response Messages:
200: The zone pattern entry was successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified identifier was not found.
404: A zone pattern entry with the specified identifier was not found."},"response":[]}]},{"name":"Network Zone Manager - Subnets","item":[{"name":"Get entries for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/entries","description":"Get the list of zone entries for a zone.

Parameters:
context: Global MSSP context. [optional]
ids: Filter by IDs for the zone entry results. [optional]
name: Filter by name for the zone entry results. [optional]
ip: Filter by IP for the zone entry results. [optional]
netmask: Filter by netmask for the zone entry results. [optional]
prefix: Filter by prefix for the zone entry results. [optional]
comment: Filter by comment for the zone entry results. [optional]
group: Filter by device group for the zone entry results. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]
children: Include child zones in the results. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries

Response Messages:
200: The zone entries were successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get a specific zone entry","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_id"},{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"Get a specific zone entry by ID for a zone.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/123

Response Messages:
200: The zone entry was successfully retrieved.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Delete zone entries","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_id"},{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"Delete existing zone entries.

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2/entries/10

Response Messages:
200: The zone entry was deleted successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Create a zone entry","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
body: The zone entry to create.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
201: The zone entry was created successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found."},"response":[]},{"name":"Modify multiple existing zone entries","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entries\" : {\n\t\t\"zone_entry\": [\n\t\t\t{\n\t\t\t\t\"id\": 120,\n\t\t\t\t\"ip\": \"3.3.3.3\",\n\t\t\t\t\"prefix\": 32,\n\t\t\t\t\"new_zone_id\": 85\n\t\t\t},\n\t\t\t{\n\t\t\t\t\"id\": 139,\n\t\t\t\t\"ip\": \"1b98:c72:1f00:0001::\",\n\t\t\t\t\"prefix\": \"52\",\n\t\t\t\t\"new_zone_id\": 98\n\t\t\t}\n\t\t]\n}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","description":"For IPv4 entry provide IP and netmask/prefix.
For IPv6 provide IP and prefix only, netmask is not allowed.
new_zone_id is not optional, it may be the same as the present zoneId.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entries.
ids: The ID(s) of the zone entries to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/85,98/entries/120,139
BODY{
\"zone_entries\" : {
        \"zone_entry\": [
            {
                \"id\": 120,
                \"ip\": \"3.3.3.3\",
                \"prefix\": 32,
                \"new_zone_id\": 85
            },
            {
                \"id\": 139,
                \"ip\": \"1b98:c72:1f00:0001::\",
                \"prefix\": \"52\",
                \"new_zone_id\": 98
            }
        ]
}
}


Response Messages:
200: The zone entry was modified successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Modify a zone entry","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"zone_ids"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_ids}}/entries/{{ids}}","description":"Modify an existing zone entry.

Parameters:
context: Global MSSP context. [optional]
zone_ids: The ID(s) of the zones containing the zone entry.
ids: The ID(s) of the zone entries to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/entries/10,20

Response Messages:
200: The zone entry was deleted successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]},{"name":"Modify a zone entry","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\"zone_entry\": {\n\t\"ip\": \"1b98:c72:1f00:0000::\",\n\t\"prefix\": \"52\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{zone_id}}/entries/{{id}}","description":"For IPv4 entry provide IP and netmask/prefix (see Usage Example #1 and #2).
For IPv6 provide IP and prefix only, netmask is not allowed(see Usage Example #3).

Parameters:
context: Global MSSP context. [optional]
zone_id: The ID of the zone containing the zone entry.
id: The ID of the zone entry.
body: The modified zone entry.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"netmask\": \"255.255.255.0\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"192.168.2.3\",
    \"prefix\": \"24\",
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2/entries/1
BODY{
\"zone_entry\": {
    \"ip\": \"1b98:c72:1f00:0000::\",
    \"prefix\": \"52\"
    }
}


Response Messages:
200: The zone entry was modified successfully.
403: User is not permitted to access the specified domain
400: The zone entry parameters were invalid
404: A zone with the specified ID was not found.
404: A zone entry with the specified ID was not found."},"response":[]}]},{"name":"Network Zone Manager - Zones","item":[{"name":"Get all zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Gets a list of all zones.

Parameters:
context: Global MSSP context. [optional]
name: Filter by zone name for the zone results. [optional]
comment: Filter by zone comment for the zone results. [optional]
imported: List domains that imported zones. [optional]
includeInternet: Include the Internet zone. [optional]
includeImported: Include imported zones. [optional]
sort: Sort ascending or descending. [optional]
start: Starting page number for query results. [optional]
count: Number of pages to return for the query, starting from the specified starting page. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
200: The zones were retrieved successfully.
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Create a zone","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\tDMZ\n\tAll DMZ addresses\n\tfalse\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Create a zone.

Parameters:
context: Global MSSP context. [optional]
body: The zone to add.

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <name>DMZ</name>
    <comment>All DMZ addresses</comment>
    <shared>false</shared>
</zone>


Response Messages:
201: The zone was created successfully.
403: User is not permitted to access the specified domain
400: The zone parameters were invalid"},"response":[]},{"name":"Delete all zones","request":{"method":"DELETE","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/","description":"Delete all existing zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones

Response Messages:
204: All zones were successfully deleted.
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Get ancestor zones for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/ancestors","description":"Get a list of ancestor zones for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for ancestor zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/123,234/ancestors

Response Messages:
200: The zone ancestors were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get configuration usages for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/dependencies","description":"Get a list of configuration usages for the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for configuration dependencies.

Usage Example
https://192.168.1.1/securetrack/api/zones/2,3/dependencies

Response Messages:
200: The zone dependencies were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Add a zone as an ancestor to a zone","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"child_id"},{"value":null,"type":"text","key":"parent_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","description":"Add a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to add ancestors zone(s).
parent_ids: The ID(s) of the zones to add as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was added as an ancestor successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Remove a zone as an ancestor to a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"child_id"},{"value":null,"type":"text","key":"parent_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{child_id}}/ancestors/{{parent_ids}}","description":"Remove a zone(s) as an ancestor to a existing zone.

Parameters:
context: Global MSSP context. [optional]
child_id: The ID of the zone for which to remove ancestors zone(s).
parent_ids: The ID(s) of the zones to remove as ancestors.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/ancestors/10,20

Response Messages:
200: The zone was removed as an ancestor successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Get shared zones","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/shared","description":"Get a list of shared zones.

Parameters:
context: Global MSSP context. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/shared

Response Messages:
200: The list of shared zones was retrieved successfully.
403: User is not permitted to access the specified domain"},"response":[]},{"name":"Map network elements to security zones","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t \n\t\t \n\t\t 10.8.8.0\n\t\t 255.255.255.0\n\t\t \n\t \n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_zones/","description":"This API maps each network element in the AccessRequestNetworkListDTO (such as IP address, IP address range, object, or group) to all matching Tufin security zones. If the network element is a group, then each zone also identifies all matching group members. The internet referral object can be included in the list, and will always map to the predefined Internet security zone. If the 'Any' element is included in the list it will map to all zones.
Note: if multi-domain mode is enabled, the API calls only checks zones that are in the “Default” domain.

Parameters:
body: AccessRequestNetworkListDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_zones
BODY<network_objects>
     <network_object xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"ip_network\">
         <network xsi:type=\"raw_network_subnet\">
         <ip>10.8.8.0</ip>
         <mask>255.255.255.0</mask>
         </network>
     </network_object>
</network_objects>


Response Messages:
200: Returns mapping of network elements to security zones
400: Access Request Network List is malformed.
403: Access is denied."},"response":[]},{"name":"Import a zone","request":{"method":"POST","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/import/{{ids}}","description":"Import a shared zone into the specified domain

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones to import. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/import/10,20

Response Messages:
200: The zone was imported successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Modify a zone","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\t2\n\tDMZ\n\tAll DMZ hosts\n\tfalse\n\tfalse\n\tfalse\n\tfalse\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","description":"Modify an existing zone.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to modify.
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/zones/2
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<zone>
    <id>2</id>
    <name>DMZ</name>
    <comment>All DMZ hosts</comment>
    <shared>false</shared>
    <internet>false</internet>
    <user_networks>false</user_networks>
    <unassociated_networks>false</unassociated_networks>
</zone>


Response Messages:
204: The specified zone was successfully modified.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found.
400: The zone parameters were invalid"},"response":[]},{"name":"Get a specific zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{id}}","description":"Get the zone with the specified ID.

Parameters:
context: Global MSSP context. [optional]
id: The ID of the zone to get.
imported: List domains that imported zones. [optional]

Usage Example
https://192.168.1.1/securetrack/api/zones/2

Response Messages:
200: The zone was retrieved successfully.
403: User is not permitted to access the specified domain
403: A zone with the specified ID does not exist."},"response":[]},{"name":"Get descendant zones for a zone","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}/descendants","description":"Get a list of zones descended from the specified zone(s).

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zones for which to look for descendant zones.

Usage Example
https://192.168.1.1/securetrack/api/zones/10,20/descendants

Response Messages:
200: The zone descendants were retrieved successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Remove a zone as an descendants to a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"parent_id"},{"value":null,"type":"text","key":"child_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","description":"Remove a zone(s) as an descendants to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to remove descendant zone(s).
child_ids: The ID(s) of the zone to remove as a descendant.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was removed as an descendant successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Add a zone as a descendant to a zone","request":{"method":"PUT","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"parent_id"},{"value":null,"type":"text","key":"child_ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{parent_id}}/descendants/{{child_ids}}","description":"Add a zone(s) as a descendant to a existing zone.

Parameters:
context: Global MSSP context. [optional]
parent_id: The ID of the zone for which to add descendant zone(s).
child_ids: The ID(s) of the zones to add as descendants.

Usage Example
https://192.168.1.1/securetrack/api/zones/1/descendants/10,20

Response Messages:
200: The zone was added as an descendant successfully.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]},{"name":"Delete a zone","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/zones/{{ids}}","description":"Delete an existing zone.

Parameters:
context: Global MSSP context. [optional]
ids: The ID(s) of the zone to delete.

Usage Example
https://192.168.1.1/securetrack/api/zones/1,2

Response Messages:
204: The specified zone was successfully deleted.
403: User is not permitted to access the specified domain
404: A zone with the specified ID was not found."},"response":[]}]},{"name":"Policies and Sub-Policies","item":[{"name":"Get policies by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/policies","description":"Fetches list of policies defined on a given revision ID

Parameters:
context: Global MSSP context [optional]
id: Revision ID

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/policies
"},"response":[]},{"name":"Get rules by input and output interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/topology_interfaces","description":"Parameters:
device_id: The unique identifier of target device
inputInterfaceName: Input interface name [optional]
outputInterfaceName: Output interface name [optional]
isIpv6: Is ipv6 policy [optional]

Usage Example
https://192.168.1.1/securetrack/api/bindings/2/topology_interfaces?inputInterfaceName=ethernet1/1&outputInterfaceName=ethernet1/2
"},"response":[]},{"name":"Get policies by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/policies","description":"Fetches list of policies defined on a given device ID.
Supported devices: CheckPoint, Panorama Advanced, FortiManager Basic and Advanced, FMC and NSX.

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/policies
"},"response":[]},{"name":"Get list of sub-policies (bindings) with input and/or output interfaces","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"supremum_version_id"},{"value":null,"type":"text","key":"inputInterfaceName"},{"value":null,"type":"text","key":"outputInterfaceName"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/bindings/{{device_id}}/binding_query","description":"Retrieve list of bindings of input and/or output interfaces

Parameters:
device_id: The unique identifier of target device
supremum_version_id: The unique identifier of target revision
inputInterfaceName: Input interface name
outputInterfaceName: Output interface name

Usage Example
https://192.168.1.1/securetrack/api/bindings/20/binding_query?supremum_version_id=785&inputInterfaceName=Any&outputInterfaceName=Any
"},"response":[]},{"name":"Get sub-policies (bindings) by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/bindings","description":"Returns a list of all of the subpolicies (bindings) for a given revision.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Revision ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
"},"response":[]},{"name":"Get sub-policies (bindings) by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/bindings","description":"Returns a list of all of the subpolicies (bindings) for a given device.
The definition of subpolicy is different for each vendor:
Check Point - policy package and inline layer (inline layer will be returned only when the optional include_subpolicy parameter is set to true)
Cisco - ACL
Juniper/Fortinet/Palo Alto/Stonesoft - zone-to-zone policy
Cloud platforms - Security Groups


Parameters:
context: Global MSSP context [optional]
id: Device ID
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
include_subpolicy: when set to true, includes sub policies in the returned result, supported only for Checkpoint [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/bindings

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/bindings? include_subpolicy=true
"},"response":[]}]},{"name":"Policy Analysis","item":[{"name":"Run Policy Analysis query","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_ids"},{"value":null,"type":"text","key":"sources"},{"value":null,"type":"text","key":"destinations"},{"value":null,"type":"text","key":"services"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/policy_analysis/query/matching_rules","description":"Parameters:
device_ids: Device ids
sources: Source list
destinations: Destination list
services: Service list
exclude_any: Exclude any in the specified, comma-separated fields of source, destination or service. For example: exclude_any = destination,service [optional]
action: Action [optional]

Usage Example
https://192.168.1.1/securetrack/api/policy_analysis/query/matching_rules?device_ids=41&sources=33.33.33.0:24,113.113.113.100&destinations=114.1.1.0:24&services=tcp:80&exclude_any=source,destination

Response Messages:
200: Returns request results.
400: Error in request syntax."},"response":[]}]},{"name":"Policy Browser (formerly Rule Documentation)","item":[{"name":"Get specific rule documentation","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Fetches rule documentation for a single rule given by revision ID and rule ID.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the requested rule

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16373/documentation
"},"response":[]},{"name":"Modify specific rule documentation","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 172\n\t\t 789111\n\t \n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Modify rule documentation for a single rule identified by revision ID and rule ID.
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If no rule documentation exists for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If rule documentation already exists for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.
Record set entries that are automatically created or calculated, for example automatic mapping to a SecureChange ticket, cannot be modified.
The following fields are automatically calculated, and cannot be modified:
Permissiveness, Violations, Last Hit, Last Modified, Shadowing Status, Certification Status, Certification Date, Certification Expiration Date, Application Name, Application Owner

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Id of the changed rule
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>172</id>
         <ticketCr>789111</ticketCr>
     </record_set>
</rule_documentation>

"},"response":[]},{"name":"Delete specific rule documentation","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules/{{rule_id}}/documentation","description":"Delete rule documentation for a single rule given by revision ID and rule ID.
If the rule has automatic mapping to a ticket, the record is not deleted.

Parameters:
context: Global MSSP context [optional]
id: Revision id
rule_id: Rule id

Usage Example
https://192.168.1.1/securetrack/api/revisions/173/rules/3373/documentation
"},"response":[]},{"name":"Get specific rule documentation","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Fetches rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16373/documentation
"},"response":[]},{"name":"Modify specific rule documentation","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t admin\n\t Comment text\n\t false\n\t true\n\t \n\t\t user@company.com\n\t\t Business Owner\n\t\t 2013-01-08T00:00:00+02:00\n\t\t 173\n\t\t 789112\n\t \n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Modify rule documentation for a single rule given by device ID and rule ID
A single rule can be set as either a stealth rule or legacy rule. If both flags are set, an error will be returned (error 400, Bad request).
If there is no existing rule documentation for the rule, the specified documentation is added to the rule and the response code is: 201 Created.
If there is existing rule documentation for the rule, the specified documentation replaces the existing documentation and the response code is: 204 No Content.

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID
body: RuleDocumentationDTO

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
BODY<rule_documentation>
     <tech_owner>admin</tech_owner>
     <comment>Comment text</comment>
     <legacy_rule>false</legacy_rule>
     <stealth_rule>true</stealth_rule>
     <record_set>
         <businessOwnerEmail>user@company.com</businessOwnerEmail>
         <businessOwnerName>Business Owner</businessOwnerName>
         <expireDate>2013-01-08T00:00:00+02:00</expireDate>
         <id>173</id>
         <ticketCr>789112</ticketCr>
     </record_set>
</rule_documentation>

"},"response":[]},{"name":"Delete specific rule documentation","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"},{"value":null,"type":"text","key":"rule_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules/{{rule_id}}/documentation","description":"Delete rule documentation for a single rule given by device ID and rule ID

Parameters:
context: Global MSSP context [optional]
id: Device ID
rule_id: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/3040/documentation
"},"response":[]}]},{"name":"Policy Optimization","item":[{"name":"Get cleanups results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup
"},"response":[]},{"name":"Get the specific objects or rules identified for the cleanup results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"cleanup_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/instances","description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/instances
"},"response":[]},{"name":"Get risks results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/","description":"Parameters:
context: Global MSSP context [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk
"},"response":[]},{"name":"Get cleanups by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"code"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/cleanups","description":"Fetches set of Cleanup calculation results for a device given by ID.
Only fully shadowed rules (cleanup code C01) are supported.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
code: Cleanup category code
start: Starting page for query allowable values are numeric [optional]
count: Number of pages for query result allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/31/cleanups?code=C01
"},"response":[]},{"name":"Get devices in cleanup results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"cleanup_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/cleanup/{{cleanup_id}}/devices","description":"Parameters:
context: Global MSSP context [optional]
cleanup_id: Cleanup id

Usage Example
https://192.168.1.1/securetrack/api/cleanup/1/devices
"},"response":[]},{"name":"Get devices in risk results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"risk_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/devices","description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id

Usage Example
https://192.168.1.1/securetrack/api/risk/1/devices
"},"response":[]},{"name":"Get shadowing rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"shadowed_uids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/shadowing_rules","description":"Find shadowing rules for given shadowed rules of a specific device

Parameters:
device_id: Device ID
shadowed_uids: UIDs of shadowed rules separated by commas

Usage Example
https://192.168.1.1/securetrack/api/devices/31/shadowing_rules?shadowed_uids=78786a0d-b9cc-478e-b7a2-dea953c976c7
"},"response":[]},{"name":"Get the specific objects or rules identified for the risk results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"risk_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/risk/{{risk_id}}/instances","description":"Parameters:
context: Global MSSP context [optional]
risk_id: Risk id
devices: Devices ids [optional]
start: Start [optional]
count: Results count [optional]

Usage Example
https://192.168.1.1/securetrack/api/risk/1/instances
"},"response":[]}]},{"name":"Revisions","item":[{"name":"Get revisions by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/revisions","description":"Fetches revisions for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/105/revisions
"},"response":[]},{"name":"Get specific revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revId}}","description":"Fetches a revision specified by revision Id.
To get revId for this API, use the 'id' property of RevisionDTO that is returned by 'Get revisions by device' or 'Get latest revision by device' APIs

Parameters:
context: Global MSSP context [optional]
revId: Id of fetched revision

Usage Example
https://192.168.1.1/securetrack/api/revisions/785
"},"response":[]},{"name":"Get latest revision by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/latest_revision","description":"Fetches latest revision for a given device

Parameters:
context: Global MSSP context [optional]
id: Device ID

Usage Example
https://192.168.1.1/securetrack/api/devices/105/latest_revision
"},"response":[]}]},{"name":"Rule Usage","item":[{"name":"Get last hit for a specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"rule_uid"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find/{{device_id}}/{{rule_uid}}","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.
The rule_uid is the value from the uid field returned by the /rules API: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Parameters:
device_id: device_id
rule_uid: rule_uid

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find/20/ea9db13e-d058-45c6-a2f0-cd731027c22b
"},"response":[]},{"name":"Get last hits for all rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_last_usage/find_all/{{device_id}}","description":"Get last hit dates for all rules in a given device.
For Palo Alto firewalls, this also returns last hits for users and applications in the rule.

Parameters:
device_id: device id

Usage Example
https://192.168.1.1/securetrack/api/rule_last_usage/find_all/20
"},"response":[]}]},{"name":"Security Rules","item":[{"name":"Get specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/rules/{{ids}}","description":"Returns a list of rules by device ID, rule IDs and additional criteria.
Note: This API retrieves the information from the latest revision.


Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Rule IDs
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules/16370
"},"response":[]},{"name":"Get rules by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/rules","description":"Returns a list of all of the security rules for the specified device.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.
For Cisco ASA devices, when applying a filter you must also add the direction.


Parameters:
context: Global MSSP context [optional]
id: Device ID
policyId: Policy ID [optional]
policy: Policy Name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Show rules grouping criteria. Can be set only to \"bindings\". Output will be grouped by bindings and section header for Check Point devices, ACL for Cisco devices, and Zones for Juniper, Palo Alto, and Fortinet device [optional]
with_zb: Include zone based rules, values can be 'true' or 'false' [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?subpolicy_name=layer1&is_global=true

Usage Example
https://192.168.1.1/securetrack/api/devices/20/rules?interface=Loopback99:INSIDE
"},"response":[]},{"name":"Get a specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ruleId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rules/{{ruleId}}","description":"Parameters:
ruleId: Rule ID

Usage Example
https://192.168.1.1/securetrack/api/rules/60
"},"response":[]},{"name":"Find rules","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/{{device_id}}","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.To get more information regarding objects included in the returned rules (like src_network or dst_network) use their uid, as the objects’ ID might change.
\n By default, if there are less than 3,000 rules - the API will return all the rules.\nIn case there are more than 3,000 rules the API will return an error code 413 with the error message “There are more than 3000 rules, you must use pagination”
“display_rule_number” should return only for Check Point R80 and higher devices.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
device_id: Device id
start: The starting rule to include in the returned results [optional]
count: Number of rules to include in the results [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/31?search_text=source:Sales_192.168.2.60 fromzone:sales tozone:External

Usage Example
https://192.168.1.1/securetrack/api/rule_search/20?search_text=Mobile Access hascomment:false

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=web_server&start=0&count=10

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search/59?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT {
    \"rules\":{
        \"count\":1,
        \"total\":1,
        \"rule\":{
            \"@xsi.type\":\"securityRuleDTO\",
            \"id\":21,
            \"cp_uid\":\"\",
            \"uid\":\"{9259f6ee-47a0-4996-a214-ab7edc14a916}\",
            \"order\":2,
            \"binding\":{
                \"default\":true,
                \"policy\":{
                    \"@xsi.type\":\"managementDomainPolicyDTO\",
                    \"id\":2,
                    \"name\":\"Standard\",
                    \"installable_targets\":\"\"
                },
                \"rule_count\":19,
                \"security_rule_count\":19,
                \"uid\":\"{00-FACED0-00}\"
                },
            \"acceleration_breaker\":false,
            \"action\":\"Accept\",
            \"application\":{
                \"id\":4735,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
            },
            \"authentication_rule\":false,
            \"comment\":\"DO NOT DELETE OR EDIT\",
            \"dst_network\":{
                \"id\":39,
                \"display_name\":\"Net_10.110.65.0\",
                \"name\":\"Net_10.110.65.0\"
                \"uid\":\"{1290f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_networks_negated\":false,
            \"dst_service\":{
                \"id\":7420,
                \"display_name\":\"ssh\",
                \"name\":\"ssh\"
                \"uid\":\"{2904f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"dest_services_negated\":false,
            \"dst_zone\":\"any\",
            \"disabled\":false,
            \"external\":false,
            \"implicit\":false,
            \"dst_zone_any\":true,
            \"src_zone_any\":true,
            \"name\":\"Accept SSHG\",
            \"option\":\"LOG_SESSION\",
            \"documentation\":{
                \"permissiveness_level\":\"LOW\",
                \"shadowed\":\"Not shadowed\",
                \"last_modified\":\"Today\",
                \"last_hit\":\"N/A\",
                \"violations\":\"\"
            },
            \"rule_location\":\"Shared\",
            \"rule_location_display\":\"Shared - Pre Rule\",
            \"rule_number\":2,
            \"display_rule_number\":\"2.1\",
            \"rule_type\":\"universal\",
            \"src_zone\":\"any\",
            \"src_network\":{
                \"id\":38,
                \"display_name\":\"Net_10.110.64.0\",
                \"name\":\"Net_10.110.64.0\"
                \"uid\":\"{4934f6ee-47a1-4996-a214-ab2edc26a916}\"
            },
            \"src_networks_negated\":false,
            \"src_services_negated\":false,
            \"track\":{
                \"level\":\"LOG\"
            },
            \"type\":\"rule\",
            \"users\":{
                \"id\":5,
                \"display_name\":\"tufin\\\\regina\",
                \"name\":\"tufin\\\\regina@ldap\"
            }
        }
    }
}


Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid
413: Max supported count is 3000
413: There are more than 3000 rules, you must use pagination"},"response":[]},{"name":"Get specific rule","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/rules/{{ids}}","description":"Returns a list of rules by revision ID, rule IDs and additional criteria

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules (Only for: ACL devices) [optional]
add: If set to \\\"documentation\\\" result will include rule documentation [optional]
groupBy: Rules grouping criteria, can be set only to \\\"bindings\\\" [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules/16370
"},"response":[]},{"name":"Get rules by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/rules","description":"Returns a list of all of the security rules for the specified revision.
Use add=documentation to retrieve rule documentation.
The is_global parameter is device dependent. For ACL devices, only global rules are returned when set to true. For Check Point R80, only global layers are returned when set to true, and specify a layer name in the subpolicy_name parameter This parameter is ignored for all other vendors. The default value is false.
The subpolicy_name parameter is device dependent. For Check Point R80, only rules that use the specified layer are returned. You can only specify the name of a single layer. This parameter is ignored for all other vendors.
For Cisco ASA devices, when applying a filter you must also add the direction.


Parameters:
context: Global MSSP context [optional]
id: Revision id
policyId: Policy id [optional]
policy: Policy name [optional]
interface: Interfaces to query [optional]
zone: Zone name [optional]
is_global: Get global rules only(device dependent, see implementation Notes) [optional]
add: If set to \"documentation\" result will include rule documentation [optional]
start: Starting page for query, allowable type is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]
groupBy: Rules grouping criteria, can be set only to \"bindings\" [optional]
with_zb: Include zone-based rules [optional]
uid: Binding UID [optional]
ipType: Policy ip Type, values can be 'ipv4' or 'ipv6', supported only for Stonesoft [optional]
subpolicy_name: Filter by sub policy name (see implementation notes) [optional]
fetchMigratedCalculations [optional]
is_alternate_order: OrderBy alternate order, for display Aci rules by contracts [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?subpolicy_name=layer1&is_global=true

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/rules?interface=Loopback99:INSIDE
"},"response":[]},{"name":"Create a CSV file for rules search results","request":{"method":"GET","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/export","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is : for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API exports the results data as a CSV file in the SecureTrack Reports Repository.

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export

Usage Example
https://192.168.1.1/securetrack/api/rule_search/export?search_text=shadowed:true
"},"response":[]},{"name":"Get rule count per device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/rule_search/","description":"The search_text parameter provides the same capabilities as the Policy Browser feature in SecureTrack.
You can search for a string across all rule fields, or you can search for a combination of specific strings in specific fields.
The text format is for a field is <fieldname>:<text> for example uid:9259f6ee-47a0-4996-a214-ab7edc14a916.
See the search info documentation in Securetrack Policy Browser page for more information.
This API will return a list of all the devices, the devices that has rules that match the search criteria will have rule_count that is bigger than 0

Parameters:
context: Global MSSP context [optional]
search_text: Search text [optional]
devices: Devices ids [optional]

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87

Usage Example
https://192.168.1.1/securetrack/api/rule_search/87?search_text=ICMP application:facebook

Usage Example
URLhttps://192.168.1.1/securetrack/api/rule_search?search_text=uid:9259f6ee-47a0-4996-a214-ab7edc14a916
OUTPUT{
    \"device_list\":{
        \"device\":[
            {
                \"device_id\":512,
                \"revision_id\":6864,
                \"rule_count\":1
            },
            {
                \"device_id\":59,
                \"revision_id\":543,
                \"rule_count\":0
            }
        ]
    }
}

"},"response":[]}]},{"name":"Services and Ports","item":[{"name":"Get services objects matching specified criteria","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"services\": {\n\t\t\"count\": 1,\n\t\t\"total\": 1,\n\t\t\"service:\": {\n\t\t\t\"id\": 169197,\n\t\t\t\"name\": \"tcp_10\",\n\t\t\t\"display_name\": \"tcp_10\",\n\t\t\t\"class_name\": \"access_role\",\n\t\t\t\"global\": false,\n\t\t\t\"device_id\": 158,\n\t\t\t\"comment\": \"\",\n\t\t\t\"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",\n\t\t\t\"implicit\": false,\n\t\t\t\"max\": false,\n\t\t\t\"min\": false,\n\t\t\t\"protocol\": 6,\n\t\t\t\"timeout\": \"\",\n\t\t\t\"type\": \"tcp_service\",\n\t\t\t}\n\t\t}\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/search","description":"You can search for service objects where the name or comment fields have a specified text string,
or you can search for service objects that have an Port or protocol that matches,
or you can search for service objects by uid.

Parameters:
context: Returns results for the specified domain ID. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]
filter: “text” filter returns service objects where the name or comment fields have a specified text string. \n“protocol” filter returns service objects that have a protocol that matches specified IP protocol number.\n“port” filter returns service objects that have a port that matches specified port number.\n “uid“ filter returns service objects with the specified uid.\n If no filter is specified, the “text” filter is used.
device_id: Returns service objects belonging to the specified device_id. [optional]
name: (For “text” filter) You can specify \"name\" to find service objects with the specified text in the name field. [optional]
comment: (For “text” filter) You can specify “comment” to find service objects with the specified text in the comment field. [optional]
protocol: Specify Protocolto find service objects that have the specified IP Protocol. [optional]
port: Specify Portto find service objects that have the specified Port. [optional]
uid: (for “uid“ filter) Returns service objects with the specified uid. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=protocol&protocol=6&device_id=68

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=port&port=80

Usage Example
https://192.168.1.1/securetrack/api/services/search?filter=uid&uid=24a8774d-24c1-4b3a-aae9-3c272a2b5191

Usage Example
URLhttps://192.168.1.1/securetrack/api/services/search?filter=text&name=tcp_10
BODY{
    \"services\": {
        \"count\": 1,
        \"total\": 1,
        \"service:\": {
            \"id\": 169197,
            \"name\": \"tcp_10\",
            \"display_name\": \"tcp_10\",
            \"class_name\": \"access_role\",
            \"global\": false,
            \"device_id\": 158,
            \"comment\": \"\",
            \"uid\": \"{9EDC2607-6BEC-43D7-A99D-B522BA694ADA}\",
            \"implicit\": false,
            \"max\": false,
            \"min\": false,
            \"protocol\": 6,
            \"timeout\": \"\",
            \"type\": \"tcp_service\",
            }
        }
    }
}

"},"response":[]},{"name":"Get rules containing specified service object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/rules","description":"Returns the security rules that contain the specified service object


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.
include_groups: You can add \"include_groups\" to find rules that include the service object and rules that include the groups that include the service object. [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses “count=100”. [optional]

Usage Example
https://192.168.1.1/securetrack/api/services/65078/rules?include_groups=true
"},"response":[]},{"name":"Get specific service","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/services/{{ids}}","description":"Fetches list of specific service objects defined in revision given by revision ID and specified by their IDs

Parameters:
context: Global MSSP context [optional]
revision_id: Revision id
ids: Rule IDs
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/services/959888
"},"response":[]},{"name":"Get service groups containing specified service objects","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/services/{{id}}/groups","description":"Returns groups that contain the specified service objects


Parameters:
context: Returns results for the specified domain ID. [optional]
id: The SecureTrack object ID of the service object.

Usage Example
https://192.168.1.1/securetrack/api/services/69577/groups
"},"response":[]},{"name":"Get specific service","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"device_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{device_id}}/services/{{ids}}","description":"Fetches list of specific service objects defined in device given by device ID and specified by their IDs.
Note: This API retrieves the information from the latest revision.

Parameters:
context: Global MSSP context [optional]
device_id: Device ID
ids: Service object IDs separated by commas
show_members: Set to false to return only the name and ID of the members [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/services/959888,959966
"},"response":[]},{"name":"Get services by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/services","description":"Fetches list of service objects defined on device given by device ID.
The default value for get_total is false. For APIF calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Device ID
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric between 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]
add_parent_objects: Panorama only: Get objects from parent DGs (default true) [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/20/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/devices/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

"},"response":[]},{"name":"Get services by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/services","description":"Fetches list of service objects defined in revision given by revision ID
The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls.


Parameters:
context: Global MSSP context [optional]
id: Revision id
show_members: Set to false to return only the name and ID of the members for relevant types like \"group\" [optional]
start: Starting page for query allowable types are numeric [optional]
count: Number of pages for query allowable values are numeric [optional]
name: Service name [optional]
type: Service type, allowable values are: tcp, udp, ip or icmp [optional]
port: Service port [optional]
icmp_type: Service ICMP type allowable values are numeric between 0 to 40 [optional]
protocol: Service protocol, allowable values are numeric betweenm 0 to 255 [optional]
get_total: Set to true to get the total number of items that can be retrieved [optional]
add_parent_objects: Panorama only: Get objects from parent DGs (default true) [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/785/services?get_total=true
OUTPUT {
    \"services\": {
        \"count\": 50,
        \"total\": 100,
        \"service\": [{
            \"@xsi.type\": \"singleServiceDTO\",
            \"id\": 5129479,
            \"name\": \"Tcp30025\",
            \"display_name\": \"Tcp30025\",
            \"class_name\": \"tcp_service\",
            \"type\": \"tcp_service\",
            \"global\": false,
            \"comment\": \"\",
            \"uid\": \"{079F15A5-009E-7E47-BBD0-E65973646562}\",
            \"implicit\": false,
            \"overrides\": false,
            \"max\": 30025,
            \"min\": 30025,
            \"negate\": false,
            \"protocol\": 6,
            \"timeout\": 0
        }]
    }
}


Usage Example
URLhttps://192.168.1.1/securetrack/api/revisions/31/services?type=group&show_members=false
OUTPUT{
    \"services\": {
    \"count\": 100,
        \"service\": [
            {
                \"@xsi.type\": \"serviceGroupDTO\",
                \"id\": 1359066,
                \"name\": \"#Shared Domain@DNS\",
                \"display_name\": \"DNS\",
                \"class_name\": \"service_group\",
                \"type\": \"group\",
                \"global\": \"false\",
                \"comment\": \"\",
                \"uid\": \"{83c8512c-2a4a-43f4-bef2-dd96276611e8}\",
                \"implicit\": false,
                \"overrides\": \"false\",
                \"type_on_device\": gen_service_group,
                \"is_device_predefined\": true,
                \"member\":
                    \"id\": 105936,
                    \"uid\": \"{ed46ff90-11c8-4425-b8da-85852ee3e5b0}\",
                    \"display_name\": \"DNS\",
                    \"name\": \"#Shared Domain@DNS\",
            }
        ]
    }
}

"},"response":[]}]},{"name":"Time Objects","item":[{"name":"Get specific time object","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"revision_id"},{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{revision_id}}/time_objects/{{ids}}","description":"Fetches list of time objects by revision ID and rule ID

Parameters:
context: Global MSSP context [optional]
revision_id: Revision ID
ids: Rule IDs

Usage Example
https://192.168.1.1/securetrack/api/revisions/7/time_objects/9
"},"response":[]},{"name":"Get time objects by device","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/devices/{{id}}/time_objects","description":"Returns the time objects used in the specified device.

Parameters:
context: Global MSSP context [optional]
id: Device ID
start: Starting page for query allowable values are numeric [optional]
count: Starting page for query allowable values are numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/devices/20/time_objects
"},"response":[]},{"name":"Get time objects by revision","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/revisions/{{id}}/time_objects","description":"Returns the time objects used in the specified revision.

Parameters:
context: Global MSSP context [optional]
id: Revision ID
start: Starting page for query allowable value is numeric [optional]
count: Number of pages for query starting from starting page, allowable type is numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/revisions/785/time_objects
"},"response":[]}]},{"name":"Traffic Policy Matcher","item":[{"name":"Get policy relevance metrics for traffic","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"relevance_metrics\": {\n\t\t\"source_ips\": {\n\t\t\t\"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"dest_ips\": {\n\t\t\t\"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]\n\t\t},\n\t\t\"targets\": {\n\t\t\t\"target\": [4, 10]\n\t\t}\n\t}\n}\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/traffic_policy/","description":"The response lists all the relevant security groups, tags, relevant instances, and count of unrelated instances for each Amazon VPC in the specified traffic path.
A relevant security group contains at least one instance including either the source or destination IP address.
An unrelated instance is included in the security group but not part of the specified traffic path.
If context is provided, path will be calculated for the specified domain context, otherwise the default domain context is used. context is used only if MSSP mode is enabled. If MSSP mode is disabled context is ignored.
To get the context, call the /domains/ API and use the ID included within the returned domain DTO.

Parameters:
context: Global MSSP context [optional]
body: Relevance metrics request

Usage Example
URLhttps://192.168.1.1/securetrack/api/traffic_policy
BODY{
    \"relevance_metrics\": {
        \"source_ips\": {
            \"source\":[\"10.10.253.0/24\", \"172.31.50.99/32\"]
        },
        \"dest_ips\": {
            \"dest\": [\"172.31.150.0/24\", \"172.31.50.99/32\"]
        },
        \"targets\": {
            \"target\": [4, 10]
        }
    }
}


Response Messages:
200: Successful
403: Insufficient user permissions
404: Device not found
400: Invalid parameters"},"response":[]}]},{"name":"Unified Security Policy - Access Request Violations","item":[{"name":"Get violation task status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/status/{{taskId}}","description":"Get access requests violations task status.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task status was received.
403: Access is denied.
404: Access request violations task status was not found."},"response":[]},{"name":"Get violations for an access request","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t \n\t \n\t \n\t\t \n\t\t\t false\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t \n\t\t Gmail\n\t \n\t \n\t\t CustomApp\n\t\t \n\t\t\t \n\t\t\t\t false\n\t\t\t\t 6\n\t\t\t\t 6\n\t\t\t\t 80\n\t\t\t\t 80\n\t\t\t\t false\n\t\t\t \n\t\t \n\t \n\t ACCEPT\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/sync","description":"Calculate the violations for the given access request.
Note: this API may take a while to complete.
See the asynchronous API /violations/access_request/task as an alternative.

Parameters:
body: AccessRequestListDTO
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request supports multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/sync?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
         </service>
     </access_request_service>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <service>
             <predefined>false</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <access_request_application xsi:type=\"access_request_application_identity\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>Gmail</name>
     </access_request_application>
     <access_request_application xsi:type=\"access_request_application_identity\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>CustomApp</name>
         <application_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
             <service>
                 <predefined>false</predefined>
                 <min_protocol>6</min_protocol>
                 <max_protocol>6</max_protocol>
                 <min_port>80</min_port>
                 <max_port>80</max_port>
                 <negate>false</negate>
             </service>
         </application_service>
     </access_request_application>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
200: Access request violations were calculated.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination).
403: Access is denied.
400: Custom applications must have their services configured."},"response":[]},{"name":"Cancel violation task","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task/{{taskId}}","description":"Delete an access request violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/task/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Access request violations task has been aborted successfully.
403: Access is denied.
404: Access request violations task was not found."},"response":[]},{"name":"Get violation task results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/result/{{taskId}}","description":"Get result of access requests violations task.

Parameters:
taskId: The unique identifier of the access request violations task.

Usage Example
https://192.168.1.1/securetrack/api/violations/access_requests/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Access request violations task results were received.
403: Access is denied.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet."},"response":[]},{"name":"Start a task to calculate violations for an access request","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\t\n\t false\n\t 0\n\t \n\t \n\t\t \n\t\t false\n\t\t 10.100.0.1\n\t\t 255.255.255.255\n\t\t \n\t \n\t \n\t\t ssh\n\t\t \n\t\t \n\t \n\t \n\t\t \n\t\t\t false\n\t\t\t 6\n\t\t\t 6\n\t\t\t 22\n\t\t\t 22\n\t\t\t false\n\t\t \n\t \n\t \n\t\t Gmail\n\t \n\t \n\t\t CustomApp\n\t\t \n\t\t\t \n\t\t\t\t false\n\t\t\t\t 6\n\t\t\t\t 6\n\t\t\t\t 80\n\t\t\t\t 80\n\t\t\t\t false\n\t\t\t \n\t\t \n\t \n\t ACCEPT\n\t\n\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violations/access_requests/task","description":"Create a calculation task to find access requests violations.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
body [optional]
use_topology: Use topology to determine access request domains. [optional]
ar_domain_mode: The access request uses resources from multiple domains. [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/violations/access_requests/task?use_topology=false&ar_domain_mode=false
BODY<access_requests>
    <access_request>
     <use_topology>false</use_topology>
     <access_request_order>0</access_request_order>
     <access_request_source xsi:type=\"internet\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"/>
     <access_request_destination xsi:type=\"ip_network\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <network xsi:type=\"raw_network_subnet\">
         <negate>false</negate>
         <ip>10.100.0.1</ip>
         <mask>255.255.255.255</mask>
         </network>
     </access_request_destination>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>ssh</name>
         <service>
         </service>
     </access_request_service>
     <access_request_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <service>
             <predefined>false</predefined>
             <min_protocol>6</min_protocol>
             <max_protocol>6</max_protocol>
             <min_port>22</min_port>
             <max_port>22</max_port>
             <negate>false</negate>
         </service>
     </access_request_service>
     <access_request_application xsi:type=\"access_request_application_identity\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>Gmail</name>
     </access_request_application>
     <access_request_application xsi:type=\"access_request_application_identity\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
         <name>CustomApp</name>
         <application_service xsi:type=\"implicit_service\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">
             <service>
                 <predefined>false</predefined>
                 <min_protocol>6</min_protocol>
                 <max_protocol>6</max_protocol>
                 <min_port>80</min_port>
                 <max_port>80</max_port>
                 <negate>false</negate>
             </service>
         </application_service>
     </access_request_application>
     <action>ACCEPT</action>
    </access_request>
</access_requests>


Response Messages:
202: Access request violations task was accepted.
400: Access request order is not unique.
400: Domain cannot be specified when domain mode is false.
400: Cannot specify both ticket domain id and source and destination domains.
400: No domain specified in MSSP mode.
400: Domain does not exist.
400: Access request is malformed.
400: No valid access requests (Access requests cannot have topology enabled and the Internet object in the Source/Destination)
400: No network source were specified.
400: No network destination were specified.
403: Access is denied.
503: Access request violations task was rejected.
400: Custom applications must have their services configured."},"response":[]}]},{"name":"Unified Security Policy - Alerts","item":[{"name":"Get a specific alert","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","description":"Returns a specified alert.
If the alert_id does not exist, an error message is returned.

Parameters:
context: MSSP context [optional]
id: The alert Id

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/1

Response Messages:
403: Alert ID does not exist"},"response":[]},{"name":"Update an alert","request":{"method":"PUT","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": [\n\t\t\t\t\"moshe\",\n\t\t\t\t\"admin\"\n\t\t\t\t]\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{id}}","description":"Update an alert for unified security policies.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
id: The alert ID for updating [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts/1
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": [
                \"moshe\",
                \"admin\"
                ]
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
204: Alert ID: 'alertId' was updated successfully
404: Alert ID: 'alertId' does not exist
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
403: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain"},"response":[]},{"name":"Get alerts","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"start"},{"value":null,"type":"text","key":"count"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","description":"Returns a list of all alerts. If an empty list is returned, it implies that there are no configured alerts for that context.
You must set start and count parameters to limit the number of returned alerts.
Start is zero based - to start from the second rule use start=1, to get rules 51-60 use start=50 and count=10.

Parameters:
context: MSSP context [optional]
start: Returns the results beginning with the specified result number
count: Returns the specified number of results

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts?start=10&count=25

Response Messages:
400: Value for start parameter is missing or not valid
400: Value for count parameter is missing or not valid"},"response":[]},{"name":"Create an alert","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"usp_alert_configuration\": {\n\t\t\"name\": \"uspAlert\",\n\t\t\"description\": \"description\",\n\t\t\"status\": \"ACTIVE\",\n\t\t\"domain_id\": 6,\n\t\t\"all_devices\": false,\n\t\t\"device_ids\": {\n\t\t\t\"device_id\": [\n\t\t\t\t1,\n\t\t\t\t2,\n\t\t\t\t3,\n\t\t\t\t4\n\t\t\t]\n\t\t},\n\t\t\"low_severity\": true,\n\t\t\"medium_severity\": true,\n\t\t\"high_severity\": true,\n\t\t\"critical_severity\": false,\n\t\t\"user_ids\": {\n\t\t\t\"user_id\": [\n\t\t\t\t\"moshe\",\n\t\t\t\t\"admin\"\n\t\t\t\t]\n\t\t},\n\t\t\"emails\": \"user@doamin.com\",\n\t\t\"send_syslog\": true\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/","description":"Create an alert for unified security policies.
Returns location with the alert id to get the alert.
Alerts can be defined for all devices (all_devices:true) or for specified device IDs.
An email and/or user name must be defined. For multiple entries of emails or user names, use a semicolon to separate values. For SecureTrack, users in the collection are populated with \"user_ids\". The alert will be sent to the users (according to the addresses configured in SecureTrack) and to the emails.
To get the domain_id (optional parameter), call /domains/ API and use the ID included within the returned domain DTO.
At least one severity should be marked as 'true'.
There are no default values

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/alerts
BODY{
    \"usp_alert_configuration\": {
        \"name\": \"uspAlert\",
        \"description\": \"description\",
        \"status\": \"ACTIVE\",
        \"domain_id\": 6,
        \"all_devices\": false,
        \"device_ids\": {
            \"device_id\": [
                1,
                2,
                3,
                4
            ]
        },
        \"low_severity\": true,
        \"medium_severity\": true,
        \"high_severity\": true,
        \"critical_severity\": false,
        \"user_ids\": {
            \"user_id\": [
                \"moshe\",
                \"admin\"
                ]
        },
        \"emails\": \"user@doamin.com\",
        \"send_syslog\": true
    }
}


Response Messages:
201: Security policy alert id :|'alertId'| , name : 'alertName'
412: Alert name not specified
409: Alert name specified already exists
412: Status not specified
412: Domain not specified
404: Domain specified does not exist
403: User is not authorized to configure alerts for domain 'domainId'
412: Device not specified
404: Device ID specified does not exist or belongs to a different domain
403: Device: 'deviceId' not supported for USP
412: Severity not specified
412: No recipient details entered for alert
412: Invalid email address. Format must be name@domain.com
404: Username: 'userName' does not exist
403: User is not authorized to configure alerts for Super Admin user: 'userName'
403: Username: 'userName' not valid for the specified domain"},"response":[]},{"name":"Delete alerts by ids","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"ids"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/alerts/{{ids}}","description":"Delete specified alerts by IDs
To delete multiple alert_ids, use a comma between each ID

Parameters:
context: Delete alerts in the specified domain ID. [optional]
ids: The alert Ids for deletion

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/87

Usage Example
https://192.168.1.1/securetrack/api/security_policies/alerts/86,87,88

Response Messages:
200:
403: Security Policy Alert Ids: :|'alert ids'| don't exist"},"response":[]}]},{"name":"Unified Security Policy - Cloud Tag Policy","item":[{"name":"Delete cloud tag policy","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Delete the cloud tag policy specified by policyId.

If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Delete policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT {
        \"status\": \"OK\",
        \"policy_name\": \"myPolicyName\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Get cloud tag policy","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"This API retrieves the details of the cloud tag policy specified by policyId.

User must have admin permissions to the policy affiliated domain. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]
policyId: cloud tag policy id [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/policyId
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicyName\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryTagsRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                    \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Replace a cloud tag policy","request":{"method":"PUT","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Replace the cloud tag policy specified by policyID with the new policy attributes.

Use PATCH in order to partially modify a policy. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Replace policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}

"},"response":[]},{"name":"Modify a cloud tag policy","request":{"method":"PATCH","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":"{\n\t\"policy_name\": \"myPolicyName\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_requirement1\",\n\t\t\t\"requirement_severity\": \"CRTICAL\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Role\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/{{policyId}}","description":"Partially modify a cloud tag policy by stating the modified attributes. Providing requirements replaces the entire list.

Specifying an empty requirement list is not permitted. Modify some attributes of the cloud tag policy specified by policyID with the attributes provided. If one or more \"requirement\" objects is provided, the exsiting \"requirement\" objects will be deleted and replaced with the new objetcs. Specifying an empty requirement list is not permitted.If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Rename policy of the specified domain ID [optional]
policyId: cloud tag policy id [optional]
body: cloud tag policy dTO [optional]

Usage Example
URLhttps://{ip}/securetrack/api/tagpolicy/policies/policyId
BODY{
    \"policy_name\": \"myPolicyName\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_requirement1\",
            \"requirement_severity\": \"CRTICAL\",
            \"tags\": [
                \"Owner\",
                \"Role\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Get all cloud tag policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","description":"This API returns the details of all the tag policies.

Results are filtered according to user domain permissions and request context. If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Returns results for the specified domain ID [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
OUTPUT{
        \"status\": \"OK\",
        \"result\": [
                {
                        \"policy_id\": \"tp-101\",
                        \"policy_name\": \"myPolicy1\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\",
                                                \"Name\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                },
                {
                        \"policy_id\": \"tp-102\",
                        \"policy_name\": \"myPolicy2\",
                        \"requirements\": [
                                {
                                        \"requirement_type\": \"mandatory_tags\",
                                        \"requirement_name\": \"myMandatoryRequirement\",
                                        \"requirement_severity\": \"HIGH\",
                                        \"tags\": [
                                                \"Owner\"
                                        ]
                                },
                                {
                                        \"requirement_type\": \"valid_values\",
                                        \"requirement_name\": \"myValidValueRequirement\",
                                        \"requirement_severity\": \"CRTICAL\",
                                        \"tag\": \"Budget\",
                                        \"values\": [
                                                \"R&D\",
                                                \"HR\"
                                        ]
                                }
                        ]
                }
        ]
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions"},"response":[]},{"name":"Create a cloud tag policy","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":" {\n\t\"policy_name\": \"Production-VPC-Tag-Policy\",\n\t\"policy_description\": \"Instances tags in production\",\n\t\"requirements\": [\n\t\t{\n\t\t\t\"requirement_type\": \"mandatory_tags\",\n\t\t\t\"requirement_name\": \"mandatory_financial_tags\",\n\t\t\t\"requirement_severity\": \"HIGH\",\n\t\t\t\"tags\": [\n\t\t\t\t\"Owner\",\n\t\t\t\t\"Budget\"\n\t\t\t]\n\t\t},\n\t\t{\n\t\t\t\"requirement_type\": \"valid_values\",\n\t\t\t\"requirement_name\": \"budget_valid_values\",\n\t\t\t\"requirement_severity\": \"CRITICAL\",\n\t\t\t\"tag\": \"Budget\",\n\t\t\t\"values\": [\n\t\t\t\t\"Corporate\",\n\t\t\t\t\"Dev\"\n\t\t\t]\n\t\t}\n\t]\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/policies/","description":"Create a new cloud tag policy. The policyName field specified in the TagPolicyDTO must be unique. Define the requirements enforced by the cloud tag policy in the requirements field of the TagPolicyDTO. The supported value for the \"requirement_type\" field are \"mandatory_tags\" and \"valid_values\"If the return code is not OK, the errorMessage field of the TagPolicyResponseDTO may contain additional details describing the cause of the error.

Parameters:
context: Create policy for the specified domain ID [optional]
body: cloud tag policy DTO [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/policies/
BODY {
    \"policy_name\": \"Production-VPC-Tag-Policy\",
    \"policy_description\": \"Instances tags in production\",
    \"requirements\": [
        {
            \"requirement_type\": \"mandatory_tags\",
            \"requirement_name\": \"mandatory_financial_tags\",
            \"requirement_severity\": \"HIGH\",
            \"tags\": [
                \"Owner\",
                \"Budget\"
            ]
        },
        {
            \"requirement_type\": \"valid_values\",
            \"requirement_name\": \"budget_valid_values\",
            \"requirement_severity\": \"CRITICAL\",
            \"tag\": \"Budget\",
            \"values\": [
                \"Corporate\",
                \"Dev\"
            ]
        }
    ]
}
OUTPUT{
        \"status\": \"OK\",
        \"policy_id\": \"tp-123\"
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
409: Policy name already exists"},"response":[]},{"name":"Check if tags are compliant with cloud tag policies","request":{"method":"POST","header":[{"key":"Accept","value":"application/json"},{"key":"Content-Type","value":"application/json"}],"body":{"mode":"raw","raw":" {\n\t\"type\": \"vm\",\n\t\"name\": \"CRM-FE\",\n\t\"os\": \"ubuntu14.4\",\n\t\"image\": \"AMI-12345\",\n\t\"tags\": {\n\t\t\"Role\": \"webserver\",\n\t\t\"Budget\": \"corporate\",\n\t\t\"Owner\": \"Steve.Smith\"\n\t}\n}"},"url":"https://{{SecureTrack_IP}}/securetrack/api/violation_check/","description":"Check if the tags of a cloud resource are compliant with the specified cloud tag policy. Specify the tag policy to validate in the TagPolicyViolationsCheckRequestDTO. The tags of a cloud resource are specified as a json object with the attribute 'tags' at the root level. 'tags' attributes can be a list of tag names or a map including both the tag name and value. If no tags are specified or if the tag is specified incorrectly, The compliance check will treat the resource as if it has no tags. If no cloud tag policy violations are found the API returns an empty violations list.

Parameters:
context: Returns results for the specified domain ID [optional]
policy_external_id: Tag policy external identifier
body: Tag policy violation check request

Usage Example
URLhttps://192.168.1.1/securetrack/api/tagpolicy/violation_check?policy_external_id=policyId
BODY {
    \"type\": \"vm\",
    \"name\": \"CRM-FE\",
    \"os\": \"ubuntu14.4\",
    \"image\": \"AMI-12345\",
    \"tags\": {
        \"Role\": \"webserver\",
        \"Budget\": \"corporate\",
        \"Owner\": \"Steve.Smith\"
    }
}


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Resource not found"},"response":[]},{"name":"Get all cloud tag policy violations for a VPC","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"severity"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/tag_violations/","description":"Retrieve all cloud tag policy violations for the specified VPC and severity level.

Parameters:
context: Global MSSP context. [optional]
deviceId: The device ID for which to get violations
severity: Return only violations of this severity
resourceId: The id of the VM instance [optional]
start: Returns the results beginning with the specified result number. [optional]
count: Returns the specified number of results. If this field is not added or if a number greater than 100 is specified, the query uses \"count=100\". [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/tag_violations?deviceId=123&severity=CRITICAL
OUTPUT<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>
<tag_policy_device_violations>
    <violating_resources_count>2</violating_resources_count>
    <device_name>Amazon Test VPC </device_name>
    <severity>critical</severity>
    <violating_resources>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Name' value 'email server' is not valid. Valid values are [R&D, HR]</violation_message>
                    <policy_id>tp-100</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>validValue_constraint2</requirement_name>
                    <requirement_severity>high</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"valid_values\">
                        <tag>Name</tag>
                        <valid_values>
                            <valid_value>R&D</valid_value>
                            <valid_value>HR</valid_value>
                        </valid_values>
                        <invalid_value>email server</invalid_value>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-abc12345</resource_id>
            <resource_name>email server</resource_name>
        </violating_resource>
        <violating_resource>
            <tag_violations>
                <tag_violation>
                    <violation_message>Tag 'Application' is missing</violation_message>
                    <policy_id>tp-105</policy_id>
                    <policy_name>Tag policy 1</policy_name>
                    <requirement_name>mandatory_constraint1</requirement_name>
                    <requirement_severity>critical</requirement_severity>
                    <violation_attributes xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"mandatory_tags\">
                        <missing_tag>Application</missing_tag>
                    </violation_attributes>
                </tag_violation>
            </tag_violations>
            <resource_id>i-12345678</resource_id>
            <resource_name>Violations tests server</resource_name>
        </violating_resource>
    </violating_resources>
</tag_policy_device_violations>


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: A device with the specified ID was not found"},"response":[]}]},{"name":"Unified Security Policy - Exceptions","item":[{"name":"Delete an exception","request":{"method":"DELETE","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","description":"Delete the specific unified security policy exceptions

Parameters:
exceptionId: The ID of the exception to delete.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
404: The security policy with the specified ID does not exist
403: Not permitted to access this context."},"response":[]},{"name":"Get a specific exception","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}","description":"Gets a specific exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
exceptionId: The ID of the exception to get.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/14

Response Messages:
403: Not permitted to access this context.
404: A security policy exception with the specified ID was not found."},"response":[]},{"name":"Get matching rules task status","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/status/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/status/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task status was received.
403: Not permitted to Security policy exceptions.
404: Matching rules task status was not found."},"response":[]},{"name":"Start a task to calculate matching rules for an exception","request":{"method":"POST","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"exceptionId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/{{exceptionId}}/matching_rules/start","description":"Create a calculation task to find matching rules.
The results will be on the relevant devices for each access.
Returns a task Id that can be used to check the task status and get the task results

Parameters:
exceptionId: Security policy Exception ID on which to run the API.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/1/matching_rules/start

Response Messages:
403: Not permitted to Security policy exceptions.
404: A security policy exception with the specified ID was not found."},"response":[]},{"name":"Create an exception","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n\n\tadmin\n\tst_user\n\t2015-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\t\n\t\t\n\t\t\tCreating USP exception for ticket 123\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.2\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\tLAN\n\t\t\t\t\tcorporate security policy\n\t\t\t\t\tDMZ\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t4321\n\t\t\t\t\t\ttcp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t1\n\t\t\t\t\t\t{5aa1c104-bd4d-4635-a281-b3a5442639ba}\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\thttp\n\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t10\n\t\t\t\t\t\t20\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\t\n\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t192.168.1.1\n\t\t\t\t\t\t255.255.255.255\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\n\t\t\n\t\n\t2025-01-01\n\tAllow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321\n\tadmin\n\t123\n"},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","description":"Create an exception for unified security policies.

Parameters:
context: Global MSSP context [optional]
body [optional]

Usage Example
URLhttps://192.168.1.1/securetrack/api/security_policies/exceptions
BODY<?xml version=\"1.0\" encoding=\"UTF-8\"?>
<security_policy_exception>
    <approved_by>admin</approved_by>
    <created_by>st_user</created_by>
    <creation_date>2015-01-01</creation_date>
    <description>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</description>
    <exempted_traffic_list>
        <exempted_traffic>
            <comment>Creating USP exception for ticket 123</comment>
            <dest_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.2</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </dest_network_collection>
            <security_requirements>
                <zone_to_zone_security_requirement>
                    <from_zone>LAN</from_zone>
                    <policy_name>corporate security policy</policy_name>
                    <to_zone>DMZ</to_zone>
                </zone_to_zone_security_requirement>
            </security_requirements>
            <service_collection>
                <service_items>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"custom\">
                        <port>4321</port>
                        <protocol>tcp</protocol>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"device_service\">
                        <mgmt_id>1</mgmt_id>
                        <service_uid>{5aa1c104-bd4d-4635-a281-b3a5442639ba}</service_uid>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"predefined\">
                        <predefined_service_name>http</predefined_service_name>
                    </service_item>
                    <service_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"range_service\">
                        <minProtocol>10</minProtocol>
                        <maxProtocol>20</maxProtocol>
                    </service_item>
                </service_items>
            </service_collection>
            <source_network_collection>
                <network_items>
                    <network_item xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xsi:type=\"subnet\">
                        <ip>192.168.1.1</ip>
                        <netmask>255.255.255.255</netmask>
                    </network_item>
                </network_items>
            </source_network_collection>
        </exempted_traffic>
    </exempted_traffic_list>
    <expiration_date>2025-01-01</expiration_date>
    <name>Allow traffic from 192.168.1.1 to 192.168.1.2 on TCP port 4321</name>
    <requested_by>admin</requested_by>
    <ticket_id>123</ticket_id>
</security_policy_exception>


Response Messages:
400: The specified network item is not valid.
400: The specified zone name does not exist.
400: The security policy with the specified name does not exist
400: The security policy 'created by' user is not valid.
400: The security policy with the specified name already exists.
400: Network Object of device id =|device_id| , with uid = |domain_id| does not exist
400: The from zone name = |from_zone_name| does not exist
400: The to zone name = |to_zone_name| does not exist
400: The security policy name = |security_policy_name| does not exist
400: The security policy 'created by' user = |user_name| is not valid
400: The security policy exception cannot be created
403: Not permitted to access this context.
401: The user does not have permission to this action."},"response":[]},{"name":"Get all exceptions","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/","description":"Gets a list of all unified security policy exceptions.

Parameters:
context: Global MSSP context [optional]
start: Starting page for query allowable type is numeric [optional]
count: Number of pages for query starting from starting page allowable type in numeric [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions?context=1&start=0&count=1

Response Messages:
403: Not permitted to access this context."},"response":[]},{"name":"Get matching rules task results","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/result/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/result/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
200: Matching rules task results were received.
403: Not permitted to Security policy exceptions.
404: An error occurred during the calculation.
404: The calculation for the task has not finished yet."},"response":[]},{"name":"Cancel Matching rules task","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"taskId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/exceptions/matching_rules/{{taskId}}","description":"Parameters:
taskId: The unique identifier of the matching rules task.

Usage Example
https://192.168.1.1/securetrack/api/security_policies/exceptions/matching_rules/2d8e0a3c-2b07-42b8-b501-336fe74080a3

Response Messages:
204: Matching rules task has been aborted successfully.
403: Not permitted to Security policy exceptions.
404: Matching rules task was not found."},"response":[]}]},{"name":"Unified Security Policy - Security Zone Matrix","item":[{"name":"Delete unified security policy","request":{"method":"DELETE","header":[],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"id"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}","description":"Delete a Security Policy Matrix

Parameters:
context: Returns results for the specified domain ID. [optional]
id: The unique identifier of the security policy matrix to delete
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1
"},"response":[]},{"name":"Get global unified security policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/global","description":"Fetches the global security zone matrices defined under Unified Security Policy.

Parameters:
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/global

Response Messages:
403: User not permitted to access global security policies"},"response":[]},{"name":"Get zone to interface mapping","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/mapping","description":"Fetches mapping of SecureTrack zones to device interfaces

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID

Usage Example
https://127.0.0.1/securetrack/api/security_policies/9/mapping

Response Messages:
200: Successful
400: This device does not support zone to interface mapping
403: User not permitted to access the specified domain
404: Device ID: <deviceId> does not exist
404: Access denied for device with ID: <deviceId>"},"response":[]},{"name":"Set manual device mapping","request":{"method":"POST","header":[{"key":"Content-Type","value":"application/xml"}],"body":{"mode":"raw","raw":"\n \n Vlan_30\n \n \n 10\n add\n \n \n \n\n "},"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{deviceId}}/manual_mapping","description":"Add or remove a zone on a device interface

Parameters:
context: Global MSSP context [optional]
deviceId: Device ID
body: InterfacesManualMappingsDTO

Usage Example
URLhttps://127.0.0.1/securetrack/api/security_policies/10/manual_mapping
BODY<interfaces_manual_mappings>
<interface_manual_mapping>
<interface_name>Vlan_30</interface_name>
<zones_user_actions>
<zone_user_action>
<zoneId>10</zoneId>
<action>add</action>
</zone_user_action>
</zones_user_actions>
</interface_manual_mapping>
</interfaces_manual_mappings>


Response Messages:
200: Successful
400: Invalid request
403: Insufficient user permissions
404: Not found error
404: User action not valid (only add/remove)
404: No interface with name for device with id
404: No zone with id
404: No revision for device with id
404: Device ID: <deviceId> does not exist
404: Access denied for device with ID: <deviceId>
404: InterfacesManualMappingsDTO is empty
404: Error on updating security_policy_interface_zone_mapping_user_action table for device with ID"},"response":[]},{"name":"Get unified security policy as CSV","request":{"method":"GET","header":[],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/{{id}}/export","description":"Exports a Security Policy in CSV format

Parameters:
context: Returns results for the specified domain ID. [optional]
id: ID of the security policy. [optional]
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies/1/export

Response Messages:
403: User not permitted to access the specified domain
404: Security Policy does not exist"},"response":[]},{"name":"Get unified security policies","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"url":"https://{{SecureTrack_IP}}/securetrack/api/security_policies/","description":"Fetches the security zone matrices defined under Unified Security Policy.

Parameters:
context: Returns results for the specified domain ID. [optional]
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/security_policies

Response Messages:
403: User not permitted to access the specified domain"},"response":[]}]},{"name":"Unified Security Policy - Violations","item":[{"name":"Get the violating rules for the specified device.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"},{"value":null,"type":"text","key":"severity"},{"value":null,"type":"text","key":"type"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/device_violations","description":"policyName is supported for management devices running in Advanced management mode.

Parameters:
deviceId: The device ID for which to get violations
policyName: Return only violations that match this policy [optional]
severity: Return only violations of this severity
type: Return only violations of this type
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/device_violations?policyName=policy_name&type=SECURITY_POLICY&severity=MEDIUM

Response Messages:
200: The violations were successfully retrieved
400: The specified value for the violation severity is invalid
400: The specified value for the violation type is invalid
400: You cannot specify a policyName because the device is not running in Advanced management mode
404: A device with the specified ID was not found
404: A policy with the specified policyName was not found for this device"},"response":[]},{"name":"Get the amount of violating rules for the specified device.","request":{"method":"GET","header":[{"key":"Accept","value":"application/json"}],"body":{"mode":"formdata","formdata":[{"value":null,"type":"text","key":"deviceId"}]},"url":"https://{{SecureTrack_IP}}/securetrack/api/violating_rules/{{deviceId}}/count","description":"Parameters:
deviceId: The device ID for which to get violations.
ignoreSecureTrack2Data [optional]

Usage Example
https://192.168.1.1/securetrack/api/violating_rules/1/count

Response Messages:
200: The violation count was successfully retrieved
404: Device with id: <deviceId> doesn't exist"},"response":[]}]}]} \ No newline at end of file diff --git a/Postman Format v2/R21-1 postman collection/tufin.postman_environment b/Postman Format v2/R21-1 postman collection/tufin.postman_environment new file mode 100644 index 0000000..c031d2b --- /dev/null +++ b/Postman Format v2/R21-1 postman collection/tufin.postman_environment @@ -0,0 +1 @@ +{"name":"Tufin environment","values":[{"type":"text","key":"SecureApp_IP"},{"type":"text","key":"SecureChange_IP"},{"type":"text","key":"SecureTrack_IP"},{"type":"text","key":"applicationId"},{"type":"text","key":"applicationInterfaceId"},{"type":"text","key":"application_id"},{"type":"text","key":"application_pack_id"},{"type":"text","key":"assigneeId"},{"type":"text","key":"child_id"},{"type":"text","key":"child_ids"},{"type":"text","key":"cleanup_id"},{"type":"text","key":"cloudId"},{"type":"text","key":"cloud_id"},{"type":"text","key":"connectionId"},{"type":"text","key":"connectionInterfaceId"},{"type":"text","key":"connectionToApplicationId"},{"type":"text","key":"connection_id"},{"type":"text","key":"connection_to_application_pack_id"},{"type":"text","key":"customer_id"},{"type":"text","key":"deviceId"},{"type":"text","key":"device_id"},{"type":"text","key":"domainId"},{"type":"text","key":"exceptionId"},{"type":"text","key":"fieldId"},{"type":"text","key":"id"},{"type":"text","key":"ids"},{"type":"text","key":"inId"},{"type":"text","key":"instructionId"},{"type":"text","key":"interfaceCustomerId"},{"type":"text","key":"layer2DataId"},{"type":"text","key":"managementId"},{"type":"text","key":"mgmtId"},{"type":"text","key":"parent_id"},{"type":"text","key":"parent_ids"},{"type":"text","key":"policyId"},{"type":"text","key":"requestId"},{"type":"text","key":"revId"},{"type":"text","key":"revision_id"},{"type":"text","key":"risk_id"},{"type":"text","key":"routeId"},{"type":"text","key":"ruleId"},{"type":"text","key":"rule_id"},{"type":"text","key":"rule_uid"},{"type":"text","key":"serverId"},{"type":"text","key":"serviceId"},{"type":"text","key":"sourceApplicationId"},{"type":"text","key":"stepId"},{"type":"text","key":"tag_id"},{"type":"text","key":"targetApplicationId"},{"type":"text","key":"taskId"},{"type":"text","key":"task_id"},{"type":"text","key":"task_uid"},{"type":"text","key":"toStepId"},{"type":"text","key":"uid"},{"type":"text","key":"userId"},{"type":"text","key":"vpnId"},{"type":"text","key":"zone_id"},{"type":"text","key":"zone_ids"}]} \ No newline at end of file diff --git a/R19-3 postman collection.zip b/R19-3 postman collection.zip deleted file mode 100644 index 7546144a343cbd8cdf6525ab14d44c3de9e12337..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 129410 zcmV(@K-RxdO9KQH000080PmnEP}`WwT~k5<04gC703rYY0CQzyb#i56Xkl(=Wp{6K zYi4Y3cVAL5IW03SM?o%Xb8l|!9cypfHt??q`7mri9b0}U^Ri`WwsmN`pzB^(hd{BE zM2jqWdMpi!{rBDRskbOw@}o71Dkq9O9*^YR@s6ZF9Nl`3Y5Bp?>7O5tJRd-Sj`|(F zqaQsZfBWq3fc+h^zoVnSo*m6S$Fb(2?YS?^qtheI>lzCS!1MXs3IgrQ^Fzadio4vaW3=D>slQx2TeXrmii{;e^uXyY*5#!+VgWK%%rK%WBx4%FcGEBnqTP$?m! zG$G^809ZnSF$X3bm~!BR0mB{#bPn`6FyO$D10xQMIWXbClmi^|sK)`F1AX<@Um5d< z@-7&sTR!QGYRs7{%QbEHPP@1_+`Ee2o}{aqc1FMx3XIh2{MqvV1sSD%Zp?iTgo@!f znjyajUzAcYO;d5w89_f#V8VeZ2Tm9;?r}ipK%WCO_$6q+d5Y6qPVz~bWWCoJ1Lqht z63|#c69G*HRAc@knfBZQI`16s#&AmLBgiuZ>YWKNj6u49`T`mVsK#WLWI5ivk}5qz z6^ub(7K6qDnh0pBPRlO=^kX>z{R{zv&IAS&g{D0L=>qBtXds}WfJOou3uq#ssesgb zx}pVxObdpc6QG+xx_~NV(uLziCMwv#bFA_zhnXrzofBXNgN6bc31}>!iGZd8I;kKn z3PNvD*_WdXSz{RYzzPoP60Bgxb8lhTRh%DZ>YD)O3Q6WrHS}3Z_s2 zu$O})363Q=DW~9PYaaO))dt#g3ukKu9n%aQCr}M^9|unasP`nOORz7&3jR>(3v|uB z#lj8($O6i%oW6|k?f0M};1dT&6?HxZp|!xVe{0`G3bshUm#GoVZ#4NhIFaB~sq$)B z)z6yU&~`K?8QAYhP?um|f&&Q-B{-7cxSZCv_WZ#LwU_p-HGi6yi3x%*LoZn2XtZ*0 zD!~&04tf&QCD@nXK!QUFjwCpi;6#E`3Ch}rJqhX(>`QPU!J!045*$l#BEhKyWo@IL z1a%4aRk&U;I6w^m5}$shi^F@%z=a}P+AYJ=xH;4PJMi3huB_#a75cXIucaBTX1%wA z5T;$cfM(G3A*(_I>*&REC~g{|L8|-La3VnDMvn9BD12HX($IPzLLSRCZXCk~fLoE0oNc$x)K=@w1Hx^6B;>6vD;W9YwcJ-6~ zu|A$2>&JRGAi{c1g!QB6KioRrW7k;P>;qKR^{u5B*rDe?b>k*>SC7A5Q&O%ODeyH$ z%^NFNLJ3QI1zCVF$**Cr2hB~j>d`=h9x6AVG}Cf`!{#x~teyREx;8GmlqL z36S}P3zLY5K9t2N{36$d;iB-2*bFa{vLgTaoYXw0#cnLkS}emS6ua3%8B!>73p2|` zvgOE~??p@072wo(AgwU%VD7=Er)tgDsNxzRU3OAa!s{}+aqQrp*leJDLeyNLzIkR@=nVI zgzhyFy4P_#Ch+|aq0l|}W?(Ei)AUDD6LSvPzuQV>%Z zq#jySRhO@&%JoX`U=ZCb>~M8ePFo2hJ*{_TmLI$zgxO1$A1|)b`I7bGIt6Bp$+>2F z7KzJHzep-BQ(n|21%YxH>W(?ByAg05duLX%03^&uYx>8K2tw2DJj9EFX4Kn;4pF-2o;4T5NPl)q4ST@B)h{AldJT z`t@O4!WMzvaXY#(ql8!2Ua4XR{D*QehO=^96udrvb*bQ2?{8Q;o z%RDW_{c}Y7LW>L=dX#avLB()wueM!;5<)Soq+6g^#@uH9CV^XKqDd@|Ts@KkSDAH6AEPdPa?eGcn zzDA?PAvk!l3JT8S%Dg2waOz$hPqE2!A9_~Iw$HrS%n*`uY?XziH^Csme+l93N_F&ZgBcOu)lgo zv@1xx$H&Lx$HB4Z-*qAMp?80O_44QWy|pkpwo5ICcSjnOI7Nj3#ZVz!8z2JT9qnv; z73RdZQDD1h2K^WXu%2PkyS>@b_7e!lo_KNXsBcwMN+16A8po zTJ6N#*0b?xM6m7mJi78dvZ3NNS>SvW^XK9XoG==Vdxt5r{1x}hw)On9X3xTK!KLKy_q1V+(4d*Nv)9vx*krOr--OYv?H)ty z@nEs3Kar9RyDhNFRy;O{cs<_}Vo-9!VMaBFpWGx9bmMznsDZThz82#4CVN6szpIOGR3{8$rHiZ?_z(+90OcA-{qeTpy&w$>!Kqh$8t@*Lc0Ei+uc zU)rn@RH4{(2a)Y3_5qQ7L>vnXmyqzah=M_JA9?~uk1Y3{NJEODn`9Y)EDeWsvSVco zjytKvE+OQ3Xy7KH^j;@Ux|<;+%WWJGg&0DJ@FinYBs?#JkO^XW7Ak1?c_7%;Fee;g z=}49woRl!OaX_>&mrxp?!F)87iiHe{6gW9IupxFxJIpXU$XOW%eVLd5rzAXCd}0aT za6<-k3ZT9>9H@zgc#h*oo>&w#1TrAD39Yx6h8rgNE}LfuqJ5R&S)B42-eUlm&hKU9 z12+QvM8|XNrW_G9ZZD=>eA){=kYryKZEtq_+Cc1dpBDu^X;B&D;+>n?TEfHw6DGJJ zoqe;+=Ia9S$hM1VH&G}N-BYm%#VnUgX6?xeo1uWk**ye_Y-6RFOiXMK#Ek?v^yW?k zaoIH1ecLN1iqU-=B4_sU3ZOHCPhq!RKfBwG@RseYV*%B(oPg_$MO#@;p?S|D*j6Xr z=tr(!&S;=?CZeSDGZzPZLp_@4XZZom8L{8l=K4gr88J`@$X*C65yk_86phS4>?ryw z6Ue(rp;DWs$<)SHTd@dJq7F%ae(;92BwGaWo#h5aW@NFDZU{At+if1fR@lCzQ@ylZ z+*!SqrU;L0VM~Owv#1f^B0MW}BF@l*xZyS>J!ORrOE{s58YlcXXVkeflb)Row~8&5 z3!9U04wMeK%%WR)y+uB6B&AM~uxgL zSBb&4f5HdU)I3v-xw^SMq5W9zs+<;-xhwsQn#K#P7cwGvWQril}Sg z);0FG${Kt3XunXVT}97ta&%L9hp1V)A2xKF&sJqDVdmlVY;`lx3V4MBOSbR;H#lgKCNEF6-Z#?2_ z;FV(dEY6^2Y4|zIH%0>GG1g872f+0>Mh8^9P)^_QY{|}f{YPF^0a8geH}H@o?^#le zMaTmj@^ki+IV$00=~2prK1I6_Gvh*Q7mThK1JCiM?OAxXesEO|XzJJ3v{({J!8974 zh&v2ubV6hh7nS5W6~v7sGCP}GBq5PRQbd}(*-YkRnoXhTpuDI|2xJPGOEN{K<>1#d z_+`#SN}`6C7^11!bcLFdxwEOVJ7ZeBP7i-edw5MO7Zghi9iQ&KG>P%ojo)3T?nORH zg`ZY-Bg5st`|n16NnOYX_wib`e>2PcgDbiQ@}_aCbns5ELU)yE2Uql(&x0$v29}k% ze{e;w_574w(ak7_{da3OBkvC`a`k7E+wfoO@o_>?cs{#D9XeNxn!~}QHhkyYe|zwze>&cD z&g!Q9>%1Qh9`}_!?s{+4pNFaVrF%)jF8s1RrDk&ud|IDUNt$&lKg}ttR{#C_7A%LI zJG9Y|*4(iZ9Emewl|P{iqCs!yOa~3dwQ)=M$1V+M9PmO}LToAgSNWUnb$wY4MB5sV zsx{)EYSR(bq{FE}$I^N@R2tiiS5vXEHN9nxM4wuXGBp{2s24S=869da3eENV2IB5?~+Jlq!;H2Hca#O)coA#qs`d@2#Uo-BttaB~vT9baX zib8{;LTO)I#@Cwlv}V1ZSubnG$C~e9O{Z4iPv*?^tS0@RTXY@Pb{O?#LTs^;hdHMFTPV^&%yUmtgQz;SJRv_J~ z-&rACua+ElGGEGfD;qxO=)m8UP-s+V4}#o4SRmot}76?I|u9;%XS zf0J{4P-nIjT@EK!dTpK7S;07nW8l5ms$*}L(3T&78Rwtsa z@HtDOYFbJ5r>lho~WjDOhTp^XhW0>(}L#E0SL zIC6LF>_;B^RzyV`w)Y+e+KhV0ID)Olr|bC}6hqj1>3iLZUP}d#SHdOofBY_4D3CML zDkIY%qbF%+ZFVCKuW@&_)EwmOLC&tUERSy*QrM=`s6ag|Z`4KiK@DtJ4NNOHC@F{S z_!&(1pg2A;#lgafE2@^=jV4weI$b#|7z_W=X=7^mt{(ntAk5cZI8Po-J6Si5Q6oNA zCl1#{ysgDBkzimm{8OZ|R$NEMZ(@VEAcj*JifJPflXF-wm9^>Pe219HA!c%jnS9!d zid7>q5F_BhmbgJ6f-R{~OE%C#PJ*4Vm_{nfl8mvWBP{$qg)D_j=8$j6Unb{-=S4?S zA&~8zJ=^+%>m+%AZRJgpIXB+Ket&EGD=taaTkm|+KW>qzyat+FUZz$#McH<3sS_Km z*P(aKzN)WlWO-R!>28Qd7B^YjGN0?KY!{*iPqm3#iDG38m3IHIDZ5{RNSQTA80xtL zpb2aJBCjJ$O!n8M*7mz$! z$IfoD-7jf3u_v};kHHk2{;R(BPLR%i)Ao#vZ)=8C zr1p`Udbi=-WC`zzvV2N_dgQ8jJ2Uh>Gx*qPvj-!zy|M&EG>;q|EYUbBsvA<;m#!K> z&}$>p6m;k_#71BP`Zn{)x$%q6NT|qV5_Jc_h03W_lAlc1IjN!O|h*O;zSz(M?L zyqw9Zgh9C;0e*|Mah5erq${Q{Ybu6dG}Gw~E7GLBZi;k-C`y&YjX<`vUhBS_-aImc z7k%5}9e|5X;T;-)TChPXw5HG&r5Ljt<(u%VFfCH#XbO3UT&5vztHqFo{YcXOj8AJ-eNCf?>!i)s zkLQq_oSYGzrAG%RI*!vKx7>3vJ#<+vqx_&}K&Wx*RQ-FJ(?(3W7n2DaPI(1Lu0h*L zdDxS(8y>VII;I#=Ajnf58K2>JIjszqp+iLuhQmouJ|@~$AA*0$b|Gcm4ILL!ql7}% zr4u)Op;99qand&$hqkmoZom!NSvX0v0GcvSa+dMznxTrTam3pG_HgInnxHl;9(+qM_BJiX( zBzwM5gYlXs$DUP{pZ(!ukzvhP17bjCFlov9IJx`X z;EGoi`4*dAMc#r*+OWdtiTrdluu&BOI#v-Nf|lf{iBb6qti`12tAwFtl*Twqh=gtP zeG8Y9G25wmis`d44*G43-ThIu#-V*{&`NwtF%9~K|MKYxWNP4;zX0m`Gly5`AfYID zD_D5Ed+3wZYx99Zg2&a+0JRl5KiQ&R6vMh~FG1~OPr41WC$RYRCS4y}S;KOaGJ7E% zZ>q{_~AK#T*Piz#Uwox227c2~_Vjm7#`{1%G&n82hTyq|@jCLrwx{J?O?T5DH1{=&uED2W%iigKv0u(Tl)}?cRZaayZ)O+*IcM4DH|f z_c{3B!=D$}OhRzXcJ$eLL2RP%+j6*xH3sV~dGpR@>Bu%#)-w-~bi5Lv^)wORr)@1? z^P4GGxG_@}cgr_f5U~SX(1|bb#hV{5&fi$NSa_XQo|QKQ!du#5#6hCCrX<9-&2zu3 z!W;NZ4bUw>4NL<{KQK}V{FXA$Lt}Yx=1X-3_tA+$D_Bt5f*aVeIrEg8kau=FSCvB z1J7aQ=fJa&bC`G7DxKKu3~qbvWn0ZtnTuUuUjmJd;L~rxvdoy%vh$3&yB+&zX}@J& zeRuQfZD3jGXV%|Ne6)18GPks}eB{js;Cm*Hy5XN!CEv0)ZuaNNDLed>q~BNUQ8iau z+GWkp=8O}0PA4A4sjPpOX{cHE21!_)*_jp+>aR1@S0J#WRK<=pf;)2ML~tmm%3Y;f zK^9~9N38(5ltst}C2ba)lWY6Mb|>8paySwLo)mGR*>A6DpK>%qeYaGr{mfgW+VrQ| zNz1%fuB4ao6Mm|2?6V5H`)jGg39$~Ew~AW>-*@JPByZRpdfa2)FkEGX8_H=oN$!5V z5q$t_k6I9KimwCr*2n|h0y+$*B(F8i`0CA1*KfYNJo}ntZo;fC+P&B;5qLEJ0*|6I z6?1$T;nZ1}b34)$ixY0o`Pg&!Y7zL@s(07}u{I3Gx-oC5(~mq6hZOv-iW8`d-WK-j zP1H?amp#R>EH@Di2iLQ@q68;GR}|oZ%T=~Yo8}j(Fh{)|T65|?BG!p_V+mlN)zX}< z6RsAumArDYw)T{*n2Q2P^l=<@z3FX9OyZ{nfqlb>^pG)JOh$Vrq(l`RyK$f}5$2cK zUi~8Y#6n_HYLh_Pw^8`y$RL9v2%pOK>KBkE77~+Eo5Y#H7>A+*s3_ttxCs|6?qGpxY#qzQ#n1n;+k z$p!9c%XqDs0(nsiUXxiGqfIMC#`oHpQ&)_DeSe>&;1UUifX(tmL5h^e-P;-kNL-9r z^|FoNzo|u8>r*xB1~n3&mekmo*l`OA7)j4_z)G@+OY}wiCwpisB$GR|T1qRCe2Qi- z7f5zAe~goixi`x7L{lD>WU0B(V(}ne#Hv~*``!s+F}eiAC>eleP&bi~;Ou3+vQhYS zq&JW2f``?fvgk?+qpqxo;(J9Hl&Fimd}3oABv;c7(g`O9VM=*eP~L?Wg^}Ap0DjU= z0FFXC970gn z2m1LVERJI$Yd@Zzsbq@zqS0|C&)D;_!V~rd#0{hN)_n_+PCrpzas3-eJEN#_aFKCS zGRG$>Rtn@v2?*KA2vx(0@ysKueU7Hn3$Q%y2Nyg;#gg!r9f@l3Y&MohbZ#@LnyZBo zTU5z{1bd8Q_+!tYwwBHz-=};K+bV+`$L%=x*>u`aIUSqB4%QfJ8%(g?kfix65yZxM zvV8p|r!(w`l@$*M$}z3*>&{Vh?pO{UFAv~UJ`PO$Yf$x&T-L4JLxPM$4AUuw>LrCc z+3A3RbI*s`-#~Maz`CZ~PR^3un51m4ep&7OmKh|vw4t%eUchro2{B#wKC&Sl%nSQm zw=&b(zcp3r1gC54Dt{;v!9w!@z&T)p6%r?2jI*n&uP@Het}nj546e@3zoN3!m(9nE zGCBPVwjM+qL?(WN{>+u~R9uqn;I~R|;0RRnbAeu&33004f^F$fL2e7;CZ3))_hD~^ zJ|Gsly(}$H(;?z?T@G6Z`~H&_`0hLO5^uEG5#S#_wC5m=*_R2YW8aXy~al!85b@(o+j@)&sj{mFl97PxkoBK2^ChrjP`RA)b#L3 zDbjf1kB(aNr59uqR=AwwKy6T%Wt_aUd(oxCRe$T(SNOq5dWK?d8}>6sJlvp}OoQua z&lBYM4Prv?a46xNHyVH1VU92jLWgJ~XN_SEeL7_54LSh@Xrn@Ej@X7jOiMV&!l$r2 z_>T$=QIZ*}T0&QvQg?nsxd{%sHv#_c4@vQ37m6Kg?Y0ylZWE;ut;an!yxC2ihg*Xc zC^HKOA81mz&oB@f#jT{mSIG@{{*EA~7@B~I7=e-;5-C6m72ObSOIQwhW>*Ec;Q!Px zhOD0XK$H3OqrqYZl<9ci6AM&MwYUhM*ymm@K!A3p+0M%3Sy|mJgD+}4;Cnk0k7xcI z#q8#7%JBunLu+~RwC*wqdYYjuW~5D?e-4zh8&wZekh8&nG}Lb3^H6nl$jU3hX81WE zX!(FoL9gM$abx($5+%N#y&JVxwPM{JXVp`$ z=zgx{q$)&UZat7F%qFwCTpQ)p8k9`)Y1d4F7(f1>e;WI}(Y^QR$je5S&PBhaUr2|2 zr^6+-y308FMys*9nNk$)o7!6Sj-VHtLx|4Qw*;jyBJ;6+>x>>4gaSJDwAt4WY0g%~ z7*!13Te8NNVC1=zQtB0+wANQ@fEgLd|gkCfTCSLDa!CMJU4EXcibbgy^e6SucO;x zdhKk44+v9n*UhgzTh_}w+c1|Kg~-dvyyZmwOD}t9D5a4h2}V`(`|+V9p~5yy!atT# z5>9nHbdW@cV#_lKK$iYpGD%uWfHuB%Z*nr7GS2!eCZF0~%Z=QW4%r2@Jz0dZo~AKz zki)7{(Z0g~@F;t(RbAnM%cx>;o0yHtDy$SjRl8N%<<$pe<-5G{S1rH1Roqbnw1l7{ zp|~N16>sWN=K4l9we02sz@2J4*3UQZondJZAj*j+7cJhCm9FbA62Z))(83p-j*~FB z;-94yX~51}1n8rlhh)B4BP7P9obw9Y8H2IIW}MKN-uQ}*%}nMocIP)Xk`|kLn(ehe zK4fFV_69{*@F$x^bZ>GEWAOcCmMWCN<_5qFP5MLo(9Pp<&**iN`|dQ8r|Q-mTNYyy zfAE&Yc*|nEWij5e7*m`c{jnJHm8Ei98#iQt2&@T@1?6$ev2*fyjrdrlK2}%y3jJ}N z0J%6J38ID0gCQgW;I9`ZR5Kk?)QBts0xI3Bk^QI9~8Kym8h*T;@-738@L zpSA#xiv(A+!6@3hWMjiV1AvEmdX(+8zk{}nU(NXdF7s(yokd$7*tJT~Y~|}>5=u9j zwqOGYt01Ow#|(&R5HDu$(9oKPY^P`%&nNf`%qvSWjx}R^TWoHG*qkqH_N*-wD+OWG z=YR*=JBC;SLJaLu%}PBC1jgYAAfWO=R`Nz&=5bACk*NGL-5j{+WsQiS3tsePm|>Xn zK#!~GAZPg81UVytAs>8|6&!_6A;)o#k*kHcfzUb$fa&ln%wr}FAmkl5Fx3*gj}PGw z#sBKq7h|Qwuc}_1e$lLwFq@&anqTR^%h(2r*55_BeRq7AqDY&RMEQ{j#g;^(PUP`;I^O;6xXIeBc8Ji`|6A== zEty=o!K>8}uWVc*_i5X< zE*xi{2#tjicAJI7?1C8!s7_NLDIxj1JY}VYLLj6! zX?acfVOT8i$d6crGtBbLr1=>kmnkrm7u(tJ?Gxlz}<~!-`#lNT5+1LN z>M)<1WI7651xfpr^hV!QRx{Uj$?NR+Xos@t9;+z@X=ZzJrMjQfmiN~0=4n@lxz&(T zD;n>MWK7&=(wX$KaPT?En#i`~%as$jf>zIdI6^`2pj8m1SYzZY{Y*{g**b!)$2g2Y z))F81N(-c?Dg5oj&edi+F+WXnp=+Y(ov^7`ezZJ=&JP?$GjRJKn@gS-29)4RU9=zZv)_dHqC9hcD^+Lc@%kV)y3 zuod_NgbVO;dG#(`guyDPCamF5`8bvQlvOY;oLU1mzC1^3#r)MiZunaUAwxV*eVGSud4to8uZq*`ir&2@H!tq4%~a>V%^k4T^9qo2?5fB9b^$K; zJdT&+)a&Er7y~AR0o(YGv0+k=BF+}?B_RkGjGd&9%Cc$XmPud|Tp!IyOxLx-Yn(6c*3L4U8 zb@AYeY?974sLu#}#~N*KoBVU4(V%lrZXJ&FKI8j1tx);nS zFOna^B%Aspx5=L)ae8d#}6m}k=IV^j&4Zy4fo7Ep&F1~t4o>)mf+eJ<=QG`?s?p2Mxrwrt6ND& zR#4AlSIQ|bwPTOj#tnS;XOld>XD?al=T6cpzb5f?;%uf5oy>HO=}*`__cMaBGb8Ux zoLB_ZAHfEY7Bk1aFCm`4Wl`tcN}5RDt>tJj&2cb(aGy%yxi^G%YW9@z?;c<(RD&ZW z;oYMmrnacGI@Mb)5+v+hiaE&ilpXEjO_E?3JcbeY+h~_W^FFO0g}yQZDNl=09 zhSWr9p}7Q~W91rS6YCRpfjam^qJlII1dj{AzWi*MVg-eTDFekoR+!>=hhaL1;ZJe9 zKgogkXII~WfvH{>V+kiJpWu<)^Z$6Eo^lxJ?+8L+q^FN0i*&@OM}G1YBqZ-av=tIX zG>Hg-4X0GV0ye+-(ofOX99f?>pioFkMKt9IecSfAprW??lrm^sok|%vPhPtodMITt zdTuOU@8XgV9ymjLiFMwnLmEBYUJ^V_fqk@@^d{NRmAi`qm3OwMKqmzU{D6w}8}CE^ z{oU_pm)>pf{fFLra?O}q{)>d)?{w)w(G_?gutuWXF41xfA|3TausJBN|!H=c9#J5(v+WZ zqUL8faw-$Vyyu;kbsLlC@JW&Gz^}}bH}YQGS(=7uhUOb-!}ALS$;n&lQANTNaUFYv zPXIOimG`~y$ugvZt9yJV#Hd02#-Ft7DU+#3~@Z)VxN50eonvg3B56BDh zOwjY-w7dgN;=!Jt2jp4f%#v2xxn;g3d2X2>=&j@-I_2&mY5bgaEe6bY)Tn&e*YiQ~ zo6O_K6rQ&8et_wie-n3Ez!C#l5P!+skUbH#xFTE$Di=igKrzYBV`YN*=#~As${IcZ zvCFO})ao`_9mS!3E{U;V5NX;-8L+%le2Y8C)57*q9xtUsM=I`6LyP{6SF}rTM{0E{ zn@(@@n1`LhJv~2*mzJ6MR3&s?`2-N_&^eTJYeVO4=-kEz`nIA=uyq=+ZD8ITjjguv(3MT4tAJJ;glYpuFCt(haM9os9kaSwmC|mM zGCYNZcIw7{2nIf>N|b5KRq4Yv>gg1vA~+UNgPSU`oc@hDmNSQP7{MJwEJsftNfzno zV>z^~RW$AV^6d8Zo&*!DB63P}rQi}TRH!08ap8hqaiCoHN;m*h74N7 zS!+so;7pRl(2D`EGYN*};$q&W#h6wV8d`F=$1WTtmfp*c5j7DJY9#Q}bePApiSv|q ze4C>=tB&22ACq-}W9aOT%hsIKl2V_2NlkF%9l4# z^Cgv1CwH-A_Io}KB1jMog2n(O)B7@yv!li_=wRUWDQe6$?~PGX}m_J z@ml3*+gH^9oi80Ec+tD;-Sw;k&${xO(X6(HvuZZ3KN!tMs!MD8m1@$xCe)|Xf;f$q z$6LCVSnui%Wi-d(Zq-r`OQ@MwW7upHkgK!TCo5L0;o%HEoN@=-kML>Frb(15FC1p+ z%(LhH@hON1kuiMLeB%DXr@up`wKExkL-0HAd-%-z(^2-rkMPY8BXGF+gHPO-$IMog znGD4~3bqUEm*%EpS?^C`Ou@$FELkVh^N`I>i6Wu$Lgh}z_>oKkoxM6*3k@K0nzmv9 zG5g1r#;T^Utn^hu2jzEt@8W02d%miN`(h`mA2FO^oFcn#x&-%Jd%*mdFbG&*OTCmn zv%)&Q-JLOr3M*Fs^K8&R9ek@D&QB!_4{;8O_7D?g5Z0HoV!EGH}lJOw) zsTW)KomX~+W3hPs|Ql`vPc+30i-*0Gm zvAI`|;=yN{O(b&lntK~G=f@qTvV4RX0etiauxg|U?_b^Z-v4rT-fNf-QqS@Qwdr#3 zBPtxAn}Y;wh*?AxR>$?#RquQzo#wBwn-A&ha%-&Bo`clt&wnUPdyKBmBfZwUhY->T z2k^B6QU3}OcRxs<#ZIF4&m>N=*$0g@_0CvR`e``7{op-@qs8X^-itNwHS8;GDClfl z8`s1dsh29tJinx?9{T?dvyH!knTcARol+O&&7`MM{J`RnA+S-2+gl2zlFotDR-4bk zI$@K!!J1l~XUW=D#V6#0s%XuQf?Fh5vm8#YSlz*HO<-dlI~oqg6F!^#M8Dcd(gOVT zcS_bJ0G7il`4H~O5K5HASwt96aRNUIf7GHCMuHanQHNF*j)Qobi5i#mf|-ffmNLl9 zmrYmzbt`;I3t;2LzY*a-=s1-AgN|eIXMWdLy$I?SEzK{2Y_RF8AR9EY3{D)bf|GU; zI9~*Hb3F2kU^?9NMKB$Q-RQuK~6`smsypZ0I_0Q`xY&G&OfQ zYK}70YEm!`(}jrI4pXzb^VjNR#C5sL3h8)XfO1JnX`WOf^ zb#%pD?X&1W);*@b!MkC;@hf%g@!1g^5aCW9&{6%BYE4YP;3>2R!p@}_(aGS1iCSJl zh8^~TdvJY>`uQW?JdE_6p&vZ<0^T2to&_U#K{|V%{%ATH+|TSfsPShPe8HVvHF=6_ zFM6iDOOr&g%i$ILXngQB=JG9QYKP8aC?$H#GDXB!UYjdIt54;8Xqyn;(wW-*(2O<2}dSe6Z3@(ifW zXWEIvvy%;A*`C6(>Ch$1ro#3X8 z3%g{g{Kkag#AFBxze&gU30hD)B_MY1GZ-+#`DY>GgZk4G^%+oSS05dwS#7(>v$6oy zbatCsJI1ARP%opWX>g4ghjRKgzoQ~w#OMw!5e8HTq>!UK0;B;VMDaJK8uCZo8dvO6 z0W!8w2zPIyYU1p-CB88~H<-h@Or@y2`&%}CE7e#0ynz%U?mfs;;GWa{wYPpw70)i4_jh1(?-#n2iENIh+BT^3|;tC1^^0;ZhjhBzZP*4~87-h~!^um!AlpzLo z*!Ut|1;~OyDh%vexaWNhzzPPVsLCeXTfG7>g$_EQ=agc@*8xp*%7G@jYXX`u27ZqU z#S%(YWYfoD>lbfigi6$2oIOEo19<()5EMIID?7b;8+qL@2tbGZYAh6pf_W@Q^y`3m zUau$~?pg_>8N4H#_xfrXjUaBylvLhuiFaI8SCrJHeb}tCTh|9&BbA@&ED>y@d9lFW zT*iZv2)&Yp;%b-OEnSYLJXXeHad%uV?!|SUEDf*D)=}k3xMguZ8@c?~5LF~E#};JN zK-{ne895CTwjiTs#MH*I=Ujdpk=_<$wC+;ef{a>}#s-UT3o>fOcRAwQf{a>_QN2zs zVVEt*$RWt61p%!a2&hR6&(%jOOpT1;;dH#mBp&BZ(8&98qz8qw)7PPT!pQ3IpA{DR zZ#1M>+NEnaqPx>+;Y}^Psf9PS@Fp{xT6j|nZ*m@l>r_TRSx4cZa8DbBYol6{LkLC_qI+$@vjo?4+dgg*KXZQ45+pN<8e3L4G?0e%GzuMx}+rO zU|d~^uYm+#j!(ile$;X7Hg@8)8;r;9o#WWY_VLN_?>zipHE}-=TlLG8DE8C!awUrO zl)YSuVm)OqSE3lG!~dfzQIZ}Ov!bB_VmW$A0Vz;#0Wq4x>?L1}*y@%?R3 zvsT*qN3&IJB);Emnhw*8aaMS2u=8B4f7-Y_ef`bZ@#$dUsly8+m6&j3-b?@D;>)w+ z{?*y}t71=2Bol&778H=v+itU<_|Ys8io5(&&ZT^_Zd?_F^2(%M6QXW~sZ16nOfpJN z^h|c`PStECOSn923IoyH9EQaUt_|z9_Iid_An9`zVf#x}WU#|h=S)Z4sfgq@}a_BI2%lVFu*;%LXS_FdVU z!U?{;ze)b37Pv`idsxkA%3MzE$e%Phv(UW##M(}T3ycKYIVYzLH}+RPkzXTycg@9s zBi(KTzzyx>wm(I<_A;&cs~o2b)4S<7l`X>y>e;8^6N(J1kJH8{jRtA&&_3)BwkGkY zIa?~uliTp`xn^cDo~R)+Hy>0uvCx7P>m*JIGfm=OC3slU+_adm{83dP;c)UH`!oXd zJfXc1W}VX^ex%C#gGzFDO2bWlD7wj*?CcDko~FJ$CG;=uVRvk` z1XPC;(r)GWIsJL8J~V@^SfDCcUCGo;S#UWAsdmQ{@?etG9*8uNq!m*qH*;2pM)1#a z-~l*r&p1suHu=I?3TFvDK+62R1fFwffq1s;yI&9OZW=l(0Sk$hCB%>G;3161w4Mfp zCvBt4*(8SdA3af-CT5{DUM2qU=lOu#c5Cmz5S5YWTq*`9Bis53GTN0?4~;#d2%C-0FdPqm=HgRkuHXD_51(SPv6F-keuV?%!mB>2iQ{YW=0)CeMvne*mv zI7e7}hYVYg2eks2p>)&hr$1A}-;AZ{G+sP}hY7mY{uquiEmnv|Cqh)hml?TTZH3-Z<^@R-C!(1!%GZQeVG)vP z6hWg%G+!-siHk>r?I$Zygs310sy`lk`R9vd!Ty$^Ea2baey(Bsj9@t|_l6hV5>~wn zAA*QXEc20~-p_Y;WGQI%upmtI$iKv6a(y2rO>Bo0ydJ_a8n1nsIBbOxl&kH%n+EV1 z6Ykr1;PBJ;4zD9@H~uw(mRi7U*))k#xy@g33kb7Bn3BJfSLoYlUXM**2f;vvLhu__ z3bXMe;sQXIpW;`XG{zc!2!mgZ=~~>dN7`cTlC2*{<441$u`0IDh+}eyOFz;5KY#oM zHB@H&=a0YhlI(ln8Cd#JJe=a8k1lo;1S14V2>E`9?Bt^|gPa5m4z+{Sdv$&V3^g22 zM}$-8Bg$lAA%0ldSBqM9V7Dx}Te?q=I!o@hup^IVJ845K#s=r(W$5nOwRlHErq}_? zCCXfV;V@Q#c#oXC4!w0KzYxXihN=bNa_brFSGu<+T;hA{l!Ml1Tl$gcAyApBA?x43 z3M$)rJ-4a#H;~9u<=)SR=ww7Sky|3Z^@k-vkaYN|{&luBY(_X-QOkvmvoL$BwRPqQ zF)?}Os+U?mJ^V+0sdBWkNB+s%lVC#w!dyQgHfvcnC>^_txD)MzL^Lp9SpKBVy9o%4gSqrQ1#YS*#}TybYr9#@}N(tud$8^HXwrbavZn>*ZU(t3tEY5KrH4V^ zbVoc2=SpZ-n4@?z5-Fl_l^XqSV{a%MuJT6FoB@}D4l~kJcU0xnrn+0?IFNc>c=%7g zn3S?|k9rxfqkwQQ5YM?g!LcSNPt+p(M2kcrk7$&uQmt4nqXVY&D#ff+ZdkZ5^@{5B`+m0Jw%KgeM7em0J~tps#)2XW5(=?rdjgtavbw5fB=4Wknw+*Cax` z*c20wIr3|@EFE#sS45hFrNAELPH|P>4?Xlj;~?@G?DAj;548|aWIg>uk`6^y-bFhK z9HK%N1t3H|+LzM3eW0UT)+>u6P_ir)0i7D;V}T0dXb~J07vjxHRkgs4irQ!)8!cX= zf;9?K^R)35gTzrXFi|JSV5wI;&Cr;or~EM28mvC}SUCw&5Qp%+D2QZ+{U;2F3ZsHk zbwUFR^dBPQN=ko6OmXqJdPJ ziHw^ra|=7m5j6p*kYtzgvJes)XWBV22^raLR2WGi7UcmXAe|aamy~;`XtUC{HC=-3fX=4C`V5_3FDpXs*X(fWbIF6y#)yE>2G-TlEiGl``9aPzl)Pk9G$BMVI@>!5L)21_%7_^BpV=~Lav7l z{zyGignJH4aa6aMQE4{JG{mj%oxnqs2lsx4;mI(Y0d)Nc|FrJ!TccuRI~>ngFP{e4 ztgR^!H>Pq59@@7$jG=`??=#jM-i(#Rzosh-c7_xkY-sI(Fv?&ux_ts9d?c3n2r~Hf zT3dUq&i<1n>>cD5QP$}`X<`Wz9(A7rfs7PGJz7zQ++{d-tz%e!>m~hmB%}(zyD%?Q zM6w%PUs9V_ga3%mavF_D`P0G|LE1xWDj$@7;dTp{W7U+`U&Rly8#m#Nh+0Cp-+Q@h zx2;1pQ7C!yHqw51klQ`X%)rw3n!ID}fKA@A!0zV#bQYj)kOtQcAmM=4rsF+xv7Tt^-<|WvD!UenQhq83X6bVXWChN3NdT0)WSoOJf%!FP#!KBB?Qi zsiM>hVn-}1T%Lcn(p@Q7vL~AZ%pJ5;e@LC(z>&eA0WZk^y19VlP#p)+UG}3?kqr}E z0&Z{9AS3fYUKL}V#9@>bUV`-!vx4t%vhjhK81WKMCrpGs^2WSeIi! zi{s5p&JHU2eOfk*r*F7eWUW|sTHGR4M_VhWgWTJLcPgL0UKtIz#g9G*rO^lqX~3Kz z&Of*sBKhsCzVAg-yd+3!vsT4142$Mv%i_!*i-EywKi z*&A50k?><0uP>K^4xca2;=FPo`5pd0Mi~9Xz#l)$W_LB9d5~I`UN9+@&-b6%aRyHt{o5sJzt?xrWEzwVyazn-j zoD%rQGKg@OgB+sy@J*7HN%Z65C)06hgqwRCI+?e@5SBh32W>WgZ5;F61CO59>Zj6aocAPRwkEO~@)47QR6elq+K#htv9io$0{#p<+^N-wsAfqj?{ z%EI-ePw49K6cGG3grw#*=S1pRaQk8rx6?Y!x_a1kZAuZ zWsO0aB|wxh&c)$JqHG-JGTdeu)W9y=AeR7c7H}0x>Y?`y`BPILD@jDbfrqj$4r4Qi zA-yJd2|*2U)d%di=~#eC-1vxMeH@^NI5%tfN#Z|x?{2kj{4^N7x2cD-uJ9a1k6)-g ziGCPw(eP!YVzYVpNXy+H(fK^;-}}FVRFx*~=-c21>@}4(VzX~|`H3nip$kuRp zu(Rj)THU?f+t!Z1!3a%_`cDUVnsc7h)06gY9Dtx!nXt6 z0rj3}Wu6mTwjf9|NX}L*Bu94U5*PuO$v6__-Ho}Qe!;-{@?T?Q~kof3mRey#gL z3&|`hp3oxwSKY80HhpsbRsZZ&-k}8?$-cdWN4Re6RU`|)34#!uJMQvB<}lBdN}8$7 z+_JHXGfyVb(>=PfPH?8ed*CnyE-F76%R7(yu&_d@Oq7Bb$iW9f8uO>3Cj0F}Ghz4v z3K024GvSqg5&zDKZ!6S)P?Rst9@R_rtZv~3h02N+;S1q{X>duxe6&xfu&dBoc-L(@ zBm?z?zG9MH!-c=SeI$X6&%9d_jnks&NR$feIOfv}<)xe7!-(07TEo2aeeOJZLR@p@ z1RJU+WE!Ik9IX>OF}>wDT4w^fE<9O~m_1cua@wi5kzC#sS2@YWO<#FiUs?R($ltBF z#THAcUh81H26ouUt?qmT+I!q*4-02lc}zQo0#Sd@I`3l%D4D4!uG>Dn@p%SbSfmrQ z+1iC0j>Tdb+%{G$yd4JJ_PA;?}xQu2R<4b%t5@P01os~V^@ERUDU03 z&9=?TE67+l(xw2?i);hHtmjy?ym^yb8hF{<6Bxuxuc}44d6CJ_8XD2b9~sKfT}6gA z&Z(S2*F5S#)O>4IK`1 z5-$|6Rxau{pV{xS|LN)AtMijn9vSR=By`wIGYr!}E@B19z%-S7{OO~Hg8<{9*Z9Cu2mOxK4@ zTk*L6bWfYGvV#TcQxr!nOBL#1`6?6+qA4}1BC-N2Y`%0fN4e4J(FbjMuuI$NV>J9R ziKFoMK&)P_&|?*g3@BD?x7FF&QkIM#GEw?r(AlgZZ_LAaFR#1}a@quuf{Nkg@uqhM z9@MNR%3+?3mR8@Oav;n=T9Y_w7VAD@w)11YbPe#!{An}dm!3$iaYCAyCDs^)DX)kv(FAXp-oKx5!bZgW)$m}-2yKml*zZs-IMUL&( zfH~v^FXmZs>Q5R@3D)5txJx}UoEU@loG6w?6S#O2?!hM9uCWQ5 z{2CHVd;V)k9h_4tPJ;}T$&^c1TA7*g9%ma0Y4iLP&sTnO7i2}nVgC1YA121m#zROD z39~>#&}@>lMBYu{clzsql9V2L_!}PqQcE8+9Dy&*GPBu=DEL1 z?juy-`h8>0(qUM7@sCLx(&-)00=tgS9Li8GZFvYRdgnr=I-db5AO_fTrPu<#3Zw;- z%Zxa~``(zkiCPVH!z0f89*G2=#N+tx5w^v6I32V54$1?!3M`nLfSCe5p<_IO2&7CEAbruS-zAH;Z7s>ovLx1GWm+Ylm;DcwtgP4+@&l%P6N)-pn*hn6SXnt`pqJkJ>Cc3$Zm+kQ`+w!M4Z{%% zjqUC-$aw3rlcmawkw}u*fY8Xb{vtV+{d1n==)!+1C+$UaJbTfB$MvuoT?1SGA1WLD zSKlp(`JXS>`2@Sc>0+mGb;i_@zE#gh=U-oerOWh$M1oD&feiZgDzVJ!VLyevN;x) zrjH2Zpm?0{zsXT-^I&lW`cu42-k@`d1}vfF8HYbaK_;M!SxLqK243(3{ma`8R=^MN zq8U*rHzXdzzl!21JzQ{vlxvpgWpZ7iCyC;>bH=3}G_YKG;(CN#_-}bbWNM2To+ve5 zJgNei^rra`;xl~XZ39LP36v~}pg~hauMp^GZltkw2SsbjuaIOT;FvRP^x=4liTD`t zMI%a`SV0RLN24GyAESYPCkqNSj8(V1hDyAlga_sV-%A7AOQr7zq9ye56UpPnZ#?$w zgSJ$+fz7}tzkD0)F2lFa$v_Gw%d-Mp zK&;RP<~JDr$esKIH--1O1;UJ7SCyv&r%WOQ=Ss4ovo?bS8|3Zqw&`3l(;1t%Fr}@M zN8ZyH>h!o;U#xH0%k@qjxxVtL{D`ym5n1n-nQdTZK~6L`vD-E={SMcn^p)+N^();2 z>sPjGF^Sfng@5U%5p&g(<22yA8{S0$Ny)?9G%`P}=Z-k4t&7A42>R)6o=glf`v$poJIsm!HjrhclyXgT6clr$f*s zr15Zi3AM)eZ?h0C)R{=rn;xDh{ULF)OBSY`GVwt^aHxhezJV4nP)Nf(_=s>ZJhtGX z#pjX(P_UJlBUvyM^XR|Gf+flVIib5nb^^9&{KXe3@c)zo|FU+sU6tPx~>?o$Jq1jNk)oNWW`B*#OY;YoA!NZj7=GRZo{K!*l@JN|JSoE-pxV+ z=!f^p716-6a=1nc-ln%|8Ts2%UJe?>B2*zt#ixA~hGpEH>i|HgKdMiTfH`qEt3hzI zV;?bKR`rztI`F?>bq|t_j*xBPD{JC^Xn{jo)NX#h94Mgp`HbJ!w~qGoD!AR#6Qh0j zkcHtrJ+aAQ?bOV#R#h#L5lQF=%L98?sSa(yAkvFKe=ww{QHN-mO4X;RLJv_)0@bHh z%SYM~9hPEFT0T?|F()MtE9IL~zDXe8BB zm{)@m07%AQLvIKS=t~|K0n7y}D-{AWm}icJj}R}wu>xpeEo^P>!w8lfLBzNyn4M!i zEWYpvIsxTbq~FIY{V+lv7_Y_C4%1-Yd6YN^sowDAvc!1ZZMxPCK`}U<;%~z@!28XG z#R6J#{G&g8`-@-Mu7e3bJUr|_)c0NQ?g0F&YX?7lcXkbNXYS34NTKoTM;f#^LS_KX zFxpmNedD4}Gh-l`2DD+Ir|cviOz27X)yo53`Qh z=dJogC^+zK05FG&sqOr31a6qx5GLCtte17Qw&@uN1ITeX2Rv+1=7K=(6l?2j)3NRF zh%mVH6T=Uk6P$~O2}R#0C(~rD;v6gvR&2$s(>{o>JxB{8w2BfxNmN|7jK~sg0s;~9 zf4jk6*nSah(PC*i|zXi5PalKt5=TtTyVN{t({t#|KM4 zE*jB(#7}IG9?K0XM$I;x_{%z6e&9Y|>wXvQ*OK;!di8ic;fv<+n_(7AcztfH9`5{q0yyix^06(!B*2ydETo?i-Sj@%xx zqh&skc(oFXu&0!h3HK^Rvpef|FSClH6hs??Qa$!>E{%Xt8dQiQP3f zo&W0x%!R@&BbG;B8OnPn7G?^+qkgKS9=>3!5&cQLetd$sSUeuo-y-@r-8=bv3-$a{ z(3g>EkqGj{DsOzJ|Iqx!+TDM5m9pF zzbLPrxcIZGGMAI`ln~~AY+66P2IpQY^K-x5$^tn4NJK`wot3Wzu}b7rS7#S}jS~Ay6j>bwB?3(5W-FJy^vn zi=y>GL~Iu8l|ozs@Ttr4nUe9yno`u!JI|fZ_;%+2rpuNeiEA_5nHe2&MTjuVv|-d zp4i^GMf}Rb@Eju5$X0<+GmxSTgihTfQ$UJzmS3_mf&orBm3e_kys^i7jKL$Tx?@*+ z{JXDtI5j2;xegHVZ{~Ee!UBGzaTMS+2B7TtC6pj>1yehqL4PUd`b9H=azw2RnnJvJ z6k5otys5(A@0bHc#T;jFMiwZJ}vw;O>CD2z8JE(TN3uB0-NtOqGE zp;sA2JQ1Me#owa&g@DeWZUZTzE@i#C4Oiy`t9^5Qne7r=ec?#+3Eh+D4GY8j!gRgY^7q^k1VR`eZg;bg&|BZE-fPUFKbLyO|NRkJO zgWiLK{twd$cr7)7{yw|8>W;_AW?{dMnSgCMXzlaYKmatDI5=v129{#12pcGHy+$Yy=;xj3AdI$ z`hj)NI1qDgN#dZg&5;Uz*w~FSWZ~f}&e~@Y@8n^459&A3&a?IwK7Er(nR>OxJXu(d zE>k2Ma^ZXfpfg4YljW_x#2z*6JE|&9M&!>Fi@^%{z=-{_zjU5{;xFi%8FZv`i9er# z#h4#e?#v=X#=6rWu^V*kF_Y7Qwd-SvHLK|YkBiiP4(BJd9Lp*}p5_zvWRYYTd${P; zC4*4rq@P!o>7$p98h%7|zYp9Ms_Xu?2UZ6Ez?bn#Bm`O3={QM_h93|*+LL(9nOlp$ z8(_yn@Jn3;n=pLFoY?1?J zo>igYF;$1i6rgenq#!=94yY>2&S4^oa>W@cnu08ksZoDe2{^Q5%jd4ftfh}!&cj)N zxaB=2(E}9pu2Kh9FPN$vC}5sJM~L^N6eEIfVspl(NMoFT>3vOR#^1xs4UdWcdE~-L zYXS=MG~WHPfkz0lLdscGTWj|j(VSweK78h{#O%Yz{3V}Va?1~In32u#)*Ea;yhdI; zP1sWc@6jfkGVfqvfehQ6QCePMOsTH3%SdpE4Kvjcsf~DkY5_yi-QFT`GklT~qRil^ zlIihQrj{(05o)=qV!w7RV#!23SbSut*Z65z668v6` zuty(^#X=<#^0M(eTvR11G9*7nKEwxuRB+_JL%PGf0QSp zAo~I=@nsbLz(wu)4XOKl!1&SS!CJ8)L~IT5iEuRAun}PFit`|FU-&$TD*t2mpqAiF zz={U8&L|DfNQa!*e`=HrKwGcyi>~q#j9-pxr&IRDo#^VTRz!;!EnCJU0&h+x0=^)t zMd0YtDlA{F=QBvdNz4Lc7yeEgI@y7+%`<`MSs-p1A~JK1*OXZV+g)D)@o6XAwww3D zAGY9pb-d5R+?MXIFpIEpc4-H{Dw|ckgP&=@q1Z&@dHH`c%wl? z5_z>?@(R_6Xge&3y3b4CLcS)aItGe@V}6ikC*c3pe?abs&l?%LM)8$Gynn1wN!O$BRYC}crca9}{dxd{##IA88ebCuNsDd@&!4reBK zSbd-@YGTtKAKZS>5FZXbd;^(6$R9}RWT?cp!GkOLCW^jXU3d&}018VYxht^)7Q5sK zhf&)HGhFZ+uWft}B#JI~N-{?cE9z=RTv4?q|Auv!=jT`fQthjq->1kfqOOSKgQ#(; z75nb9G}!o*S*4=jRcQ5iX!cmb+AyxqKRPP{4I-=gxJ$GlAXl~4^OnF#PBJ+1lxIJ!nnX| zL(vi;;kdbgA%WnoU4-K?Clh)obBlz+VKRP%I6x`Fq-M4!2{65YX~ukF*Qu*vOXW6YfTvmLmOto6REJ!+{IXdh>}EIovTAfzUyz*-)IVg03%${qm)n4uh^Zavrp3H z9T3Qa`Dl!OpY5?=DC|!nwt{EwX)Fo`vMad47PX;MQX%;tjC*+Pg@5r{9?)5O=J_-@7xI?UhC5 z(M#8z?rCUT9a)G}_%jN%_U#-v8gFn3yPqSeN6QF0&!aWJ zUkS>h;<;G0?%A0!=zl%9hCg0jo}CW*#?6HRiCbYHr`I=ErzhXvz_;P))!;{{yQdAt zchCg}#v#9Xpp@~{uxAFcdHM^B|7ed^?(fq}j>s)m4>|)FId1RM%Rd@>8asOSH2jMJ zMT^D{%y~7JRp0pA{28{%LfIjoM=d5Jhi6Bec~9ZzBu~G0JtRtY_rFsM#m{9TpQKEFeU{PxQ%%2(=*k6@AV;bYl-}I4BjplCXh$P(DG5g7<#X%Z+J+CBqAjoD(^Vf`2_ z$a17Y?xLCC9tn*)I!=(9kU}18dN;x`OZ`poP4;+hv5^trxnqOq=b#V>hyGLwB#z7A z@sY|K%$Uncc7aHO$eHbi49!k`G8>d}@U zsLi^uX_^fBa@cMs&bhZ4o{)7M9ANSoIx#?%Icppr7h7UreW$!zEK3vU=Vh$XF#IdIPOI^{cD{J7m9cvlAsp5rglU-P1UPcMC*n$1qNU2D`TqdF9g zPN!Pwj7F`BS)Yvc@#MDAv1)&_$;*a28(V0(c-qS4Ror_2J;xgM&#!m5fFRpTYL>w| zco@)^AoK+rk6oNyFnn&H%Z~A7PJfs$r|09#i`R2-g4QmtE^aP*7iZb0A4_l`X9X@; zp|OLT9tCdW-?B$wjqTL+7~Qq2)Sv6cl3^TC6XtTp|8wzcK{?%vvv+y4CR`kZeU8`Sl}$@#{xN+EbP#-~ckWUk~>yVAlJ%Q4sd8AE72?+=sMk zgLk}_Z?`s^%V8~Nut4T~B116UXg{LDiH3sQ$B%v-25QC78<}5o?tpA0*(oM%DSCXi z4%ZJvSbGd2l18qWO03nm5gp#QZ|%bB{;mf<13KAhPz!We3uRrn8M zd+XH~N7;hN$bSUKm@hL*TmJeHjRb>!Gkex+7}BlH9JQa14W%s?LwvO(j2*c#x5u zc<&rN$)Vq@H~PbRqf_bk`h!Zf)zT}yYO_^owogt@TEl90aCq|G5B(&#-mnI}{xc{%@vN z6vb*i7I=sgM1%NCam6qpg*C^M+C(>-R;Q}hNA+6Gv>Il$W)>DP@CN49+#bJFDQ@%G z!wzv{J$1X&z!l0}Vd=x3g|KpZ`9q_ynDDHL<>4Du&Pu*N|MvXi$MeGCgSoIy*#jga zFugmg@N$Q6-YB}R=Fe}z`eWRKM<5|YZ#MTs|Glk?(zNB!wH;#rBWzu9F?Y5FWp zpGi!ggVvze>o?k!eyuUA3~Q}c<*<3!sWdyoMzcPw_L@z-G<^b})c4_E_@}VA5T?%( zC#C7LG=0XGrRlRYeU_%rji%4Sa)ub2XREM?DQ%vm&9k(5#+Rkdv$T1}Vq{jTX{FV( zP*%@t%X{9}#;>i6SUm&JbbO3x!DE-?{et|hlwq4^Rj+mH`bn>HSnt#;-A1cZ84mSE zrPFBZIyi!!bef&g=K1SK5P+p!+(SdyJ4<}5wsi)hS>bs~Y3wYGou#p}GY+TKbD`@_Ds+&Md0 zs|7`Y2#bn1XcZI(_qJo8aSL(K){BY+^Un|x-ZKu~yCpl6GOsjYFHG3J?cBkoo~@E>`f$)I zs(zHV4C_;VU_E)_1F@Z}8HVrLR|(vh)qxt}K1YwkS*Avn*xltF}d1`nIJmOJBJ3<&y7QNoYyR zC11O0iL;PzUJ;S;KYLf(+qMma|BBEL!wQtH-YsRr0Nb+HU`<*i>52gx1X`jJBC_a7 za?@<+e;+BzmSo3{lsUB{u}vPdB9AY}JL-5xk$<(h)2-ia>9L(Y`89W=(fH$4%dKMC zW#7lF(=c@BFs6?3l&(lSu_BRyg7FHb+5i_=eDF7nG8-H>>& z7~3Pb%Ky2MhWZl}cUhTP|HXbIvEQgUmbb}hmMoi!0fB5!O`zLW0HALeKu3KA(u)u^ z&-27KnR-~cHo5h8tnLdR*oGh7cYFJNQ(SE*Ixov#yUn_$DBKfm!?qjtX$-yF4jZ^x z|J@LMLE&o2+U_~6?Gl|I(d&|^D?TT--)Irx6r-;6mRcefisj2> zMtmIL<$mBR;=`7EyISGBdQqJ?%ElhFQQxKVy;ibce+pmk@ww-_AJXh= zCpRQXmnNIoiQNP{Zs0Y=@)r|l_tH7Klira;2wOc|JI*X2GbHgRf`j#ts_UFHPqEdW zVp=`9r^teNwJ@_pW-z(s98?XXSNiRyP5NEJnlA<0{q;#3I@gXRRI4ril|^Z_VyuK` zTzJNJig{PvorP!IGCk9R^!R^cO25PJTRyNgy1!xS$sY7P+4O_1o@OsReGw3D@{ju;Uh9Q+&WRKJfh*C5dzaucNM-fK5^O$p0_$ zgQ7S6mMh1jN+W#a!be`iyCr<&^IG}a zfx<`LWjlFaxZ6jbET$0>`^TSz9XIis;sZ|db1rs5-fE$6kN;nMXbZX6L0%7c>>!uB zX_dCxliC!8Z~WNtMRnpR#p$3NJnR~nd8(2WN7*qwFXSAe)lqWCc}~sa#~~drYoFey z);KX<)VMUo)zY@z_p^&2oe0upV%~4{u-6FEAw%`#e&7K=2&O>y`h5URgI+Qz`^r?& zR2B6_kWK{YUYRhM_(~Bl&?FgExQD$beyhZ8p=c;$zY_@sYZ7C2AEibF);M8 zqo|f;4|U_f$LSsl54+Gi6pCPHm)9HnLh(V+GhxRq<)&DUbzU&316N2Kl~og0an4TP zp41fAKK~=M#j~ft^7H`cx=jzpnraGAWD9DxZOdw4v|KqJRT>db5b=b^ zJy;^1P$!-+Hpiopqg%jH^a+?KrV08+-v)*~(G6`Pj|@W<@q}9W+kqmU(B&n^zEE7f z@jTdZL%AuI!wIU|qd)Yo5Vcw;q6tqy_NA1Nx2K@EX`?>2!UNqDMNHw?u^lU>RvY*o zxw}n#pdbPY9XKqnMnFNGS_nb~f2pOJ4n;trR{nON2q<)Uy|FJ8 zr?EX3cHC5Misg{PIh8quU8ZdH6hjfa#%rR8EIb8^$bt~L#wZS9tBb90L^nkdS~zxW z$J(jYrhZ56z7wGZ5n9N^{5Vg?du}X+7Ay+|2tprt!Bhvj;^|lrZE8WK(&CWPfXyLBMsQ5-M0p+q4XVDgcfS$ZwHFd zLYLPY`$F-p!t-Fq4dtd-4lKMQ36CuBAK~S#ha#}>6f6P@LgJdD_-LU%w!#nH6h&m= z*zrYm;wZ)Gpd9=zmG8BZ{jSxs3uf?jgkm>F$s+uIj`^i~FJCl~REihTeqVV{;yWkW zmH6%Fx2gXNg_r@HhUgdinEx(*xj@OBLqS zh5i<5R&cc&Y;nSx$(G3y30SW65@s;t$MM;A>>k9HK#LK5|FA!U*=Vi?nNlFWp5T;pZAL2#U zmjH$dT9r4tLEi0@d~HI*IOD^Vwwc7V`%9t|>7M=pvl;OH&Afc1S+j99HN~^dl5TEJ zX0uhcYeY32hAxgWa+kL?FA?%G>FCARD9wiI^@{S8Q*dsvT1vcz(MB2h6{8=R$AcGD za6UVkcb$M`VZ~M{c?AXOd5I!HF^iEb3*XGaWHluo3D>fGjFFE593g*OBbH^aSO0;H zB`4afZ$5url14O}r}rgIu8JIMV6{y%oFuF=&V~APC`8Q5vtBbVK;e4olT2=J z;1~MJLout0k)}ji%-JlQsSAJ4Nh1=akk)ihc`reKh9mkajA2S*E{&9wnmTkOd)sGI zu9}=Tlhg5g$2}jMjk5vyafhHs(lYkp5`3%IBivjd}W#=oDA z#x56`>~+Ihm?vIdxw$Z{X67#thtw`B-cwveq-2gfOk3jjxXNT{zeVIOL_VD!M^q~4 z{7zyv1xly0ITsWzHT1=T5>_BrPaI`$+KS{|W(Msh+a6}tt2eI#68b29b@ECDsz(1G z!@D!$BL}9CKK%F3=uc{oXPnE-Wd30JsQe_|h(a)RtK0zS=0tA_l6>dBQama-ktdk; z@-w8$b3u!$&@pSuW!4nU$t{{vBJXR_-s`+bS?)F3;6u{-O z(*KRrRpO%!juP!83Gs{x=w~`>oS_ub$r(CVAM(a;7E$nzerGtG*p3B;19b=n{ow?d zgT4-ihHgz9V`M9X@g`q46{T!v(J3O`N`e#D#|fL4{7uE#H0hw$EQM&*U{HO^^@zS44Vw1bGm_!>u?fWN|aWWEl` z6o!uo29u&06E~bbo-?_D@uQ-aR-<0Uf3{{{j+@~JN}xgm*|Ms6nxa6YLs@}4NdIH+ z*mfMXp}&Imr5A-6LI{CXRVmkP)a^_(Gux_aE98K)L(4z}WHX~`rG7>q+Mnx})CZdY zxnXjd$!`2|k~qf~4(H}$`}hM6H*5NM*;ZH?YmJZ>w7odU*mCpmrn!2<(T~~|+z?N2 zh=U)Y{YqYIo5?7uZ)PF!Hy=$w=}j?Ns{9b`O!28V=JPyx#U<;>+Ocx z>B_B!*^t|sZpwp!s>!BisA_M}=$K8DPmb@pBcqxOLyao(8{1QkXZsWdIHAPuQfwSR zimOW(u%1O)rt)8^iG2JX#kia>NfgnV1ffM7*m87;hX=ESj><-)G{59x7n!6%~oq5cbbMNcRGe9H#Kw6ZV&2>LBE@EQW-Zzv6T`P zc-rD)k^+Yvq_LgsOJy5V#m*ENuE?2t@mv+Y(g?w6)vqkM1^xnULeSfQ&qAib5i2G2shZb7P%gT5cbM zX*Ptn*Ke%b{_XAX`l_10odnOlz(!eH5NO^URE%)AZCDgzcWs@i+lHYidcBEc#T@Ih zW*QS2InAc5;Z_|fy56vDn_u0w{ilkGkg$BI+0Cott72crWWG2=_8;3`0>!XA`~iCl z2C2pvY}#lA{&rra8g=Hov5U82Qsq#JLsxTHczf$Jri+yyu#cmt_^>~1n+&*thhn$% z!3Zj0iP*Y#V~ThcNaQ=Iwaxi)f;o1q{D!YV`|a(v=@;FiWVufHc*e8HO&&Iw`=v^R z;N!=s8*)A?bvHSYfiP^%Ewxy8frAph=i+%%w6%c#%zhNV7WuZg0$5a>8&Md>7Edw3 zezI0;0$Enwgt|hDi(USKpR%4-<3*Wku;&^W?XB{X4{ar*=*sfQHo6v{UsYDdR1B$F zus@-^IgWbFyzm*8#o;O*OWxZwSK5}`VSB(rZjoOjg5nSqng;UHOeCi+^X2@Y~_^WNgFBJR`KITPr0~gS?=Ga(*^Ui-DUlylu4^x znc${sE3JtwJCn&+*6dbGMtW11HN~lq>kU=Ktrt=zx%@;M>lAbK^z>$Zpmi0wtC7c0 zdab5BFxq{&sr7qx)iBJC*8F&y3Tk(^pv9@5ZlDMG4p(!*f34sET+}brQhfx*zgXj> zyzLf;sNVE{xc;$!cxlzkrIquh{!c<$Id^=WqO|TjVb(c?m1DC|Wm&DT5$RK!A2&H9 z_87*srId>+=RH_l;;O!|xN_dHbBf}+yZ7HxI0d$ND?_Oj+(m9HH2)G#e`UedUPy3t zvs`dFv&?b{?n~QQ&J32PD7ZV@S(8(2^EuBrLdH9bEm!L=V{j`?*0(MmuFndRRoRfc zgCfut=|=)Sl9P?I&?6@r@8ftHy}rEs^Uqss&q7R(rCY<%$B&m$Qer11Y2JrRG<6Gq zT+(IXh_v83P$|Y!_yM0oD2NH!p#VOU0(yFqjKB^&4<`y~=#ZhPq{wyH(M!3m8szr_ zj_(5~8@;=G^|AKnt9y(b97d$1ZQFPnzm{_A!I!^BM7jB-9&jPSd4uC5_=9|h9u#HA zKH-#>loC{;1dZVQK1vUy+G)xQhqUG-r$2xB^A#MPCGGk%&#S?vCg>x^k1@f)KI~j4 zLrr#py&~(WRth`tV?>%l zO#FfgO|5bF^QfPD*7VRg#i}hOJ&RF~U(mpqpccEN&Fe~uP^lS9@Q5-`zE_c+b0@I>5MKnAAC5)ZtG+%##! zPmm^qW_6iGwC7bMss zfwoT%?vpX(=|IFMx)0_)Jbs>C%XIxWEFoA7U!8B?-MppQ!eZwDW>uhaqI-j?MIDy_c3(pno}mffeW!1qhnDQybSwu}J&Ui(z5nc2kq;(A9b z@9VO(`cd9dN%p*}Tz^uM^Qzz#L=pn65+*5P$k@`K$;dbx!H+h^PDHcd1^&c+Pu{B| zk<||OVfG*)&x5_JnbJslp#FZI8d2I^zU?pn`|F>!|0KO5RsQ?y->+E0nnj}s9-uh9 z3L~fHdNpei4Dt(#{eWTA5qKwn04Z!(Zk$L8{M5gQBob$PaAVN^<0mN~qzKchUvLg4 zeKJ-rwIUNYjA&NDRNtn2ePfVrF}vky+qP}nwyo2)ZQJhC_G#P3Y1_7KzK!Yc-kGVX z`Eh?GRXeHuRFYlUE9=Qx%1zaJ%a|-KO>`XEsz;NXDP*vlk_UwpvTtTNKkTzTz1-8o zR8+AKO!A4n`VkEk#Wx~U31zyqV}wO@lLxPaO?$1=cX!=w*p7ubtcidf?`}k;SD&LU?xz!6upv)lx1LEMS?X`V9gn zj7y?D1;+wD>H0=51;9{J6U~eSd1iPNpK)jaBGX%^gw@OZwv7`GAO6*EF{dPyE}wv- zxr~YU7K}4VY1Wi+@JnK6l2>|7b%%j6OMXu3CQc+wKesZTS12vP*)N`IYSkYBa|Fqk z59pPAHVW@GE^Bn|BBVTmLQbKmLAtiY_L{hv)!hLYX4@_^Bymwncj(cC#uZTrO;oF9 zvo_tCJ7_!h`J91gCGAOa4FZ=)I9%%P%(Ekeq}ch*P|IzJBm^R~ z@}pYQ2%ATAErP<$iTd{lPEViBXD$8=E)DRirdCg*3o@wBL zNgyD{!de;oZJ93-RgsN~ywJO#nsLr4h080Z8)1qh)cGG)-t4IUIQ`OENX&w>uW&Sh z?+W=W+yU0TpWt)%#lg_ca|-VjTmyWP2AosJlnijEkzIE9Tuzdcq{b+9;B45-x=r_~R z*|M%7kQ@kWe`6PxM)FvYAQN4evrZ&nfV5*0W+OqFuxfVWbIzZhH7l(>bTLO9!tzN%jP< z3?PeeB{>^QUR)d}_l@51)5ifAgTg`UF{nktI*w_A=TbGoa{yX~fBg??jn>t^WR{vq7%G{Dw-=&_xQ}V2;@;@{!V{6FJKJ}i1X~h)eO0lFbGD;GfEJ4 zWa9B~oQ|~x-U|GgS@pBLzf^Cgb+bUeJyUGd+LEHbQ^LoSGP}C4tD!MOz7NIq-$k>S zC$q~e)I;-jvJTwj)34iJW%WNg|YI(rcyLXg1e*BpQk-u?wYT1)`n@Wa+8iLLb*7lGl}|nBVhp*bqO{GAuVDS0L9xCjnqaTnD?XI zb=ln@@sa{tAsVFhZIq~4H!9Qu+n*}lPc?M5WtMlzXuX3lBf`>I1ZklLT1?hkTbc-I z;W&`EbP7i3_}``Jdpk z%D*O#k)|I6ErMBp@6nQvqCm^j@>keA^7pfyB50!+qqjR{&>C9M+Cb(N;v73@zo=*y zPShz0!N-#tlT4?kt&V{4po3`uqg|FV^YC*w8BLjDB_g?xaajO7SLvK}xvd^cmXm=JTYHf!td?anTDxsVwV%O4Y8uh=nZ4FR#z8$Ve6Z)^+evse zbYlse5IuZb*MO2DV80LPMmU_U<3C9ad)MjJJ~fQJ$4KEUOr~fu_#cY2o~oMnh*9Q$ z+#NE8b^MW1sKSkcS|L!qH{)O*9wdrtE4R#w=s9$%12-+POE=FjGdC9}g*y4lIKV$^ zG6b$69v-GBTa+chh;h?06!Boq9@K=c%>#@icJA_5fjk^2-C*&N%@%BtVmW`IHa>_5 zGi3>o(r#T)P9xty3~i5!2-m0Ib1GhT^8%xKvmrnYZBLU3)?+;WR=mXH!_{54rp9z8 zXlvq7Lu#T8Cjd)ie%;_gKCp3T*{H{(OP9gx%+w=L}!`U zgaZ!CXb~wLaeC`Q3K!=0l33`&6KPr=N!LyMR)92gao0U^K#^3(yEv?UVsOFJ%9y`H zpI)zU9U))2oXY}@Qxe(`` zr|BYe&*#=&z72>mT3wbJ<|-3n%QltN_6cDC6`@{wow5q&3AcGXn) z?XX$P-{wZc`m)(=rX?>V4uhRsa>s_tjCG6FKe^Vka%r`ca}TIm0S~Lvc|$&g%f54Vh)@=HvQ9G3Uu0J z{oK$->!(xzwO0koJC;qdK}KFRP^KA}ZARY|&eVlu1N*EB5lsJ}+-w;Fb<0p4q;Sg^ zWnA9|!|7JmM-Qa2#AYvak|;@opt>8>wce$Plae0%SZyN_V6gXdDR4|E+;&|9i=(%B zEL0&`ucvMKkc1&j57ea(rrYW50BN@w%{Aj(70LW-A=xSiwib6lyv7(|G?r;t*;XR{ zTy+Q34twZix|we~$}vuXyz<+Xhe)HXk`an$CXfWxl7X?F69gPJ*9 z8{wsp$b~Q`asxL$>EN@rhw7$<-l_$h#q(lADogH0kY*NO5H;k$z=|+y*u_59l*H|HC4<%< z_Ky}MwxgSf`EgHBsZ$T2$`KG~HOE>&3k=fy-(eme!;nn=Crs$`Bx|a7;a#VOD9A&V zoHn;MGl{dZI-Mrss9-h?Q|RIayH$(vpPpxntTxX!4XMf5TxTZi9k%WyIrQNtd0)6K zE+4+pumOb>a8js&J=Ho*luoS*i^1ki&Npky~>y2APSoj;Ogsx|mj5j>GU-^E%wQWhGBQCzMEw0kiuh~Q zCeE9a={2J)heGvtke@lVAaGJ;N!WKo-Sk;^PF^9<2VaBt=2Os^+x)&KDH37HK1|rDo3zpo|t2VuQm`YA;fr2u^veL_Zf}_WvW6 z@?j+4g_q=kn@sv(kazc|`USmlnKE^s*5^-6@3Pw#4HME?dEZTMkHQuLtP#A&elo&k z{p%FJZjuRhC{*IKRMM_>QufC?{{)Du7Jp*TCZZ*_g!>{{O^Wi*UXX;7D7tSnogT@f z(38~=xTXyn8Kyk0@7lmgZb(f=^~X+Ou;`yVLF5#Q{#2#{a0zAFD{vU9=STGuDsVP8 zNA#~;bc3nek5j+I7VoCt(7Nv5)6Q3aiATG>fT9 zID5z~w^i*=m}W#_iRf}ClByir62%=Uz9@Q-$&$1s`2}80_<;RGDLS!LOzI-M>QPCE zn9SGiGjw)#J2J)P4{N*cxyb47EF?E2V3dlxb3ZAz(}?HI=x2uY=eI1Rg`pY=Mu?y^ zX8c(OurG5w;U z_>;UeG|UMY!a!=8f)y|Z)ts+=`Lm+;;8pT?==ELqw4$PRiB0uY)eX`e)o(nUR5R9D z$ssAaTA`g34*t1}$GRSSe?X{f@0(;_Xg`r1>Qkq2mq?b4%?P}mF>H=}xa54@KZ_!R zR=Kbv5-m>U**~y34omyV;NwTm?{U!&B(>{3v_ZkAEm|=u1Vo|#NIW_f{MJ7tPHawM zcx>^|J>|=lhlrVWs3z^OY>C3I7Iswg4`Rb6A13l)Cgy+Q9&#%HOu7epR*eBk6$we)X=-) zM1R~1HqVft8h2gZ69IVS-0KgeIV8&v(G_cuUc$%d4su=Cqa+3i`p3e{fY85NKS28FPrf_Mlkto zJM)E}14eW(0{jm*IIovhSp5XQ5#N@I)4s|i@oazZywN4t?_k^b2>ikksan#z9Xze! z-l0D{h7#r0Amc4qCT&w&m)`{Mfr!Ri0~SXkD6|a2)Bs@(cGt3j@R|c1S=XDWkEmxl z)v$~5*c?}!3H}z)KTYln1(>dr zCvK=$UsSYoT4p7H$WMq9g3PmKQC~4V`*fN{KMUtPH3F{SA6%Q`GgE(oZHN7DV9lz66r5CG& zs)5*^c+`gEm^WP-X`4PORueuy9g)nKq3sXmcO3I!Du%Qlz(su}St2K??=HL4_^C@x zR9lHDmIOf}#oqUm01T|JCN_J5hDPaCyP_h|#kJ_AHMFQUwUTyUE*fw{eQ-ei$J4=* zt)!6;Q!Iu01nckNd#Z`h>2?P{SwXeE>7xziBT_*StbU4(6e3{~5ksH!zBj6R6Z#SR$hg`yvRB~QkWgveQfM|Bvo?FVcFJw>tWfX%WN`!gJYDL=V0E|R0$pD)G(z-v7bS$LgH&SP zf(tt%ME{ng&cpUv0z1} zWO)6_yy4lGHi5DvRON4OP`~rrDf)1PnB>@D^?wlfy9_#T10(VzO8Gt7TtlP}vO@Lv z&J&%H32839I{IS)VtqMBz?))e0S;kf!s;Cw^6y6w5II)0HO0P!k>#CaZ|+^TWQbBb zi@}1b`^@Rh>mMu-Gx%EwdSMoiF}cP&lr6E|#bbQBzoQEqKCFm^SMJ{_#lFMWuw7w8 zetEnsJk@0k+TV&F1;kkGKX7mh;T5YIq(GFJ?7)0t9D=ofCj=8?6D{LFEmSjiz>xVHSEXJ3#=Q`zNvzW?kvN%$wlgTJIJ#ZiK-F!N09j-RK)AjEa=;|uZpbd^YNIIQuG-C`=K{bvo zuk1$%!jjREF`oN3-3u7+z~6Tby`j&1c}^w+WvDaE)#vZ;*@_jXtfI${ePFfENb=HWA7DbxH}HkVr15uST}flErDgV6Z$)&vy2eR6xbh@euv=p)bO9fVlp) zt|o>%A@VY+L#5zcA_dX1%CL07ayRb06RW36z~S~6w*It2gS*{e(7r|5H{J(T>>}n{ zlaJ961YwvSB$~4U!ZFMDq||mstZ#28qoyP42o&Z}b7-hP(bG?lkF}Ubhjzt~YRLn? z9crV0z}$h4iED|^S;VZyQX-v;8%eoC`%iNaM<58w#qSo_kA`P7-}=u){*CGT#TdaCv0Un>&)4MRR(g7Z6`5W_ znC3N$O|D*xV#0nO?O!THIp8izWml>bWLMSbz+!_1r0GGMZ~XH z1=jqB%wMo-^R7a{nY4Rx_Ma)%ws{;|4+-cwo{A?$U`zSpS4!pTdCN~0@HG?6^RuqU z_~WfI*T8gbwZUclcg;cysIo{Sb%d?#Gqjlde}gLgrQL)Vkqwt|6xeQ-Cf=6J)dH|P zSwmWzWrBz3!K9Q_Nr?z$VWCD*M1aCfRt3>r%T9S2%7UDlCXUmqnXyV8=Vuw^Mxe&R z&S*R?Run2O?F&p8yN0AM&UOdUxs?(T7KPthn-ycngcJGLRi}P6fSB48u-7Z?&AEWJv44KXHro7Fu;6=3Z=E#w)V?2a+VMS^XOyw$x#*+0 zDFUhOEyrO7Mdv8KMUkrC1C>M(0&XaP?yIwfxQz+|jZH@t39&y5OTxQooUTA*vj{ zOd9^efjgVp+U%4&G%hBTB(@PC$jpj0YAgY4EH@k-5JXF?B^+nc#Y00-7R8tZ;60tl z1b+=I4M?OTy*56a*Xfi$Z;{!E!l}+P$S!k0f;W` zN@e|L1xP*q{S7)P2v-2v8M>o=zkGbW>8(xVLqHm8t(&GNAW$eejLqp9t230}o74k1 zNNb#vWCvX!7Gh2nE}*LJr(`pe=Z)^Ld|;heL*#}d|EL=#u#CT^UKEF?1`sdmB=-umiOdQahU{dt#G2ii>l#XZJ-$Hlh!HFx!3{aqDDonFQgVe|;d;)PP$60>1pX4NTTae~p^8Mq4zaQ%d*UdH|*@5tI#P)Z_ z)2%x;5#=@qBqAeSOJzF9Sojy=`r~khkgipsAyE-RLj;9J8pMz8-J@B|;gNERv~Y|h zw(++Za~#tLfw`xanYawlT_c7P2_vwa@}!--`-|#!AjRyrlA7)rMVTZG28BrR?R7zp zoh$lsA>bxn`q2=w>6w+EAj;K<>`709x3H|f%%>or zDVG|$EGGXcEw?U-6?)X?F-pF$zA~3U0=1pyh-D(!!H`~HwiF?{ccAw_a`W{Z2O%Wu zpqK;Aa*48D(D>1?y+Dav!HHc#UhN0qzlgA7>U5eta6?A^<~xpR-by(}UScFrACqPP zrq2PcF)(WHvggFplrWKd%8FHybfA^R%MtBpY(seK(o*w71k}iDpne{f7~d~DhYXJA zWDE)yf4Zdn>bU&sPhWen?YRAv>qq1J;oRIWuD=b>(YggpS!9q+7vPh3lJ;y^DU!g`mIiKY$Ywn@Q_z zoA#qAmHqAdBiRb#%qW_dXat$()J@nUV~j$Z23lYW_ZdWjH1rf93d3$R?@oG6?r$ma z_WKPG@k*Oqn5H+EL|Tvh!9>6GIB6$fM;sduxeTQt@5jeh&d;_owopO2LXoEn%EZ3e z2*p9)*qtjB(T2)&U5v>P=AR$2o3S=3#6LIgjfzgyh>c&u7ipjT8PTLzIiKy25#<6* zvfirI+<Zz2jv5eN_|HJafm>Qih4`qHuY?!L=j@*ZtYzG59O6Y-%pN5(=1tMh%H#pBYZ3|ZFuPO3?}1wY9rYj)?sZs7_Dk0HEz znS-YQ^C!C)Wt_zmD877du@MA6pB18S8YS9wJgK{SpGNvOa z6!=z3sTgBk8BK)KuQ3Joz@dnP*xVF@o)`WJrW*?g{NCgMbMbT0t*Wji;QAgq%Gh`Qv-7jNW zSplUqpfjz`1J9W3lwD*Uf9hiX>R~^|oIOZOV$XSj4kABJ1Uo$(uNBSnXT5hx6)mx@ zQL8Clf!46#+OQQ0P5JZ_^T9yZha6M=j~EyyH(zJhWxyABFHVjgoc}*Zg|-6c=te^8 zu@xEJ6sl#^kwI%-bjOEBqJDGNtLkT8w?EMLP|XsF7`by@GxRq{C{fW~1BnnY5Y%)6 zj?)|6RX9hhu3CeK{TWTqSm!Ib`23+qq+Ik)c|Bpj|9HLJCAFMccHZs?eD9M&n-G-# z_LAZNHWZsYL^1laEg~SF6e)kYYL#lAN#Q2Uf|^vskyitk;Ak^*pbN1Ab(PcK7L?YM z`G$*x$KbVH5gL_5&H`;w=oaxi`xk!lHUfNvTRalE@E;dlV%VgA;3&n`r{Yq~DV*iB z?#ecw*S}NJSufm`lP0g-JJ=)vqIV{h~;9)`@cVbtoMkhKqeiS^K-#X7)H%R1oxS!1c}77 zw-6r|xQIoxWl)dw9}#vIw;i4>x@MF$z>oiXG7=>kLUFp!r2^8HJ=8oyj6l2sxtVs{ zNZR0N)+3rCJ%dgzmf%Q-YCROA>trJnu+?;tZj$jiBvI?XgnKgpZxetlN|X^NSaI&T8yYy>WW~J?4?lD_F^ISaPI4Iq#ptRRdT1UR-?gB_xth4g^j4>NH>wt>+ z`Mc+81hDl^qe;pQuC$j_SZ27?=;t5Y%^NCTuUss5xvU~ScjD1|q>HaZsI5KY%+9tfwjHlx{PVUsHi|XJ z$Ou<`&2*%zd7EQ4nzz8-G1x1E^ZMniaOp+r23^3w8MYE5S^Ww`rio-p~4A4SeoxNGbU9Y&b@@Ns;yA>GL{C)To=-NINMz2`+H7E|{V z@ab}lriQu1GSD_R^TriP5dJFK314Wvuen^%Y|vK&jqJ!ZD%eBu(7w*}IW6pdAAC|x z>AI8t*phZ5q3pRD#>O z{~sLOF8B3;VFf>6)D*ozsQqi1p`hoM^7(`{$;Ppo3fFxUDSL5m#fcd=O&=D#?3_1a zIlR|(B@%IvVwTl@wfxoNl0()0RzH<}4Xv{!WRLCUhakLAxB9*EKY+y6?(ZE|+Bl5D z)p2Zf=Ab6-#XvjkR30^f7+K=V!Jur$Su@~c)MnX>8)=pux_rxxTt1F zb&L35m_DqUmHJzQI9IR1i8Bb5to(fh3{GUFJt8w%!*}1{doA0zF4$Fi4R{U z&|48Cxo0YafPw5|)Ch6jK?Nn00%BN!?klL*T6{P86&?BXtgpwtY8)n7bp6+2uiE4W zm%^f=3;COi01K?V@bL(IHZtMt@CBa|5Zpdcd1>L-iLKa1&4aB?VkjzDBAQT9@)VBPz`Q@=90C-TPRk6**mtM!O~WqY7Oy-i&3envGbZa6A~@HjZ7~ zST6f1Tdp@V8oZGlUflsmp+!8W|AC@Pum_&nDTjh}%(xKxK(=Dx;^55A$!Ub{?V>_dxX zji&x{c*8|k$o6HZ&$7kj{?d~%Pe)F=zUdyhn;uuLg~`AJkFY}Z(LevFQmX42JW*uz zcYLRD%}v`^wVELMN&o020tD~wTdTf&(UUr5_Wy8dwRdpQ)C%y-EG5Fn1$&tFv)ox^ zoxIfWvHsNSMg5`QPVh3yo*4k08^DeUPIlO471h1fRstGr^&?KR=*1=9YdrJE>bAQE zhTGxzEQy1@#Un8@>szwI?Ot2|%N7@gNwg2MmE^rGwLoZ)SC*%{pGSvh;sAxzCO zoA+F3&X@x|Uf%({j{MbL<;{fE48KNihFCa;6?8EQeuWdc!`*bV`z$Q~qAm~^!j-Xn zvfXOldz>l@B60&&ySdFN-K<^1FyV-Z_CZE#Uu$gZwmZayu^IL}Gq(EYNQaKibfPEQ zTwJv8dx7F>&Oc`s&OG)edKF1L7WVrWtqgmD*u*czLF77eUi(TE5aHE#Q5;a6Jc|ny zTT~n0Lb*(WYZ$wi$gl?}q|9Zib@@>0K{ok0CX^y|KW%plI!V^*-Tea{d^CwSD%fwM z7-Y1P`H>18q`PqZ%1=O*pS`w+k3sblD*l7VNoLGM@qzxzL6( z>R(#Kzzrsrzoc6r6JkxJTGU2mAuYd<&+6su`N39tM5;uX<)71Z?;U zu0+eYbq}CE=MZ%EEVuHXcDXsqX5WQm077H-jVE@ow~cC{)fA7jw{q&wYD2q(xLlLt zG4C7$qj&ptkoL4agT$!A7rC)pc=G#CT57%560M|u$v!pEIBprmTjv(&HmmZwk=5{0 z32;)vn3O2}znJGe@~wj)QRPCrh%gIlSU>$v#?>VjI(xRxHQj>t72tCqw>fmjTcJeh zarG5aJ2T5F1W(}rf@opTir$6b?_osuq*BnEzJSbm^xrM8|z=t>0| z`=bBAh=jXU zR(1Z~{e-ySQMuqz1`qfQtO^b!jPH|FRLiHz1VS|?rJ0Yop@~}Mj*Z7`kv|}pD}Mp| z>2lKV&g}Rzit@%vmk9*-TT${Cbo6lLt!=4!IUrsaH2nGsCTgqiQ3!DH)?%{}k+y?w zdm9TwQ$f*hehb~9Ff$3{qmWcBps;dcg3GS>vZU6)bybob5woJ+8Vb% z6}KN)0ZGz66Wmi}89-nGjd`|3qzpau&+kl2l`9Ie@H`WyFjv;D>4H#lc@C*b8zDSoy|?zMz2|5$8D09Ky){{Z(M3zr4`2K7GG1`Ujngk2hQHZ?w%z z1|^Y;+(`7Cocc-#u?efx4cH53ROk5x*fH1O@6E!JLl3xa;MhaH$8;C1NlDY}_!Ztt zNLCoK&X_UiQNy<+W^F1b#L&|PO zCnhU-hVj9NBMlCcLk~Ax6kqxn&uZxDd8g&>RS9p1nMrCtPc%F+{;vhZd1!FUzB)_~>v&<8qQ*c{dE| z2FaqLUUWa$=+MFn?70{RBA6(%M|2xcY5-4vdmM`F%L)Md{O`vXEOA%)4ksYb|AZXhv4cl402qGT0rLf9 zW-|k-oyMDp^3Dx>nurb=np~o*#swiw<4}pIndalkq!i;2<}9!v%Gm_74G~@M_(E>H z+7`+e9{^h9ayc6!2_3}uhk*QSr*@5;S$0RqoO@XBC22-?{~l~dW?y3nx#G7dGA2t| zz;z6O+OQ@V^Z6}cKi2_eL_{_8_$;`y^ASmmzSKVlMVB{6Y=-Nhh1RJlXu>s<+fWk5 zSeG(BTu-)}u9A!e7??$WH2&xrh~LOA3`84MEcQdx+lb68SYYL)8!{;=7wU#9qBKr| zl`#lBdWi8lp|%CGW29t5<6`LZ!ix-f!A0Y5 zn^y^)H4sYkB)4Kr|Lw`c*Q^OKN_>A)*w|o}4hvFgsIOm091MjWy9W!>-T+n$t}@D^ zAvKBsVC*4JHzs248l}7s=mcVs(fMQn3k8*&&7^6Fh-`Fm;coSjgu#>J?qAmr6q z6}OY5t$$#R%oVScj)`F^Gz)k8;*qE}RFW*)?|P|R|50#`acUNt7icfPUw?01ZiA^v zhtQGS=5(N`1^vMGH<3NXYc#p+`Ezyyj38yOG&{~V$W6^OClgkyW3WOc){^%dH@~Q6 zf|XhYaBl-n43ezUiqX;74OgF|Ey*RtoRl&tM%;-*@PmNLXPu7I(M-rSwW6bE8YDI< z&qC+5PPtX64SErey8Dns8H0j1WYmv-T-6NpLEI`?Lil7$b)lErD*su(b?ab5U`ubdrJwm{Ek-a2WOB@BZWkqNWj*zGfRa)T24lPbF;iO+8P~g(S<{PaH*-rucF#-*p-S#{5v{q zn{h@J3@#S0#z~QzGv7W%A&m1Pnzy1yZMi! zC*}q-o(&h-D6H0=8n^Sj@*Fj`aOe!FGUn=SLoHq(1d^_3ta_fQrq8~R?T4DlMUCqj zkgEaU8U*R3VFAnvcTVw>V-k;X~H^7+qy8xks@GZ?6o!F!F#7Z zytpZ|CzKhzLEQFLnpTacSWC@Zg`%p`5i*t+J;Y4!ifDi+(qCc=;`x71!B3xDuqYdt z&fO$}Sh1g3BG>5I3{6UHik+;}kiyBN)iU-{R+s6uzJhen`oVt=;@UNG?_y zmnkgR2w<_|7p!e?SpODl*#~p2Jpu-QM*A=hj+69*dzS50p38Ui$y1Xbvji=Y%${oQ zM^8TMEG*go!%0T|aFVS+qEWymRZs~UYGVym4d9Izd>YJVq8Z6V4KZAJ4CxR4kQ%6h z7qwHc<}-2_0!Hpcphr9cS}904^>Xlk*s{GvJ?_$cWXIeOe`g^@2D{62&hs@&T<$UI z+U+uAQS8RuG+6G&MFO2YkNP+u1Nfi0?gjeSc*%rZ2Dc~kvawwSwr%wH>x@PI)!bB! znc#CfqI^;yKy*4CD6mjaE(x=r(WIs_ldKU+OQh=%^lKKnOS4E(`qBFR{%-JR_N28_ zK%3HI61n#|kfoaj*r4ArgPVY~5;pwvF*J$pAk3_6<%L={zdWpSqP90?#0K*XE2oY_%f3&+8<*nJHzVHNq9lhXv-ixZJcXTLuXJM8pKlsq z4KU=kGx_azK!QDftgv;xj3zgzyv*hq(MzobH9JZDL*xmna3A%%bHjbLgo`U1&EvzM z)LcuZ&LqXtPkzFOnA48U5wSqYEf9Oh^_`kC?hJEMhho6h7QyaDLvK#?J4E= zf~{(p-URxva)IDGGbNNFQC7}(=>GklOopnc5B)H|@0O|MLxQpa zMIbAMMZq0L(cEGf<=U6~7FpRVA#GYyli?7zubj6dIytTj<+R5vysXgR%EHpxBbBH0 z%QVHI&)6w7wfe(op`9e^W!$SL<){q*oUQ5lwo>A>e4kaNo+xswVR<=|9}T`r<{E=7 z@g)QO`_k0R<#2mR7JJBUK>`+O)UE_?-G@H1 zmsb2j3-sKa+%LclT+1<#nMUx`LuGpU0;7EWe#+zdH&r&541)X`y@@0xX9TgBhq%CO z?+I(*wm>n|qkT5w4r~$Cod9X%^66p-12@9bl@*D5aT(H7I&9$9C zSM~>B4@e{=IHA~u4rZp1g}#-@^W9uBCRyUP%p;LkU^imxMl@qQ9%U!h=O55kA}r_d zSb~Yf-B8QU*QekO7_zASbqB>`1`HYUo&wTXFrU|O#v&O%%wyo?QKC6KadSl+I!gsU zwJDX@=RrtR2pT8Ly3>8YzwS0^1%DGDhSTn49dxUGA3+q&xkq`zTr#N`(lLpz`C{6H zVZ7MfemDUkuOmjXKT!(j3dGzhN;V;)Mxx}DhxT2zf83NMJDIOak_`C{U!^?~{;~d^ zV_Qv?n=jl{+npu`$cakQ3LNGVc9vNJoa4oNB~NV#`!U5QR)x&;w8+X9JdiJBM(OKx z9^)8@z>>2*d!~d@X1iK@_2JT`zPgCtH&G1Nq@xKOuwe?4Ex_B~rAnCjbx>=z;eF*Q z8?>z4bTGK=_53iGo9QQMPdK6JCJ^>Jj}!C6m4rqtjjZyA;p8V(lw8#1mi0!jD;KP% zQuKi0fFT6-i8ZulQy@o(z340iW9)T0NvTeY$&G5!87-xdpAS+ejhJnu|HcqivsGEb zm6J_2vvu3fIOSA{M(@h+D@xH)#ezEw6f&ELRYjZzy%NgT8X4`xaM8)nBe&BSE2Pe} z{$1hBgwP*-9c)V<4mnprAt2jB-p*sI4$K;&rnHUg&2cb%yxhO(DGmX`(*zj>Zbuv& z3cT=m&0^^NHsr+DcNcJS=NPnCpr{{ekM)kh4?hN8j(pRX0WiaP^{em8CZ3%*6vS(l zl!u8RRPTo9a`sY`(hrmqqdis+9#MmA%~D{|xyx&3)=EgnCj^k{1h90w92g$=_XELJ zg`bE54~n6|b8ebk<}1*n=Sjzi?~n`K5x+CMe_g+mL}y?W48p4ZRo{Fezlczwie5=q zKfAw9qdiA&UdN73p#NrZdNRf+Ju#nIyDnB|Ng>v=-QkA8D1@c2hK%USckc2lrPO^X zG{fE9iKH)@N?DpIh&dLzrsao%5%DYT0E#|?LqT}!=Y*-8|MVF9*%$Pk4)(4X(pLnw z7Rm9V`BEQZ-eJ9ZC?T7rn76jRH^jb-Z_eFST7MGUL;>am#CniKg3WS4z$zu%+Z9)C z9JVSZ$SQ?lphE>z{<7=Fmv7IcjmBA|KB&S}1a38p&P1Fo@yvO;g{}ZDjja%|f3v@M{Av zI};GPj~hV{lrHE<3iXBVpz(@N_GHU21ia*K}40WJ+rP&(66ciV3r zAcWlrxV*LG!iWrK5umZ~DOAKD4}-fD*g|0nNI@FOo@sEHavI^H^A?KkPWGq}<)wsX zWGX(5lRia~&J_xpif}>X21$0R3@P%6v6_|_7-1GCMzA!+`MC^|_&35*Ua={9hw+}K zIkf&e32W=6ROr{13Q5XR4WOZsjCqDT=vcA#lJrQX?e9Le%~Q?o^4cpnpYPW^$d)+a zhy>KZrY#R}A&Q1)bku83NFHGxV9*6{c&8}kK7oeM@?RkUo3XbPQQZ8T%$L#uzKqi| zu}n}UfU{r||pX;J-F7 z2O#H0P(0eal%w%pSv3(lWJ91CCRxW(JI|Cott*8wDkPAzLV5LanF1(*jRYSe)c!@3 zR{Sbiv+L236%<5e@Y3+MOu^YUvPuNw#}7Bm1=wbi1{NAIHeQ}ci4oQ8Jfh%p{J4UG zqHTiCX`y^n7f#A}tAy0jC1#RU=dHGt5mJH17*K?N6F2=P|WRM%v}+ocXV2o{W2EmJ z1p$7zb^K@p-<9D-xFV`sejuC;L5HtyzW&W^5$xeZddRM*c`zh=S?01=mU^nKe%2uP z&OP`UKXyrtM<%06{~(w;>G_J@Hli;l6yA3BTm0Ly4U*^7Wo8DCi9Bt<@$k8;|25xk zyt_NcN_WlE>zdWhR~(Pi=dFkT*4q)1!G*!jOV4ftTFD7-zx2KO?I5hXX$;v2$_X}rt?Tvm6wA{X`(kKQDO7b%S%?X?KvY6#HY!9O+ zA#o+&OnqHZnE9EvWVB<&g7Y7{3^#(w)6D7R(C@D|42{J0E9>K&qzoiP7-E7v#P~Cq z+oED@)q;Fz`}Eex)LGClQp9C3JB$b!@7#Uv*FTCEu%h;xGU`(<(em!nxf})siVY@( z0qR!ah@w(%>_(rzg^Rs^-N_}y$H{;PtJe4Z0|PUZVtYJ3G;ANdJm&zWyrOFDq@*y3 zGx6%)RIp(~f{N4wWwBJY@D`zkh++wqnz0yC*%>O$Q;6yFEUqbL6Ucv>UQ= zUUu=lJr5y3G?f6Njn}R9>xh~uNAMO%W0o>8j+%O%Y;$~@5<4}U}X}lU0uqG(v|78cAINO=~CjZ zLpDt!LY~AS{=6$k@5#m*XNHFp7rH)YQnQj9goB^A=l9~t(`3V zlH7cvZ4lPcmFe8YH&?buOE2~Syuk3_r(wsU+od5Fdjyu!sSD5Xnlz=t^SzYbUYd2A zA1=$X=V0j{*2aTA%>$>R^fV8siqc#Lni3k56B^qxl)m8Ou_Bbd@H}&9Oh(>IXsm?B zHs5)Uw1mdQ<~9e72|sf;U}C2515jdOB_<{|$0a5vD<&q-cB4ea&WGkuu?HA_%-d$C zMwd{rCUy_d>$K`E znJ}@(tGlN7N}A(gvhlr$g+=y6nmJ#BVS;m8f?*ijL$1 zu1SJ+`;bKQlSO%tL1d4tVGvrtpUJ{>ge;NkKY7qf2SI#io)oj}HuSb>wCZY4(+#y_begKxXlrV_ z*=qE9hN(50Qu*=4aG(ytAV%jGucs(Yp-V~GUqCRkYETx3-en-uy1Vand;RO%URQYT zQ%o}or=o8mN=Q>=ZsqdtLohsO;^9-HLL2Bssq{VwMQPUlZ}v?6s$Q$A^+uzwcIwTR z+UYb6wQjWf?RLLf>-VlixBrXM?0x}77GGG&4$_jyfG$eY{YE)_J5ZTDE{akKJv53^ zxjZ_G(sa8d#qO{um1}oZl*+XmD@r%|qKN+PN>M78?@CcBtFKE@Dy45sQ7V@&O;IYP z?@duEk*`isDwA(dQM%v@R0_@;zC)UfWAnGjO#dYUbHaFoCHZDq`jo4y-rb`hRw8E2 zq50>5XHDjrZ-ugiG4eT)#g8wTq=I_$`Dg2)_waE2`L=v3{&XnIEb9d}NT1aKQ-yvs z#Yd?KhB8bx!e{AkG1;oP*fi@tP-|+MS*-(AYYj}*Xf=l_aO!o{fQ>59OtWU&cIiIw zMtVA7a%Js{u5iosXL7jX7Nv8CircI_iDCW}rRDbc)Tt;2Z4?6gSptJE;nVWq3-sn& zEHQM8D3ZuR0a}4C8iqmqC#Jp|xllCDB6lntPstX4%+hB|pcyAH9J>g)FVKew8xki11PdaZbaF=4HW!Y{D{J61e_p-j)fu+P1&>Vw{IRqccdjc z+J1(ST!~tJ!+>8()eB**{QPK_S>wW{sj--lUmchfXQDc&3f)6o8C-BgtF`KupWe)CB&EgO2? zi4E26eLp)Fh?5-WqLhnv^SGkDFS_7k*%c+y(tI7w&!Ur^?)##1@vI8*7`Jfzv7I{p z*VNRS2(R69E=EL|f zHtn(KVQlGR(M3z|?CiRIQ7LEh_Ol#W$hIbd=i0N&5cp3}u9W{psU((AQJQu6{WMc< zVXU+rCxi$o_u$Dd!#BMdKm`S3sL(6rd|UO}FwcxyZRr=H=e1c7!seZuTD7wp`w|nC3=qg8FG(5MYn zL$_NhXuz6k4>WCP4q5I|V#GlnM6YNDt4D6!DV zR=0{lODyz%_Kvo%CggzAq7le|H0`EJ`x*Ov z`z7;XJ3tZ=NYk`Uc>2^$%=vsi?#}kvKJQmr`$G3=e7LQ2wJ-E8h-y!0JrJs%F7bqZ z6GXM})Natt(q(Q?x%PvW_Jfk&{T{pRg`cfzT6;owoxVw8UsVit!jav~%)q}9#jc-( zMR;TJ9cH00UUzTo`fw7j&#KL7e|J;jH_7L!>7H#Ssh2wTE8Vk|xDrbp4OulC4F`+b zKsH6yX-cBeloe5H>PRxl1kBL({e0)#Qpdi(`g*A&?*zpUE(`>3_gucJ-r8KWLUa(p?W?Bgs!%OLo2&}eyW{sSebvQ)ZKdz(4ZW|q z!Cnk;_bez|?K0l4bhatX*o)U#!e#7W4Vie@6p=iXL{)Ft;$Wz&qKRx|4~EV_md!m8 z>b1gN?~Xr!w00SX|xngZg!>GW&DoQ+GV^? z)*p=13*q3!(Y-&wY)XcuBHTqIV z)0En2{EpMwX}nKE>TRX9)A)Jmfeak0rdg-4q8yX|b{9O-<|@t)8fCV|e~TOWs3h@*+O zeV-}!;IMIe5DVeN-^|o=z7#)v`r;&Zz9LBo2^x6#E0RrrCtqFRXdL(v7S3@Lp<5iC zesMBM9;%XbD%{**VH^hcu7e#RcI`iKEI0v<1Ry$byBx2CjZyT+TmixLg_wZalQ6`7 zEJQILFUK)-vF8+&2E_TQVU#Kap#T#gAs7PGJcbd9?Yr~=;DYJU&FnCI#-1HjF+nI` zmw=Eqgp;H#L*zwxhOcvn?LP*=LzObX83)CL<{%`^=Y>v%NAgb`jYP*;gmo#q2-$A_ zY3z;`G2Pvrjz%-ETkPWyd6w%Z#VtxJ!-yzOAx7aXj+0mQ>8#`#EkU^jwPbjW{COPw z?)dLvDoatNoKNN{^929|(B@0h3eut%nGz8W!K=)XFG7H<#(^Dpb0C)?cJR>ku~S3@ z$30*D_wX)hp~YI(md?m-Fvh-s$bZ|$5s2rX6CB0D)Qv#{NCkA+D=pj4z9_Cl=fwQE zokR`34ui=!0m=%v$1VpDC=exx(E!3ZLO!|$6>t%)_NsS%BeX8hvT_CAXKlVmt_M~M z+DXj_qZ$d+Y64xPaSn0#9)ZBSRIkP%7EuI-dz6?JJ9NjOncUELkHmstdjgK)yy3u8 zfjLHmfXc)tA9?ZTU{F4~jX(eNRG_O1!daI-ah)W8nPCYhgz`V|V?mK)s4;yOaV<*9 zMrf3gq3#TUOJAQ$geqYQ0+KnBJmsm7vTP>gXgtO!B-I5W)J5bX@JV6Uhe{dM*}EQ? zbTFGEKntQ^5|Sb(LgpF}Xp@l8lx5hf5^r;L$jK%$Sk9$N_k#K@UZtu`NCb|?tRZuhzgvl7XfJ9emCo6OUKSrdcN5XpnIV0D1qc}uy5K?K3 zBJv&iHa;#k<+~!tGD%+t6taicHx?770uy_ggz0jsRE-b>^MAsV5R?$?&gs$DFw4qxuTJ^7W1<3|D4 z*iz#B$!LH>C?V$nXucH;EnsG}2*B)C%8Z3a>6680nYBep68o)AuPcd?^u)+4i7j4O zprA_=mci}a-&2wo5TyKSHI;VX>>6UbrL@IXv)vc*FA70#y>(7qq-M;KEl-*f>+_ z?D9vo5HiF=9Ae+btSLWSe0%ZzPZ!0Q{U}CW(ra7E>~}5SdDpN`me^GTEB2W$mU~)) zD|f%&uGF;Tp~kgpIy-_;K~2|}*>g4BR6q4vKNDKYiqVT`=r#2KRnX8lM1C|5!q{To zqZ0ZlDRQf!v^!$6VK&5;s+(fJuc)G_8j3>&eGR%=l@e6OIc;QR5gl_^|8U%O4ErK_eU_9UXEZMAKPQnMwA zEyHZ~da5opjZ*#T6c5Bf7)*hP3Tj)b*u3^;TF3?t6_nVzyy|s({j-Z+w}d{&;p7$6 zxsWh!vta+`Qizy|N(pf(ZQbW2#^~uvM{CHU)@=64ywotocH2-zO*Q+iR$p%Pd!1Bb zR!dD3Tbzv`w^kW($Vt)`P;JmRRO}zh_Yrx)%FExzvQ=Kb%JdfL2x{XVW0PK^a?eq| z_o&>1l#!BJ>J&o^e%4-95l#rTmVI$HAW#C;TVU} zs<-kX7_aNof^k~;ci(?)UH7i9&%VDXKjKZi!(L#c6i@1KT{LSE4vWa)&o{HSsljX* zlBCNT5+!q>i>hf1MdWCjsN$xKBwcUVwq4d>w*1FR#*7Fv>mtjT(~EpPFCkoUi0nU# z7|x$t9=^xkObE)qd^RZ~HlkP#xiy^lM0jx_99Qx+5OgtuIe1sJi?5m8V;@IRzJWg# z55V2Pqr<>80|O65v32J%`+gA!!B3umvLCyW9j0N+f!%G_#Dwul!5;k$*_#abbBXZ|({J z*z>}XS_1oMEh$GU&2`+e!ZXv#{=kpCjzzCZ+EqVeC5P5ic^QM@;QY(G{)@SoZ?Q5@ zd)}#N!Gd=Isw$;eH?Y0~n4Jn)-@A5~&p}ol#a=bVH{^BmJ=@X9KSL55j-!aG(U3$# zw{=m`rJ>n08k%m}Ig-i>4Ey056&b0eCL%tbQb{Of;}_o4X5I4!N1rIN>fE2}!p|Rt z3p^ECjuXN@t1EO1OJQY)?olwp0?#QfHFto*RE}lcI40}GtIME=C1n&%efC&j!O9+0 z(WJ)iHAz~hNyCBGP)*qsvDz4ls$!cWYT|}y4r&%Qjr;WEcIF)v85DaCVL1@UT z*=RUe)CQzqRh=dooHk{JIGS}NnM8~X4VNLhg=D!7J8>q;4TF3i;rK3qyvrYM zK0F=${oxKH2Zs^KfuoJ2F7bv)?5U7hlRSACdB6FjFbEg{q-_&Ma2$H<@ng<#l+X1A zM8g~eL-+(uS{mbkAajy~Z@>Qi0nQB)wEo2Nj$j)MR1xEcn808k_8=2-lf6P8{=kpq znd=b3s~1aHM~ePVt3D4LC=sG5(1Pg+Y0_Ad2WR|l0$~zi(uOYvU$Gri{M_To;49Lk z+yO~`p!_kI&_m2nmZ-Ln?i~^0fE`JEB;4T0k|WS5l)yHT2q?s-K!$uQw1fDLLBrX{ z^-E9m;{GdNj#Dx3|4!D6%X6@*w|VH1wBa54G=M{vI1#t!yDD(`Wa zEy>?-pB;xiPgd9&QJk71fs}$h1QCHjaT;7A5~(8LU4@O=DpSQQ6{_D?sk7YW`jKOql>08Uu*9hz{)nwo+rjiU0|{DFJ0yV0}iOLukg z8oBsHLg4d2F=^||R0$g+r|8kL{}>+$Fx8=-2;Y1{bcl{f6=1W**vm6$RwEP}Xsx-4Lz1HY z$qmVu?}A&`M&32yx_!sKQY*jl_b@2-!a6|44aw`DUG;tuJQPE3&tnQ~XyIA78mMua+Vosx z7iQfDkF-x`{lb6${7X<|ihaz3SHLg=6G7zs39*Ooksl{$qN8N6oz~0hBt~eAL)iFv zEM#XP1lsci*TH^FM`tK5E=zk&7CeIoweY-I4;3X{W)x7Qc8F1&ME!!%4@p3}2bdJX zoI5Ts15nI00)~cel%S!7lb7WVv%TLPic(7XxQn&KMqY;MMLNl-2_$6dMmQ4|gw{7C zav(SpoKQv)PkfgQ{d^b%&UU6IwfOVkzkEe7X@|_#S zBt8PS)u_S{S;wJg>w`2xQ z$e&K9$J54f5Z<0Bk|dw}eE!|FeTPR#Og2FKa5h39B~HOmkYdR!)QWHjeUpQUOM}Jl zv0&1YctC)lO~MHZf{;e5YHFqo-%ecTnfUlvCvp;e@b#G(SG0ap%!M`1Gev(UQ`S`! zgboe?dH0I)KgoEh+9)U2itx5lQft0ufl2k*<>q3$t(4L>|Gpb9^uDX6dFsX%8;=56 z%5m~T3FS|A_D)L?%oZttrnx1GglhJ9S0rZ$I{`U-IsH0$AqC_3X|#f^qc6cYS~J&Q zG9rJg3asr|fwRJuFzLnmq>~qV`y4-8E&=o`7_K{}{v`Q0`GMhN*7(o@8@HD?>lxiU zMF4}XweNeo!!j5mZ>|A(nQa=+9c0XnynwiEjlB|gVPeN6SrcVNl&OM2{#x9x_IhG> zw8huc-0tfk#BKle$jYfCJ@3u%oOFrGRnvv=yKjLccHVn;W~gd9Bk|2rxR&yw!}PDLB30A( z`zA^cjJy%*{@IIsriF4x$fu}Rgm-671}SnKNf+_L{eW z_dAy24d}7j>DGHP+vTznt95a!ek)R+NPSkJJ}VZk18S!O1?|AvVo80XO_2IT>hm-r z^@-FcQlCeuPp~ILg@*Dl4TGE~a-PU}o<`(6k@GxhkqL%r$a;ceJ#R(!y0?wHhI_1M zk?|xiOBFsg{crjP`K90{=Sfw?(bQg_n3}B-hZ#2UJe3ifS*kklw4SZo$a&7XO7}lo za6cMLz7y?nnCmRU3HUPw$xb9Yk?cgWvkKV>`|ELn@wC7i1{qIev-a(=-R=N*wj>c{ zj}7P_lQA#CU;Z%7e4e~ewYE#aMe)jXI{&g#peC4PX_1EM+~qca+Mw)7Sdv?de%(-w z!2fO-L1r7s&SY;iTto_cMPcW0ayJtG+Bk5DrL6+X<^3=Jji)$(y&2og%-a3AvUl7l zN7Z!^qt9~?qt$cpq;?DH9lW}TTCZ~uwPDXg)RH{|QG0d{qE_u0h}yQ=h+4S%xTBrJ zg;oW3w00D2w#I)Djqy|FK})Z;3`?cYW1G8v-~Iema<6zcL-_ri{_2~C=K~~ZadJ*|D|!3>d!?6c{7*e zN4*j1jq2m3Oh&UPH58o_Y6k{kwlyR?(sjawsc>o-S{Q~Xlc|PVZIh+%vDy?Kkl`l} zu;ur4aV03a*<62eyLELD=?U3TcE`TRc=#KzgF7F;KN5e$Xce-`eWuC2q9052`e_1% zb1L;l($d)gY}?Px-K!yA1_vwX@j-Yd_ZS1;0b;Nh?K?8(?}Ug4V@Zu$)e_u&pzDSwCe(#53G`bMeoy00nKIyBZ zH7^C_zI`IY;N%FQr1tn%9;GG4Tp=@#%=pn|4wdd)Gvk&K8Ws;opa(i(rWFxeqm%?8 z4S5(+BN{@jW{=D`GUIhPEo8WT||z&>nKMsCAIIr zbS=$pUc6`ukt0Wr96&0l0!OY;Q;T?{6BdOwVVbQHD_|-aYHB1@TPyYBl5dWan+7>@ zjdvX{Y7m`VPOVz7-59uJs`4UE=4E;=qz=)llw3FK)SNDd z)Lqk_KPG8NjEkC=y0{8$k`bN?+(p^}5igHCjTg)mLiOzSynRO;N zZ$blIG%alkuRVPmJEk|iz(0_?+sXq9r9t5Ug5~8fD9Dp0!C1n=R3TVU^lD3(G+RWd z)+Ib`ws2K!9%`876@!9&phzeU3i(u6r9mN&L7`Ju+6}p07o?8b73z{&6Y3qgA#__U zS)}i!YNt~g6msQ%8)<1!IOP4tQ>A4zw&zL@e5qVCO_~&j#MdOaOu1Q+YEtPno--{i z3;U$8WuYXw!f6?VEpPfJ6wyV~(zNi})3>pAdeck&1G)RIG%b{-1xDttGdkXLrwP+S zvq`1|V?)rV6Gc!YT@fadq6^dMR1y_kR!HqoonOkc3Z-eGfHJEzE#xsR)Y?k7Td%bR zu`M@+y3(%;y?VDQwCb%!vn|)8Mo%nF3%T;YjkGi^9P)nSsnYVS!tf9^W)MK5`fK(@uGN;hh!Q`tjl6`xD>zktQxAcw&(s z;XV7m_;EzMxnp|-T@cU1x5PXB{$#;EDx!Fb#&-nGUFWlD5Ci$9{)za=aEONh1x%Ay z*_zkK-lvrU$h479v+4`iCAN<|pUl_8n3}{g)|Y00(^bQc0y!>%y)AO4kZTpf4Ey?B z`~hIWR(EPS_c5&BoCVUc4f*vu2+PU}e8$#d1?+_ActJ5|(nfj6CD;%g+giqu+H>d% zF;a!YwxIy;}Vxj3qCWtz~EF1noL=Vk1od={oU%JpWn{I$-yv z4;(-%;FjIEY(Ftj5ffc3EZ^)hHaK&g#hhhI61Wvy*@So|-k`7z6GB2}1M**dEe?gWRJ)>4h9l6JLL2`QL#+`RdmH?weC&5QgnRkAE=@_I{mU zaTm1ZpU84UkqXopfAbC1|J@0WkUSnJzIHQZO_*1d?ufOr*i zb6ltk+sLtLVbg|6gH|VR;0mZCkU0o?;5iGI7CAwQOWvSQh_xw+uorCvx1yw)0k7eX zF?b32vNbURi^lF0eH|dzGN{vLhbe&ZDxYLg*Rg#} zYg$s=BW%n}+w^=F`;N=0(evmtwslh3BFaH71i0xB)bpM;Y+tBsK)&8W=r#(ih3m=v zoBe8}66j{1>h`N`g$sbxVhO-X^weJmT~*^G!{$0@Ves*KtOdlhK}6n>fJBftC%QQ` ziBaJ!!@m7uJNFhbsBG>M+b1rFOpv#O*_;y!r<$ST6Au7#_B3ra&8H~unu*^m+SViM z-SNArV;RJKclu5i4xQY9}?rZdMXM=68dg@u`3<&fCl^Pes#|HLsZ+r=jUkf6}U%Mf9 z`mJ75=(OdI&~9}4LcQHkgicLq_ItH%OKPiGyk;3CxybX0=Wi@xdYWN+AeW3R<7DwL zj47?UA=}h-X4>D59kc}7%Z-)$PR@*c1rf;Pc%*U+$9n7NrostVj;hk@SCy8~>-JPZ ztk-3sE7s~lt=Z{x>V2`THag)zY#)mETCGxrYX`REHcW4B;iXorlx|_qgEGm!QaGl) zrI6#Aw`SlQ%BQd`nQtv;f~_5d0aP>tax?wiIlVjV?j$uoWhVq>6#Y!xjHJ*0jr`?e(z?Qy)3$skB+G5hnsLFiS}PwPkGogRVmu5bitw+m&vW$c|H!}$6Z>;<^9i`P zIClZ*X%sT&|DBS^Cb!rpyAi{*h}zU~HEb_;X9s1xvtW1>H)aY|$ILlxbIqo$%^jD) zYRX$0_$8682#4c%6H$n@K>=nFEm1rdZ}%EI>u+gbDC@w- zc|#sQAfa4jRA7c!p`@l-m%Fv9B-9#>zR;;PTSBMPRD_z+>bKi{soGb&F(vJyCePPG zqykNA`G_P%VNU{Vulc3$98+YTNfF!%Wj>1LiqKu287E$+J!;n3Z|2!!_9-$0?J*1G zo{93$M%fuD1e#-35;x_1SpVUVLbF)%Fl@K0UX3@ZnXqA)kQrOr9J_c%eByfB$LgIk z-#tG%^SBA;muK3wdVM{(92Q$|Gv&GE=s1Q2issEqMUS}Kn*}-cm)5bktu{rmF4eFg zwkCB!X*H(;Hfl9NAq@$O^?Fs;_59+tZ7&N7LToR0PP<8QJWSX1oW$q5SpT#-2-zH( zMLrWNB9LN)5o{YZ$KFM&AW;{#>6>I%PT!pE%)_lYfqHvuA46m1XJQl2OLz9ew#|U) zSlBmrc8q4Vu;*)crXR#TauEHUmfE)XF`Rp1Xh|2be*64-+xCk)HfW}?yFHVIXR^*Z z_x4U9;==*Ux#{NYD_?Hr%nXPLY;NIcVX;4%FW|GG-ISqorRaAvct z=E$xTS?;BlEeUAJE)yg^HLX-heF);3vihQUY4AuJ7_Y6c$%jLUF`6-tY{BbF|79`L zrnE{`1OJ5G;Bu4;rk8vZOLQD7&rIIiv{%{|4r05)qF&p*OKnYBVqM0fAj?fGC^e-j zOeTgRw5A5G>5Y1=QJth3R)m)f_9pgQd(B2C0C?+v%(G_?OMJ21r@D@*Bl@1JOjO**P1WI zYf27YYu5F86HkOmZBi4IM$-^lRZ$csx~OAa7wg89l)RSWH5dFj_hL4s7_+qv!vz=B z5x%v_GjSbkC$pSKcRV|Hmf2ErO?f?B*AQQd>zcc{P7)hc0~<9#G4z(8R9mvpoG7v| zt;zvr=AfwA{VE4Yv!e z*S%b>zmza(>=q`ZChKBjstd++IuR7T(GYOGRu>e}kS0=9mPzAa>^%mct;qMVoUIk1r`7m zsUq)`M>G6orNpaRZ8vhT>PWq~{8fE=ZmsX;)|_|y|1Y>Tr^nZ8V8#cPAB zhldl7z2PAx!l)A`cy6XXoN&9aMY)fRo85&zDCcUL##cMr$^yt^aVAg)K>v~``#{Zo{%2A}-tQPF0@ z*+;4}b8+Q)ECv7vDo~2#ZAkS?D|T{RDab(jq?`0bIc#y5nMg&V6AU#I;PD ze0TKYnL1QQ?Q?WiOxD%QYXr#*_ydm$P;#to2lfzr z4V%j!AjSo}fB*$S2n>oy9-xLk(rmh8)87CI(cy4D$MaU{71Vd!AT!j6eafYCaGwM3 zr>PHaTyZOp(QI2EutjB=3bc1MHppxZvDpGTw15q<#^DiAIH=Wk3J5D{man>dxHEu zwR3ZJMsw0%2iNV+In+TbYu}vHX7q2)&o$P-p*sF>Ir;@2f)=s5H7WHZr=F?^dRh>3 z=`q}lypBryp;8p|$Lfe;v3)&G#ErTNSvL+CHF1pPX(apyv0&sZN>43AE{KpZ=E7^x zgBMKr!b|!yc$E;U@Ff8%$S`$Wor)CpBaB#ae@ARadf{32M4W`*x!WYR{z!D;2I5^I z^$UhT2w^9_49T&FGwm&!Yds$z5uINuwf*)ruq*oYv)5Fp1ZzC!v@Z`C zg=su-Om!fIDguzzQyzpCmOt=u{M(h944W8_lEd|wfo3c!J%)E&S&=Cd#TOk6ug9aCE~s}< zSVL;WxP|CHi?&$>(oQHnOfS}Z9ES*OtGv3 z=FCmmyko8f^K?*29%)Av^nM93l8=O=V`R{#9#xKjRlGSUW8<*Mj+-QwWBL&Jz(&z~ zE#i4RqOBx~i8^7l5$N42+u)gA7|}Ze4lqBwx#*}PblFGU_w7-;OVx4LFcyh=azT&d zc7{yYqLH#A{WZ2+f{i5)flAAyAyv?oMX*Pg#pY*DuYsDHV%7X>!C|Ze3q1&9p{~|p z+OdKc> zq)B8qhdqkg)<9j2I=s6Dy2C=vBHvl*+8p~nac$l&Ds%z8SM4!v&@k>>>okn3o2IRJ zYTB@~+Yp#p;W5G2m*Fi@yEoJt@Ef`sUG@j(Dmoio-dtscBLi4t@|h2!O?00a&`)k0 z9s@D(T&$rsBCboR+tFdZV{$l|lPb7PMnc>g<1l>k*<)ja6L%48P!McK!}>A|4OESV zsDXf*L3(sxLS$so@KhaK-;}U}Ar(YXlP}ME=(6*(+8v`Xdh+UY1S}cLljN)yL;aQ6 zM1bw0?P*-cQ2nr42h2rmYq_&Eh7(7QPh4D(HqPkS<||CNXCYoMA17>ejvLt#Gxq=- zg;!Xt81A^O1Xhp1LMLGqt)Mv<^w=kTo{DRQVvFC3A zmN(vXk$uTW`x$*ZR=qja?!)N!#1mxO>FuG2`+9rC-W((1FI?LTre`0U7GnY&TfxH> zzvshl>;;@QU^9?)xnM2@UdHR9@3@iE1h;ydwr(v9;<1&3=~E$nAMWjrBmSV1$sF5; zW|{UUFX65L)aNevVi0zM@e;yih@*8uk;nv}t%GKSrN(xPs%daBJm>|k1;P9ub_BM0 zch0>H0xe0DP?n)*Q+fEfwRE!Ir}S%x33ihQxewuRG3OPquZCO{o(q#IQbF#K0;ecB zmv$h>9t=A4m>rmsFlcYsA6)~JgrC#%P*^e}zn)L<0RG?se&&-XQc|Lvsf8rUD(GkE z*VH9M16iSY1ojSDIR^ab`9QWo88lfUo;l&Nw9?BJB*+=5vYu-rcyv4F5`v&%nYz&T z7~Q#K`oqzQr{8OL#G0ST)v8pv^JhoF{YXC?X%h?EpN`OvUtja`-qQB*mrx{s^Zg0_ z@jqq0RZO4!6!qu_;2!QbdD^Bysm_LK54DFqx>PeASel-`H*fE9GA-=ru+3S8&=peR z&KOA)qd_$3BXb)ISv^#~v3;v;5+ml(fn||fYz1Y*yM)-47{s94+Z8_;gk3@l4K=#5 zJsYXl)U#)#!U_)jce>}7*X(C|*j3M&OApO*dH$=~+f?86c{^vF!}c+{{3Y@*id>e| zYwCc+{E9Zz5n*~)4K!2|xGjw?z(MK#;Ou?u;Is*J98`#35tgkXbdvo?nJU6F6G|!%sFq8Xv8|qy8iurux7>*~q@9Ts}o8e)}IN;woL`J5@=7lCRz4GI)@ zHhaIZ^j3WR$_8Yoj&}{uMGD_{YnJLSx9rJmz_!xi?nP4d5sRdv+pfn-t#Z@!^xGbQ z3Ubx!@sR_^RX`WtZh1%Hh(_usF3z6XJ9U4#jIsvb%bPJ(AVigHcL52a8t#89ZxkkD zFW(Qim4FRQa3XIc@TqT4R}!iz;$n-q93Xx?pzxsGo^ZnTT^O0tondS5MkS9p4QzDf zI=2vpX>WLjGsC8xh^4wWB+tUBSenE3qd++eUw3BY(Xc`e+MB$0lKp;kzbQ>c!X2Tn z(8bxFeczO_xWAs}J9CGs=a*sF?tQA*@1k&^VlwxhVMG8fJ1Y8=U^k^t+V-Mp9Llq` z*BCrink3iDIkAIPJ@p8uXIPl~2NhyJsL#7m`bVz7#) z+1T+5%QrRd zfIl)VsqGok)HZQ2gxDqOxZEo~OPbh2N+o{xPsh?;6MASaK~MOE*QxCCS}KUMjFKRL<~glJ}#oJ z--uFl=(Z02hMQ1vaYbzC=TC{KaycL#2j2=t!U{Y=`6fp+Xrkd0k;*57;w)}zR3{{xEP2A92#&p1ms%mCY=S;3}p?~cfE)#GNM-K zxGJaPK#IRlN-BWmsq@TqgYFFa&^w}Yt9hJJ-oQJpP42nA#1+!RYiT~<1e08)|t z*Pk23+Iz?fky;EX#Ns3J7j4;>vTumgU(Q+yVHYWR7eUG{q~?k#85B%R#7}b);c|Ub z$4_mFx?`FZmUuo!DlDYDN{2{oRcs$wR#?_S6e+2YdMXn{?MZ=1C6zr!d_YJU6$8sT z18#~q%%wo2ddd_dBOFpXr9q@_$`g^IX={j7OnG7{cb7LsG$Z36j(#Z+sgkn9h!u&H zNNEtMkMcpJILZ-`$|yfX%A#x#P0BckCS?j-F)2@4-FF=v`%+=Vsw`IcjD17-35yEt zI2RSJV&o$e zJU|r#(GWsIsEoBn!o2mOK?5izqWYvjG=MV2hynBf<+vWv073((jI~C>xl$6#9mH@~ zs7mZ*VRu@ntz@2QCW+?7Wb?{d#qeF1+TKuj)X98tnis!C3XYj1#Yik$nWvO(tf5|O z(4QAI&wM4pRX|1-eWh;eU;ovqAmdzY0`s1g{XIm3gHaHEq5NF)|F}C=uMjW>ChnmNXAJh}I23!{CGKb^SLGN^MnaNEG zqhz3xN)hd8p+U*M-jbUO{^&b3yr2c%Slp)2m-`LWg&wz#;*^*pKl0$R4+roh|$BmlYPAJ#NQ6a#LKg zucb3}c7=z<9@jqZ7VRK6^5_&4|Krgy)Pig%^nz^Y=mlBH=yaYwDc0b(DF)`+^~>+K zO7RcAt;a5(hH8HBojjK3y|kaCU-tXQ*)HRYf>(V3-jF}#<;OIbsRxAzjYF<~vVEJP zpj<$5J-(MY-1b?e%W+(Ok@&z(R*2r{wcg(SU8fh_8@=0ZxhbMIdbhahjc)b(@85Mh z?ZQ<8J<^3l^hjT^5BK=M>xmv|^ho2r{Qv#FoUzT(BVEqj;qB~{>FL63AYM33|aSQeXOr>>!0;h`H^=#gIk;6C797IvqF+Dhh`W^#C;Q8IRy-RPB0 zHs~Z4U$)UtPN;CWEhv1VLIpw*%|!^5hxhAE_{x1SIoRBT3Av!)P{uke`LZ2w=Ak7t-Uu@cJdZ8!+ekG4ddR0u z;*n3>RByOsrfyJSxXe*W%6sr)1j3tJ^yMv&{`8JaYH(NQ*90j+>RM8LpWk}*uG8(D zv_8UVzw@Ft(oOz(LTzxkik^QC1Y{;`JcoBK_nojj_uyP#34=QnroQlCM8V+pn4QZ) z2JQ2fyB_;QY^hF44K7rRn?PjieeiAO$eaC>FJMv~x>u{h75AI!{yU40hy~&5=xD_G z5128_QknXKnzBNc>Wah$`jhE$uRbhQ^PF8!Tjvt$n(VU7)B*|88WUy#v%w&O22VpP zNCRF6X(+vnR#IvIgoY*6Nncszm8#ro+4EcQi`#T<4b($PORnCHRpPr{?n!n0CZAWi zn=5h?LDQ;4{%>9`Q*u|DPyNQ!x>F%*s1)3qgW*!*slw@CLIRZc1PDl_8&fq!gu2Fp zvJ2TsLM>eA>tLdV=t=?Ds{BB%O!>NmJsu=XRp+K=aQ9vi>MD41cq#`b>8B*t;$d5r zf{)ezugq(q4KUTppoZ#&sDgwijJm`%DC*4K;SERtgp4FMCJ3oVX2q6-|HiYvKfhP2f76X&Pus=K@TiU(`itqYgHk&$rgv-X~hnF=+fbSLvaWFcSOB$V}8>c@REMYG@EH?+P{OF@citr4;6r|O+RC~9j-umPGX|^)@KRnQi>r!$rga{gJigC0T zp6U7=TgN2DeCn+~7<_{BWtjdk$eL-OcQ&Fz1(!y?ftd~xj^H&D&BX{QGqTCiG`$3#cm-5pD_tSHIOp70U*T&EdSSEn@`v4dWn;IgxJJFy0391+KswNt^!B4e`a>VCLGUH^Ef5 zANeI~WnFQYjM~lHw?@Br*Pq~z z;S4|G+aQW3Pq-^{JX4@YPJs4szuCnM`6zVlt^7S0b3z_4diY_ujU%%6VEl)60Y>p7 zp+C7WFlf{MlT~qtlyxIu{$aWv*^DRZEm88K7=-u+vb}y!3C|T}s#RuW`aB59q%?gH z_*}YMPi*Po>%xEk{EM5&-1Z4zxy9*fhwwy9=o2EWgqnU#n~9jZoIaO7lk12?F$I}z zIN$rY5RVB{BFuRAy;OzZ3Wv)#AExIeD-_?iL;-D-YtX=rshWoYncWt`H=%?&E+GbO zB98>oVBCl{!)~U7zl^Y>iXxh*AaBzue&sf7t z-^CgVwK4tS1|A)9`ZPaa?WH?NnuZr%W(+#xL=Q_XIaUCl-tesxR)a~A?FA8nZ@{hT z^GzNMd_*@&q=%GueqoB7>HS9U2$p`FDSOQfx|`{9zaI5|PTHrOPHR%l;U)GZHCZlO zS~ba~3FZMr#?6DO(8-+?} zDvTShOmm>_t+)e%q=olwU>5`+N0e+%&*G#g3HdXLE%?0&QWgS`dFqFH=q?D>y`gdb zAB+fP;j?}MY=`!vH}4|%%U`Ma9Lwg_YIV74T?XOos@Z6$S3ljqo!F0PZYr+NZ1}%^ z1n?bih?0bFn=ifCHB7q0PDA_8l>jdj<{9r0dx0Aw$n6IwW1myQ9CEpl+P`{L1ZEIi zMrfTIo38EQ649Z{e6fGUtO(5D%|a#4R`eVT0j9js*evmnBcea7bu! zGr6IRz>16MdxF9ZQss=td2+44st3t(WVs?7R$x0-5tzkHFnO6@0YhQ%Du^#-SpSJH z^aXa+6@l3qE7Z7V5Mvf;VK6Isf69!)?HKo+tDK%*f2_eT{y54PcR83Xv76w|k+fcf;-B!$&1DnvXv@TNrrtFd4 zDCwA&qs%Lzww{a6_xDy*1qv-ZDPDrf&ddacX*i}Z= zl;*&F28axkiGp?(JrQMR20t3zF3_r1gpVoC>7HTyFq)2TM{jGtD6pWSAP(%nBczz# zjwuTyWs*E!EP{~wJvwZG#FxUjL5gtB6=fZ9l>Z_)Ka&K7xj&F4F;fs0pgf2FwI$~yTfEA6SQlB<$;mSluE+gBTo zoV12yNH)w6nbni^8(C`B#}a(EjN)~sz-lL}A-yMKL^?kJK0**MUIK9doOr=zEUqD$ z>Hv5OrlPG0z*XZgpxGaXOOg;*9B#UOP@9_GZb%L~20StcJ>owhNe3(d1AUv|QhnZ8 zhBO|Y4r)GmDNi;^{ed6@!*eT}k1)$lJd5&=u8*;*K1Uz~@BBH%z(E2J~I<9|d2Xm?0m4K`(A2x3< z-~>2D?qc5bVab?D3x%>%lZwR>VdI+o2*cE%M{iFvwr?I-C}OhtAzFd^JHYNeD3!cf zK9l^qGS6e8<(nvy-Q+m==%d(-mk~Aa_+T6cvoJ}qOus2KpE8N-_uGicGd3kr?SA_sD*pP%2hGQS zs&xFBvksbvj#Ys%B(jB|arj8SC_~7ZA^D-DWhZ%B^t-!QAees~D?AA)4_i3P!ZSI* z;6qH)vXJ;XqsX242;~;5q_D_Zb!wRDW4a*olH+qjS(sa9Zzhw$-LT&)v&Nnpp8bIt z$K6QNqcYg>c1+c*-kv%Y6wUV8NQ$!X$V$&^LAn&1&p{aCHLsj&)-L*P8#OnnVHUsOnM5=m6;6$q11Hr$!zq<;9AQn0r9OK5s zmQg}(^E<>4-!DxHG`9qLeRMyn@}-*RYO<;yddOwvVMY&NCpiEgo$fHo%D_#fp>=IT zyP@mKwQ1Ul*6QerrL`@^wsj45b);Esag~O$FeP7dvNu0BoDwMgN=~rYfG9RyFG@M^ z68~H^b^Q|mlFyW8xys@%TE&#P8fdR&VU4xjvJlfEuLs|Ldo#Q{FC*-0!Bjl))9f=F zfc{T|$#gKhGy1(jvT4Xy7Hzjs7N+48>_zRB!7nMT*ysHb1yzRxSF-ac5d2UTNKg`O z-!!`XU z@wT=Ep-RqW((y|BR%+lIy6#+R`lZ^uYzWCX&mBXi-PT}BQ_O~r6b(bgYF?{KTWf1g zWOc9Gjw7s%XWQ1gDe~5O`&N1K@RLHe%8C~~MMCeFrFUqr%S0TM_M$4iLz~{Aj`R*~ zY67Zwnm}2&sX1JC)u!EQ=}H?~SaZ0BNU=KCO&np;Y&zYBs#{HQHHWfr(>wHS5XI6p zwA(e5Wk2c~%KS?AP>privas$tZ&@gPMAD955m;9{z6oJSGWl6S@cOT6of>8oa%#S> zZl;76d9%`ED(%{53ZKV1(m*SA z)SH&D`_rwv0!`pu!H(llCO;`XH;O~oTE+;1Z`=^AOwSWq;g?44y_R2bP}+;CG;(hk zx!bBVa@RyHC=0i#5!Y6y*|rs@p|=#R;XtfLSWvk(+m5E$j;bSR=9Vu(6oorqf{^b( z6xQx)pw5db+7v z77CHPwNNXkfVnMlZ#3+m)81GnZ9QAW_X~(tWwTLb7E8xD-4c0fD3i8|;qtCQ0MjA} zW3@IJTcK`gn%=dPHhv!$`yJJ$((N`i#cE=&V^eSF&4##s$8G+ew#fdTJimxg>X zcT;nqbP-iCC=2C#w*|?Qi7;wk(jWQKZBcct2Ks4Pm_O>N*Q-}J&Hf~r`yGy=!k5yl z4*NgWIJK$_!m0$6L0IPuYhVYRIZ(W9Pwg}+Y4MX5zrBe(v^+8{(en=UP!w_x% zl`t=LlaoXf2g2}?VgbLn+(*u zJ!drXnJaz%$}1tTk#~E{gHQ0c1aD3KUDyo0dKX?IO5QRiL+(-A?3RpM7GIMj8B)qd zz$f3|?QK|T^5VLzRld=_F|uR;6RIHFO2kfxgn0<7c=-2&{MMz>hzAiRXEZ|Ai%t@z zs}zeT#7u{Ww3~!QWXPh31y}o%ERB#lF(t0gBkB>!5SWn$SeHlewIebJ`H=Jk`vFRl z8TAxV|C(kWkXt7rjt|(qd*V@_#?;Gap2Qg-!*LXoOG;u$RnrwJg+aWc9$^6)M>I^! zzEva@H3U2+13nJCInSAVjCTADo%7t~!GK+jL)l)H`^NFv1IQv8PoDk4$Ha94Or`<$ z!y$5=3oXJg0lifOP4RV;PA4Tf3N}aO!_LZB2x*CSAexlqNVs!9-;5Mlu3{plh!YSx z9L4uU&8M`ibvI(F|3b+^H^sQHFgsek@#T=k3T2Kn1b#7Y0~W#{qL7^wYfX}{edLm6 zitvCERE0T?h(^?9&<>9z(*~$P1>te9VxSB5#c^F4MG5~T4G*T8kz=-y5(oYVoJjHM zA-;f$6hZZ z<)!2iPN>IXSuigERq4~5ygDJ+xCQ6{8-9a^3<<}XaqajpAd($(%}J>3kdYGtkFb#w z#Cc{eRe}CR>|7ta5VnxjeNtkS3)NIbp#CCJD0ci@_Lh)3jNYV>w zbjKnwyF8gIkfAAw^csG?S&hIxKW$RoX0>$`4!J!pDd#197A2b2&+Ud~%k4jChDWf4 z>S3>+Yz$7+)Q!V@l&p$Bsp5xpEcRh8QTI>r?8kuL`qYDo)sVV}hd6miJ9iF)ba+gq zIvR2u@c>y)JW7STP+7BNn@_C0!rp-U9u420KSLLElfPxbYce*-@gmq#aYWz zCd6ylin73?tv`uokv*p#FSpPzAArB1r{mCv9ws*X`}b0mO95xMFaG{}J=^^apme$K zOEuK?kfe~rJVjfhRH?%EA&sv&rd^!(`g?yD-tS#g$D?5cNv7-4QGAk}#BctHchdE#!H9a60nxXejF9Z?KPDWl-_|n^=zL7 ze?}-_p)W9*a5A9Vuz-1RTBT-4h~32IVv%H~&Zz@3qPEGH>K6(2)JB)qqSXKLvr^_0 z%KXMf4;}w^%d3RoM5^Tl_SpJYrYWD{Dgcb3yA7*=rENA9v0%EN5iQ?SrUV^p$XB2?x(k^$5On^ z^f@-YG$l)cke1_0B24{MvD(Bi3e|cjgJ#L<{P9chZ{*N@)egu-$giLY(IBM?4rDZE@rGQayTKsRBIEttfy4SNp$&t*;2a~Q|-V>QQ zo%PYfLg#2k=(Le@mBd04MPsDaVC<92ag3%_C}e>c7`aF#pP|H{k^u{ZA%fHrQ{oG< zoWx3UC4$K19woQT_tB;<7mH|T$mgnV^-L}R_aBx=%tKiu447byTYh1rB4!t)3GnQ=ikA?xmV~~ zKUfVoe6gZdnIqaW9w*8;roXGi+ycHOegUa$RK2h-)JY>w7>*FHP%!fLA1Ixi3md{%%ee>P9s zkn6(gG$GgIgMA7MuTF14hj1FL*r|?LAm=|~GrAp7fq80m`vqe48s@3lZ=ZJ-)scvU zWi_0hzb%l?dH2jbEs*cq-+d3H>O!9Z{{qxAoIG2DOqWYN!a#U<-r3nb{E*M+-99Pf z8L)kfarSxEJP_6a3%rctk<&n~X3x*ec4x8xo@WS5Yu$9o=8Om%;(pCQ;@x%?(!fH#u`JuuCR!YuF5%6Yz(w?%qd_9xkUF`&pl z%z42}JtB(ht(> z=c(yQZjs!1YF*PQKX|4Ie3Zz69DPz(tZc)+n)YYh!+9et^JrSqJj1f#{d?v?A>>y4 zBBm53;0Ry>{>6m3{0q-T<1xd0HeT-LInFOV*7EWwp^K~XJpHv$)k0M=fR>{>Ek|FC zR9r3yYmXO%t2m;e<+~{if1kq&uf!R?sq-n7*9*$y!v{+vaTk`xhYL$T+Q0q6y5gIh z8yZG+RWI~|o8u(rqN~D^69j{uN|cIjOz!zOB#t*^0bYLQ#5|O{i%?L;)XoUlM3U!a z|E#iEtYPM>mBqRwuR!*lx;gT1a5c)hTFO>_|k(|y46VdS+ zBxLB^&WK0kkv^AacgUBQUq>_)8{O(Oz?;jj2@A5v29zQe%q-5TiL&u6PlY5pJCuUC z&rEl@Nt23FIrpXO2b)paCv^@yn!YM5{P($+7zt)9=QHBa<#Wn3k$1X(Y6E|3`zQ89 zls8gY(ju3LFP$78N@mvQ>rmq}ao%heeIDDva%{{?aXrwkFTUvT7=57wayi@Wd<7v| zCj%BxuaM0bJAcxMj6&*Cj|Rw)(O3Ivp}^fKqqFVVJR{s@(tr-nKPPf zjUh)bK24S!BZJyK-11(2yeQd23IS(oYpG{LO5;cl5BC8*VsUxkF)@!$1XF=sfWn)_ zs?Z5}=+LlKQ2o$x{}iK3<#8Ys1Tq@G#D(h;DGDMYwxeZLoqW?#?naNQ&-I-s5{#SF zm>Q!zz zl^K&%EbDpHvn7kEZjXGJORBd62a^@+O+MI4a)=$$0ug^~G>dF{=Taf9AvFqY+&o25 zljL+fFBHo;A>|}lCn4U3$T}Um$pr&82~0mdu^Ks=x)zenq5)97b61j39$TlA?agLR!FM zp$tT952)^5tFIEvB%_*jxV?00Tg~sR9(=sGIBi=^+#54Hzd%FUy?(b{|EUjYt#;RX z3wdE9%DaLpFsMfF9-1-)PVs!3jcgS2^2-$sXvo~T^Sgba2>FQ7gUSHM6Hf2;#Z9F^ zgz6~}{9*$*lI34KDK>5UV_0!>s93zxKBRVN6c5e;JoiZZ(hRmVS= z2V)|wGbdhLR%p%C6(Sd7zCY1Wkx-ctmq^tCb{311`v8!;FDVqF33V6}L!iia0!>3E zkDtiGVz5|tF$_jWl(sanyJSyrj$~Rr+fJ~WkV9@+L^FqFWqkwS1LDc!3ywrQ4j7nz z0UCjz^!?Nz3An(Q9+Xib3zi&}x#ZsciCQS(TC>?de}pIbL%lurraa{#sH}3u=?bq# zl6)u)xuL&SG!63j+r$VVJ9pt1!JkaXv1;wPE*hBBlo)5j=es*g)b$}QxDpjFzlExA zzU&=TqFFl=AT=BC^y=!_nB>Xe>Py>~%w}qYz&KgL^tx~PpXf}*irF>{qj_QX-%{n%X zQma*}G)hNSwbI%Z18H4I$O?qoMZ0N(4lgG}#z4wXpB=WUo|aHMZInG5DR$PTds>QY zyQ%lIz1qhl@2rKmSRYRC?DN6C_|@uLt8cBop9&KB^C9klQdO^dCvo?u z&i3C%{Oq^CtbA(=nRBhm%(W-@f4eTbm>gHGh=$_dN8Wz{SRQfvg$!F<+3;!z6=aaw zPlHCqEZ+F03OPw6mgKzl#>gaVZA{uFh@Twq;`+XY^WXbmSSj-2s{-~g^V*0l8nhvu z)`bbj9hF|Fx-=Gci-nZDb$nmEIrC!uog56uR*3WBFI2I7$>`}hcwLyZ*{F3dK4cWBH;lEUew!?>-ywIrS}v5fwL zZGRadyDkKwELv#ufh}HK+vcWTG7%U4!;8^%;iTz1*Yc%3vd7778}Exnqh&U%X3;1X z|K8H6xh{NtBe$|~I^sTa?`>NV;FS#MBAE0yqs@D<6L?Mt?EM-#zS*UT+Xls&X$uVL z=Z2!6+iRvjH=GehL3D5u`D}>G#kVZJKBKXNfw`Lf^H(mI7LzE|yyj84-l{c^jk;N` z8|G2HWgMDE6{B9Q9JiX)My+I8uSFxT3$t#A>_vhY%j2UZ35#rxMI!Fq%eq3g4N5uN zNmpqHA1N6y(wY4i4-&_3u<4D*yAJVgKurii2pND%1$lb?HrKjv#z+xS)N-NHK2{C0 ziqTR%s5Dy#m739PG%cfecvv)uHr_PU^ z^S2#Mrztv#sJXs~z-`A)cty3{v~bQzPSR`K1$O25GN7?NgyY$gP*bnZtc z5U?&posQS5h)qE4+Sab^r-E76wsmMV8qLbF(JWP3MyqsqXdG3KYDTrzs#FhJ#YVMS z)~@ZvuI+MpAO69wrqNQ@wx*SKZ9fuf*Y;AVUEA8Vy*bpb?KNE6TJo&t(>~M$(?0E$ zq4sI73$;&sw3I^Hr@ac)KJ8T@&N;oj)n4uOq4sJAJsNIDw25tlGhXdDbb<(P=d~k2 zvzLlQvMVs_(=L`v=0UmMFpdst2ZmWWtQoCVxnk5R$K^5{5L+oF(+v3qR~cxXGp3rA7i6$tZ;4JjWB3!tb;lMk{M@|e3^ zEIkf2ZSr%A1vWY(kv7L=O`IvgbC)5`$4Hxxb!Wp#gLdgHjip-}5eu$-YNtfghg}!% zX*7?@=3%8)HLPM8qUBZU$42qUEE?uXVb_J} z)`lk63UFqJBP;gx3rDMNbl4YNt7)~`n_sr_T48q2BM!%U$*Q+JR)>1aV~s5jEqJDR zhlYv2^*2qKGiMgd;fCLKy1Q$@0CJscjP1SUPJ@DU2Kek)ivQ3(_ zP2*Qu9-+N#JQ+J4zcXV*^HuU-t|MxR%MrPeRT8&t&GSW zt&Ur{rf|$M+{#U*u;pR?fsr2gRYzlJo6Q`|;$(F+?RGl7cONy40y0yCVLUg6KlCR4 z)E}vtnx$fkw54{f`UcJ3Rmn(g^ysXo(=`66#wtz! z{e*nh)N39|ri_!JKZ|u=WdCoVp`XsY@9`=-`X+gj{U0|b?McWFlV2+IvTye6cI8Wb z_w@%9;_QCIf*)$;#UWJQx z9!5~_cBc1*p3JQ2<1GyNL*3QZ0}kF;e2oR3S@;rybZYB&zGSnv%{0*b{f>}TT+zw z>!ER7m0DSP(ef7bRT7LBsNwL+U&ZlbZF~x4Bi>_C-cLs~i9>Bhq-8n|vwfSJXmit`pyt&4@^m2^ zHfN`GYVI7KjMcAt#$1S#QOeR`yV~Y}+$&tirRDzFdCh6^9 ztWaN4DY12}gnLAjo28q=KT8pE$*H)n!~_*4<@iX23B_(Z4;y__UX;*En#M*9?yB6f zmKLw)S;PFqF`dQZMccS5@0Yi3T_|d4>b%D;XkFOoL#IZ($D-7{r3J)gh|5K&dHre* zaaqvF6oDTRGh!y;(qcpgK}e_&irLf@((pB%WCtf7#AS%frMV;9sNeBCkobmKmy2_U z+i1rxT;Aze!X?x-9AfdlMY>kU%v!NZ+i?xS>@KZoJN`?to&oix2=V?%Vznbk_?st5%N3RDqlUJaZ>fijrMjX?Uulr|@P5SnCQ^8pz!ZYXZ5(3DW1pg`p& z6sUrP0#%M%3RKq;tj{}?bhvF3+O-AgJ8q8%-s>{Mab%kdC{P-O2}KD7>PTX>FF~~2 zJTnm)RKiUO>iyhH$w!6D$x0I9QxooWYuT3F3&xP5iovcwX zbSI4>g`$M+bR@Cbmmn&i&PxOam2gvbGK|*zr-g8#9HBZ@$$7~W{Ig1;;Hf+ttvnPZ zw5O)A*%76dfsW=~{!#D*;i(8UuMf;2JefiTwy8p*Xyg-aNlK)!DWP=0nLV&fUs;+? zvV)Uv)tDH@f$(%ZAv~4imhjZJxN94k+{D_w4zXBI5UXw2q$8z4v)?nb-G=b=x4moc zZQBOoUq#3t!v>Uzp0<sh6!DtFAGn5K3}Z;1D-G6%lq2Tm!ZLDd6t)+PDy^}o_(lU+RLeu z2R>g`pg!kwvjX*^qMz;g@|nDcKL67T5M7@yOHlu{=YOJb&q^(yWQ{*+roKwzUuP19 zf7ma$j!5jrB+0_ZU-2pCd&Q`grb?VeU&r--)^^=XSe2i-Cjm_6_;BtJs1 z_{n~}AjyhG2~pmVB*E7tIsV}&q=EOIq)L*KmEu#9D6Fpe zT=6S~#!4UpQeg42I3|%GZIV?HbJ$3mLMN}npahX*dh>vU{%&qAcspq}pkzgY$q@KG zXH-=QOPqR(QUu6iGb8hm-fU$3PBX>B5u^7O>@p6{@BxQeMeK}tID=LQQdW&I!9Jo< zc)O7_Sh1oIf15cEJ-Q%lIwqI3%%Es9qL2VcpbT-w%QDAdLJE1K1@Yd`=*KQRtY&$JI6K(>SJ*fdzyB`p@m%Vj}!O(GKG&%;n&Flz#8tC%31FweK- zmd1;N6$fi>d%|1DE%7q8ZnkYp$c>Uun<`YO$+zEx>G#aWd~=jtZ2Jq<=eb+17C2Tj2Z7MWfpL?Q?hl$+qZcXXRe2TClD%3_i~lq zmMqJ*%CQV?=V=)v2_%-+f;=Ay2}3|NWg$QlcEhJ!Zx{Fj0W8HlDH<`LW-I0uxYZDT zR~gYL#gNi1%|Q43We@@8W1P}hXk(JVJC3}y?i#rr@SuV74EQu6g$rdyk0=;^vM7XF zjuPVM+MIBSxhKY1N|(Gy4PJxU#JtX@CzD^s?&;vogg5lJ4FHOi^$PlK7=5>2ikDZ) z+kKMTFSQD~xC$4Rg>#H2zn+XHu24npR#^`7$jd7?SJHb-?}Fs2rz9)lfqoJHP(YE# z{T$JokoeG0BhWSygDK{A{A9Tj3MjM@9H?kk0sA0=KP#$laQ; zhaXKl)O1yd-JRJeTh2(#xU?FPh;!-OWi68ICd$1)rLwBgmDpN*X+w&tqUm5X8LLQD z@A9m7lv-CQu`cYoIpc1zX+gJXAAn=z;}|kmXSmy$H>j(M>eS?(x-GQH;8fO??jf`f%!uZ8RL{Lp10Qr>HmRn`mg6_H=BG9BnYE*Yhq& z!T2p)`_+^rX#-P`xPFi@^XXS1w!217H+pE?OE{0|(*1`LJS>4u`#|I+*l_MZ>f-%}=g%Xs}E4 z8tMHYS%vu4?aJqcI7xD@qRb#Eh#J{w99#$a)^p)~8_BOjI>TYBx-jipGDQqh8QNrl zV+kcpD~rd)O9Mmk6>fj7&2?-MN7W6_&@@a;tZKNC`2&d?yhYvTxEqx_#~~erDJ>MX zF_Wtj=gIl6W+Qb><|HPONAjY*J^lIg?6=eA6rv=>A@3`>e0oEwUDmEjM*s5dJPn8U z1h15V&g--oF@0^=OWyP$1^eP`Xh+z~@%;~B{}8?poz-T0BYJbrmyxcV$&)OY=UHxIKN;9)7Buui8??cAf2}i{125#%r0a0;E0H zzTRsu57y0#?d8cjc(X1Zt?t#k)^ z;TSJT3L4Yaf(LXZ<7??^laXJ}Ub~kQSXVeZ?cUqxO9&zL@J3!`g1u%&6B5_6SEqTH zwci+P!&cRvW?`f{vmP=XdycSgS;!=P4XeGL;dx#cV?Bs&Td8X%!J9Hj4ne0^e>V4(F{TWsdMVg(L#|k+`9q(8| zYOU!~ZRqtrL-i!J%eJ$~h?L;W-Ilz=TA%iGz+F=Z=LO!|{-*+t{*IRqJWi3og5VxK#?6&Z~~V z9Qc0BHcVgO>!^KFWq*XS!SD{0w)5eSJNR_Ve4+?d9~Ys0DTESl=JfgwGJR|!bM7&O z+B#Czxi!b8W$DffLif38L<*w)t`N;vfLrD756(Kk9^gIIFOST3Q7ijhOW(b`G%VBG zUU%TF=h1<;AJq&wnv5B;)VX1Kc#e#@W+2n)X~^+BAE}l_w7zOsj*cJG4DlW7t;-bK z7pqwVb2RE%1Edag8}-a-4~=^x135jXZx3`!>yOpDr)}K!9~MBf%bGSA59GJt9BNXX z^^OZ7xk2la!t)yr*w*8sT$Mq&t{JB8IT#sE-$drjH_)ta&d^LVbz&OCH=JjO@^R17 zrshaRBeUN}>bP&AsXdq=%bbig-L{>fX+3e2KVXmn?Jf)R_1FEo4*pxIYhP!V=&{tl zKK^8Z-ID^g_^Rv|!M5F#!M5c0IG+`^C3osRWo+;7!R?+jw57Im?t$!1TSlL&gP^!I$?!+<3m$iHDmaTnI1Ri=(^YbOboA-dCGoPDi2E(vlk>Z~qlAZuBdhdSDXq#M{gr@SjDU|RDbQSyG>fBzpTzb_ zii0p&-#Nqc1C%~L4*kcc19qAmc%m!}U-4~dz@L(j>?Adb*qH{%2H(SX0PE5a7x<8& z?rgk5fb~z2^c(6k4!&WEXNQO@IiNHUJY@&Gi;II6nBDc`g&7bjBfwIS!ol$y<$|k4 z@=Cc`5OEa{`MAQ7?}kD2K2eIzSnTXL&kCo3Q|OzkIbvQ>kQQSp4z}0R07A9{t#tF! z`C9ts%B8>;SBAh5dT~;?sB=*eoG8fx_Gqv>Ez0V~czN~Q$Il`gxy$7~hS+sYunUI* zaiNq{xXG3)uQ>WQ)|w{>U9HO+px4-6TNIrUQez#0%^>% z{Kub##kk7mP%wB_wChN`3|1@ULUWLTUJr@{YOodTXR)^+yz&DI!m=PG3ThS&m`r%X z0Pu5zMf~z@5DK2rEM4OlupJT%nv)PBY#jBn&7~4JJud4mQwb!hmT!wgY@0NR?`;MU zc5wGEP)h>@6aWAK2mtS(C{Xp7GR5Sx005HI1^^iV0047kV|8+6baG*1YhO|^IW03S z0FOX$zehnXYIARH>>b;3>qP8VJb7SXXqwo$7Y>k<^gw{qmNw;DCga4L)R5T0c3Q%j z&hR1db9@QXUhUlMI8NF^2S|l4l2$8eCGC3mU2f=(E#mpPlb_z@Tn|8ia(W*A$sN(Z z2LD^)f6KX_k8%TdJSKy{cAbuuJIUd*jyWL!HZ9A>>*iRyaL4vwuD!9z*z)0tThqTJ zzs-mr0J*@Mk)xcAZzHXTqX>B;Ux63!ZX=#EK)7y8}I`D z)r*_Sv~EpjM6~8CxOF}I4@z$%t5xD>@Bac%Y;JdBkq5n)FM)U9P+3A12~{_f|GM40 z*z6yQOEkfxKxsKtmrz4M<)Vai2^kV9NvJHLiiD~Xis`ktu44zTM=Xt5MvR-&mzrVZ z%fLK`8Um`sxSz9Tmw8t^j-s(dv6Qa>CJq@ADoLm;p^Aj65~{^;MuL0S`!$gw>7^y+ z%J~Y2gF_7gRf`hRC1gmbB%!i|DiW$ns3xJhgd~kxQ9`5l_o&7iNGCAf~%2OH5Srbr2DU zN)jqds3M`NglZB>D53>suV#IR#Hm(wiPu`b4gzCPqbMO=LWYD&5-LlmBB82;Y7(kT zNYc=YMFr{#G!$4;U^$g2;s;*6wj_u;kb~9;u&ThC0_zHFNH8ucVlIgV1=vmbWIn3C z#9{+z=?Q4fwI&3bbKj1kury>DMW6sZA;6LX%L=S0u&TgXBF0{O5TZdRy+3rl3Gv2r z?Q%9ITH77WCd3J7#Q4GH@U*zZH4Y)rGXiW#5T2Ewu0TV9B?XohSV`2D^J!pDl0>=2 zav*O26%d{PYYL39{!188eYhSI!y8K!A$rG9h=ZjVou$2U?SnyWrc+v?gYh~b5}={L zk^;*LtSGRmz?uSM1ad_NGtUl~BE?9hyu@t<2ym%jDo|9Qu0TV9B?XohSczlNyR$`B zaN&AE44aiDHX$#-=u3b#1;$9HYfng`sKcl(5v>9GMhtq-91iV)$Z6l2!Qd9&-$DqK7E(1zGkXolb}uQdnI3%N5k^;*LtfXzp>F)zFjaQbEzSIWr>KF%*NxRTri&^ zih%qcz%#@#`(t7W4u2(cxF?YGYzsJLh~ByuzBV;IbK)a%;txEVDhFJCL%<0F2V)yt zj5}Op%pybE0g>5`W=a;dk$p!TWV+Kn{PGQi1cOYnjq{MN7 zu1OJCccwFd8x!CNM;CRMm!v-T+}YHpDCvK*PcD#a5`chDJ}%7Y)q(4v2u`%m$8H}g zJ#VkBE;N2o`^lZM!sXBSXh<93k<*;J`pW2eeIt={|eXVWmo+3=il5I$;!TB7K-|1lRM%gUTD7W+t39X?Ia%@ zK!n_qaRYxI^!IqaVCG6(JjwNCe=NwvA}qL^(EQf|rD6Bj|9gkAebmAet+_%-8r}+F z%GOip;3-ts^i? zqowWOtOjFp=(!VmaSYt~fz0D5vW}yy_w4f{&AlU@XIp?~$`)D70T&{l!SaJhl0gnH)Gc+4V=7>B)SWWmJ&mP%0meKyDTx8}cz(EKnq})T8>wS6$9xxR2 zf@nK)6-9m74H#+M042b!9BzlGB(r>2w~&qHhwd*F2^fpJ8vj;C%&S|g4cK)!OX0d! zcDDF5%m?CVY_K^S2ka_kenf&^;0Exd4Q!iZpB!TVOWQoa762VH&~D8;0%0ZKq{NPp z8}+W>3j~R5Ve|cfzJ3goas;n2lJKBxC$?F>ZJ{wwpfj{v_a1}kc_`-RjF=vwSuDub zf_J1d!*VJm0d2>7aKnd2`p2*;L$fC!V|WI{jLr^Y66k=59e{|I8bJj>TY(Jtv%U}H zpvxHpdv-#8V0!T875=fE5lWkN5wPIRv61e*DRUbp4rd0F()J*PnsG660MprQ(kC7$ zJw@fG!zIN7oGAswziLVPgFgsbpFkY?aRL4U zyp@+NMcwSDvN^A4Gbm2@@g$-1>+Z#MSJKknAv5neeSiAV^6yP9jQl2d5`H}S?@f;O z7`|UA9;L%T8-*D3VpHA?CsylivorTYyq&vZtGmKv5*k`uI zFu$wnuWPlM-pbcs7hl6tv350o+OAacudCHYz1q-UpPsfKGN&&GVc>#|CK(g(+1iZM zzGmBBVMCQ-x!y1;nYJcLHTl|=D|yJ8^?Vb0HD77B;RAwJ(sqA@W^)hV*qn3?{hwkrVokO-ojN}V+p1Hxj6f&M%AwzmA z+uFXA0UegMkl}L*tbFZ<=^cg0fGr}G|5k}3;-;Thl|xSzFuxQzUWy#s|GpGCGN=Di z;y1`;vlkcNJ ztX;AqhurtT!64dH$m~NxfA?ij%6+8DvFe#B&tMe(sjuU+dVA$9C@aLY3KX& zJ^}lNE(A%xQIRVimB`enu+ZPX_MhTG);fx9m5b~spc{Ke5 zGr<`qqC#co?o6A^pn=R5=xSPlOr~YLxn0T}F057jb*Zmug%|G@=yRAz9ZSl_iOhdH zZ7vk5cJz|;QJr^YmXeLPxiQkWtOk7l>r-j zj|v!{xP=$TyngAR#PLJ+fc63_M>sAo37B{h8yB-6G1M+dOvybpNmZwVW~$rgV{75| zLc1Vwrjm?kz=9Ld__HV%^bxqAl77U-bZH^qj0y=>|I`0pWvNW41L!jwMue5#M{%`P zUYjI&Wh8nLi~2MqyjS{rAxXb79)sq43%x~?>GvWMX4jH`pTT<|!UE_YI(h;gMSi_8 zo@1qEFdJiaH}omTbQY+^-F(@GOAW_XkG0&{*rL~mHgh}N?E$XPh&^Nldq8KyupbRp zN@;?XRq`#Y4^r4pU1@`q7S^JiAm4?6U~>@DqHQFhmb)x?0W%uH$mfVf{M2h>z(dD# z-ucJ5NCe@T_Zz|oM#-nxO|NeQ4sWgq(<&7P4}#z^b$_Z8WQo**5je~Zt7Q?Z05xb^ zxrl8;3_8*?tx?S%MB@yBdy!;+E(b92;YlO}+$GkKtR!i)WOkW@g@JNnPFXBw6DE5k zCLibDqOea`=%5Pv-?0qv0Uhftyo!>;nk)E6`rvh^Exss`XaNcEBYNJ74488Cpp8;i zsP$cI&ZiFn1s4l1_EHt#;?qQvm4KFp1Hes*2k_a8=$*y!m96rntSdS;i)nmdQ8Ovb zrK5)Sl@_gq$6L|eCbd)4i%27>;!(6y)5gjv6R`&0TT>}x4=H>VijN~e2B}|*XfM7n z#R{)&G4D5olA^`sOT)Q4)i;|5a^&wsY^|W2DlKwD$OuFbXE?-%|5w_x*z+R7{c%>(1jPVGmC4J6varpIl`v*xbrZUWs_QXi3Tv?BIW9k~t4JLBmGU<1C zp~NVaQ`RAFFs)p`2Ade9#ujxIw33_#(YoJM65IBdwL;XOiltinv{^Os%{o+`%GEcp z4OzR@$hVv2V!2r@zHU_C9Igfhl10um##%A|rrA1e7xTs9!xJb8{hUe&H#tngxc#Bf zF?38@TS^vgijBMI_<{LxY>1gr>Q1IoR-ac+X7zJfj*thau4e~mrM`ztM! z-wG%V_D?z+Q15TnRPo#c1AgW&uG9p$h0i@?7J0An_b~yvUJOU%7w1>WL-J+JsXk-l zjk#yr;})VTG7!X}mQ`P56eMzG{?bBH!Q02T>s^Z9FXcy3rd(mMj8lA5&4QB15`sR2 zkPybOX>a`C3OR%ebpD!M@NcPM^@)fmtz+#R1J8RKW=}%cFzjIw7_c!s*48d~fIDjD z8fm0h_ppd!{qhIK$YU;nK>A6RK`gc@el>)a>2ipLwGX@jnXG<@DCEmBh*j?5Q`-1f z#rLT2UR8?kWxW<6LNAlm5Jt*yg0^ZG1d*mZ*BEvtr%|gWDeEwWn>QPkLB2dRpuAK! zjr>rr_YH8LR=;5#E`XKOn1g%$U{o#KQXQ8~re9^V?eC44g-a6BZu|R?X%h~vk;6f) z51SDVV9!Hh!p7hxY`acKDNly|ss&q#!p5SdgXu*nroJ~NlwDwZr~*LYz#pXww;#a7fY-1 z`;KVXwadzeS;`MO0@MFB`CfQ3o!Oz4+3m^#Z3bNk`r;wra>AYIG-{*FD6yL&&&`7rn_*TknAa@nHZWr8D;qHYnHY8rWZ{cv380ywyG| zf>TL3KA`KhHjpq*iu&#(JP-Cm+i7j(O^z8ukM&FXFg_uH%!BJk4RQ9PpjrLiyB ze&%7{zg&Z}SGs-wa>kkEjohF||F?%lhn_X?v#rc$^_y)9k<~Byhl4J0&gxg%c(z{} z?E9CFe!+~78gH7NudgppQw|=F^?M_}3_ff+mDTUFb$f~2A?%t8HE??2Y5KuT6WV?M zJ}OfOA%2))=~3+rhl=#&>8yUARXCVBq1pHE^N&{=Pg1VQ;+3oGR_pZYs`p)|`$g}& z=H*%E?DMN9sww~3=;hw@a8=-cDSqKiVoKJcl?q(@BPQ30bwam}6_vwV(}LTPwXgVX z4NlqP!i7NYf-XOWdZIbuqmKOB{yr*G2O*v*k)P8bdw7|k$!dazJzZWX`qK~4XyqT5 zA)=FEOSiXu9C9o+qo`hd1G5>x3|p{>1$MSNF^q0;)+mEzY46_6=m)t-5dV))W~|$p zNUcB1=)4oPRBhnmBnk8gUwY1)zUOJIEvKS(WcOw9-OJ*;9cLT&xGoQE|7AJej zSh=U>VABWjneJkg5WAzE{20z4c(+{Py?bSeZc z1fA|^-cxPDSZ!g4OxmejJitFw_!e#`0$)_Yo7t_7QinifbSAAlU8Y!2O*Lf6`#4IqJ zVF$OI7co$aq#6dsFK3Po!{iZ+%lL#l435-UmMgaaj+_L>&J?4AYIvK6hy;$Pu6Aco zkD(VbJmPP!%2}(|3c&CF^b(NAt7Jx-(^Fa)nk{=xo+3^$D;?NV2#et!Cgyoj*v~?5 zBRZN%$M0#JEEoC^V_{49W}v+PmrXANorn&hijeAV7m zHcLOn@NVa>2)Z6p^J%nGBPAa5pTKvtvI?NYr-}8T4JEyqqSqQ0|3Y^wwmx93Rh@ z1+y$O?X;tLX}l||rcxWm0z4W!>ru_?tM>U4ns7a}a1b&Ns}7Mq78?R>Q73)s-M;D} z>J0fF3S*C$&|vaA_~Av2>=AgBOs2tH-DJ}soDH=rD4(l&5}Ia2_pi9#$~9%NeTCpQ z;_2wj3cs^p2@&R(H>b!@4YO6kg^oor?@4}eu)TB+3!9TfrDx=lng0GPJzEiHXTl4e zb!eO5r^DD}(JV&9As&py@`3f%QOg^pt*v9n$t=ZI?Br9-+>^w#%gmEM=)qjB2O6>i znk4A|H=nCbMT_|kQbz5#2>%>v!-n;osUt+l@8G+@O{JSW+V=PVu`K-=bi3^wwA-^J z^2Ao)Z5VFvY;v#0o`sO6w#_IR8q->~KXA2yH=hPBY;!-owFkHxXy%pS1cA<$DQ~LM zs-B>p~fmff~BNKKiKgIQsP*$a-iVQ4KFagg>S;1preqt>$qv^TOJgN5W#hLbg z=K|ROfS#BN9T(VqrUaIvz())7tgJM#b*|%k>JT&@Z3JMKQpy9id>CC%{_$HDsr)!o6#)ZnouI+Nt^5g ziT%ubG!7I*FoJ19h?x1gEzYd)2pB1DlF!BmobU3;6jBy=pT5GE%QIe+oKXSxsW8D| z0$6r|b@)D>Af#~PsHjMq^ax%yIZ4O*@buahEMd7kz3Sp2r_MX6A;3m|uPJSxp z8$W;eP+*t@>xx0}7r0z~nL`XBfH8M`2W$3|?C0NE!Y~LQZS?Ve>qSd4*llzDC3LBa zJ_`qvD%6)8^EvGq3<%PnP%8I4+U2wFn;cV;(CLF;xPH(xj_E%)xdeG4{G`kkVNGzX z4$*0r0X5LjBnxdhtxbp;}SX{!z#4$*=78!$r!z|!!G(nl4M77vkCAkm;l$_ zC%@z10pkFU=y2@U2qN(hwCH*;?dol-(0bbx2hDKW$=WtC$L#CR#Baglyw#TQ{Hv^Y}Hk!0rWGYd3psQD6DxSPkSmwZp$@Mwewjxp7o!&-Mi z)@o#94ew;w@bD048Ie^5?bEMMyQkDPR0#cI7}*+z?ele1&&@E(@okGNpNN{t^RkOl zF{?ZTm*yOJblH%{NQUTfWwHIq*As?wmJUCGj`uax{^6cG^P_Jb!KaksC_WbH#bzG~ z?D{1^`A;V(I?NyH$F*clLuo|8HA>BN)ZIx=DiWw!kjTFDB?RKvud6|m>4M;G=eF}=Yp zt6+&)uvNz5L|3vej6pV%R|e%b%~+WWJqdIisHCFFxR zt~m8gj{sYYC3>v6!;X7LkS`~5R*Qx%T@zoLaN)vE2XdYeU!+1dBoEFqmWWJn4CZ}D zcbcLHn>%wjyPTq6*kH<9^{(jD{+u!!>aLZ25tY^g^K^=ZA9nA{_D6QyU`iv~!ybmY zg9S_rjWYQjp**}0D6@z!_K-L5f^G6)iFb#!e*92A;#ubsEs0hTy*Jld^fqHu#y+3- zV4UmUWmBRo7Kn~5b6SAu!q=ux+GnRu;LRg5VN{rXxT&?zG=jJJF&69Bi|WOEskCae zP*!}C<0x-(&?j`nK<@$ckOP?Jdp(DtovjDpXC!mq%(gyYoG8oPZ|uH8M!T*`MU*|- zh#dlV%VDuhyY(u-52+wM3y$D_V7fGQoGwpLa++`RqsiV9#DsJ_~gZjjxf_D9NyLrK<&bhx=euqC*!YwNBs>5srhP3c&QAeN` z6B}UiT%LV;$A}W9-)yCh8s(YG6*>-P1Fpq3<7XEcYVk>53KF>R9fCNzEXNJo*#wAc z@1K6(Y;}*c*7;et**Uv{?*Y5b%P!jw^+-ECYcucz_SL+48@K+z-m{^j9ky?Xcm$ZG z`&JEswcmT}`JOr&T`v}ki6$Jcq76BO58#d4Ep_KD7JTnu{~Qy#(%wFN0mqLi14E8T zQ)5F3itc9X7WT1}UOCntWITIVt)H0m!Itu`=ji-8Wp8Emdy~7qI=wv1O6pXLpAWMd zUz!p+Rc1=uqh`IA^i6KbsUp2n8XDUz3{MpXaYlFCCq86)yL{%80R233qt2Am_)xKR z_6ir|>y>7=3(g#def{YC`c)XlrBCPA2wk;$_^^MJ-Jr7VZzv%B@pAUncct%t>ztl< zesA56hodjQ`2hmbgK=Wn{&Z~8#DsCQD9LR7T(&Og@OswyuKBjtg=K0G)|Zap!V}V^ z{tw^&_S@jc@BQnmHx>QXz9@fJ`{DjEb?HTi*7~aF=c@QBg`=;IL-ro%_ ze;bb;Q@v0e8LL*7$Wp~_*(&!NBkbFJ!TavCPSPmNhibXsv-csHZ8h` zH1w$UKGanCRzC6?RNBXuuidgG#5R-&M_8csAQxwQc++X25B6C?SvldiocXHhzHM?@ z_Qsm*RNh~oZ}R)WQo^=yJ6N63h3*GD!wO##8IQX5vj89DgB$Y!`P8~tp51>C6PBr~ zz6|r40<|jTmKPR5CNEKMT_NKUJeva|zng<#Jm&>0q3EiP1&_k_BH5P6C{0da0`j(@ zfTV>KEm2{LRjvbb_$FVC+po^j`_9O8`POX+FC!})_7KC^@}yE)$0DQLx1GgO2y%?zV*cy{!=uoeFby> zwF*&8C5RoXwN-%fFMG$L)V2})l`EY|+ZmgHfk1$yr6IJmDM@S6#}w)j)TvQ97CB%`e9?Zin&10qKx!vHaE@A#}z z*tusIa4u7rBm2KUJ?=oeEIu1afMQ|A(9==JfFRa@!g-Ot9v2iSxj>)I{kQkWXJ6ai z3qA!-uB{>T68ITs!C(4EgJU}KXH9`s7eKXyAgXC_^vBh2KaaxQ@y0(pe>mRj``>oH zy)VC`rY(b_WGUUCJ{yu~Z&C4%@bi>A=#j1YeKjf)k}--3bQkQr$e_rInu;-bu9B)L zcMs~C$@JN!x^n=UE2~-9q;FhM$dOZfz1EvKWBCQ^N~)i{SBUp4od;^OR6zQ4B0&Lu zKJ#pLx2oLGQAZ%X%w06=!jJ4&dBl8g-b5$&EjT2(H(~{e^A(Oq;_D^&`_P@(Qd8Vg z&-Q~3i|BPb1hMOgMAtZd>a*4=LRXl*@-oxV4PC8~!E(ybFPSz)#q0j9J<%Fmdfe){5=RmPH;pCbs z5&GWg-b@6t`(*o$xsZ|qGq z;$<`vLI$gW9}ZyRLY@Gu;RW$SB3`g;T4R8$)=pwdt~(VyXYLw7ea#u-#jiizSwSti z{3KvxnHRvJzyh^`O%4USKX}&6V4N4>-;o=i-;Zo|LAdL9)Hnm1Oiw!e;QJxv8?&hH zkrkvKqz+~$kS7>XD8LSzgvg4z)WEUfi~I{K7+E*r`h^!$0`kst)ESl|j>En2?oq1gAx<}>%>FK4gG-Os@(!m z4uuBs4xJk>+$W!Zvw!g7v%kLl%4F-B_XA0EMNwnXTyvq~N{EeN?soMPH#*=YpWH+T z^Xzd#uq@M&SkwwF{QFb&g5+1`B8P=p5=d5`zcXuG@d_5-WYyKHLJ*Lfu!6Y!g+bDv z3`rqN;z7E%Cns-C&t8+G{t?H^9E^}TEQ}(}YV&u70OW0(2?+9~0)a2}K&O{gvs6jS z6LrWTyhJw(A%|@2Ujio_KIK1&_`nDCB^%{KF~qWx8nKs~hkE$bS3L?Z#ppmO^-?v> zeos*z;KhpwBEDpbQjk=Al=R_W6}jLuG{-wx(NvvpQ$MfCYcz8WRBtNP-1QjZ;acb@ z&`T}1K%9*l+36>5A^Mm@XPao78W`C?m%5o$$#(-fMA{I z8!6Sb&f0T^N6!^+#3Vsn=ET;eiTC|jo^AyX-k=vJOnTH9rDUpo#amYth)j8oAht3S zUo=Gc&qi8b-S1CNtegm4@`|^^nW*3Y9?=w6TU(sRhXG|tRV+6Y?t&nI8tW;DdKdui zIqJu^@A|J_sjl2Q(fvA-6o)}A;JIJ{a9?#En@!Y0ZerwdeGs8k%W~|X**91qei?xj z*&$+=0Ga~B2Aj)pPy!TBOqLipwynnYHgqNlo;E}>&Dd6%$=;&ifj8Z`1@Eyg9DR@! zkB>!!2h2nlEeu@D$5GxkCq-tItBLz}UO*{fVn#@o6$m5};1G4(2!kqR z9QB0#qrtIFxl+3qIW6EnQ~9JeOKmNfwZnJoV;QQLU^2Pvf+Fmqtx$WcX&eP%Uk#*{ zsSZ6f+Gy%VDCET2?}M5(q#%LiBbtjoNdg0(-D(iCd3fLZ=iRsXrRL6?;bfswWXKG_ zvQ`Kksn^TFYJ%CYB0;9ud5Jf#kCuXvORYgBQeo&0{3VUxY~0Yt&T;E)@9ixEEkH~z z6b8Wr^veXNssYS0*VoQ)0GcLjOw$xbP^1Y=qgeF>SUx7DqNPOLa&bC8th^%n4}_6NrA)?N7!u=uX1AS<(odu@#1Q zeqf7{sz113s8?sF_)LDAU{6yXQ>$4_rSu=Q1MV} zml-~@)y{4yB+c4Msh$4Va=dOla-?R4YVEPs9{UuecCQqYX6>Y;HZHH-BikR98@9(p z-{+-}G;3!reU(90v$VFBSZj%uc|LketW>qj29Kln_(fS`b$8_+932*UMj~f~S8h!r z{Ia8O0kd3jW}IKIrjD1NTjAe44)VRelU|0~=bqvC4+hkO|D&04gFL^+%t%0$y<=V! zpDJS>L=cO>Q`LSGI!KI3Px#wvO9$-o7nBB+WfP^ z&C7*n-3r5KV3#FQ25_cVIt@$YuIa#~eW|S^&i0j=QZ(h~sxF4lOSLUUv6aDUGAMpr zR>=h!KcAO-n16dSahU(;{MGlRPh=n2w$4Z8lNh4K4`o{b%OZFV(p6_I@$|h+e3jAA zI$6nc#!VgmCXeOxH$(K*BnW_$+IC1N5V5&caXxJI9(C*Bt;Qa)nnGc1nnW~ zM|sE^My|>cYp6c^fb}`oIc!MAI3g(jn&e<3KwH7yhRk6FO`=A>2H4QNK@yNU&uOpB zF>OLjoYV2=Eaz-VP;;6Pt+32K&<1!GenN+16YX5A@f<;{8O=V;w3al)Sd*_O0Za(p zCOfFjan@pt>l$j(V8^fSCNI`v0yN-Rn^KHm#+dPS!fN3*%OkEG;tR%ShM#@P&AxDi60`Tdn!D>o0#|e8AVS5G1R6p6J-mZbSW>VY!?J)U`aj+ZavLmdh?$F3lM(3pZODHy@JS z61Q0lME>6fCp$TQBQ!+@usf$#Jx#Y2^X}D6%%V?**q;|`zrI3##Xn&i`LgETXFXTk z7Be-)nqe7J+@`lumxxl*`q2RdOF$)V1f|0g7K@J3ZPQ5c*9xnT#Y8Gsvw(#px94gf z#*~?)!>P__1Y`7f*i4%8Zl3dCjMrPj3=#nF8KUN z43MRwwnFwt%Dnz_G40R8s{x-uT~A3ir4o+6t6$;Q^(3pHNsB%u(mV#pj&UZgx$Z14 zqW19(ppU*x&&S);ep4?mm&`VZdU->zuIJ;Eq29`~qn4q@+_OcWEwdRsXE58=V`H|* ztFTu@A1?+8BL2Cox49}^D6bwsq{~$-;FE~QVAsyxGyD=FoW7x;fs{W&9#3k%o5{^1 zo+W`H@CzOJ5ykTsf$#R&`!j1)zb;vhPvjGGi9G&A_hKiq)`#=NaMV`9A2DV2kR@Ue zGhvqO4#`Be{!N29O-&im@C#3d{=T@O$>xnk5h2SVaq=5XZZ%tcbv;WOjdeX2M3tI* zSrVM+>?fZu3qQff8Ar0@NBo=_3a-oKg>mbWMj_a`xKa4DE^ZY1tcx3mEyt>4*_N^h z{#z_CI9{_%_-?#@xggs(1oKeXc&!2ftMO_%M>7&+f6)B;pn%}a+VX14s|)1SbO`ix z$;?1yL+*#3R$%^QsBJ#)i!fPT$T-9`Us7~1`oq#sUC|H9RFWp)`C)H%va7t7zi(Pgu@Ud)VPzHO2TzU-Dq6}?xx+FO*G zSsiU!K$}gw`*O?0#bAcW{Fk8r9EWDIfjM|20OmLcrxAKczEI!wH~mu;SXA=1ULtwh z+x~g!+-;|fbVN{w2sDc4ZF2-1KcEs=R;o7BOl{mGA}q~lNWR3xR?-mrszZ)&{pEx} zL0Gm?!dEAvSX?Q6wSM7cCm>T0JBdmio%W5P`wo`KA!W(FgoPFYqJTXC(Gutr$KKaJ z$tH;-+>u{;_U1^Jb)om{>vlJT<)F3_Tik8PeTioqa^Li`;yQh~oob_?4W4bteLc^X*$kd-$bHk# zHspSlL+-1nh=xQvV|`fv9MG;0m!Lk{^zxLXt*y9zT`X}PLo~yqYTMQDdrD^ueur%vm0JfIq5@xd2(k%YWv^2GI z^;aG-`icjPCLOIa3e-Q-S5iYI>lvMxA)oG%nLqirj3BcNJzM=efJyL@QMg(OT~R*F z$pAos_@g$OGQUS{G^I&2CGTW$IqtP`oGXr`v^?UHt8t0UTBp}9jM$xe#Bo8~z14EJ z33r#b4l{>rR!}La997DZ&y6kJ%84!I_S*cY((hKv)u?T^7)A;zl7}8H>p1 zyKLc=Hx+gYbNGL2x0X8rP~OCKJ8RMX7{LPJ0Dr-OfF6!iXAREq!8dGWFoAwNTqc57 z+4Z<#Zu}~v8N1O{1iJGZN_pTYUMG74JwWvJ{iG}g6vJ1k?L=s)20U^Vz+HH;p&{4! zMbU%Xsi(*MZrqbumm7CjBVlAk6V@cPh96XvXecqHwu%ou;$Ov8w0BmBx26hg>sVOCEo&il!5Nr~iFR0+EYYUG_>tuf!U;$zwJF!+ zc!0MGG{+lA3E*~5MR>?;l~Ge&EKjX$;6s1nMH0a>pdU*1Dn{yN`&D)fv!01XalL3~ zJ!_^;(PwH^Uo%CEJ}(UJH#C9M#M9s&L=!MgJTKPRMAv}06@5M|qVaNyspxabl#GdH zBg(GmGdDxRa*>;P#IhC5g^OmLja-%iR!%wa)x)Y9Vpyq}?ThV=?R|nL86&mxfa|s! z=azc7PEiZ7Yv=^u-@sjrZ!Mbye2;@~f^1aZ1exC6sO&6Y>mH~jS6>egxsHSFxZ~iv z*UWDq9Rf$TjjO+F=Vro}{cKU}Uthb9CzsPzR{u)fL!-rOComga122OYVcKIbdvz)s z*5_6E`ZNu4pS(&C-~`^~tz?HVh@|^FK{pKPP6(a_-sQ074qo7vDUMM&qaa!+P{@bbv&B5%>7` z!-z)RFbb$O!WIyaqQwiCIE)UIaxSxM>6IPuCI|T5NCZ)Ml5`bL4YoQA!)suH`}MUM z9-%rUW*+*v;<8h>pRKwS8GFxuq0uDpLZ00LOwvyIK%LKat*(J^!z&@4#?vxirSXsxTr)9seSUD>t6vXKlS_XhKD;1)NW=?bK{rvNrSCD2!k_`?sF6ZmuV))|LhEgO zJ=MV%$Z!az4gnO+KvAO^>REDzGS8au@5qgd-TN_!2yJHiy39?zAlL_SAwb-TYYX2j zij8|u-uQPkU6eR5H5|7WkE8X8z(|p8e2mqs8NSp0X^@m0JNrSg&#U7ukpW5 zJS5N%WfUiEk4je585~0A#tZk!=ilrfy!h;|FTavJRBY13ga+zWYQ>F|R`pzdePIhG67g8B4|k;w5yzL)*dHS5s))qnB@=9g7JNQ@Du7iJZNV)@626<5 zRNt4KQ_qgh3Ew0P$<=)g0&YCBp3rFcfrffdD1nPjVS1vr+AWNVd{=IQXme$QdGc8G zb;5V=C~p!A2FxI#HqPU!wvAe6gc=&AAne~g8ix*_G#MmL7hH@v0ks97z@dN_d=*=L zA%2q^nCs-6CA$fH#GMArWbsgw`XdL%D@b<&3BY=R2!xZX5SMly?+T}4gVsf41yHk( ze}JAwYV#oi6apXz>Th6IK}j4gZ!)5RGn@j9%kVnjD8c|N8p$EXKj90bH~WgUuV{em z??iOO`9-7$QbS}nWC8UyK)=Z#fv`EqUn^o{*+ji+iW4!`k^vnrQ!fLGE*-rTNu+s_(Wa<|j_g}h40c?x z;<5#s`k%d{U2>ENz6#}!Q>(&mAdr9>m3--`<*Da)T~&%CWREg|2t-{it9%fBIiJMt z8DRLxULXqtIjPgRTXtr;XQrpSXZmAsQDAG{;Z8|+#rSN*eV;v#TEJYT8{~3HG2XvO zbN3#b3^D}s7t`L64ZHQ+J#IY2jr{s893I2je>>eN<~S8F$!QNb@(!j2hMQh-Hd(e$ zWe$Ue2uD6vkszs$`(;)X?#}Q7LlDtnxKocEaA+c*0YO&L&p^tO#XCqS)pQ+^Mkv4W zpPA0G+}20$ii2k@4=!v=1k%F~t{<>3t_Po1;Ee?T&cQ>%Dhciv`w;c&S*R;mOZurM zo-9$$Nf5eS+0F*2&i^2@zGK6=uaS$UfS+fkdUeb+p^AFp9R^p1dQussq)ho~j8><7 z{=b#aZ|NmZJ=*8zu~LW~`H7zV5CWBEeiB|U0S5NQmFlL^{_<}}np(Abn(CZ`h8n@U zL`PNo)v#5Erf6^YlpnIy2%943{HL>y^;O0Ca2Cn+^xncP?F)y90pbLvC6>Jvh!N}# z)6tUFPm^DW%WgOw3~TCX3wQwT&U$y;SOQw4aE3r5roO$uAOjp?HM zdf0WgUUDI0;c~%(;y4*aA|PZTKUtuKlZDJF_n}?DU)l#)HY*@Na@>Y_c2k%5r(fij z6Q2eO?w97Tux}m9_i1k?v9SuCyR(?C=L0tR27nsupxpP=mcy3u*%ti51^Tv8IHio$ zq#z*h+_or)?vw5JV+(%djc ze{#di-s36B#_6E?2q(Dgx+i{N4rk{%-(BE>>h0MZ%jZ3O`;g)QmpQgxKkSQI4}y#a}RDv+>xsj-twktrDrjfha+9l#F?Q@MP)G=ipFR#6i35}Dyzz5 zp~>p&uk=S&5m47*&6R#nERG>%DOQModGd)?4Uy==*3tENbLOHoWn zLFc};6B)_u>%cZA+nsx=u<|<8mn~nsk=bFb#j^=*p=_Cy^ZLk`PX)Q!0T{@62B zoXn)5*zfCoc_dG#lR=-CoG)88r5BVfPw5d&;(5_^L)r4Oxa6`WeQUQ3nhN64I2vaq zy)uw5v#ZoyCI!8@SrWV7(mV$4a?t-2empdt*r1H;zYe^q7LcFz)*^fzvbBkmd)YFn z0ZfgFF3+Y@ak>}|L}jjw#ECW^h|*k=2a>K2XX?DY8o(yBLrgy(r*>WM**D{7-;f{a zYt+5jbnH1B{A=f~&0V!O_+?8zBDhK*m&x-hGg2_;uqQcBt^$q|6>j?BkHt;nXZHp+0j)%$R(w$>om zmaK{^4bu>-nkrk?z*1L@U#*?u;Bjys;o_Ahhr384y+R!_a%3J`n;kfElUHd@Xp~JV zloyd*r%qO0#>`6|z<-=TcIsrOPIl^Kp|VpaJ9V-_RPv5M36-K@+&WdaZL0385+C=& z#K%lMO$PD10sdfbGQr}5OM=DIi8vw!xmdXPKvbn_!o}kxtLfOu#{`Q%E@iR3@k_>< zn}TmUcRP~95vm5Zxr^h^K_IY^<+q_0W&?Jiq5d7+W;p_03s5s2i zhgPX{wJeF!&I~L+h|{4|7g7CC%1oexYy>j=#ut1G$sw>dm@@!XFw?Iz68XvlgzJmU zy&dYRqH%yR>Jdm-s%LZd)^7Fj`sPJU~hhUdvP>WWr3F$=e%2%+P zmLJ}ERi7W3Ld6jzzpxap;V1Pvx72&0PaXs$ZPXu1@>J|Yu(+rg^SP)=i-ichPo7Oi z(}6sfsy+zR?FL%=d6-MMM+0FU?FrwwiZG29g=4fU?4q6F6)g^(1DgFoc$b8zjOC27F@kiwLYZe4zUCN7?d}9fF8WF8LStXr3)J;pFb_sV$E!dBTuz z+BkIcUIo|NC+@UIqgy&hRZ;0FdW32O$a&l0pjxU7kr4JK806AK3B-agX_${8NBSB^ zL6ZEzJ(A?5zGZsrmq;!-G=Bvr5epX|^TCGCL-(jj2x^DIOaSzE8=t0>HWMR4Oa(vi zV4Os7K$H9PFj;zP(_vugcRFtt;1FfCMLg_io6{uJNgSX9O#2KlN?-uiGLVc#?RJmY zc40>3#7mlSFDvWLCeO&kZwj*x!%AT~+M5&Uky)qdmMnuU%c=bocem}+RSZq{;RC8T zw_CxCTHSe;33Gre;a~s}RAyZhyKk6)`RH4|@b6!L6I8}f^WVSz$)ZU~^&PB+^9VHr z`bqF8=JgTd4FV-pQ3PyF^hl5ZGK2CA2B# zVU)oI>tBuywmywVNSMV@fhx2O*18m*u!qwq;k_dHMRBBFyb(9Le3H)Z+bpKmZzed& zl3jKlSLhq?OfE{?4{DS^@Al3XuBk|9Tg48R6JoyuI=6E=#X^eJK z4)bKobJ(K<$)O%?hb&4*8@DEC5==U~fKw|HraoYNL^|5oKi!j~A~7rf8a$E)LdUE;8knD(Nl5=1Hvl zjg|N6^*Jj*(PT>{yo8=yi5J?V1Lw%g7LV!RHTQ$lM-_K{+9}O6&B_N6*?9Ot?7ZME zC|^YW`ytV()tW5pwHBqE7Una^&fFh~!^s?SGY@7X(a`mo2$`AXi80g_V^+EKr*0>N z&dKh=vU9R4Rd!BxWyDwuu&$4CbWcRqTbF%B4>~cPA!pUl!Bn11~FdgRB#-Zs9e!)b~_IqNN@RO2lbXIjX6 z=EPz3k8zWV`nZn73lX;eo4gBWU9QfjN{Hr+`nQBX2==B+mvFHm_OS-2Xi5Cr(MYc^ zW5RhbJd-9Az@|%^&jschNVf(n)Oo~g=~ zNtxC+G(%DKxu|M$$ZxIArlPJ%b5R;jCJPzF8)Um{UZy2%LHRAvgRf{8YUm-vY9-Aj zon34gs=`1MUo1l9=--dazo1rQyQ#@!Q#jE=XmN?GD>-~HO>=Buic!O5K}*~wyd5X# z5i87{6)cIXy>>QdEPCux-Vx%~8@$fn+m0oGIYQXOF$QDDYk_$>he zGljonvEN_20_d%ti?~}J3>P|HTRm#BalQN?a019E00E4<^8p<2SBk(*IEzWUQQ8r?*59K2`81> zl#hGMv)89n27DeT2f&Ve)|23e5W?M)gjXC2PHN8Zh9C10f4O?JYgVsP!yJs0(If&w z?(vhwUdeeN%oXhM)Mkf3a*T#$o}ppGPrtZ!3t-YsfuhR14l-3^rV%ep;8E@dzaf)P zew)ZgVF%VeC|&Fblj5EL3dyD;$y*hMsk=2YrHMG7%Z4Z~R8>@_>Qq#RYF~pF-sXle;&q~K>Nfbr8=${~(87gS z(yUW-cAoRy1vT4ZU-iUYiUU-86LHZc!DAobszV8Rr2^D0ccj8fNl}omiKfB9ISR`2 zPE-8fmo*ZnBYv;AMoLE0c<^(rDxzT2?s8Sc%)s#l)uweEX|7BMs?mqE%yR`ixB8N( z83RpR%;rONIGN6-i^=P+<20sSaPR;-E5^=?%(~0=c#IX6mTmMTJ1<@v_b@9YjvM#! zDkZdAjBRT@)rx2WZSY_#qAc(e7iG(9^LT5UUQo7d%0sTw+l8`awH|eC@w98X2i{pp zuM8AEH}+-Al*is~7aAJ3Hn*$9vL%!GSBH2`{O@+lD?s}?L~9cV_p)W`pg%J7k!(ON zzKLRp%1Ba0$Q-c{wc$vT;YHlhLajVRtE!T@4OV;oUbf^TP^$!TQD^NoFr4snVE$cC za?V%<+#YH)Fm%og$x9O_d0+Aot{1;clUOzCtNNhY_v{PlI^U`NAHV-(|HF5m?+jx+ zemD8y=|_^Y`uA+n2@A* ztB5OWD~p?rK9on`;UHNWFP(rL@;O^z?8B0+zYBhZ9=8!UW_F+g5}@(`SBN7wds*qk&Xv;!4|?pe<{vY*_wx$|3{0A ze38eA+-N6s$|hCHiwLh%C@U{x_9YJ_nZMIYr%-kZWv5Vf3T3BIwo{?Zd-fz$iiUCP zl-;%|yN}Q4TXh8ZiNNpkPn!>`3HbJoJF9)~>|=-_nK5urB`Cf&Z|;Xd&s0hB-^sjw zoBl0(4>LIjVVx5I1oPpVq{p*8bWfaD7pR&`7pwM1+AUe057O&QLPo1fEs+KrvloPW zo~evZFqMc~7(k(SmP10rsiZ~f{MtRZJNNEh*u%!&J%&lZuH4#pN00ET<<{O=1)0V- zhn;I~fC^GQ2-pLmcbalwW#OuC5NF(LW_~P4ADQvQIT1pZ5z`>nWy}E^|N7Ei(`}IM z7%Ed@eFq5{Nf$FV*qe|bv$Y~TsAWC`LD0z0kFY=bY&V-!IAy`7n#JQ`8}48RFKI^y z7eqaoA3Aq#{EqhFh`VZK5&1v^!T07*l!1ITfBtoxP9w?!aXi4XS>a#HAez%LJsV&< z=frG>3l+74d4?m_#)g0H?geuTIGmcXII;TP{LS7U_ky+E!coL>*7rT+4)^X6b8BE_ z#D5P=#Xjt^%jCm6;#}c&3hZAjmLa4k+(*wATS0zEEU5-mW~~J4Hx$6JNZFZw0F|s8 z;hDoeVAWox-^5Ja%(4kh9+*-#2d-zqNTBAPEI8t2JFtFqN$GbOl4oskHeKOU$Nd$y zBCxor(B?zZ17%`)p;=l{-z zK3;@~XBG?_rzZnoJ->I>FFn_>e}@H(P-kRTg2Mw--3j9N!WYkgyu~B(4)2|V>HEN3 zH-h*v=2b$T-~{5=nDHW{D-f5rILRWiEs)=$80`FCBtiU45PyQdMC9b~PO=~_gg3+Y zC$Z}Ij~8!*<73B|Ka!VF`}<|KLJvN#VduJg%ZpyI{PWLuiHSa|_q~Y_Uz}jF;}36x z{o$7W;wJbl$hUXbffa~;;92G#$AlearapSBzldN=55s@q6jILRz62Uqp1uBRg8EA2 z{swpx38=!fF84&C$2OSdD$*Jbn1v?@LNP!ppH%qb)4;;CcceCjk%OL**vcgmJ2M}* zua?pZBppjiX&}&2x_`FoiZEtJiX3B&Uu}BdQ^BE6N0 zT2dkIFW<+1>>cfH<3#XPEPl{ClqQXvr0q$k6L5fvpj7nuE{fd5&6!K>Vmk)~A@LaS zdOQg;JGa;<#Bt2Z#8 zqTR>N%)JSMH`tir@xE-z=rkg><3y-U@FNceyY&cDRx-pI$9m)WT!Ok~gNSgZROCR4 zQm~Vw>RE^+psS$A#o{Pfg)^6uF`my~ISbgAGRFb@Y%)a`6UieX7b9zlVWH6ewO&(E z+z*`&FxeGK#i+hs!f3FU^Ghaw<4c@Cxg0O}LK;m(QJ{ouYqnYra~(fQbs4OdNTvL+=n**R8f0!f;i7J=!a&wTjGVU;8kblQ8l7T& z8ZB@*JQKrxdXN(ILdJ%ozH>mMFajnNeA-?;JlQiTl^N^ zR{<3LFrXXsFvlXFS(ka%YrW)LHJin*mul2ec9An&(%RY@A&h5qr*8hy;`& zdKf4Fg^{j&FGG&ctk3Y<^WU`R=MyKw0gijhM3fisK|#sd=YQXY&-eVe&;C3+w%_HS z>h38*rAT|T>(O6N4&{V3+s-K6JCPzY#FTPQTl+FD4*!zreoY>Sn(K_ zfr-LI?)ZlHh*hpX!_lce&C5huT@V&vcZXI7S1V`)T;t9I#Yg}*K1VV4kXF06e;;~p z;q(tmh(x`HeMU@10D12(1(8Zx(Bfv2G`Mhx8L!V+FBF{!&_xy#^&Y z4u+E)!+MnX?BqnK{L7VuDfOUQB1rMv$?{l?G^XGd2Z_X+GCjpXhFmsU2N8h3=x1|8 z%WTgu2gLTDAF+{;QD}UmZ$qP;xL@*l7C7VG!V~w0_?%5fu{jQgA@?bFi3#IyQHpub zPP>@5lC;4BQj`ZJAk^3@T6&LW_)l9WPyuerz?D0JR&Wk&=7z|#ueJlAj^(j>m-2k4 zr;R3|?p4*J)8d+(^-n+&u;Jf$Y{=>6`W@nb&0UM@URCeNi!UywpMG(E@zG0T!xi}) zQtzx>vo7 zx$bqRN&lqTd1u>KN%|dZ5OuGcceOp~S9sCnH6eX7IWX#8bEJRPKYMJ14=8s`_9i<2 zQD-NOFm4-kV?akpsfql+Kl~~1e0RQsIzzkB;@ayB_d3IFj*xquVfoc4?Hf8jUhj2= z9g_a`j_dey#1;g+#~YeBv7BIp;OkKb1y(*uqE8K z{D3O{QiF^GfoO*To^$RVl!OC(69)c*8EzAQNb69RP-T8yA4YpgQfK!?5$qfkVJaARYdXVdMCR{s+G;sMXA1Jmcw~7eabUy7 zbED0j1tAJA734E!&w2TC-3MR1{I2S$j=^9dcd*$ulHCLh5|J$2vBm7*=aiqgX-zND z0sok+j~|A^)86pptY?o;x3?j)7`smuN-d16E8n^+?X%Le4;}jwlE=6nEb~pkMnGqo z2N>~(prO^u#}%GlfJnD$6yMM$d~l_Uw=6pelOdWCZ&GKt_tS&(xm?RP?h-bCDIvhi zv^r$tET&$RS@|We%Eg>+miI!%O&z!Qmq5sH^Y?52I?fO`-HU6HD>W%4Kz!|wYyS^D zo~4^TVeK}-j+uzD|7)z+J}zt@7q*WJ+jd+Sf47^sFzVb$SlB+$Y9DB2EYPZWQ9&*p zx}OcSdSvlY6$6thL`La4V{sS zji=iClM3{^#hvcbm)GyW);149J|JfqSnn@^|MJ?fy31F?he757JnCGez-&&Eb+5AX zuftm!Fzso&C$-!jAvwXo9*_I-pKS~kNyhQY_hAbh4mDdwvh-v$&qcXfCSQ-5xf*W!dMz~IkAw_3 zwvT`WP*3xCrWKHV6tjwcA`(qAGLji_r|$I;Y}hZ|9i}AOt{=;WvfrtSHdtF*yXm=5>qNcYOIG$s{1tywNurS zXGeYZXJ9uCsz*aq8dhUKcTV(%Kq;#07VyMEn9jFk>dAFsOz*077z^k&dqVU&-gsbbS)`q0%={C`UijS|_`kJnAT~`&c3^UVg$L?15vu7H`Oru*} zy2>=Z|KQ_qc4;wCRP)Z@lj0ht3aVE@EXy@)L)m`ze4`Q!y;s3EPP<+hsS^KilyqHx zm(~QEBs2LWtKgGj9;STbsvwqO9^=R8tJ6qZ)r@;xzk|ArDc5Ce!H6|D7zm<-?n-00i(U^roelu@gq?RcCt9S@G#u#a=YzJbVRfXOfxqqLsT zDleLhr-(p}@0$B=Hv0(Fw8FUQ?fd}qFC8PA_+y{nAFv^JS#=2qEUb9@YD(&c_yT7G z<4*09wwA^uvnT`IDrS>SVRI`2Pm|gP0F6O^a6_XBse4T-Yz)n)jnpF+BPGyE+Q9Dy z$EI{2Xc^A+Z_3uQ&YEoR)0HZuXhu6%Op23^NpZ3##a$xBGp)$iBSoM@bHtFN#Ks;j zb+79Q(cTlHAVk}Y3rR5{j=CkpraoYGujUA`39z;a91R{3MnEvFy%D!@MrdY6;Aez3 z0R9tagcC#6m@-Ugc-)_Wf?(7Y7ZUyd_t=ou;TR>wQ@fMn>TujKDUScEq}T*l+a0l~ zX>NyV3}g*FzCTTo`S#dvPKR;TmBgAL9E4qeK{f(O`6{O)O&& zTL@*X>N0Jo&Qkm0F=02(4iW>FaHjgw{)EEop39C72t1t-4p^ zC9XOwd3d5cxd`Z) zLDxyvUuDn9NyZtmaecV2?&qw&+cr*rMfK$1k$3x$s!`=+&VW7gU7F7ap?ep+mBp%Z z-t2|h3mPn0h3t`f&^VPB{K8}F88?l(6K5Mba7RImxo zA0n71Jx_Yn&fTTUO09&!T~YDI3Tlj*qQ;;pea5GDd)41=0~{jIHp~jmpU@W_T1}3s zqvOdAR)4_iNAOTBBfsL$-Z>oI)0pF0(&BJ zhfzFeZEnqui()<8SAMIoV4$PgC zIYEmzQDfCTdK0w)(9R;V9W_($zSx(_1&1|lm z=d=O9#|R*rv~M)*O55nR0t>ZAZ8bCR?)=1S52M>pe6@+!?E<0Q1$lcSo_=lW#nrc2 zT`Gd28liAUZj(tamDN3FuMqu?Kyi>3Az9O`{f+@7!KkS*dr{LORl$ zLg>Mty$%E4`^_Chu@kS-*@TkGv#ydCNn6EU-k4nI0DaebZa5M{Gv zwp$?}m0FEz2{!pjsI-dgqaz|ine8TxEu%%xe;d5XSTy<@7vUJ;eiVj5h`D~48chP0 z6Q{|e{w|1Osc7YdY$d7AA~L#CUMI(Tjc=b{BErNLJYYI)q;UiY@_3d~T4zT=xX)yA z9i%VLBq(>4_4CRNOUuqzAtQns4dj#!u-yLib#VUzv3M>UPbO5}BY*hN!JIZAQpS)@ zhD{lg9xFpL`@nKZ0HeKSU}r1?)mP}=T;NB$XDVnKH{3e#m<{2v`t}>LM^r*!D|U)^ zcg243ZYOq)j_e(kj67m1jH6EX8%NYuU~T?!rcwLyGMf z3-(X5ofG41$NW5J+0KcfeiOE1I-xxEI!%4)(UH-X_p<804FnQ83^jpt)b8yghm1P?+s73ncALg)T94qDC@e5{zOF#9ssxSD{UzJwLM4pvKepW-1` z5k6unZmgjGi}TPEZuQb>1f~Jj76S{`KGYeCfCg+v1#}Xd+T3~)xvsc9rQ4)h1rwW# z5sHED(YRjH!vkvueJ_IW;i+|qy})>BsvMZ&JNWQc1nY(+i;sY44`kh*gLH*~10=lz zZAwR)G6+qOa{=Rn+4_WfPb`+WuSy$%L=Q5qi|IzpC5o1Jn+^=2uBd{;(xII?Gq*KV zkX7`I!T^vYB#{g51!41icx0-hcjcTt#|hF^*nEB8iSV!-EGdJeYvJ+(z-ahGXl2GEgcC_X zw2mURmtJMy+IcUo_N_B`?4%3kj{R0(>^oDEODx>C_kQ#{jRxbSo(z(opT78`csEH% z`|HaKlwN#7YO{|`)dF4uHsGbgCf+E$ZZOqjZ(rPNU)-xwaj#;cB8fpH$H*w95Td{6 zcUd<{-HKrSWp)FJlE0)0h;og6?<$*Ng1g z!N2Ssi*DOC@K=NlXjaT`C(UDdEX%qrdlv0p7z!AQtt47)$&low-Y{Svvi;n?WOqDL zq#m{?iE^AZd$b8f9*^X`csw58U2(9fpr8j~8SHNwlSgsTY!u7JHi%~_r{lJ57_04a z41~`A-!_czgi?645g%>D?Ntho;$Xw#;L%2Wv=O&g9MrWDtEQsZq6h2<0Nl*~De%1; zJmgnG723-2KgRh`)XkB|Uh4|6onheBU((1P$#fRI{_BQ z#?Hluj*V5E;#0lLPbsDRmAGpU7`l@*6g-}$bIMHK2Lg3@&C@~izee%F;|a-UZ0O}6 zA`WY*9riJsITIIt1ZuLcBS#G_BC5lI%5&YB{nni=W|ngeIT2jP8!s`9Jx0*rvQl+C zotxo_FYJ0UXNdHy0`6)sMLnL=vg6yZg)kVMhE9|n7M)sHzK7%_TUnO#7S9pmpeVf7 z54D^QFo-O`x~&voWxCktKBWU!B2t96Vs14uk$s*RGtWbof_9`N@PKK6^IZ0Fhg`4{ zXO24i##G!?x8DfR-dSpxCv4rc>Qt)55<=ZVMBlJP1yBRs3Vno$R0F4IErdTQSwAos?@ zP|K&~Whcb)glJwwE}(wL^;F<6{Si745Nb~oDgu~?ggr34AFLPZYG>95B3jGG4!D|G zrCOd!6$j%=BpHGKTyMUJXcDO$00qu9MFV~1`FFr2AVM$b2_JwBE3|XYV}FHgC(2EU zpQ`EvA7jaUihNbKO9hfo;P_&KN+X}~;jNA&ZCHu{A|t~NqAo5{?@nJUt8@refSlHbidQH+MfZ0>@=Kw+>K`Q zE`8`kZ=;V;2%e}Bk^VSxqIMVsjy=O35KvmtA<4adPwNepv?>_v-v7+(aK{2xJ^4d= zPN^7Qi%{RG0|7HqYs8!8KmVlJOUIM$q5c-yC}9yVq-?X$wM?|D!@ zgN*fa$+Fv(NZyCkH$udSD`4mR$pQi*<*Vuv7rD<=^i=9n$M=hC_zBth$_|}m4=Aj# zgO@NjE~s4U1Lg`ZhO#!)17BXI!md^!v%&(1JL4L*VB;i_gNJ*Z07u0@pgCgtqCg%Q zGzIr8G3mNHp~llEN&*C{Bt@N-(BnXofMM?;vb?!4uIe$=opccO1PxVp3IL!FkiIe@x{B3O#1^O9^GYfV z(T+mI1vnb%T39&U3Lt8Mh2>Bh`!fuXRw41Ca&SVQ-9dssEjt`L9y5;tz{C;1b#$&R zQBFd6=}2~`by+F$d4#w?o}jd3XgSKhbacLoL8hZy5RHKYYj(+Zgsg-JEfq@MDIv>h zh6=FmyZzRn%U7pO>`;_j@5wa!=nOd4g1uOX5Bt4-4~#^x(!ky4<0?VH58r>*hWE;G zUc8Atg`S{r=|Hr=*^`^-Bg7uT@Qz2Ip~kl(-aS~|-eg4cftA;J&(+*T6&aVgLpV9{ySj9t(Dm@Yt_~@UUi?`B}9lg$+vqTvi6RrWhINcpn&_I#Qv{9o!{`}7QHUM0pKB0U@%ka? zpPqlhdgDb+^oCMtMC;dQeX)WX3yLsIlHjH(diY4uru$A%w7)@$9^5NMW4raz9cyUo z*ynMJ?#PB49+|&p zWCQ(?;g|gNJTB&Ns8z*%hPaWhFNCkDO~rcW-(Gva;AIbO=fOqbup`f`d|BdN%T8?c zYvq~2_L^_?mP0D(d@$#G;0VJ$GzKmlkoZa5JQu0>v$%HT(bD(16;KF|*;qRp*}dN5 z-j#+qs;G#oG%GX}`*lslhO8B)fg7={42^qD4=7a-F85%wo}jF{O^g6)PDnGGvJLD9 zOxpcLRxo~F&!d$M*#1iKhxQ|MnmIKzVY~LwH#);3qhzNt_XsziU60~T{6IW(qG9|> zeY0sJST0h&C9}qOLu-%QX9b25O(gxMwv;7E;o_X?n6Y?lWXZ;Btk6>Cp{{Yb%D{tK zt7ol_?Z&6Ay#032OPzq~pWbSlc6gQ}O{Em9TN~EOHB6JF{kgwa$^aFOg?07|{?hM_@L$E1tYy5_ zH(CJ#e?SjGyz$?VpOMOHou?=Q1i@VSR|Hy?*TUM6NnOWu&YH-pti8s3k<664FGu7` zTTHgi!MGHp#;v-1yG8XDYMV>i#?mUwOd5v!d(twLADFS15EodBK5!J0CLrhHQ)KI7 z!PDZS!iV51xq=F6N!D^*V|}W&XRaw&(^I#?+S82K1Ea5B)oGW`4o#N<wqC4lIh zV`adU3oF`kp^htAIh(*YGPK57Vcjpip?!INb%o{vQSEVW}n{-RG z<8p@X%W)xuakhM5{Ihx`fu6Lya!4j%SdT4U5OzX9kb|qT6gAgilpF zFkERtx;$NJrfsGgO4k_@OYDp+6GCppv^>~r9UgQAr{LQt{o$d`gOsm{3VBPAot0B( z#Bi1mHE+eHpBogHl!qPm@5U}D6DzYcht;x_l>PJddx})Reh-YkKUM7-^mY*2@X#po z#l+UXIy^WU?+=dp*I;S(dSEji-2>%8j)2XjC`eJ?;ep9+tG_l@>#lubpCI=Kq=?*R ze7&N(^-f-m-9#p=LAFsk&}y05H9X6E6D?24k&&yat<|rc<-a(V72on}O32C&Iij%O zEiox5WN9Hg%c@zXQ$J=|Bm00>)#tMk7CjxntEPNdWXnHm9}JSWZ>rn!;;>txE(4ak zX#qyEBWb@Eh#D^D~#$7QI5_FRMRl&YW?n;Aa;-foc0-Ci(P*vamm3$X zvB_iEf%Ka-DSAsNtp~39w`Lw6pz?2a?zUY0KYBF&H80K^hpW>`o@xxH&b+b`qWZ_^~OLE*(tVFZ2VDmh>mpW0;COI{IB;G9B5zhJN z`CHFuB6p;QTdWex^=fe(V%Ee~{hi{soCKO>)S`*BQ_8(LiGNb%@*N zcr1C9@(k~UO&%EK6TX~|yIXgB zi*z&feKKOxvu2VlPz7{l2UYAE*_vz{Vb0vUUNFun>O>WB&0#OO<*V$y^~MgS0^SOS z$s)6b>>`jf&n$ysYcSmHiVmtUi)j15XB9EfVn*rLU=(xyobc8ToJo@RsEp_+g=BIF zg95&hfQ))k&5$)ASB{qR28JZn2tlWb6A8rN%Dc0i zz5)F_w=s2p)x#d<6dUR5_{5NqYVt?b*jA86yW%(~spJDfRic)#IB4LjSwKQyLsY<+ zv=S66vAT~136fBqWR_#wxTCV<{o{{#=@Z5^exbG0+MpipuJ@n7%S}YwnPq>7+)AV2 zWS<_;)-Wnuvaiaep=fW13J9ZyyfGF9G#?qXm_hfL^kBsLFG3aXNWJ>e@{Vq8kYvF|g;G$<$vv;gZxm)}s4^=lGage&$Mnb=k z6itK_n@cQ~$RY-?wUQ;piI%?krBsq7C8^i>bZS9!i|4X&!m?SvXj_Uk*=t^`IhCm+ zV$)?T_vWVVE3JrBPIGVN97-%<67~dti(Ejk7%~r#Oo5bHr&J0gn(|Y6R+%pVLT3|S zBQs>7EZI*xGz>dcpk?ax5@v#Z%G&Bl%(8FqNeHoJyPd8yO`brd!)Jpiw1JbwG_jYl zxSF5>{zjaJFZD3b;tHk7g&W^V$4RS*Yimc+ErtNH zEh!f2(u1x&Cz8QY*rh0CO;@$#;AP81hwn^y*(POx)K^U!xs|1Wwk`RMJ;#7cc)9qE z1#)ZVaBrc=5~%y`Bg++d{^HV_+4InH;GOg|SP|bxPhq}vV70^OTdIRB^Xd2B!Bx@) zG_*sAAr&gOrTlCK_^f)%@~?gc`38Rn6k7QdF-Eb%QuP6O&~vM)L3FH3+GJ%A1L;J7 zTKL@~^sx;94Sku_F-&wqO{|%NbPdpv9$e0@^c;C$PdTpE*!D0r9C56C78Ye<3-7|x zoA37Y&R&K%hcF_MJ8t5@SfGgz1<7H>quM$5mOILra{IE}hThQW&z4MK?-V1AR7)mn(LXANN*BofBY}9hxPl+e zbmh(wO25}RfPd*#NOx`mFh-Lj9QC#_!N)Hqdg#)86vC3Vm1P%=az2H%_HLk~UNQ~K zB+8s=`D+bnFP~f|&BXc7;tWUzj*CF2_%O6HS^ds&r+Cwr8Zp~fS=Mp0tikiZTKu15 zO)^h6bLXdmUXOuT)1Q&NP8F)dT3D8@CstjIJw*jjoGuD0?JZ-WrnkxL_o_cKkk~nx zd?P^nCLF(lv&K7UaQ~5iq=Kw<<3yc$`vW6pZC5vZRxxZF3kczj3w*Z|-(g_MX<*oS zTYTuz?^VvW48kg#{>8{4hfeYq>aN+??>uVXf>gltGN z7TcXlPZD&kC@sTYH z*wRo^u3#~BLiRAAH(x}|gYPdQ_>qnPuI+KXWI>cUg7R>uxh$Y`gCkQDMWn{Bq^8^GQtP5czX|>fbC! za>CED!#RPaX2xH?+kXORul`ORlK1k(ol3(8RcKfs4s~hviH>syv7UqvfQ0vIT)0w5 z7@V4I=-p*;dLIY`pT>DhYUv+sHywGX)A0c$d=bSw3@K#v#{JFl2vyQ3NcQZo%thD; zL$qHqkFRU|BDG7rwVG-f9lZhm?x!?Rrxegx=I%0xx}_ z{zfNiR}MeVb|&md3^b2J$6ta2#EIM}MoaFz5W&!4@!vR&PZ>&XIQ9XV^NX+X*Dryk zK~#4kn{EVsN8K0p)Q3ov$nU<2P(=FIh&oEkcI3D5Z$1tNZ0au{>kk)DAU>!OAsPySc10boKmhIk7UU0ozcl0$;7Z|BSH?l!+tC* zOn?mlEN;)?iPnR?81h+`7Ef@35UL4rM}raDS<$VAY!3KE8i{4!46*RFTB#7x&Xsmv z*AE&q^(ySuKt#cQd@&nwH(XUXS<|T!m>d&JlXG73gQj>n!~($21+y=R+@N8co>r~q zf|Scx*5%A;6YMN)=$`m_#6s`Rat3_@EdM0OtcGACGN-fUrUXO2$(%&FSVkO}kr69o z!^ZVXU2|C=`)Dw4pTR8D_M^$HDarmc05mi5B+eCX1)&L_Wt#}GqTnJoCm_JA}3>k~V4$0)1R3g29?l5b!AT*FPh zayx9uBo~xF=oz=i33PdDyl)_3*2{$_#N9c}-7<7TycJL{Zz&s4^~|NAzX--owYC!n z4?Wmes{sg|fUQP(FK`%B9Q=%5_&DGe2mU~2HnosALL2#8T!SG&P4OqCt@D;7qV0j^ zcuv0n_n=oic`(pocWLZ)=%5flhK17UgxU5MVb-z~Oi-WkZac`cmP0&pWGP)*Cu)-x zub*N)n-MIWS+KtiDBb(D|m(glhTo4$sLxMB8BqzK5Cwv)BhQkj1*E<^Qw)*{H zC;q?Jd!jDNNx#2~y|bE6#A2L8=us0#tRHYu_FU!e+8+4NQ_GB z*DUIMXAr`CP96GAYW8X=H7#mG{Dwa_rx5v&fDRYa29zYDmTv#qaDUiMOhHy_4tiCn zHKjGNKm3J;1trN|SJEvZ0CYPr8+-a7=y!E6t0~$&SL=%%ROm!_X70G4u^7n6v8T~3 z)qzf?&W$~0D9~lAD<3{yPi^o_*#T?bV!^g3AG15#52zeOXbbGkiIAQYc|cdU0*6lG zWspSvaG@??-byOhR83a|0z`h?0w;og5n5nOm%5HDxZ`h8iik-XCqoDY&U}h)I;ZT&Xp?6}5Ct()!KW&^&EG%E$gW{;x0e(m8nMo7NQp*I3U4S`*f4U& zwL z_=hsE0%z<8lToM;BSU%wyNp= zzvZFmpYTG9m1aBtRwrb=xNqm}+zl|Ym;nQ+G;H_!?cTxnV0^OwKI{$PPu722*F?t@ zsNdfo>W1wXgN)qq8z;J8OtOD)2tpdp>9)K(|CYiPE_GePF^$OZ(pp!CLE45Bx4w7ysP zFwCQ$ArdG%!OvgYVPt*bM*Jsa3_8Jib!$(k|5q@j z3#fYG1jq*@5muC{jwY}A`CJMX3k>OG37Oj)(G8aq5lS;=%R=0IuZ|#19rNf5 zdh`W7`hseAEPO%QDIAJHW_&^Y4fui{{XqXSKhU7i57e*b2ilIE$TKsyG9SeD!{{-6 z-tMDbYO6}-65nNz!DJ*#JrRW2{Q13kk~VZXWju9kZ!tF%lv(et3GA43Z*vH04jmTL zc|oHP8x*W0B8-T-X>5|P1r2|PLBy0XCuI8%A~6hb=QBh5xQkx@DQ<{({IOAQ5}&k; z=M+0WQic{eH-4~W_^eEtEVCusxSPXC76ILey$2K)xMRHx%IVC@WkA+tPbKtPQ0N&B z`~(&vhbJrLAg4ak_di5;>p8Fw99ZY-hlw2Ofg8R_rBKJBP*8pfy%hF`@99N+mL}vl zGBm`{P{VYA1I%0hGIOs!I4uzMgdpUTSL?pm;u3(LF84Id$A4dj7Wrv^`VJ_xAOG7v~PvI%mI-dO0@B>-|6jQ9Q z7XBCLqy(R;i%b4$@flxU;ivY4He|D5SmY&JpS@Qf#N#Y+bZLrZzi5i9Kb`~-{J#onee z8$Yr2nr+JGgnQ5Rmg&AAtI!rNy_@rI)Fk25+S14R6T7lRTOrZe)dfON0Sj=Rro>LEnbEU2 z?rft^wL;CXQEKhlfkbLMIu3aRkEtIs(GOh&l8VVxu@sulkybRB&ILkED%8$Y660@_ zK1!RNvCAMDtJ<8C*Yt%dy3$B=(sDf7HBoU4znFgaF+3+^9mtqFSGY)4tC}_hrHEQ> zkO9S=bgNu1FDECS-H+4mK;T;7JV2GOMe8_Tug90>Fx6f3)Q9NOREJ5VouS~!()$DU zRa?+6Is~z;vkihczJYzt4EhAY?m3j#t3r9(P)H5F@R9(l2Xv?@FN~NNn(%~^T^9*f z*psqB+Wgz;7Xv#*Pf$+cOEwbn_EUI65ud6O%ib_TVcPJC@e}{o&V0y!J2K3S7)CVj zgg3N4Hp25Fu>W1oyFI79Gza5$f3O&~ZR^HtFP5WT*R)0p%bM58XGtCt0RWp)4A;}- z^8l33kh=8g)N(xcnY8011G1BeHjeR|>Dg=nSpr3%FqUkG zxB7-}r9cCBLi=t68BbqJ@Z$6}Zcn2FCY1Ruk7>(X6dvyxTBSDz`|Li-V__FKzofW+ zfX;p*6cCCL6t`RIksTaw8Yz*O4+bd-4-*B?exAqouv2Quxg83#bE-UBR9_M_G*m0E z8%h8vB}MuMeM$nIFK?2f1wV&&x+6eqpc|bWCRHhW8*2 zAVZfcS3claT&E-5rqrCULZc?Q?<5EJjETJNQOwg@vPW9|N~%mcezAm6zYiLVCdc?c zWKU4uJC#*-h!)iI*DVoE%k}u>(j`ia1q5G@=-zY)1jpr<%+s-=Ln^)NVG>#58ll*y zt%!OTw{7k*7^3*7cbK!FeSBEZ>RclBl{2|H%}iZVBo1bvC;qeyW}C6Z%CR ztgk8%;(I0b*AxY#(bV0L1%w)UuzwuvAO9lzhtv)8tRIOj=|4(YthPqz(Fy;hMvm({ z|G^0Im$Z)Y>S;B$!|$UJ2}cM7xgta^PA}9aQ%r6vAFu*!<{5K2 z4#eZ!VK$ikk$TcVA*Q+jsb(W<+EY>tJCO=BLF!B1~)~ zd&V{#J|u{bUGq-9+(PE>tM;q62`z>$U+*P+mYH<~!?^IQ%xGmARp#uz3rrL2o~)*=DqU~YheLoSfN zS6HQdbmB^+4NL2Z=a8$KI$r#vsE_2?`R~>0cmcK2DQFsPm%V>~TK@WoHAzQ4r;r0k zv#U;%83n>q5S?iKm}AOOisV9Lu_giUo6uCt2)fBMv*%Kqp!sVe;3>Y%#?_cL4S-QlitL-7PWwejkSqe6P%}7^DkN6l5wSGpOa$Kh6hFRijn*O9u3A3|F!? zcI0gFKB6f4b-yt1GJb(`AjgJXfZr5zhy?etjOIg-?fhe9M4gqAda7U8JE}pF3_*To9YqFhK&0HWgwIrU!iqIMkg6eJd}W+<%7X0i7nxVo+CH( zU%|D!nsfKz_2i0 zJg$DbD1LFy#_|S3MI(48#X?WwrP)+j$s~Iy1AFE}b$OpiU6J&|^#*i?{iI)eEUoSq zkOFTGHIU@5z#E1C4E7-vO5|@rGnlOUY;S(CCNjx{z$@Ba0XmLbDQ>TERwX&BpnI^s zuw#7iCEyJQe|WeMNABXmoOShr9tOPVZ!dQee})xz^Ysk$4Getm8{OH4BG+F1{s=g& zZrXx3{-fR9s%Lv~_9hj(mR_>?oY+UqYRZu_Fwx>TMd8_vng1%S)uBS)?{^`^2|UD% zCI0@UTdNT+F7@&*2K~!tQ!Fv^Y7U_#SsG?B=7J4Iq}a{}hwBnZoxg+MQGU&s*J8m$ z_IeC-3{k|pv=@`;`$BIQc<|whXIz`NIhdo?{{4Nv_u^7;xUO07>}#vlwqU!ABR8Om z+LxgBZ>)1sRaMWw`Mf*LT?jWitc)qU_}c(I!A>|I4p5htPN!b#Pgp!S^RzQj8$JS605t4CyO*XsFrfc@^kpPLiPLdd_J?q_3{gHj~1Q$8%fw2S)?sW zWkP<6Fj{94O)?bIE#aX}Xb-kN*jtGG-2b(=8b(ek;RZptB(ws`jx0=Ni#NkoM*T`K zr*=LQ5dBm?W$-9Es-=&j_j{kZb9{l$vs}T9nW0XZzK;$Fyr2whvn2DO`JC7UcD_HjKtM57inyr>cAy@zLIHAO4640y&wr?L$u22FIv9I|+N|DFgKj zw4gyQyr`|FI2Z$(Ea}jc2?u}q^oZ%Y00tSw(X$7)08^iY2S|A(MO3HGSE0c{AiK=@ zXtZ7LhYVl0XH_*Kid!cMDY3Nvy5!)*+v>Fni;o=0X(X@p_^gMUKT`n6#RBnYev+v~ zTC$&6L&(ByBrqc}f&d{sm>i}yijhML7A5D7JwF#9C03!ATFZc=IK1ls_oo;xWEh*C zrE<)gi$hf0F z3i;-*%4wCM$DEWZEUfLHpQtqcUOd)8lObYV@#Xh_;}O83_>`8{w#l z3taflWp<=fTJCtaczFy%n+uPnqNVr+xf0SK*BKfjE>qH|G8rxVFU9~J7I+_&C1&ZSv1xn2#+_GWW|gIWkg^jT=Wk=X72 z316HpGpXcPn=?=XTw1uEDg!!I$69txQ0euAt)K~wFOm*3s0Qu}>x&LGpW{GNE2reJ zJKniiFN=1Dl~CnqjPTT?hP`v>Mvy0Q;=I@U`r6ePXVIEW(I^{A&iutXmL1zFl4Q{A zA>BzlL*?aKtvFx&n(`}RtalU(?OlAU>BGHyulub1WG;49pMg@;h7HfXdrq@mauD^rVEE8ITS%h=CNo&N zK2y8`uAXQ5`}VK7aa;EexNh!m$mTbno|dh{K@UT2g?a3m*)k8e7q^$PISb2Z?RG4R2~?v)KNJ|*g%scHPrB>{Xy(>} zi7|7Lrhz#G^-q>=du&%`CP|Y#cR}vK8N+(nB%nUM<;!BcMYl?<;cvKf+VrP?UHaP$ zXTTVW2^O?(0f-FyU3vpk$JUUPw}a5Slh8fi@t%RGfHi!)K}p_?aN4Kho~!45s9mRM zZQQD0Qjhd`ud6~x$=kgAA2WztqvpWX5d`>Hsp3e{phT$K52k(HhheDeoww+%Qp8R@ z-G>qA2txcXzvlYMAo^#$D>&>`PY`QI`DA4A9bN6|tl$INmAl5mGNm=VT^~HRfEFd> zBmbQEt)jqrR-|O8quk|TFRR0k7V-d%$pg~Z)$1vFOV(;AKDU4I|g8-lV zFhjLsv$Ub0sRvoM55+J(Vn&?Q5@O1}7xO%k=(oJi83;#gd5+NqzN#nP7^!cm(zS|U z1X3!~G1a;u?;ixAKuM!m25&Ln_>TC0E@EJbThJK8P9Z1|{0AshE3zv1Cg;F3!Z_p$ z)Fr8kzhH{070r+ZXhY@@ryk|RL)F>}2LUJo2>1)sJ{SY@q{J0aM2`3T2CDN4!?dpIo?@yH}l% zI9Sug@QGfH^1$++$pYhhj6so*a=-Jcb2_!p>?z;>Z~OY_(csY z*Js`l_5GahV%=|qvFk-j<+7w&^D#QlCMowE8WaEE^JBMENs&xqBfDq zug+a{aQUD&qf@GWS>q?hHy3I3rQCaa7n1y@oiaNr^GQziJW$it zmv&S$jjhQ}MZL$r^LTE&Fe5DYl;xYh5A{h_Ty7eve+~WKAFo$~v!))c-LU4Uux6Ll z9xYfm&R=j%;u>vAvK^x!^LE@7Xs=y>4~A|5|8^A2!MA5NM6RVDr)KccHP(8~oE>f7Cg>;o|{8j3fKK?|H_o)Oy_ ze1d?9Ydyswm>00b;&XWx9PQ`gxx%VO@(pc;ldls{z5h>AUe>{*Xn=GNGR-O z#ziwQoNx4}6xBN`i`#4_qVc7fYFyb!!gpi5MQ)qL<)#{x8U!JrKf7;@o%c4M{nTy7 zq&mJ(`PSCd&1+|F;8KoaoZses^F{4eqnjy)LAS2*5Go7&cHH+8Va8u>T=)sBthRU$ zj^(Lm55&T^)jqX>e^7GtqlK;q{laV5mWwkRT`y&opSiBbF&OU$FdFMj!!&Z$0~9Xv zG>VZ?3&h!g66M|2z|+kytKXN>hi{hR06l$TZiSNkSt$@#b&Jv7?I;R|Yz5(nz9|oy z_DKHc?}Ee<0@y#b#hWDOr&lX*doUQ?gSj|G!A=Tz1>L34hX$4dZ%<)t82=56y?~!5 zUi)~)02C4o6)_5lMz+c4kQ!ld8Ozm2v{_G>IZH1{e_|z+L4q zw7{AmH+Wq_Q40>W%eaZav9f(m==_8j3X}^zB(ss8RF=%%T#&1u(V7$0e^^++vvl{uL~rf!lqp!D z|CCh`<_-;O@ zA%A~0B|kO@NeXC-JCqL)?npQYmhzfbqpdRS6Rs&|$GBCj-X3WBs$gh0!Ltei5sY+E z1ZTXok(lTlQ23Wa2YV%@TK{bQwjwO8bWLxA@quITu5kD`So zfey?`rva6oukv`AQMIYZ9t`<|ADhv;n;n3JeI?=8-Xch~s2?C;_5m-Ctx)(&cw;!qn0IIv6P?4w!s~Dba1LpOPVc zw1d7i$rn`F{NuGWmuJl-;#grar)ZC5hYyN5Z(7T=RoEwPH6YjL)%7MXG zfF_-X7_DnI@rM)30vUeO`GhY8wXc6UH##d8O{RJJ{s@i7p7Un46l`9RwcNS6f5>X! zT%^BrYALFcwlRVg`|qbZUrvXFXtPN++tQ>^m)$UTxBG1}G;s~ZO9~G)hPw4jQi;5@jt-;m8c?k0;T&w8WFY{5@_W{E2g=IN9 zYgRSQe84$TEE7$Z=+->w7az}^^JoRfuQ?c&bOg!bT?~A3f-v*d*yFHt%%kqZ_EVbr z0^7vcKc!W~8f&fq`R@v0ZnhwQz#afzW}i1&>;KGeEYr8zjOvS~7>Ve$CQF;`lQ|kCD^$f72T+#;@b$K|4fV zDyWj#2d8sWVxef$-kqSc9Q&SRUaWl>H;JhLaR?W7-)C!!f7TWgJ5N(>mrk1GPxyCo z1J;#d3rU3}hu$5v{dOW=KVaAKx~Bxk2$s_>4+Up=v6I@FWle za&Gn|HNKI=zI#zaG-*&-pv%NK;9Q|$Z;=!cc!i|^B1XC$xMGcKnI6(wcE|yl3*ijG z^QwZ*k5iLl$eyHxWx(?7z@I{EQQRZQtrfG)6=)RRAz1>*aAy=9h0Eljb-mjILmkq3 z_O`T}ibe2ZK*W#|W#;|CvG{RtG=?nWG6jGq!H@OiggFl!xjj;2Q%@Y~Kk}hq3A|V= zUx1n9^PtNYG-^Z7Um$T$SjfnH7PJxMIAF;}gya0q!~ITXQ91G@0rEi@!`>=Vm4?qd zmlKXx)NyY`@6WlUb~!Cptn>JEj>FE={%wZPAfwhYe-FnmR^?#`Et_L zqXTt0cJ!nfy=l+P{4;Y^qoIFU<)q^xsnt&F42mcw{7E+U^=Hvmw*md<)lk#swGf8r zZMC#p1Q)L?EPu(6UFPPDCI+gxQvIluN+hK;cnzJF{~icyoo~lAuAyHqTyPF3wgRit z&XW#CqEMTK|2V(A-7a*wvhqj$>Xa&z8s#VemGmoJ`7Mfeb?N+T+lg5va$;qTwRWK9 z`)5(dP|9Xh(oZ_-ScX*u%cM}k`cH|zsu(`UE&NAe#&rJ?rheHPO(qfNrYWqhrp!x*Eh4cUXROKKFu;}UTn?j+=H6rs2p z!^OY~aqp3QjtT_#_jF~fZ&LHJ9wy;a1g}9Qc{bX1!P_(U1lw zCX;F1JTqT@K26ug>IQ&P`*B_t2)0uqB6Da8m1FR$UF3XJlP&({1sFGh`l)^ zdVKn*pe^fR7Kt$gl|T_zGh{%6AEtQ{{yl-2TLGBE!nzLr1T>PD}-E_;0tFu z6g16F46lC^msCfcP7UM>PULNEPz4gkNCHCbp=_DA)3~dss_WRmxl@Sr5`(jWPU-Di zet;k#=P|O2?2OFmBDn$xmUzufkcAxJ4QM&16@P=MS_Pu3kawt(G(mV>w}F5N%Md3M z+q*ugEIa_{b7El{oDx}OM0Ton$(-ve{oTfkY2W=b@z-GAT{jt>;YxyoCX>evG?zGj zJ@@c@jimmP=_U*j8cE1c=+305T8z{EvAuv918wy_WsL7`^>lOb#lk-~lhlhk?(5ziD8lF7@IL`mWGPonn! zZlNa`E5QiuE=})suYPFJ)AE|M>V}z!97yHxLVO6t*_lekk)`~|B9XL)NhMB3G_)-k zQ}iO7L~xbRfweRKPEfGv`U!BiE`Y3ky%j@ujS5>NLnnk$K*Aa2&n}>bd@(t z8N1;VpU6*=i!QIaW` zp?g&|D&}f?Qqs}|NSs54o6$4w!70>9^>g}ozP}cYDcnOV)vP%P8ABt?Mr7j4s81*J zbNG~vsk4VFFK1-pY_k1q4v5r)ey>i<#HLt1sBLz`>)l-|S#e^TRxkNcRjOIxl8#rk zz$cihZK{{*k*Ctw(c0A8b>T!dU$4LbtIOI@fN0X!X2Kb^w)`Blwv?(=m$EC?rnNN~ zCNE3Yl-4dymXGP8OYcE4_f;t!6qUx9r*^KI6F^O4d$(tvyIv)HOTG{}-)JyAX2Qno z@6U7gzS(h~h=~=V9J|I=9L5fk_d~|&$}_VrbF<~urug>?t;AS>ZcEg4JN$kN|1^WC~gF3Aj zP0{t|ljY6qPx7ZMW=Xm(qd4uv2qBR3(@eQE&#}Ms(e^V{%*s?WHGwAkcx(DUHr3i_ z)kEvnc+=+Hrc(uJr3qKr9BKcQ;jl|Tc$~?|$pXyy%UcP`-75Ic)hTN}GY~SgZ~NSS zKRSaJL9++yG$u91?2UXRbK7Hdd#B^Za_2d|()-OKt%s?u&>!Mnm4eaMC~E~2O<@a5 z`@|(L@Q)e8YE%$8JF0;?38Rm8Rdz^Qi>mLfyr)8Em~tuG8F6BlZzIH5&+1L7-CeTO z+*drop*)5v_?9121%rP+R2nY;3&>-M;cn=WZ3^-5419L5qN&UROK6e7pg{UpqjBY* ztnj(}orIzBO}&%wMI!Q?B1rBw^{) zz0j^ea>UqaT()YrFlI}<2j$3hjQWrT!<(N6Z6O|ekx2#DW7lBJgwP*I`v{@D1ZPwW z4H`~1`W%+^nB5MH>d+YS{+nxum2epA4J@%7fJn&TXN5mVnRD333pYmKlXEcid_U>- z2^t5TEj)0fE-7SXsNDJ11in_jv|yHQMSl*1W^$}Y*T~u)A^m|urCZbRdN=XKiN%Xa zBo3v3j&Erumu2c>q7~Omx%me!S)wVJMna?VFHJiKW9cLVYwxtoGJk!|p>YW0VV#dF zcHoeQX*QZs@=8lK8f!`rvfVuoSxJJOWCxOxaFq4K`fpTCRzI%a&bv9jBuk1W_ivw% z4^Iamyj^2ys5aS(JG|pX%rnxd-uTDsRrJB(RM{D{PkWXQm_}IJte4ceq4@o2H3LI^ zvmHUjbopjdZb7y}UeJ8JCj1P=*61V~WS1l;2iYVhsHX*ZP^C|M`0OMaP+V5EU#eC2} zY+%c9Fb`kPj{V|nAIjoY&iCXLZP%Dh)?S-^F;lPT$(nKqP#I(6F>sM?btWHMKokPI ziD%UB73Pc}3b`w~La}XXyg?Y`;RZ2Tv8bTV*1RaV3K7MDVlz6em~jX@;-dZVWi9{v z-ISZv|IWE5*OMu~$4h;&A_uHI;k4I=K0%ur zQu88nnz;@oqbc=57i%btM&LR*1w6jODA08~qt6H{{Y^Aa{R)EJeA7KC`PD$u4_@9* z1S6{z9dgO_JP$*-DpHNEjVW8Z z;1w@&!B4$Q!$)jYdJ-lx583rd=juLo|IlPmwgRlt^a3s8q?M=w`Em4gQ_rYh4)M%J zAEhEozLNVTmZPmBtO(bsFYF-vR%=QI9#->;JXM8=#0X%XH#l2!{pGMW1cbT5a^(3k z+!_wx*OkQ_ek`|{#s_?KJ&~3auz+ILXFW+)0&EU}vX94fGqMYB#-Ii3TDeQkaoZ4$ zCOh}g$NRiL0(N`Zl_UTHDK{?JJ`xe$s0=j$qA)G)CidIK&@_cNs} z;uzPXf@>6}!~$i22J}@ZTY-vR+%v%*Gs7mvmgN;Uw9?)<>FyhNdy$^*x`mc!hj`}l z@;Sbzt$W?(O1~9R=c8LgvbH*yV`gY~d4Bhg-v<=SY~=CPHZ@ZEj7a^-o527f8!>hZ z(A;}e(d>=x54Ts_8m;NCpOFT%lbyp+c=rl*UD9GJNK?O`I8*eFJP&=wpDK-msLY^C zgEU%aiYTRKkUGQen_5gS+2iO#X6&Ne0?1HNHZnyKvwDJO3RilS)sBo=Llw3`ZbSY1 zaX+?zwKDx}s5BC=G~-H(X(Q_N*hhYL;ON^V%a8yLxH(uQF)b#KYYG!*q6oBBBo0^~ z)Fkx`6-C7ib~Q*eEkHMwsROiNNT^mvv%^Rf;5L<3EJybr>=l9=Tl|Myotne?9HBu! zg<#CapN3v8Ua5L+fR8~=0UtU#C)Im?yEa2O;^~^)mre?^@3M9tHbB7b8B{TWk{?Vd zR~ScXBe!Onc8LS^iaYGYU3YWu;D^b$gaXA-_9C@;e$3g*$vV@4|6(y%y80Dl5^K}m z-H`PP=d`ioB-coEbj#PyS@65`eThD{@xkAFd~=Hp?voao&_l}A*RBUG2nkL#64*Fk zL{@Fn6lsw|jiABmpx@;r+GPAEO-8=!UI?k})kk3K+p+VB^jigdeMB)Sq+aQ#SNHQzlnalDLZpRY} zs@7{5?O?ReNo1T?DxQeaJL~nS1D}CGpPrLQPZyMVQ3vNO@xmN-2EBMt1P@zQu*lDL zW`jil7=MGWjB8qzh6J!6pm@Pbp`{x1EuJOk(C zwrP^xz3~*ziVOfU)u;%RaIT@O85V5ZftxD1fU08d3+mQ|V-SxgrtDP8FhWzBpD%-P zAy7ushz*P22}1N$cB90(HpLNzkmS`w_XuJJ(~D0EMrt`yR_c>SWasHBc^zWc&=xOF zQVhgsg}~?qZ;5^%h%8n?cuai{NCni$L^r!^(7-qcvS_SyI^?K(d41|Uw&xA7;ki$% zpM_gf;?ym_Lpe(lvfr_&DEKN+8mngWx#a}{-Q&jSoPJgAS@WR^WlaiijWrK+>{l-M zv?i6?B1UcV>6LF4Caf1UHyQGKaWU{Q9yuS)z!Nb7V^Eow6bkp+-N^{HJBjE%j81%} zb*~a0Y(U=Vn(e;)(mypzLCkfB5-HM~u^1`R^X`>AoBX@U%jV`ib6!E<1kif?6_#3nt<=@mgK=F+`YHm``Hzf zG;%+(^I8-w_h83g`W6*AGflchFc%&?ygS3~>J<(cljQeyb=b&`y(%6aUd+Aw%KV}o z_Pir-y*1E;z8G-Ry^ZXe^Q#9DrZi}+%!A}VAyExm>`!mMIO!jd4D5Y>FNacfc+%dq z4R-~l@7qbI_dvaS?v(o*5fR?*E&7@2#LKZ=D-cJ2Ij|e>lgj3g8BU&6o_&RAzH{>L zP~AD6$;NISQ{DP+fJt0iD`v&+MB-(vDbmwtVg*{;QN+p;BQVq3 ze)YhlEcyGc*5BL1XF|Y7Wct0lPO1JGecf;4{Knqd5e_mqb0W$Iyr4_g_TVHK4-~8Y z3F^WYJbhlQcA#+yG|ma+IBIl<1q*kU&e^PX%z)+2g0VY{!nEK}N;m{gjJf6x{#Ru=-xdKt+sc|uMk(GqgAoFR|+uB-GlNP3_Ug>g^ttBh* zJ|Zv#1j*e1)1vAf#w9E}0uWXQuUnSNmWb(1j^|10gcBCsJPdlp&tLR^CATqhJVC|o zvxhWUYImMR_`%dC<>$2MPvQUl3QRztrSD}`IL)tcG2_RCG<(xe$15^A!dK9CI!k>D ziOZcTSHe5j90r~#e&vU>&My}y1sdJ6ajKwF5;ySMi4sv>`quz&>Vb|cH7W%x_J_g& z1D8;BEEck`KSudWoVplh;!>xYAtGeK>DWMh_y_=&YW;$tB0N%`58R_We?hX*OQQQv z>J6`SEj@7u?81WNaXL76I`~O)q5e}GasKCyglu(>hmFl4%L}uiVH{Zy!cq7##%rzR zGcGKh;TBwDW6CdBfo#1)m8ZR|WNQpY&9P8n74k_fyWbFX1>Qg43B6FT>+o=lYGk}8 zpeC^;=#JOpj^N5g`0#*g6F}9#%}?-1#?^dMM**rT`P=3GRtDh{T2pvCiQ~^~D5b5Y zf+d&8#I{2lQk-CyHxn1uDU+f<*Xi<%TrxE?ThM)P%BNMEvzMzml|M^sij0{X#{p7% zJ>%u7t6W^VtrdRH1QIc8RXGQ$SE2nCi!Do2S;v&4BHpB$1mmWy2$CHyf{jVHJrkPz zc!=6sJ^_UOs1=-4a3pTtlv}dHIr%@^g!`h~7qV3=)seGIr)2|rhTFgK0?@rWCDyJ{U7$P%;_~Cyr>I1F`o@w<2AAtl$D; ze}vBn>hXERlv`N_2{#x8Zdm-WZM$Hll-ox>8x5%q3g2s*ssq#mU=63wovRrWL&``X z+?bBn(+xa@e`~d&x;_Ky1rZ)*6>ngFG9g49t7aiZ(g=r0 zP>YJO`+6P|G_Hf8p(Ri zfhMjt`NTIICiavgrC17}-U^`D50psH7&xi-`;iOKF|Cj0j555pW%EOimyPLU>s=P&TW$ zvJZRGfbl%S;Ch?q>WfmqeGXm3+!9p{OlRk@YNnOLLsAyy2ZKyH+#aO!t z)r1^sX#odlYx#v}llfskqo!wDJ|MeY6@H!(Jc#8G2ztJl-#-sOK2>8TQxeuaDDd%d z`|)@JidunVJm|tLGtz6U|YZNq7hVJRk$jvlM!T9X%NE`sbKvZ#Wh*sScdY@Gf!bV*jF!sjwER=Y8d}jn9d=O*dm!SIqOLtYffKk}>JQHvA zi>L+|&Lq6zjl5_&f1D}}W#cq(MjCVf>Pk8oN)VFBVbuv7Z{6<;LP-`B3=Ief2ny(? zfJ&*ZfLoOx7zjuR5(o(U$Ls25Ze`El=-}dNXJl_+X76t0>|k$aX78Gs!fZdx1Sejv zY&i$r1fJW2F4b0q1eNIoHJw5uBe6sTsNW`6p>kvUF7BI9e6z>GVDomNu{hv7N>$zm z=g!X68pK3v{@0W36OEgC*9FbGdp?e=C+!ijh(P$aak=0H_BO=sI%QxM2ZGtlIf43? z$^BOjbMBxKp?xJ{^iv)Utq5xI-*bi|Nm)A~eN=)#SyjZl!c&Go?47-eu7WsEfio2@ zSMcYW)9$L-!EZ_g4YHpsgRz(nWxHzd3ds;~sSDJ41QQbs3lTw@u7mn3n8qVjZDGa% zra#Z$=u{$A0i_5c`lN+r02N&nzx94a^++`hX&l^CDRVVO0!Tgk)U6_*AgfWf3Lz6( z@|2^7n@s7kiV18A*{mFj8D9l#Q~QZkne}LhkmB8FbzQOCH^u!dYnA%yucudVC0Sq) zL7@LN>RTC8dMYBoKs3b2KqNq9KjZ#i8_|C(5Ri+RiJP;TiKUUfg&DxX*~Z+~0broa z%uUZqFDcAm?c!h$^WS}efv|vp@b7#T##VuuqPR!@tF4S=`cM0RYd&SLj2<-u0VS*Th7@+?FeC)2M diff --git a/R20-1 postman collection.zip b/R20-1 postman collection.zip deleted file mode 100644 index cdf2363a521c8b7a2a02db1b7fb3d4a6ec91ca22..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 119493 zcmV)8K*qmNO9KQH0000804ZM>Q7nfsGQ9@@0C6-803rYY0CQzyb#i56Xkl(=Wp{6K zYi4Y3cVAL6FfB1HM?o%Xb8l|!9cypnMDVXz{ZK%VS44F?`S8o?Xu zucZ})P*&(Ktyf1j$pQua`zls;w>5+e_&Z|1WA-~?zj}uQItRKO=#|j5SUC2~z*pLZ z=ejgiP)K1nNnx+0_tlHJGA%c>L)$7YrI#$F-_i$=g8)Mgj5sjnz=Q$a4hM7&bUD!D zK%WBx4h%Uk;=q^#lL~coL(9K6W+ip(C+j$9^?+;&=p5*BpvQpB z43jk!6JR0spNpFvmMU7hnXcGzy)XV(Q^8W@NrG0G7d=Hq4;W(Nh z-v^%*QZY_aF=-8;A1E;5z?cIQ1`InK&^gfMK!x@awBNl%X)Y#tk|bI0w1&`f3>pY% zD4>ym#saD^f00akW&xcKj(2A`1@sZ*DFXG@2pWt*x`4U@>ItaAWR_$(-mH`=Jw+9a zL1-)n4Fxn3&{&<8cLDTcF#+8a0ln4;1{8(H9RcYA>I$eQpuT_x0vZZvB%rZ?)O)(5 z2E9}b`mG7j%^+PsB|PcE@s=hE*uZnF;v)O0A_uJrGzNqE0vZTtD4>ym#sZp@khTm$ zZ(iD$gA`dq828W=9MmOP(imTPbHgrc`C+QO5nwLiG_O6w)V?$v!=05@Xp|~o3mlhgWS zy}&z$me!O|ZCb(1w-@*X-cOfjH--;Hg+To2w7oo=-uY*-T&LRGM@w6}Hc+G4WMOx2 z1BdbMwGduJ(qdNp2c+);1DNCGdt<(EEROau3>U#^yRA>UC;D)FqMzvPfH2b;VW!WX z|8(zo&uwF2vloE9?OO{kutU#(X-8GywjRB`rHyvW8!bZ18!K2qdQ1Br5&&7Up8ZaT z)GpTg&jza7P_+4?nU(`BW1i5&`l-g&_;vuVT-!3mi(kE^W_p_Ih1#P59lNl6#(lNW zV?7!##tt8~tFHutYe@CCVLRA~8lVR6K8Rpz}Vc7Tvw25{P z|3(nNJxWAIX`fWfw}4O}DOE1%xL{$;uqRER;)IQ{?>!So)B=YDj5}s3p+W*~m%alq z@5X=r5j5Ri-TeFSI(_-iKd~_f$O`)QC}RRkVMZv00sZLVgKsY10%ug4pCG?N7~ZY7 zFt6h8-_M=s^nJI0#N0+QRa!%!nA{#2d`erb%R<(dk^Wdw?Pfji%L&YFan%8ql;Ze5+W~s#(!$ zc5zgu68#@EA{CJs5T<)enC@*mWFI2FgF%3EwlQN?KD%yW~ zwoCf?XX}o8J%Wh9Amz}ksaw4OH<=xy4R~O~9mN3$ja#tq#)(b+Iy=3`u zb(2gNFBjJ-Fl$WSYNiL$2$EB~2#Dt>WyM)-k`X9}K@LyFqFd%-9VaR`gCD3|@;%^^ zG$St&3BJKTO;#wSTG)$&MxbJ30Bv9m6@g0G7(bxOK;ls>oxM0?9AGM^KTW}A=~;!@ zJ!Mn7OrY|FD2REZ|oV*Xv2=?A7@GNJ~h~KulR8JNv7yg)_W@hO6Qj)b3uOn|4ZAHoJVT zN389NhqA3JarcVc`UCb+ifre3q6OOps|N)xT{E$KjHKHuZ)YVgG+5R5SrnTvlR@LJ zNGrlC(Drfh?OOqKJkSe`4ZS=kC~IU%%`+9OHO+w#Pb90X{pOLf4d)L`4nx?7282dh z`Yu*~>41|2pOU8XT<1l*_q};y_}b7~??2T#tve%-x2AP(Kz@xhlJ=R_Nfb7NVJr$u zV04%BJ5ni5#0g7Bf`tWT_B~7pR)EYbi`h6wj0~n*K8$vPh|jVAKf90}e+~D$OW83Q zbDs@5$7Gaz27#LD^5jRz%ZHuRFAdGL9)Oa+EjGGNq;3yo@C@^1K$1TY`1FO(U?=B%pS$iOPMqG}piI7tqr&?lN6hYzNV%*JzKDa99R zD3}u_iACejr4P2$mP--R6-{~Mo&u6papdE!FLaIKYOhD=rYhUpWMx@m#c{xz0JrTa zq*lVRDiW2JTsI(;HI5>sEVXLu(B!6t>LuYqr8$%_t%_)aZCZg^kt5ww?3Lui>$;XC zS0x(K+%t(b6%DMo2Nev|J=EA(SED{yDq-m++YX(f}%yzmhOI!%hjUxnmv~8#fk0w#V=JPEIn0QIe4&s>#f`xB;z8$_` z+G~v0a0m|mSOo=ddjE~iX+$vo>p&(s#jLv#>y+814N}`Zm#B4ube^+q>LM!z7OorekXz! zxZd;g^T~7X#Pc88pp@zDU%r3+*S-7)|@nsM*uW=GRkARK!J>Ar%98_T3d8KT(UhYM=Hg%sryVOv)u5J&0C z2JgnNwNE30ZNKNyjqi~iN!KK{>w}m-7jNJow!yG-m@?~M>zp!=@Z&qS`?TLP=38Ek zy`C(vSVyw4D-%m6x{M)}gG4)9xBu7NF@0}wYkJS_tpjGU{hmPVkkp@T7b>*ZlPItp z=}rIMb4`OTQ{lNSS2*5rtR$Yv>`f~tkD8$`UG?Flg`nc*;@n!!&-kp}JPetoJSt+zK{=Votoz~GrP>3#UZ zg3GtoP$%Ki_kkjaDFK`416T=IaFNW*t*3F&5Q>KFo^f*Y-6g3I>{n^l4e z6r1i6wf)!`M&t}6j)l2PNc4{IszG)idICp}%=fi;h7?0L$vgmA8V>7t$4cKEH&XKx zj%2Wrk=&!qNq19(q+1&YL>>k-C(Yu%DY7$B`eI|m@+6eeaOW#*=$w%jVb75)IXEd{ z%&RTxm_;aady;g-cZHb@iWFLMW?)6^kan11wyf(v{m)Qoe5Xb;GC)D0v7;YGEcUe6<5cMnFnTAt7)%NK9rSp5S^r1BZd_~7| z-k&Kp{jbQZ*Smgy9klEp%@B2+DIwt56x zZvEm$^}>2_WA#?5A}q4GH4(WO^rYGUB=$WhE7Le=4F{SXXJNYUT;XuVK1j0$Gb4`j|s>+p5Y@#Wc0j zX0xh$TsOCOY^{B?$D7(;tFnu+$%rP>VgW^k)C+PeFF8*Q{| z`-7Es{H}~e347hhReEq;zILp%qj**975618?=oH)lX3}l7qA0;Swrm@rYb$bvZzb* zCZzwm!Xa1sf2l0}ccLBE<@dSmaG~4|Dx$D-P*uHdTh6XK{*F~d8S}7&rL|3oRB^S zA^Y@%_)!Q7S$joU)8{CpPg2M^OCjAxS?4KaoT!j}rb7C;LP_z|>8G-TBLcsq&%4Ea z{w3}6>Uev_crPg41_np6hm%A{Z#Vv}!AQ|%CU?EY4=V5zYxmafUh$OjZ5=7G&9XC3 z$yQS98__y;?!em*=G5yl#?h_mOj|hEVgFrqm;=4zEYZPbx0Ws9;AT@oUN`Q&w`A>V zqpfRpZM4yeNCpw-NGgpmS9buqXit@9J%g~P%K=fUqWsIVkb<3vdh-RmRa4C zwFMX4!DDvtm~F>nR@tPa;^C^>Al8J(Y;XKtjd`sOKB^DhM^%qU>fnE>YDVrQwtTGO zfcn}BVXIG!KQY5?Xj{Qi+y*R@hY_Rg!na!Romd;Rpd2*X$BzAEX($HoJn!if!rj>x zb(C}TL&(XX0sK$fob!E6Y`$#E(R3^7TWYs%s$A+|;?1n2VW%7~d0m+H!4&K=kIRl; zgHuS>zIeLyT6({sZ;VDVNOf-)J~tZ0!0FnIXD6%VDmX+tZvOMe(Xl0{Q2i1?lYZ5@ z72e7kqR4ih)lq8&NoDzO`weo948fb-@yUezdFj#q{g$5i(tY|%BsoL=z%>3}OaqKu zIddxZC6jXgQY(8{Z#}#>%iaT1tH#uZr5`L&j$YwkWOnzB4aUtRF}^6OmCu}Dz2w16 z3T>R5SNAYdZ`qi($Z=o+J-&w!Q-DRzCW{WpWq?X2v+GF%E&gwxRlm)vMmSM$or!%BK4^vtDQHUpffoy%5S#0i3pDXADYaDx@~a=)8;A zB!%6&a8AVy*wg6DIK%lejZGF}e9WY0(`Lxp6^Bt1!SbB4rea`gRvh+e{gi2A6-jm_ zvOiBAx5dqEg?QpElb6~bptgS8OQTaV%3qGYOk4A=NRoYD-bDtUs-p>b_qg8u3J0#; z7}pj{De-tmH&j&RjS34anXkg`i+INM<05mSB6alzTh6t?n8?jXL^dDaUqduxl~~BU zYm<@vTZrr5RKGP;t8F&e*UT%w%k5UjPKboT>DqdZ2%xGKrgjl)P9&%?;`mC+&eGW9 zNZR$Ika>(|ww@%EQIDJvkJ6-i*l|2+l^BY(Fk2DN%Y>1#mGh8xa;>mD+BJos8G57&c3gRLp}jrfQ}rh4sXFE60;(tQNO%w9Ua>sj$cdQ)Q|BQnJ8g zL~iD**w+A}Drzj=G8Ju^jid- zww=?I(HC2c8r_f~U{cp1{S2{$!Fa(*oWX)25w|<`4+Q!)N$6W*ye209IH2Ns`O^L{MFX= zuTXw|C9ACM6m#;$no90kolkqV?eBwLqLfEYvO1MP&9gc-qg9GX{#W#qE_LS+qX1-Tr zgu@D`XqEOpR)SWe8nUc@EswjH?vQz=TG)kBWcy0-6A^RGyHx|*>u}Dm7a~w<>Ch*& zm^##`tP-$LM_@vO{&dlR^|YTNm6aUenL8_ToZY29>$QwdIWFsrJrIecb$^|u+yGJT zC_Xrs56)#3t@>cOQP`vkHC zE}25!1({oca@@#iU-339MgOsPt-F!aQ215m7Z<5zciL^aXaJRhPz96~6vPh@8ainS z%p}WXx~mEy@gVSWJPAH_9LJ6?$FVa>X7huxlh`M|9v`2}cOsdJt3=hlkw7OW5hHv zEoM3fG{?ZR_+USKarq45_&52*zKzV%$34hMV|lo4qbMUp6vxrlmWZYzIG(rY2>dyp z#ZuBE8o6J8&Zl;NPN84NdQD#Ab3*v3XeY11$!oAHsZF~DJW^w)5p>2FXT$H1P)%45 zL${ycv%~QdB&7|42u4;sleM}HmBF5(eJ0Uw-*6J3lNwKZIL#XB^NC zjoaF^rQPjAv2RWMGhltj;GdDD>46%MCf*dlo8FD&;S8bDd&pbRJ>M8T<}^Yj7K}Ju zDT||qQRA_vyMc_J8>|qWhUZQqYeyn$41zLqgc84sY4Q|wrsuI|!>lDdm%fjlbmvU|kn2X-B^O+9PJtylk zHlqxStoTOTsK}@780iQv5OTUg1cY?IqJ2BQ`F_Nlg{4hoLkbfnQ^4@nb6oG1+xuk4 zNd;pvGs+ji+6C6Ec6tTY1|PKmtx(b(Y_c5p@m*qvtN;G~m#)w&iRGt-Sd9FV zThb@*m>0(pJmhrAznAnCSyo#zVe3awD&M8|WRK#=)jicwoF~Yn9;ZUjM3*C~=(mzQ+N@Pn*Q_+FZdKI{OMkrri_52Af?Dm zl7~q~>n5uPKvlCydC)-ECZjFf$wr9dK8m2nli&Ln%8Zu1Q6 z*Tw9uRq~SPPm*GH1R3yGtp4dcv#-R_)+7NPJH90Z>gnu1p&Yq96M@ZcmcJ9G`LG46 z85~oVsg*zTR(eOulyNw3zw=`T!^8>a8H^G=mbhkzJr?|#A7ym4l*7AT7bDa5^rP0t zOS%_|GdLq+ladr4oO*|im3Dc%ddmzcm4Vz)&Oj-+dd5XXm4Cu?`y-Q{Kq}R4BPM?5 z3X|Y-Th@NR?ghr*sjd>0Ob=xU6A(OTo0L+05IHj&3;jZ#HPd?+6=&O~_i46VHwF!E zD{ShRzPudC9eW}2IgG%7Az^YJ#jnVb|HL~F}OgLKih{=-ULC0musf}vJPJ(e+ zbO#LTPaVYsHr<^zR=sZ^KAG1+ljTPUDJU;_?kQ1 zg?kcXhB|A0Zwoi7-KkyMre`^^$5jX91(EnJswLD_EfYKlBg!&kEk#s;Q! zLe|wlgfV{5RPHyS+cAYrMyaZ2`!q*Y--KdnFKTU&uc0MC4tbyvZw&@2frD=F4KJ%H zp+mN;gy`8zS08Xg7q=N2XVcf9PNgwAeWY^FP68zzhm$6WSeWN zU2O9mpzEaf~UctP8F@3!2Tt1a9|OqYXk((Paz&qp;Hr~adX zYw-dj8Vu9gh-kP=S9lr`-2U(tg(HmN>Bm@xS(+%pIy69KY*B(9C;2F2PY~7- z#~6N@7Su}BkUWFf50^iGPVwwQ)Uj=EUJ4fk4IS}NkB4&s-aIv07#gyNcxBt?%Q)o= zWq8o>$r={oj_ai#t~M?M-AJ=)7Ciuc&SP)lYODyM+S(&@8YB0_x)INhPtPI+hB0Rz zu$+x?KQfCIa1`=J>Huo_cWRun?F?T;9;o96b=FjJ)Kgx07^q%Fcle)^*zkJg`$hB6P?JjhAWiDg>ELHEq6n3Y5;l90YBa zXX{50v^EJS!AXlZOZb(qYS*mGx)5fuMnIQA$xP_ot{+xR(NCG=j7S0NmF%haHM}TY z%7AFTrP8?`DW8!s;NpvWAn6<3;H;_n!;U=B(!SBi|LhwT65P7T$v_E`rfY+)88f38)cY4Smf1KosnI;PL|}s3GIEBlijn0wNFN6e*P4!6Wir2*~x;e*irCt zZbVEsFY@h<`s@o$h^bB!h0q0YciuEzG`Jzv0XH7gryTZ99T5rc&H{J`Wh<;ZUYJh4 z#okbVzbKDx_ES8lem9lgK%y#C|5@bU~t*ZP{u++jPuqFP*0t0rg}Q2|jZgw5MK7o|9x)!YSMhyrezd!b2#8UJ0F~qf>Sc>}zlfuk&i4L%~)l z@!A{r0POk3h`PYR=$J)NBE73FZo{~OMG@tvtK2xRa)*1ZGB%p4L->bSSMT!51?^~- z^W9bXsNHSz4IRog=^HQDh3y@qPHGt-N_&rvF=ag$j7TT6k`}e0R~{pDfs~gp19b$l zu!jXQ>aAMx;d5lUYv#Ed!5zDP9)CoS>4kJgAI`n`U3Y>!mmhD)%~*0oZ0E*h_Wpy$ z`B;T(b*)!h)%nWVg0@+o=;A95TsX4qAo!e#cR6?8XgO9?xwd3m zS|89`1Yb16hg>wjGNYF(h!x6TxnpqpbW$4x1A0G_cN;ewWRrNbUls$;9_Zi;L&Ied zQ|i>(;LWex1_+skw`Cz%@2}PG%X1K>?Wck2_XSO@fpMv^(+MVHCEq^Y+xKrg%a2Xb z+(nNF-LB@q`N_R~(K&6M89dxT(9u5$q(i3^XvEl_2e->P6TVsA$8d-~pxxfbvV-#4 z(+FN5j^bc595!~WtTxQ+Mn&>^xv{`sTt~6702QNMhwLiz_u-{5oxvDxlRqBPZL*Tf zK)2{;bcQbhi*K}piXug=0Lb{pl)nI@zRS@N3rcNp^9iWV(bmxJf92)N*SQ99im7fMB9Oy`u>flL5Ava+uV_wEuQujt1g3b z?bpbGEU+j*$nDyU8-Hu5F#q{Zv1OtOjB(U3b%{@-J7Ueac>es$tILaG%PrY{O!WL zhNCt51leeNTP$z;^_Pt+;>XI-@)ZbRk07GK%{#W2NoPX+7}OkPDiSiX@O(oDdeCw% zSp*oV7AwC73KH=I$d+bK4>=4|%-PkNC}S$!`U~|TIB7ow@Vh&)C4#Vl1!$3dB^%U` zIxNXX*9`G8=%PerZeQ6kV;~3|!hWZgDouvmD$2ew%Q5OMjM1o)Kj2@+aGa*SLy{8M zKa>M~r&d1ER9-w8>;X+0<~)v1BOS*A%8*X?Lq-T_PnzjeMxV+})fAc00V6{U?j#=k z`8kTyE!vS2>()y~D^jR&n?o?t3FUDj9rF3}tN~KgjJ70n4%jSCdN=TMNWLA?_6n0X z`8gm1_X#_KJ|=&d^_u*{(^h@6EYnrJ4z_91S+pfut&~z03H-Xq`4ylVG*Oy*yO{0@ zV>NGMSlgM?n2ibKtPuN~b3z&s4}+}*=Nh3n-6wBitO>=4;z(nMyt&SmAjPKGFnnQQ zxLc(<@q0heanZ>qdSsuZ^e@ACRu=+Rf*#fwV5!VMVn9{%$_p*RHxe zyV}*x=wBY|lnW5wM#>*ttl`}#=dKPw!2p>sF%~bzvZW*2|6KvcTG|T!!a=~eqlL_l z$9@@GDxH>l_`N}65OlU_TZ15v69YL4J5lY{7oK8&pZaoys(dKm1)*>S!2rLWV8eJ& z;RxWt-GKzh_0B{#(g)l(LMol^Qs%@~0Nj7YM>l{9u6|tY8OMKP`^dRRI|@Sjo!6f6A23BuZ5Q zIUA3PJxtEWCiL*)N#|kZd${$!AD)x`^JE8hp@Ax=l$z&&#k$qQTV*T7Qu`E6l@{#mBbDzhH~0YJchJGka(McHVK-vTY&+FVkxOsTMjHaZ87Y-kH-^5k)lOPqGUS} zie-sJ9m(SzA9ueyYQ>_qv&q)a1`{;vtF$jNWi#uR{rT)?wTcm6wtjZATZ@WX_Gftv zLDN6G*{xhY@f9DK<{39jNnS6Ca<7!NA)*gGui`zynZjzwpdPVYB2ju-pz|u%XElE* z>sRXa>6u=n$JsZbwh0JuqRsZ^GdBqJZfe4WBC5-XkmP>mIUpZ`P^P)P`Q7O#h4)es z4k1ALa@O{O5C`Es&+MYeigYxRD}LHqXl^U_{_;F&a7+8q4)H2wBd3^eW0*q2fZ)bg6L5Fj?? zEtXT?mIq^0$$>G_ToNewFxqt;9v$u?o5pZAj333OQLp*UR>5V(@>Uz0>Sb2a2$wi` z&vACJ3B-|f;$ZUGkDCC}u?3J3xFDq--CzoW;E+;&7(t}QY4jP_wN#PFzF-!FMAjBA z;VWME97W`BmuxFd*80^5yux#Xd~`6mfBCSz8DRtyf+SOg`hU1Hcu^lT@tYq{KKW6y zFRBl!LOLb%9Y0{I4*T-E%tozwwI-WWC^Vkm{zLc-nr*JhxD!VK3%s0wl@!Mc6NFWb zHrXs&(sI4#9og1AX`Bf;CV3ig($UV~rENWnzB5w}CBBEzkbpd(oR{Ib{}@b?Z!%Bh zZ(9WciLBS62dr0!FdpoAzx~>?!|=-YrsLpY3;?xi^9=Mwb=XS_r(z_Ge>M@e$?RcC z(bWJYCWPF+#(QP@h0wX1k5|LXi}T@!(b>>xcOucv9fPWKM_D`)vS_<@>>}z2d!U^k z+CvxZOM`8KCX&8z$Y6!hFJGhJ)!$SCN$b9R`O^FHqBmdM?~=40{oTLbzPTog!_3_Y zLe!hTztedH94B9yLu&a2h8e1wNAU%|y`(SCZ!YyzSJx)NgMhq~{A~jWgcX25GwSty zn@BTwfbaV~_=hyf6C>t|gRkwHZbTL!fDH}_rQh6`Q1Z40z5$m3EwptC{(;Tl>Hf$8qez0F#|U&6W}pAZ24> z_(u^3O8lgV;*c*>+&;yTz-q1K4l#Jobp zg6jBP9KS!h%Ag6-r*FyHqk2BVWD(@6+#^`7GT(n)ML7uNH!`6hRMQ8NG9BLksk^xM z7ZiX2WmP0Xk+mS5&e@yO>+3PFsFy2G7KGe05M}Y&un)pQCc!J5AWZBIHw)q)6NF1# z0rQE@vjz*e&_5zZj0u_?NUfuHH}6m1IM>5>ABOMfL-`rn7U(Ncs_Dea&8FTGCDnIu zPRM3=2)|`m>|z0o#X%~(D1%LymOsN{Ak$gHEz=Ts^jO4MV@i+*W3hl#Arr#Rh3^Tx z5T_^y%nzdB$!Xc}RL_sJPFP0;FxyLErqU+8mSU4--4j2SRF8f%00v#mW9E)zxkPv= z4FKgh4?wYGJ)w{Q$2lo$AEDpDmnjw{Yv_ zk{`8+8v<`-DG$W)&fuUCl+ZT18;abiTjNa?JrwObS6A21eXTg_kwaArDUikXG~j(L zb#~oA?`st-NU}MsyB}5ga1~BpV>j_?r>`DSa=h8I^kL(EVvw_Z2Of zj$<$I{+aoliz&irVJo>cSlh_$abqX9EZdftr|1$lp=jG9ZYGOA&VJ@#gDNjXts*0e8}jluxzMErMvGo!A_YhHz{*H>=oS-cqHQ;pqYg3iL=ZFPCdCXK zW|>^}MJ~hgJ^wBUeJ=rENMHsa zsDp7S@X{NP0KGy!gZ9FpBeh3A^yZ88<7l*)mYcO8sx_rA7Gg~{Cuuv4etOyW!DpGEoh0f{{VWiJ{S|U6zO13JAhLu*ZGm+ zQYq&2K8Mp3b9!6!c~`jSNl1;72P?=<^qaX5*5J6%3B0Hnc47q00>slBi>>?IvANo> zc%By8s9&7l;D5;}c7uRXyD!(@f?xT#HE%0`cRE|anOHPT3ScUjAR=3E*jg{xb*CP` zE<5QHr({^^_MCmzb!2Jr7_w0SDf5gxWXc!r5j-Eh8Qu(y0aL0Q!@?BUYAq9%?FFM* zgjMO;eyuacfr)}NgWrs(l<;!3Q{r*cH|?!lZS|k=yiHD<}(-<=UrN%A!Rns)lt;Cp3vUX@tZc?y1Y{(iaVVoBwJ3EEnCT#~1QAl*rT zw$3Mki$;9qDk`6pW?YGIo+jQZdd!N`yPF$HpKyA0^=5Q-dNaDb7?(+!+a20 zCZwyT>fnYb9As|x7i3{hy{bezE-x;IXQ^~<)f&4sMuUyo(bH7;*@Z&4gSV0Oenh7S zzGix@DyhM$R4#>+*>uM-DZPq7rvpP&4Y5}A?FbE%sgzWxDr9J>!wHwb@lek3c2 zyPU>9{Y;jXfK2VaJNd-W6Nyb1*dK%FhJNqK?!vLlC6eUlm)dX+V?g6Gp-5p5FIotJPAVd* zXQ*HxS@;bTEsB5~oddAZ^q6a~jP&Z4d?R}u7f=z@glGyE?#(~kajD-Q--oK>e`B^Ly9kXk7R8|n6MZF)`c^g1QjY$ZTa_2a>_I#4&eL{2IkX*ooS1E@s(OExK4{%Lu6k)RcBDt*yir%*tbH$g>`Vr^v)Gj=OR+JH&m{rh_*a z8ox507)mO+A%|F#>gMsBSkF{p*~Krx4nWzXqFeA5z6GG3>NE8V)(rg%$(YJHz%ePz z>#n{l`Ai%Q$(mQi%qmd~aWEKRI(4>ii2}5OdH!60X1G&UJP21b1{Wo)fVBtQzW$U{ z5T*60Z}vrRa%|Q>wRu@KCCdT6Y=*%*?`>`yxPFUael+ZLu$PHA!>~7%RZj?lOQY!6 zO1vVD4x`_)7B(RW?u4ia1iZoj*pncnPlAv=Nw#GWbIg9F3}Q2K+wAJ+*=3bk1*{tM zWnRG}6|<6k?S`;yKgY6oVv}ct+G?g9=XiF!1uT1!W7*QP$+D%lg)9?}KQhN&<~Syu zMl5hGAIB?4@ya2*EP%J5_)ArBnUm@7_5*fPC#2TzcpwJjTEKLeUY3q4dPKsTr^Jm2 z_+RoH+jR&z`U|fD2qx`@t(y8d?bU=i`cMC8vBvD!K>TZqxP^S(-zWVyI*=*T(gR^t zBKvZCyGArrtDthC`KqV@ymq|v{XZGszsg^4+bVbAe_^C;TjV+){k>lJ)@77#Mo=3Q z)6v!S@XR?~#-GRocD(DUK(NiSc<5P27ctC~_{j&W|@| zS3lX7-_AY$EX8-}wJ*N!&+UtE=h)tK@wMsLRy(8XXAoCxcUcwGE@WG3x5o`_15jz| zpIu`&Z9wKsyV#gun^Vi&~$1Ns7?9VV8iPyXrn>k9OtT!7zgZl#E z!_K$dlna?i!L~VkpT7S#=dD%yHZqo(C+?v|hG^JfVgYy-&ROP)EoN8YN%J{4WE1ym zRW`wi<{3C)RW4UGr*b>zI?mR9IcMwshB#ZbuACz&6Gok|W`J{%FKdN2!}rFK&7uc( zZDGym4E;UJ3$x_B`Y>nqlJ@TtDS?{`pKb&n1CNxg>S4@tr*KCQ__Nyk~DvJ_h?X#%9 z%`4yrV$wtv>>z3lc%3_lnpG!r2T^NAOic{b*5$Vm>FpqDn=Zv2M6JX4Y_a%u5VcNx z+Y#RmqSisw>NT>3Zgvngix9OAa8?Cy)+Ao+;-e9MOT>#YI?ml`Mx^emnCafcQr%jQ+w7vweD($&Ly{vM&U-3z=jd8yPBc%jBK?M*hp>OUCq!b zL0d{-(>>T-&9MCrM;r5(sV8oY-LxU1rrmsE+C8wqI<lk89^zU>M3|+}Q0I5ufty*Th zo_*YHyRB`eEO|O^=%?XNets;Y`gA=%mQi`io*&DoJY~<1Wf+L8|D(q;RymV{l9}wa zFq2Qr9lz83*${qtJi9smG(GQ+=VcPv;l9F$O5~1}R6U^IRLs=#bncxSX90S|SI|qh zdSAYDz9ebY9AGxtyV$lDmYzT7}&<&sFkYCEdyd`ednUw{C6?JxQ6qf~FTA z5W-4j2kdYKk^**{+jN$gY&uEWhc6omzUy%ZLtI4I4!aOoBwQ zo>7G8JT~w{8Texa!M1a&bDY7q<%0>P*m{4H{Y##yX(>FcW;A6sr`B_)ZO$x!uRgI= zC&GqZ0^yu9Db0>wl20T%!SC9;k&JlTy^d_?Kd$;yTpnJfm-`{dX~QLLI!<-VWChLq zwp|iIb+?A;ORHCgB>_0_oN^6~`xtTL#p}g}4pq@-XzZfp9S74&5|HADL$t{W$NnlA zLd7At?6Q+M$_mEMVESQtAbkL*5%t1IWI=~`G?e#;mE`VJz-@A931Pu%mtl-xl)GTd z?tJyDS=74&O?`Pv=r8sS%w__xNhWkT-O9g%7k6Zxl1c?&v5W-sBx`>q`o#^#NURRD_F=8!P3I{7iJ~&HE$F!3BnX2znYpmyIHMRE z6cA_9$Cz+KjhY9w)=VVX2`Uygiy4{vp~s?4oFstQqeMF=Cf1)F+gxa|?YrC-wA0x; zXkcM9SKe_fEwj1h1_2gCbaZis#NgZzUFXuzM>8qqyeG=)+2nt4Ea*D4AHW&8<6*2_fm5;rOCoLjwiIU}8=6MryNV)GyV=;JnDdrey%6 zE)0_iXc`5dPK+6%X=THyq1wL${;wvsK?5LlVVKNgQ^h=;8Z$(t%CV%M=NL=_Exo#2 znU`7EE-qPDOEop3Xz zX>TqZO_WCkm{ElIaA-PJK-am$mcUZq1Z-*7WJgeC!Qy8x@?-M=idX?4*5?KUKrty8 zh-`qSMpQP4?TE!mk8o*@WCaB$*Cb3t1(ouf9QutQOEOZTgl=!PqZK@0ka)Fd8dVo4 z8l(gaiokRnG;%QUDe!m+8DAvnh0HI!f)bv0tVHMWYO-+gAxa$pNG|1d8O5<*I8yyQ zN_6=1-%^^Q>RADOrV=@Jl0b+`xnE=cJ5i>9Nd+p*fdZ3N5-@K0wl>3E(J!{diu+RLYYlEIn-a$^z;;A3^DqX;0pa6Th&?8@6L z`ZZo@{E!j?oDOZvXM{4G07^i$zk0Wi0ELglG9Q9danRY`>vZ=YEn@E=wTQBA?@=Sm zi14uY7!XWRF+8FQr-Z%0a@z-5xzsVfFYL#HRo-ZtP0jTSfmO2Ov#J#+r5(yLcKsMq zR!yH!33N>kk{aHk{}+KR1Y*U5WCYzdaHC0X>T_DyNhN2L8I;=7?^tnP89}!V+-MP- zI=mKkQppo$2BmcR7qWV_yh-S5!B2K}qB_acDzf{lh82$DgGlrb!qIr{<-IGQS&W~Z zYR^tJ6BYSC=v1q$fmd>FrEZ;kQRcOAC=Pf#@5Hx{ogd$L4# zeW^3qpC!49O7Y$~$b%~N)=?cbpN8tOYk)o$$R0VljEbmG^~+`8L{(m*xcC$Yom8gj zVo>ZtRFz9&{US)e+mG#*Y%rzfmD(vnjLj=_{SouoRWz}b8aCYV`2S(qfPXCNpo-pT zQDH3VjCOU!meob8$_xOrr8Ks#H$If=XjMfo@29x}X-|i2U5$JwO>$Mrq&0oAqDol~ zX*7?MXi^`i@*dJe#!YujZt$i!V}sQx)dn|1j~1xQG3X-tYN&3K(~Rekb=<@m`z{pp zQ0>9aCg@2^;OKX{yW6N9&D;@+A;uxESCWoF`WaU=DXK}XOEvITPknv#Ssn7D^Q-?Ss{vqUfmS7cV=U}RLNRF92*w^572 zhO50%R(3~FFNs0UilX$3cZe>SMwLE_gW2K)yt_=r{^zF^%rUTvh_gJ z*XsOwwO`fz)na{*18t9@fm*2cNW`g~rCwh%O;UXUa zHiKz%WV|=NkI~pzDM-fmD1-rCu3(`lV5E6typ{syXDY#E+%pQt_lBUcDuYkR@dKW2 zOy|1)=a0XzMuFV^`Qz{0Vr<|k&yN#vglZ88Vm|5owFyKjTQUHZ&Hn}-GXFeQ|Ns2}g{z&6<+$4c?9>9I+7>VdUz*78~5a5!+;EsiM@4V|A!twIH z^Re?DQh@KGA2eY!cjMm$VF;kTLyVf`@K8!NXDfiy@O(nKo7KoJLk(a7tTrBDc54i?P+Z6)EKeyOvU% zeii*9kt1!mkkZU>4aS1UPmV*NAO#M-%2k?`c>=d4Ff+r7zCqTel7ld7WyM2i$<=6( z_OP)5yJ{%!qMvPB?!}m!zA;_ZV9#n-rH!XbP?jdw0IL_IIDt?Bvn}I z>Nx4hUBXYBesLjMIP-=`i8abE1+I>S9aPbCq_=o$_}-!ovn|A7<~gY6yuY#pC_#63re zqS_U`r0YZ@_&7rc_3Hre{?!f8`p%G=@nt4@R-v#HG<5vgESd>0K`3f+qyB8p?Cyj# ztyXb~AJF=Wd74zBH{>Y$b#q%3If^dLlO;Dz3n|k6>)D;gL5v}#;a&1tu1Ld#=+WET z*eA~tYbwS%je;;y8sU2JS;00L+W0|CjA+CoVQ2~PZ-sa3CTr16*n9Y|bQC{7Ug3Cpu$bVkad|X+{&T>h~N~N^}OV0A6IF3dE?w!#%ntLhb z6%{`=gYCRL(llkK@HgbX7Jc=e|4T5!+RRfg4cGbl?BoG1>@pOFuq)$e>~Ezr|B*bz z!~H!2Cq0cV#%(-=a|7DrL3h{h^!vN} zoxV5P?;PxRZ#q4HG}!46_V;!My|?rpVS|AfAhJCg9rX9yL8rI3d)w)|eYbPqfl%e$ z4to3j+mXM!eb5{cY;QEBSW!L2@-j27&~(=}jG(zCncbttNLM1|!z44qBcE07K>;wq znMK7DRzxE%v@xuPpij=fIy!sF8_;=i^zEfXFE#R}h?X0A0uh`$?kQn&C{d;Q^x0;9 z*{EXX01`b-FaltTGZjpL!U_Rsir~>N8vo^;N2dR@P%0CpU_3wgKyYLJHLJ;g`_POT zet--_ZfM55@(uCt9QmyR_E@Bj(uxSCJ8a9sllz^6Z3|b3xLHh=ImYyuKta-KB2__9 zvKP$&#p+FC-<^$K4}rY_QpWNaccw65>^OJxGGRAnDLfsckMB1Xn+~D+!uf{%si}{Z zB&6`1z+W94#%9ib^@?4=ff^z>e&)yXu`p!uPzt;TGxqVSAa~NbvzdGEyu01Gabw?m zZ&PndyFwj~R6jHsihfc$LiFh(&}RFlE4|oA^LcnQaes%%Cu!mizx8k6h;8l3hw2Dj zuW^)S-Rm_YK|y=?w|$fm)_B${Cz`lo0?gyi9rKzrzD?OYfcV}7cXxFADs(^>j04z# zoJtvyDQ)mPq7VFFc@2ky6GCT6@QY7ZSOgw?8-aCuc2D*N>~-eNjaYDi5Ive?0hjO(B6O*ZOBvIObnh)3^e~6q z5Ro&`zjf`(V_%^mOdVFsh3_yO3yMuz(~8K+wndpx*|g|2R@}Dri;1+NW;{71q}XT9 zE@DA9n~#sdmrLW?NhPrs2KHh8{a9R2`a-M2b1U-SQ0&!$YghQyc3H~edd(wGK0yzm zA7{aF%^%U?kgC`cc^i!(kv_F{+m?f`^eWa%DQF}J)4P71Q9h=8(GeVYYEBxXvvgpG z`uK36wV3qM7o`TBgB?p&ZvLu9wy=+s*6@fFOZN~a>1?Tb2FIT1^$ce0!~qPEMzQwG z^Q+<6R~P56u1-(b5hXrLCl~Lb!DWqhHjk+4hOBr_B$h@UYOg*7IgS@(_9f}of~fxW z<`UyPP2%yG!`vRFerpk5fzXwfbqKdW|t+0ss<$qm1U3rC;5i;U;ZzIzVm2% zN$gj8yA5V>vcW@kLyl6Al$z8Ag+pA99sNKM;fHww{UAr3P*H@C+6fA+&mQ~DkK!!7 z4e!}Bw~api3_)2%_K=Y&lWYo~a$sZ}p`{aB&H0dZZ;)}z_9qmMvfOv+@O)Sxy2*9P14)y)l7U+h4LyKcbc>0;f2U8^SF5+U0X>8=#yN9|qRu5wA) zE{et}!F4D~g-vck*Wos2Cya9SscOX`7)R(m_10M!UBWEL;d*L7ZfY27c9)efDA;!u8W8GX z%qT^ybnJ}zwe`y@X9M*_JW9}kaCyAxoM9?Gs!85sdZ&)6Z;-txNMIEy9{}Za@KU$w zaf_$M;%PG?$bm>9bHYGm31qw=Cf6F2(g`Rv9pav={gioO!PUGqRwLSi zsbN;mPlC`>F%fZEZkp2i>;l76XMRkfGpS`e=LSZCQNTDs68qy@o@+C@#R6yIV=!1; zqH_n+7fvu0#JTh$s$2aytHFx!Cg8WsUt#^(>!r!cYdNC9hC$!)`!Ub1)Gx+V^WDs$Pje)>yY|{^z--|M-kDX4=rE) zr4KyDm`wX_?7ovn?GX5n*|E&zM2bPr@qdNj_HD9y>Z?Q`+y~0)*QG3D3n=;28KM39 zI%1b6=%SVX8%s#<@x@i?tK3w&*nU}oI_%mnl?C8qG%#VNA?}7ZZz|>@6)jYgW&RpZ z={21q$?ESO3@IRA$sk0(aeLSYTTnNK9`a3}bM8%D4%T<3M*&roE!e}T()@@d!U zIH#N@arONPkO%#QubW*_Sp50Pwsm5+9li%k6x8% zHE)(}q zHL`8Bum}WrRm)%%`Kmv!*FFZ`h-1B8JG;1EtF;uieqMt?eVAIn8AjdhP4FHfTX}HI zLO+?f@lOn`-e9nq`~Sgl8wDORjh)^q(0FUJla=xdPh@^?fobHRKXZ;%|6Ig5dhp+a zqxQ@?o;>S7pIOk3tbvgKhr-6u%kNf1{7;waT&BFU=^|}>`Hay>-UHcFOT()TQ+;X_k7MP|v@%YkBoyAVn#9ar4ML>_pxEaP$F zPtWQ#O@R1nHf67dpP4>;4!lyhkx&Bsfx4Xq>(ddXPw_&eh^v5owN78m*S9IUjt=U$f7utT^ zhIKHU*lCR=c3?X_FcjEh?D_U2<009WbJ($+v&JxejV)7@L{St;kt1&_O25v5Gg%r$ z#{wR2z_ZvLmV8_Wn=Qg*;v8kJYyw`PBkUB+VoKo$1JX{KI*w!|GbV=DdPHmZ1c^z_ zO5XR}C)SJ38QUzGa8WGhIAkoT zBj_y+or&Oh$LS0vB{5hEJ|PAy50l6&0M&Pj`-T5(QK&Q=Si>>8uP}&}95gM9dM9!a z(}^zVBx@X}N*t=hp$y_sg1FL|Up+-Cx+D3jl7I>@i0LJuDUV7ZMDR3K($0I8b}}D> z>dA=R$pwGPV$8ANAl15`mOY zj|uHt0fv0_IfyfK11l>P0wWk?h^aZ6A0R{wG6zIA7PdC<0fWQ^Pl*=>*XDS1@`;E8 z6>wq;es7MtUm1^iuq>C>F$wU4$0;6A9M=74T2iihOuDWWgQAOZO26ec0p6nvlLfTo z_=hjP{p~%iHt6v4^Yhm8?w0F4Y=dh@efzibvm1yz(=#?@ZoT^r4Zb+UodrI_s7`_P zi;M0Qbh5~W&;&$JuXNYb5nZHsY$BYK`WD|_Q>vtAf|<6Yc>2H+Byi$z)G$3R)Fwhf z#ESr+i;`X2`AZMnIJF^6S|!xVxLQS82EqVxOlH7_C5k|I`I_X|Iz<`=7#tA>r@o{6 z@%@1rc$`ogTO6+;+gB5DLNFtiV&SN+GHeghf{gEyh@Zq2$4w)$M4N#?WVRs8b^bYu zdY{*{&xsN~N3a|OR^4_RJ3~HG5NTpmPi36dSul`~TA1!qUDF@qYyN0E@iP2~*CRfn zHF^{+P>D4yHu+=RSbh|DxyQYi-;X8jkGnfZ;|X7Wo=%Rk+Y}Wl1Nn-WwTcwrcYMYut1J9vm`TYd)N^j11cMS(s<@LE56n-pV&TPBWs>%v(p z0gjV-2 zbo?mZG=~qeJDMwdP#6-DB)&m}BRFR;Z<;c1VZTw|5p^ah>(z%Nj+MK1Sq>q&>*a{n zB|nL+u#Y$nG(;yPfgX+sKaLYb;5Ic=Aoe(v19-> z*vO&?fm9{2i6_whFtnY9g7cx)HhfB~Z#lk=*^p~8fGb8tK9nXvpAv;5ZCWp=BjazM z)o@?%Z3s991!TO82@LPS$gT8{V$z`HJIImNN(xSy5~2gEuS0J=#PRfrGk zZSm*lK1(5^0(%m|N>zH2s1?nE%qJc1w;vy-DKusUg^2G6({EdD>-%8P0U-;dqt8OL z@cCyE-eF|WB=^cJfhJE4yu4s!ksx?xIIwVGCzAB&IzxFlp6s~B6E@U%mW^q%4WUuy zXY3F#|4?e=E^?~c+_o44Y`*>$KE;ptVdE`T#NumXNh;>2!9=>`Dw8Qq-X6OTN*68& zV}O#HB$Gsm168?`U0uM;I;k&U65HmH=2-VAIA+lYSW)sC1&9m{`egeyr-xBh0zZE` z)dmjWE7-Nqy(JEO>S$yo)XXR`L@jEEM3UFA1;Zy7Np_1;@@l}Eyx+k1_ADV`f#iSEj^w_Xk3f=#i0A?~zr>$8uapZ2ro-TVy!h4tnzw3~ zpT0ddL1!D-c(}!%=Y|K?YW#8Xjo6{CF2;o1pn{{#{uYs=c4sZ5clk#aItRd# z!z0TSjv!nOC(w7hn6cW$N-`^roL5Wp;H}h&TYb_jf_}5l6OQg0cuoPwk%7@=kj!GPiP6x&d4ZJadEnzv1ydR5Dwn0jnsF*80}_4G2)lj||cQ|AC&AT8z2{g>Ib z;@Tpy*Z;19D)O039&0SuzXmLjluJn(^rpZl7J zT_ai`iy8r@EUJXy#RL%`k^!Omu(Dt7N~^BegN_Zzr%z? z(d(lGsg`NRSMP&xLn&v}25|7*ygKa!pJs%Wn?k7IQRE2q%1_{q5HhxkGWZ;q#Dpr_ zDsoXQg2B9B{*K!$Lk6BWni0ybBw1k|{x_2GWt(x8EzX`FCP^Ni z%Qc#s=9(DgUP+8nrXm{67?V5^P%V7a&cPBF69pu2Z?N4=J|}kw+ef*Gk9aMMmGXRJ zb?EkJ1|O3g@kAJ5dgyW@MK(MP=Vf2Z6ib{eUlzHu%~o{ObX7sV*(Z zpRuBjU*{C|+_AANYh zVUgIOqdFI^H0-l$F!midr1zT6{G$mOxeW|Yt;+Jl&*vZvr$tv#;K||Q~;m*k#sRu>(Qn@D_W1aDCMFE3yi^c@g9AfRarOrcuGyg zJpkHW*SE|>1sHf$$Cp9HSEgTeVsY?rq|^J?6M}!78+|Yyb}eK{B@%OLC~0VyB`It? zvgRkmDGvnEC&LLuE!&A-tJ@;4k7Lv18%-Wv-bbeB*-&>h1Q-Sbk>hXAY==&>plS(R z?-l1?-m}1uqs#$am-&FkTtc+W{6SucAP&rABPC`D2j~Ij6IYI$TVGP63|>}C{3c%r z4x_+k8+Nt$5w;mi20^=Wq5W4z219d4sy)O7ZNiSaT3uCvL|<;>eX<8Dh<#1|@O+8! z6_#0#cCjp`NIrZ%x_%kr=%(XSv(@w+U8as6g|3;20 zhV<}pLHYrpeIkTTa;Ya2X_|J}FttythVxn5%DXt|5XKGNl&$hO8FHA1QB z_APcL8ONA22YpFZNS379oV5azKC3sPeTYZRb_74+>6qir5|Uy1=2AvlhSVY>&j6GE#3Bq2BV&0Nke(yQk>+k{CV(&hprh-S#Oy%&8#}UyrwbO2o=ii%5%N z;Jw=HRUsM(kEwC53*;0d%!xbWERzwq%%;hmh}7`#hyX(v5#7}QK-)lx6COo7Uvx1+ zCDWq}r@8Tabv|7=p*&hyB3>q~h2rrXG$f*>bhh?QX=-rRnfa?=AzX|)T-qmANFkod z3@WD{zgrrU=&%Z$k<4Tom6dh;IwzyQVtpw*>4(0T$Jb-IzS3k_ynj_x;`2~$E5kdA zXOEsRm4Pc@=D^0YD7qP=Y3-l8C1pAgw^`bxf$Ed$X-(2U<&~vbnS@SxXre&@vS%z64$IMpqDnq2GMx$bcE6NCYE?0*4#R)Kf0y|=a zjk2_n>=SA5Da@!Q}T6z7ujkv5Fg6&$vnfl-wAsFudMP6`Eoh-lQez#}q1-!Xk)n`EI? zQu1qLnBz(elA}l^YVtFzo9vro1xS`l*|#s?R5r?L%|U4dy~#!O4hyz^l-9 z)1ldB1Zx6bUww7q2C#fiJ6cQavI^X@q%pcC>jcJMmXF8gwq;rlQXwqu_*ZgPe_~aR zV$%A8+x?MKjaCB~3X+FnkK@BW_$&e6d__p00m=O?M z;bAZ&qtoGAcP%E4=(aBP-?NaFa}3&u=weNNB2|^otcUf){1#h#=(;VVD-psb+lJ@a ztl4@tJX1P;*gj*0O`2{Du?QFr@{{cjxTYVf!H|lt2VF6;g8PLdD^1VPx{1mTW$kb( zdQDkmk?#q>WHU�)CK`#{2{10yilv~~`On6##dKp{RloS1ze=Fmd3Yjufq;TuvH z$-u$5YvS?`lT2_^7b@z=XZ=F$QIrcJ+^9t+A78^mh}%(npQXtMAdqL{Rd4^*uTd;{ z`b!4O@Qj*9LBx?ofi*zZhDO;GCH~Mk(iE&bw_^b9Sh}b={6z12ZpZFgu&n$Sz2&~( zAG!)hc?1*yBgoZ#y-@-CZ35Q6SH+_#8M_@vn4zs{Yy*4l4YO25P%C z0FEX;xPsL$2I)thMo?Y%p@IMsf&SI@;D?CKc>|-~eiT0$N?7qi&f4+Wnch74xp@PB zUR|A?Hc#~1Oa1ubcR=Ly=JxvZhflZg?5ES~=C4q_+Y>;>(S>-+Rd3}k`XgT??xiOc)+>S?d0(biMb@P`h?*Ni_f=h0kN2`MZ$rmjJm zfRN9lM?!fVUWkaR$l-4o_3~ElEI7Q~?)7ys$Td0Ik~R75Aoh}s#L>^79eX!0!ygI< z^UEHCY#hw%w{@j2Ku$?KR5FinojsY8Bxm$ENmWGHJ=a6tOU6Vdaggj-Y!!>+zkmJ( z5V6lbhvRh^Xv+eA%QTR5p5*}MVY{+T*lYV3*$L!9#kZ4h&)6mmJ0CoZVEnf%97gtH z#014$UZ!DeFqeSJz-o5D22BWHSWAALID4^-E%fUR4pM z@>sz=!L1;M^)Q}-z@KgQpcNy_?R799vN^B_GX^|xY&h9Cc*X(Qwj0Uaj?3`)%g7|0 zDYz3K>`{*d=GijRBhJ)>J2G=(ChINKOwSYr_1NTzHBT-tnq-BgN9noBpei3;wiO$0 zyy0Q9?Fx=&N`x&0QXs$<4>m_sI=;C%{rRGKk~F}RHrg0{JXxh+o^vr>zh{R;KSx#qhW3u^}YSg z_SZ)JoBa>_jf0(ow>dG!S(ocKqnUR+b_&pSF#u~aq2tQ1zfpinun7eA&mh)s-kpEF z2XSX1GTV;6d%v*`Es%PD9rs$5P1 zZ&77ZN?CiEq^z>yMg__dCIQ`Vi<``c=x3i48{Vl9RaO~K-FJO_@pDtpn>4X1<%o*F zB|NCj-;U3(&YC(6ZZ))pO3<&`j&ApPWOujdziLbimFPhB5{~Kq7X4QVhFQwFSb|oi z{PR5y##&RrdY^~hrI=o+AS)H*G-aiNtW=QYm6Zyz|E{;(Y0F9lnX|08QGs%@3eq36 zfG8^+WSM1L2YJ!Ftu&AY%Y+898qGrG{YIs5EVHCty$5&Oc~Bes`&-ffmF6*1xz>88 zY0FCUxNhZIbZ(`{aw$iAIZwl=6T>)X-l_{fmxs;m6MU^Y1GcK!KYYJHJ)6lyV(kq4H`&KAU zTUH9lNIIdrtAv`gzB$+@f&2`(0p%rHK54val(b7%i+V{@-nH#S@FZ1bD?*B=h{ zJNs>G-&)duWQ!`-T3&mXovwt`wJTL2^}2a}dG}tU4^(n$wz85_D>=2i@_+V@v^jMf z_*Yau^q2vHIg*fGLjy0RO&~)^JDt*D1Qx`tv8j*dW!n7r?n)N6IgNoP1(m)HSi37} zwOXyDm8|^K-Qb*`dU07ir=!bqu2>qJ=gNAelB2Am<<7MdE$F4Z)SGHzFPrRI}s7Szpi-)a+Qzj<<$t zcDyB2v*X?1-0b*#P%RY-bd;-(sw`Ko7PQ>uusY0X16mo5E{lV6t*U0n@87dOG(74` zzt3sWzTim?D=O4TIjP$~<)kVnb$?Kub)25`kh?AHWt4eN1=k`&PUIx3dGJQM3US{Oj6Yj(+FLoCQ`e+L=Dk*M;N4-F_ zEj&qK9Cf9Sd%kj#1Fl*kR7-^0K($1umI(I;)jsxaaBd&FO7+Vsg#hnrWi-l_FIhQ9 z%dC_eT$C=TRxK9GjH-R?)A83%veL>)JvykIROO^@1C^7ioYeh6wU0eL=^=MpsP?f_ z!u9*uo|%isQkJl5bT^|d-l*aXM?Po9-Pc_<4IQfxDCTex+`jpRjsjZ1JxRd@dl2W@Jpj==r zDIso#%A-pHW2>utcvY*br?b#_l9fJ+%Bg#bcZF|SsQ)DMy=Ib%87Eqs`1;kEr+)*$ zK|lv4`vxA1fBrWe2GeEBW#o>zE*&%X>Z>!KCzcC^E7E;p1ctA_44vu3GlqXKkLWgY ziDi3)pLNNv#r5FjuyX{&u!sk!L*H?j z&2yMgZ}=1@ATN9&%E+{zLtekwJ{eLA@rO^;8Z%Dt7d8DkwgWb#K1j}hLb=3YRL|L# z`4V!fO|dFWj}gnKXB~#?J^`h|=s^_0Rg9dvx zJnR9Gf!HkzX+K08N_L_<-}H=Y-VJUX+n;izP$jT;i;aTiRw0ffnY-BZHmN;4G;dms zIx20w-Ds8<)62DpJsmrXC<3pYQU@z+_^C+(n#g#pivv9#G=D$c+ zxuBnrprg>~lu-xR+Ya&u-Lfsn(Xe=w_#wS5Oj&Y-k-N|K{tURV;2 z5N3|%{EL(Y$7g{&te_6IsKc3fEc;LJ7^zS#0-JReXw}!)vQh_47$lg^a~AdbT3nk> zu%f&a*NxlT{$0D?{Ls9vb(`%LvQ1foHxT_pxBu9zi|oar%w5EfFA|XK7t1GluT<|V z@_EoKM!->&BTEJb@6*JW36DV$vz&PG`4__ciE(i<^o(V>C;ArygXQq7YzwWSKgFS!n`YtMkZarWDCG14Ek~$6 zF)T2w4)ttDXd#e-o?1gW?v#YF#r#Q70Nu9O%um6Qg%Jw>e9HuBgV(1AX2V5}(%qrH zXHR&Q(l>v^2pX=GD3*W^M25ropav4~UIdf-PW!&m>He}qpW#Z(wfvuYsN?@Uh^{_U zMoK!UI(N~g6JyGJ%k5B(g|R?rd}zlP%s6*(9=Ze+d9FK36U0noYy_jAuJk~R?BhNJ z$Ljua-`JsDC9<^H(i@U`(`{e3Z}-XHc09qm-RbVY_tA3wDKcZi?YoK#Bj)Yk;Np;h z?F&D5>@Y9}yp=5iOqlaY3|%hwW4nqaYf+F;gSl(uV5j3MZ~3MvN}VSSt`QXK=^CB^ zhRA>iW9EqTOg1yJO`SQJt4tBzwg$f)`V75=)u~6};om*02OBnMqi{h}{PZFLBTypg z+QBB6Oy=ctLyGWW{F%3~!3&l?{!XEOK$eXX8Jy2WxfFXUI$SK#(sK`WF-+J&y=*y!>iS1uOy9M#H|-0&Q3 zMyOm=ikF4U*FY#+=C&wvv7O%U2ZYPndNaIm^Y{bkyKw``oBQeRyqwcCEvFUwrCw%{ z{&fjY(b{pLEvC}qc!DzXn52_dCS5du%3ihmxkHmxc&-jl;SuOU6P+)720-Uwd;`lH9 zCA6Xd^Zdbki?N;WUy<%{Kn)jV*|E)D7i!2|=8b~psKGQN`WmeybO|W=3%HhP*UApC z7zVo>bJcr+<0aj;UGWni4j@h<$*?X19+CJYUdZ1l~HBLDvZ0$TeZ=?n?fwRAAf5keB=FIT4Nt$7hgV0 zI9+lRyw77YvX}Ow z>5uh&X?lv8$NUyq{HypP{&4ULJJ`Ns!p`-R=S|(Kv$Mbdeqay*$V6OYzj^=qdgk&c zA_7Ln1fS8V5lc7|aUw2oFmxpH*wj4>f(g%XM;w#zZxfOsUl5qdc<*fLxStM>3_aLb z&uJyxT%R!S$;M~*kKN2`_V3ISqdIe3cv6GV&8c^V(O+gTy*c~cg`RE!9qJ(9beQKm zmP;rxVF>3j#-fa5@IqWh9S9|yQU{PdWSWKU%)=m&8IU(cpd`eGIxiS_;QAOYI`U02 z@I7ML#9=OkfVwJ_K{*JNj8YIbb?^pAoC>=DqWG#tbc(C7Eg6}*~!q> z8HC4}kS8O>LV-uZh;)&+NRt6wk>K@vS+Ou`-Ow>Yf``~x{$#+MAnaO}j6xls>}LyO z=b~CbezmzwsL9WLxIVWkf>-b(&S{Pyh_7XiAesGKOEkuiT0y|S5-5spf*-b;M1-?4 zz3IN36|bs9ql} z?-hCAyk&#CBF-yB6#?~#%0v6`=O(_Mosg?(bxHdO^xe-(ziz= zmw6m*XhSZ9KS#Zs+J-ex#8Iw-9xlv~$*i&W6vvaD_7RVnkcKcIvfE124D*J(c7B=H z^4gXrS+w!DhW@qoX%N2KZ1o{L?55Lrc*u4d7>U=YCp`M1!RZYVIFG_*7MQR|NE{gT zF*O4bN_FOec7R6iF|O0|&m zSWzMDqX{e3s%1(0M=VCC#WSegLJ((`G#;*Nw>$=VRUXpTY|7!b{d1PI+MT=FZI*oB zy!jqP)qy$#|5dE#yUAh>u@f-{SSDS+yL*BE$mi^19>$=&rsZKI(!wCUYY|vCGAunZ zs);@(f;roFHE3fQ{x=^+cK|0uX#8d`qa5`zZW?L4j2k@m#rS~Ygf78wXgfL|t!#Oq zN=FZa#|i%WcSgh$USaHE7FU6glgB=KfWs_2&jAI(Q%l(lgb_iSp+nKOCqsMPOh<~Y zT1rx0VWj;{)EFZq;W78M7X7S8SA=%+C|u7**T*r~Uu;pT;`|gUDJWJ)yT}!}KV-rq zCyDPP{VaSSBm<)f{0$z78jDEr;89SMVAO<%hd0(*;5rw%(~N&bc<5Q_ObR5Sp)NyJ z7W_{>TtY=6X9@B%^al@E#1qLg6(QEb!!@jc&vF(*cs!2{Y?kGffIE)P%X0`12@UaZ z0I;G#&$CA&-WtP;BXyOQN?>K@4p@*Z;qF1~=uMUf5rIaKa#cFY)>n@+fzAf^Z3Cnkh00$VHz1)M4fgur-_Wy z2Oc6WGK3=Gm}m`6ACTY-$^?c?(z2gPN3?R5JO}eP9B9Eb^8 zQfcLcj}j!2lf)%?03xn_B(QcVW_m~)Ejc>dvM%U+80=Yc5=%?&oF9u^(W1I_(Q@E` z2yqdvc%R7@4Lg7^Ut74tUj^s1J^ZSF^Vqo+hqyg`AI6u2C&Fb8?Z+;xKg=>&e;HFR z!&#-jwMj1Bcmd9dQy$%#QP<&9gt%xtnQ7}DJt1*@g$F1zn#q;njE)}fzj zrY=F$i`aVLNOx6ul|JZ5B{Y~SU*+*13B zg=(rc*cXhdYkSJ9z(GuFzV`*udh51@1rt|jym4vVKaA;=>F=dD=sNGe|LqHk^1a*Q zz4tD;E$n52-37Ljqw`iUEdFi|-&?`BPls#0|GNtCdH4IZC)>iHLjRc~@mBCC8f#m) zct{p6Me2)-mHO|)dwDB3o6?+DPxA#D@yXZ8Y60GU*T>uM-iN>XR*%*=4h>-xv|iMFCJFpsy+P{G zP#Nzil$XmY^PLn*i75lVBUIXU02rGlHe20B2QEZabH#(e$Q)8r@=Xubh`b9_X7m6s zW=89+2W3GI0wWf*s04ff*vs%co5Rqs=jZ4A*tW+e%Ma~|QtN|2IGbjd%hrLWF{@{{t?L1$(%onwCUMm#T!qFk1+9lWlDmQo+sI2P&V0<;}sB|3sm!o1W@hn zt4Y)f7<-YQT7*gpV`5YL{5wLWatDAa9Q1Gy()nq|nor#U@LMP^^rEDf!?y#TZU++1KLfZMb3Ee>q}HwCl- zoDJZffVt$DIyJ+(Ue))shaTF3 zgsh3Ixrx}6T{bn>l#;Q6nG)Kc<`jbC_06{Zsm-$Pm{tYXcs{nNux!e!a?qxHol~$V z!P2F-ZQJJAwr$(S*|u%lwr$(CZQJO7RuYu~RC5Z$PTgcv1JYEULluk(Z>GeV?9b}FC?%L# zU|};?V(1~!meM)dD2Od83tat54QO3aL}fr0(L@09kDf+~cc9@!E z(Oj3hm2P`ky97!-fs66fzyx|Jee!OBa7;Rp6-o;29LT!t@kKJ&w)bvWH$I>+g!!r& zpJ4q@?$?{df|O`X4dn^lXHWduLlYLOe@pI63}WcVR_vkt4I9>`=k)Y->+Rh?AOa=~ z`(isnDAC8(<8YmTP>$zZSo>%CaKk)_Q3y=%qFnY%=}g$zBb1|pkTR)_CnJ{f)v8uq zdz{m+sZEvGUN=3E=!`)xAafzD*Ue5G+=Ci3T6R3aWHd#Cj5xI^6>a{(FJ>vbF zD3cRW0pK&VV{-R=Eoz(#3Ee&F*uWb%Lmv0oS5(y>vhzi+m7YMwGGU~^=7xo~C>d1M zH;Irso%`oa4K*qqv(ENTm1pR|iymAHIxrkPW}P5W1+}O}t>?^ItlKRYI_hI@RdW=( zSDk#qGAPsMXJ%tScih$6%`1E4#zqxeAC-R6S-e*L$Sl;D#@b|PXEabXYR|3x^YMo6 zG3&=O8cMG?vC(1BbmHZJDahpjtLcUFu1%ePMjGm+{f))R+gycvHJ>Wac#I;;o(ECh z#ofZdopOUQs=n2+Lu1u~=PMr;Cc`Cn4B*&>^ljv12HJ&-i-E#hGmhvKT zEcbYIgyzB|G=%O#kl|t7Pd973@~0OS#!mT?6G1QDlis;IAE&G4HQc1DnG?D2Bf!K2 zoFD^|8mL}7CDf+Ud1N_Hy?;FVb-6<-LX?)SV?0mM~>>Qlh9kOf4=fy!U z!XNS8ZLQQha-Kxiaz)oYUqYRFvz^n|;ZGhnaI zIxri^=a_pPLpabpSehu>&-{});&L@_SbLSmF8R{a!EVLEs<)O&5wVjwJjrw?PEe7x z8=G=7X)q!LnC}oe1*y_Enbh(-R@S$Pe8Pg<0zim~yxoQ*#`Ats<05{tZxM}z;h)+_ z+*;ctw;~8iY-DUi;SkSY+?c#)Q$%_pLc;63E=@Oo3<{~%ST7Z1s=7Z0eV%RQZ$ z_cS~uI=#Qn7p={_g?(8;NZ$0D zy!i$Yizp(@(Y?hGbU@~z9>LZ8VC)UdcSRS4qjxW=0oW6Ve_e^l{td7deu5xnG^V?? zPc3629pLFZnNM4J`R%Iq*Cg{}6Zh)X4HThV2wQiCaaQ-^1gIKO7`SMjy#mXzhfmAt z#@w*0R99L`3y^8Hf?`!&7-;cb28?$i#ybe>L#_*9ji!hqi5xNQ>yAn=^uJ(2$r;>j z5`PB0?Ekksh6RUSC~0OX?yjB^%Cqki6+qcw2YmFETQOsgk^L-}RzzoqC{%@&Smq0GDRUg({4UfH5>a<1tNw2>sDMsEJwadxzK zh={flE)@t9{&~VD=;O9a3uBM-U>H;*Z^x&Y0nGzrD@tFAWR$a@%q|*`Ab}A%3}j8JUcjqA@9pVt_7Uh|4rBJ< zRj=jK!)`<{$X@~Yf>9Qpn~R!emZUvmUT<<5(u;>*)dl>GdFm#_cC(1#H2REORwSA` z`X>{9Jbh(_6Z0Q7Ufu;aU=Jr3JeL$Q8d@~AU`^f`Zlk(hR;1#UA3Af-DO?3F9}rdH zHHzAEr2jQJ6(T_(RfIr%$c$5vG~Sy5W)7iYBGkGu>vm9S5&fimZA>5OqJ>%F2SrkO z>G!XVjjtqIPoKQ)3@hI{_b!iZ&YC0I5H@aIR#&_({8v@9rO!A3bNt{O(zSe2<50K| zBofO|nzRNsEdq=RLhmt;kZ>sc77!J`Se!89*~RNNzOyNi5$Y~m2Omr1!SW$Pnv%!f10?3!8-b&`W&uwai1JU%TXp>;O;RIpW>A zJ~Xg)ydb2i<%J}rq;sWiPYIop^X)6GK10P}<<+K|c^Wt;7W<-hnI=9_d=Sa9s*$wb zEKzu^@ZN4*=-K0%3z^a34#p~zm-pjzcv%0NCeOmOD@QE%z*uscl#VhSO4(!Ix?gq{#qB6DqvFZ9uOb_p zCqb7>lEGP|6wL3~G||a2O*aV~QhcIwTz>*t(=IQNKQm&zRG!%9z`8y9~j?v{=)$R^~~NS`qRIP z+PRYDD68@~;5uzWbRO?JazYPCD8}NpIIoWCv#z>rT$gkF`%O4wnN z6u}-JflT^=bUvvCVgjydi7Q^}2SM>?_PPEV<9|!3YwiORM-!=mU;!X6F5oM5_!MoQ z?Cl&moML=<7Exs=Tb}!laH$oH1wCp*5rIAt zsEWi#%6tzIy*SWPakQ^E#J8_AYoR8~4#F{;0}qW(&+Z22IlQb|W3|LWWlxv|Yf=ZJLz? zQZRT3z}TsnZ&g1pWU|Z3OJ(mOf%mFU@UtEdb#cOd86%9#Q0(_gD$we zu!!giL-|&#)Xci+_xIbmAhMOmoQbUuGm5ay@Sv6w?^oBRxuv@1Q?tMm|Jf5c;n9L? z5-*|47QK1#%G@{hj+eDX9Gv_@Sf(gm_=V3rE&Kw@Rk}P22UnKZe?Cw3_~R{JNaro| zl#{0VcCm27_^s5K!%(p_RzDp=YVsi+t;Y(|gt*f-XZ<#M>{1BBjjjZo~FvI@~}0O!v!`hWcU*Of)!)G@YGp z0b{C=){O(%;QHu34F+!z0*!?{ubcjH+Nx`BEXBa!p&1pHtcXu_l(2%vV(vBw zIJ52jcCo$Oe#yLsbp`Ls?C!3P=2`Xb6ma#>UA%POy{ffP(>UvRD(wg>VbBFmB~@98fTp?Dkfmcz+PwR^G%Qqw+o<@vH{#^XJ% zrNYlGVCq=m<+{%5;p3s(`3{EyzgMBr-Y52-`E0oeqx9q`_-%Bpo|GKqe^aUGbsC`x zb|{bGLy?btRftKc*P!v&q;$8}zEWy@r4DlV20@@pBI%;Au6$+TkKw9fGA)K=)c zWLf)8snlkgVzMmZ82;dE%iZyC;dOiNN{LnO?>9(3>;bD8I+T9XYbnwffU!o8%>U&d zMB<0s%n{qs8f_c{yq>0$>_q;O6^(P8VM{Jir+MeBrIe5FHHy^$&UmT5 z`amQ$!nwu)Th;3OED0Hms7;D%(DGH=1-L_`) zjNa*$TOG#A+ypYf2?6jhz=25Nrf-Z#)&zamJn@W;kDYd<=WMaiNU>lUp>5$&v4N&x zQ3Sl4IGSzcFxaMDsqVbI-N8xm+VT8ZMPC!UJI?HCl)7YKPP14PsTOTCl8w7ebNRc% zl%2E8Y*rQ-zn#+|yZS@kzR2zxdFKzc{#L@C`6VD@fV8)c#W3;hnH87BbxQ%henMa; zb+R78fq(21(4tmOdn_aKL0a;bXXDM1xp%vpJQ+8GO@2;hNZAJ7fFXq~72#}~3zG{< zqXZ%%*?_t!i}IV~WSD>(R{7Z0LRgdh?8XCW7k^XZ+g3Dh&m|w7fC77_3nykI)&8}Y zHlcei-Y6^0)L*^%RO|4r5gJ8$trjA2qn(11m;_X88vK$r>=pQu=8l(mlh2Ve==HdF ze7K*lb8FVcMxmwske9nY=9; zzTPE2MM4reVGxmJg>4YMc4xf9&AOJzX;Qbd+Z24-gO%gv&_&vF!zL4=mA28SS>9;F z(j}{=@>+#UjiG|rg`rxQ_@#F88BvX0zc+qa8GnBS=w;ma!MGe}CWF@5?rmwsTC4r* zQR{+Trc1V0Pl_fT+{<(L!aquJjAybVI$l zK4N}x^kQNu9aUE>)>R_b7lTjlNv|tK_jaegM#gvo$k-Ri4eC9bXMLTk%zi?{Ow=<~ zx++SUBh-DlEvyp^=wzv`}oFsDfQK+$n{}k^3}$ebSTAA zBgYrGpV7hOIvSs04W^)|9Y0p0qEOK^&)b9nz0kWjueJ+^;$KA=xbPv_+}_z%Xf+Oz z+{}DK`hJ(ZD}`t7&D#2h#Ph(E4I_^vFVJ%lAv|$Vjj<_lQ^OgvO*LyjrCu8ouX7I> zEu?U!!gSn_JDEoU2>GA;bqkbghG|*BNLq>)_9D$sMPJ1?E`K_WBtU#H8A)9RbdPugQUM>g4ILwty-=e^=?CON71 zw}&h5u5w|V@Y&~@mi!BYHFauOnsngtQl5~rk}3CHjd>F zEN&}1uyVfPVb&EG;pHTR*b}>n2kgy$OGTINKERi)8FAay+chRLl9A*NX)2dt=OlF( zf#qg^{z)Cp5g3g)v^%~Cc!XR5x?M!NL6ba+peCi|9**CVezJO?8@Bco0Ga`mTiEu? z^xZXtz6)art}%%Eax7iQEVvPzob^^7GVX7YN#K5GDG!u$mf1^$J50o`aYzAR8nW z_ICnWl=&X{8Sa__=3xxtdOi4SK*}7{{&c_hPLdV7wv^aSM`DB%h_=4Plo&!jO-TXW#m{m%D$qc`UQfNQF^r&zQ#qHuAT=hS1h84^L2^Pg1%BEw#rjZ|$BD1-0V86~ zbl{k>q+acJ>6c2jLY^aCIv{!8serytdy}C7E4Qa=7}xhek#0STAY9zzV1b~$6LRe*1Q_T~_9f#9{!a*_OF&)WqJ`klMy6vD*(eO;s2_jzV@eK)B78i@9Q>oK* zurOanQactBt=t7wy&GkwQ`s!>n3UnwXd}{bC95tPv%l20grD~uZ_%!uErXsz>Z)+U;3#(B4%bs&9WXFsO4H2loPLO);DCXMAY&%ZP$&f zzYb3dcPMiEym;0K@Ql5^bgKcnDY+34Qm#4Xd#FgIh$!uwP3zgsMtBpCuFdG>QmC{B zZ~ofFF7bc7+P^m~VSZ6?QMMkncHl~8u9mQm<<8!8W$9?!xf0P$Zd;F>-=`+Sf@ZU~0 zaHoJY8mIN|hmpq>1F19JJ5BA}I4aehn({=4CnmQe2;1aIA(n4!@w zJt>zsGp?J1I!5oDYZ9G{LX%u$EA=lx;2v;@Mk?-S6;+t;YZq6T`)8GgmVBBq^Du9p zPDzx1DrrVT3t^X!>v&RW9(}1}ev*RoIhl9Z#_TE0^Ee`>Mx${Ls>jly^Qx&A+ei_* z;%4MDDTuYVFJy{CCO$qYa`Z$hrf2O{n8!2Cj9SFn#XJZpk;dgzn5!JRt~Xwcnm1-i zQAm)IpYQB#s+3;z4OR-q zA_HVaP)+7)ID4ctYIvnY=3!dEhB!gbOK|?>*EwHVcdE|D*cN?J%(R}P@%r67I`XB6TJ|5o)}9;_{&qKi&>7oOik?U(Na;M_%@*FPbi~L zb6Jd7FC4F|p{c?!QP=XUDS;+4h`lOB@?7WV6$|tVXe(QuY>p6re11RNkx_TC4Na?G!7!~QBNVO zl&EjP6tO5w^rsrXo9j{+QdLw|M6TncC_>dTr~>tSg(yr)B3wOn*4`spxHf(%x5VtA z3NI~ziYis1Z6>2a8A3i%_Kf}HOxgGBUlsyW|H%l>kTDSB|5FD#BPjW3mdhqJ)RXHZ zaz%*7Aaj9XZc0H+qc&A0c=iRfT=M7_7c~2_KupQ@VnNiaMP8@@cY{}{J}o{oIjS9m z;BLPh)y^5hV)nJU){YBRQbgPQ^D*ed( z_)Hi0xtb)#5Y9%QIHT%B4$!PDGY=W9O+PTc=X1ZVqdY|R-dc$nmE37br-1Qa+^82z41yO zXMZ5*KEKmYy~?T_Y(L254g=I@SGeiUUZae#BVRna*}NjrZ%KVgs?+O*|CAQ1g$4?o z?-g@XgafzhUEp8ihhJ1`Uh_v>>mK~~>qyeQ;S0o2HN@!*p)3qewojA$K9KP6c!hl_ zdWVdke~%_xo<8QxfkUv!8IS-yl1=ezV*GLX<5Wsmox2ro00q83jor1PMc9QnIF7U4!#oV4*$*er zoP(k|?i|ueSe(e9Dx%3?EL+_~`jMWoVtxS5KNrX9$B)|;UNOlJOnlc`*E|W zVkgg-0^w)28hF99P;U?Yn-=IY3t|W>hPD)PGL7!`(BNnoRN6!m-Ga)Xam}WTUtcEKkhH#H>F^RY0^cEQs zmbDr93Q+zZJU+NhPYgSPYyRCBW399T+v~7Bu^uRb>P>#snh7Ed!w~NSsUwTHrXG4N zAi|ohhI3@x#8I?}E)&!)W zWa8sU=xV>&$mqn!c=<#nTaRrHt4DQhk9C#{1$H9lTd;thw`gMxBSw!#=~hvBk?Fh4 z4&4Y%p*Mtp7b|>35WQ%_7m?nvlNpPXE$U%C3SOKmPZ2EC4QGk4R7@~JQ_W^y1QneuwwYP?qiXlN^W#&|qLmK8dKQZt$h@Aj$F^y9L@9lf^HA(O zX}VVe-^E4M&gjT!hlZ6*{M#DKM~hLucZQv4>!e0lmb5QoJ(L48oXzCO=-9tzYIOVP zzAbiJ;?383`2+(O?ms1M(rmMUh-C{92JMoWHbdBUEk&UsgqC}j$i+0I?&>4ummolr z9lw;-_)8J;4U%Dxl+@#7boEvI%>;ApD7{`vEy_f^kqtv_@CxZ0LrjN0qCbuO>@ z$1+$s(t9Hmbz#Gf=^{rRz%Grt{Z0 zM!3WSVl46iM7JFd2zTMF>=U-d|X-7;5 zDUgC43jZ#6M+f)#fn*R;5w z3Hq-@-ylZu{jtO zkdo~kQu_%+GgKN>LN8q=MO4;y{q!JBCwFOx?B;G${-aK@GMZai2Q0O>qBHbyO0wkR z28Ca`ou5;=j~MB8wGSW5eESY_Cy!;3y8CNmXu|i2?eB&USHP==OS8rMn}q~l_iLKq z&dqJh{gLLmL5plJ$u-{gx03n@tcM!W;5GznW3FzMCkK+9nLYT)w_C6!MC2QR_RiS^ zv7SLsEytfMu7&8!Q|6P8fv>A?aXq};@rujHrCp0kSw}lLEqvlno&|;n9jK3uagqz1DahiDo(xGQ8p1;nA$tGcA8yA_1iz?S@BLG?O z6vqcN{S|~4cun~`w4Mvqr*-7p9s)1MzU2(-db0^mm+*fjpcd{=OETNSni4bz=7(`S z!quVe;{FjC+}+xgnc(5o-dfx@E?PK(wVeOW@LJ|-4P)}yz9)tHD#UZG3t+tusdI2a z1~K|=Q+z*+rH0fZCAGG@V4=Ugq3V%jP=T`5uL`Tjoh+L(tcFLif{q8`7(xHq90Jka z8wL5QL|V$gDJjE`3)=F_$CfNc_&1OIonXA>$w9B&!|#?DbE_@QW&QeU>-wkOkvN!? z2VYTES}7*bNGM3FnX30APaAH}zzig<1%@o=@DkJ)-zDq4OYH&WBM*0Og2PbVQsw@X z&&B-t9z%`FwSJW_o4*GZK$Nph4{fatTP0Lwcb7PV9hKq96L7{DJ`f$RTkE<3JVp7)i;wolIA+ z@cWJkax?&bB7sr@p9gc*+QZ9(bK$50A}3w&AE16MOGuI;!2Mj1Y%g_vCLjsf>(96= zvm=sqv^{T{ccHfF1g*bm+oHkWl|GxadWUe0FWa(G=pRlj%ju<59$!R+6jfM@%Vfr2 zX+?cU6lWG1Rz8>M^uC%>tlR`-VmP$ix2Rg>VsiL9EaufMq+(tnkmr(gIfe`? zi<^lXwjoe%0#>}C`&?ZA`tWu)$Idb9o^iqQWOC^Fb)D*`(;X^ceS{&Tdnk!FC4ri8GA5|L^WQ5T+$) zADKTC55*er(B@4{Gse2~ni4HU0arhVP^SjNHVFP>)%e}_a)h$*J<7xI-X;K~ds|l| z-Um+{8Cw2WNaeJJWo+2ATgIpoKhbot*L=ob_hB9gftLnK!yhas3>SlnG;s0i}l&}z;kDCpAQT8>d!Ft6_k6lK}wn^%bpn1y;mj_$}2QR+9>S38bB;9kZ`+>f;8_+R@n0t7aE3> z7yHR}v($efhWes#8f5vQMsHPolr^hX{UO)LSU*W_SNBWLxDu9R)nBX*UAB&9sP=m2 zI^2?yAXo>Aqwiu_od7)5(#_bcP|!^!HP5ynDpg>uEj+=rg!#Ufc8LvC9TD2NVIKIV zVxJNp=Ji+7qP*Q12OIq5c}S`8#P)jLc&Ic$s4!nL@BOBX*^7=&^7HWb=i_v!ou$L? zVOQ_BCymdNrVhydMRgCSJEW1e~(~)FLY5zRMazpG0Luf-mujYt}6Z) zP%qajAarYg=&A2)v=WCL&P674dEF$9|BKAqD5_qACVZcw5BIe|eXBxmF@iDMtao|p z4|*quKQS(LWR@tFEoaUj-@%n*0Iaq5HyT9q6Ql%86YR4LKAM_G5Lk zWN9Fo0Z7F6BHEAf8!28oZF zt`b^B8sE=?sG(uYdlrGIP4mm=l z0C^26;l~a&|Tb#g@K872odKR}(P-bL+2m0qT#zdbY(%v@map+-&mb?IRy9HX2DuvLGdqLtg-P=Ml_EAt-l!IVSaon z09so&wfwcwwG^nC_mIb!qp0&_qu<53GTdWN;_G?ZyQjR59pTuXI7mImHh`Z;J@U7p z0Kz$*pE*RAv`5qJ47)7|UNx|fxa`iXyPMyh?WD10mFd9@N`E@X=>an(u{E65HAI`D z*92RqNn>O6tnbLsg^%n-YCg$1C z?=psbNpbE2uJ1;a%^Q2`e8QbQMsjfS=)%cF12exCYz^a88h`-c!mneb8vA=mI?RH;^ehh=P#A!S1ob`5FP-b;0=9j*)tTXr$-xFe-uc zIkwI9ha5`(emj{vlARmfS=LybRQ31~sMWxoQ&dSAHvnyO5?xF4$NHlOl!DW8?|ZK) z^9As^c;3XlP2aiWT-?&CR{iDX<6^Qi7EiGbH=G(+rs8KG<&8JDbOeP3?$mEL`XD}A z@%;4qc9{)d`zXVT9fDW`kAvG&VX8x@E*%ToV@v7r)wV z@=VV#!2!Qgl8&+BPZL+#{s%4MZ}zu5jTlB{9-d8&uL|o@e;RKvGJTd8Sii#fmhb-H zW4X)TAoxw6!m*;@##);4y8I=Rw>KQh_~kLDr}SdUa>EDu_ITMnVbIp|v1K(w7c!tz zOG=Aty$xo^*t;jcwppxh&86{_yY85_LQiT2s+x;et%rKWiloYgep*k`OCgJ#ek_z# zPN88Ycp7z&dj$*oZIkY#zT_7&_^+?SrpL-#n3Cs!-Yo)+Ez)Vw9gok0hk*R94p1xV z&3u392ku5PgBTXYCnPOw``3U@Ud^fVlfvUh|3LTZy!t@;%|KyZRr<@~EPtcWKksZt z_>CeQ<1P+*v})EbP`e5d7V)0C|l+oUsH;}zPF^bGB2a^c4brRlru2ds(W zX9-5;adbvN5+J#!*C~w2;7SIJNR1uh>B*IF55)YXlT7nRt4ASc`aoQb81ZZSPL^pw zTBY+TF=35o^0j0}`mvw3EL{R&hyzxA7HU}Jqk%JVr*gy44P8p0Ti0!YoZ*a!K2_F- z_Seb4Iemm?rjqX?0jjTE&Du?JrJ5D(iDiqyUxv}#;|L}_8eqrzb2e*6qx&mpdMKkk z+l>&i!xKKG#c=WVwKlC$;8@{b`mJEPfRRD0nCrZTgm-1nua$Iw31k=^If>!dF|Tjy zz=?_hsZ*AFE$``vDOWzhoP>vRUAiLegt2uTt;3Fh1{x`cvL639OmA2tpgpL)T|K6-Hr(;>$m{^vcT2VD^ zO5XO^Z)wo-ZD?`eL)V&wIrhOTaA&dp8JR4#C1qpg>ttr~s>0Oui8T}mJlb7LX<}C; z0aq@D;5rtmqnb0uA!J!GhJuCL%!#Rn7>#sMmPT}r$p&7VQo?|QI7Jz+8=Rw(mJ*RV zCir7ut_&rBPQIC1(#Id!5^;ARVUYYMLtOmaI7%g66((JY+B%#p(Oh9^q=&hvy5JQQ zZ@`li3}KP0JO0ELVcZH8CkY0RbBKae-dmKD)n-3;!Cbka3WNqcW%!TZ{Z=0yDdqMS zPOK=?AJh&>er{^9{6%+~5{j@AM2?0p!;p0nm;|&Gr1)mL6AL@_Dpib7^8Z&<6oiR6 zEc~-bxJEVYukE1-9^RD-S%OQSBWRAO*pO7bhPdrKst5{+O65To3UPeL(^6Zw5cI#L zM2->me05$b&0-)ZRBjmlzX%8nL)=ftS8z#eEqR8U(Uou^MiCdNJ&xlzloHEKXx!=; zM|6aGM&+`3R|Nw~dw4Lg8c4i5MtKF?3Qg*H6Cq#+Ut_HcSs;F`{HMyG6x`3N(<2() zqiRAJ_|(+IrBt;$Z$0iCXU#nyE%qDvS7$s(^z10g|5XUp+94B%;>Y&tW(=iK>sdhV z+p%W?P?PnJDsjZp3w8bTxr^_<)F~*D3)Kt=GuF=*GF8c~iehg87t^1D_2uH>?Dln3Ei83aIDg0mz6Lm!^ zjXHqoG=sGc2Ud^be;JPkM3r4ae`;G2R^Q-V^L~|qg?;$`=uGl|YkrdJNv!`QI_G;i z+9^WiOkYRY|;8p~GA%w>1K7R_7T|NZ$=dAq|3bA>n{>=3U8;ymTwW0xObn zfy2aa12NcrZHzh>$Q=f-1<^+aWlNRu4iAu5O$zgw1^Icrx$1VsQ3>8OJ(7B#NpBLHYJ5ObewfWxbeq!yhgr;@cUh)*SGg1EA zdkZgm;ajXif7GT)t_`S?r;DY)B$tyHHi?pyjnz@ruofz22sCuHq|+e*c}V7ulgSQz ze5e*2+IY8PhQJj73ZOs+WO*od29m?*kXyDQD@->%E}>SX(

z9J7mJ;K+wv_7SoYE6RDY{xLPl+raQV%#>s}Kb|lJn#EBLh(MWo4&7GT-{-f2Il@(0 z0jjjw(7|zm(jyvqu@l>p9CCVqnqyoa7?$BlmrL8FRs*Qeu0RiVm#?OnaW%ZKJ`j=1tBcFVRqK~$w#93ujepl8UHto+8eph2oLylRpT$H>ebtzRpTWmi zA48fM^$%m+gBmA6{|X8>(rg0LCQPGe_`NIj8II7P3_=eE1ngQ+Z}Nj>-!v14r&!tlqHp|!9Ffo-71KLokk3iIsvXN3YY zA(v~Q1m4GqfgARdF6-Ds8lU%E!KF}&WdRjvn(rmRgB@K|CECOs8!+N1&&77GTA4L8 zO)AqaYbYh;AX?9m2C!*BL{GSsPWkMIk_e_Lx{v}G_a%Xy;NQOC#$M!awAA=Pl`;=Z z8XmDU+K!=f($MA^7QUDo4`NYblR2fY)M&|Snc|jPI4kaXv-wpWc3!dl8xI~6~%VjuI z#>uLbeZU@iQ19GyV5Bn~2-nbJIp&xS_Eo}P(hoI3;nqXAa$w`o5@Z|0VeC_2A;;S6 zefAaGWi|E%dyoCWK4R?S*(G?Y;{Nt!IkN&upuQ}_c$h1}gh~wnJmw8yj>0|mUF+;r zDKC}^>0@_e8kS(#3oDyHhs==`!};41@(hL&f5XtB>HIz5_f6+1Ubz*r)x6xv?SK?@ z;qKISO8HU+zPtPmdSX%Ml0)QQzgfS*o|_U%d<;ZO5x7cE5Hi@d^1`@yY%G$ZX)22{ z4fna?$-e9(Vq-~B%6M9A1EIKA?iLU9VqSC)5Au~#Nze0QrJC3FdGV-vP%Rzq9l{2J z%6!gTUfwJ1=QZ9r%2&$W!~D@< zv6S!f1Hmg*y>oO>0kMt}d8CN(uk>Z?BYlWuFs_G@Af5n-(kDwn!9KJn;8CV=x-f%@ zkxOcLOpRYaBPsu9$p0}>8k!rTo-2^8= zGJ2Z3ysLhuz|MN6dNSVQr0Cy&vu46Q<}xjOaV>OlC3`s~ygEMrwy}sB2HwvKaVi>& zliG{uC5)&-`06hHyns4V#6* z#oZFLp2|jBb=r?uZ+(pUg-ym-?(yK?thq$L3MsFBlV4QCb3Sdjw1}7K57d(B97B6= zuBXZnXA!Iy>I?jA-%K$U?hEE+ST24&(_}hhPmL(ZIZS=*F^(xHz{Av1$dRWTo(7Aa zF+iBPB`POeh5w9}wYc$`r;C`k)?Z3Z7qwq=Uex=FQeK@USoA8(SFNbcvL`q7CG5#f zeMR=9JkywzpJz#K>aS}_R;1%;(@or1+K^wXz?40$bbi7)j@Yi40LL0h*d^+3B%g4up zr(!e}6F5y5xML&|3giRh0R=-xBqh0=zm zj$3>XW$6B1U%pr=!}o!ZeH-I0Z(2K#xxaS$g6qQdAO`)CAg_E&`AYD}LA7u{Fn_ZE z8Ji;jQrQ?M7j?VKc;LXp<(Pjupy_IJ@z=k0a3>fD;C_EjH9jCF#k~X=VWHzHFowR^ zxgFShfiy!078gfTLITv^DQn!{gjm?=L|z1Ww?eTX4tHEzHXC|an$J65CY=R8FLb_S zhH?cC)HZYm2Ino>Nk?3m$TEk!ARV`bc2*qs0gU7flYRE=$mwj!^ zK2zFHUfYRXQ-(k#0`f_!?ZqS{#VOd)vibAvwJh65U38Elck3(SLP06V>A*iaXgVJ+ zB8iWb$H_SPB(?HvYK9)sn!?v7pP*A0Y~goVCt2hqaaS>uNd8WE=!>lhU0A4v zx5ABM1-1GO`Ja&s-2*Wba*<5=IHGSc=_ zF}I#+cev>@q_Whw>l);0e8*j#VOLFlmc$igsoOEeB4Q}yTf-g_BxR1jpvB|PiJ@ef z?@k7}>$uCCXgiagkfj~@r{DDj$;?k12qC>u&lcO#4b^sPN|{*W9<8t;eWV(jc4mos zo|enCcUZfj<0>?M^(58;> zW;+z*9K8pX0gVL??`Hc$twIO6Dhz*g0rrW1G|tnltl=d`pQ4G$wXy2Cb|NZkXkVqB#G&~9+y<`FQmUJN5 zz%9vm724Sy*Gq+?BPj;>gDky_hTNvf3?0Ny3lHu;Q1;L+p>usmF$V|NRqyhI?LXU)^5om z_MWXj9ES`04y>qQqbMfJLvu2bHS3r_tLM6$R7TSVki*S+1TDc+}PgO&KNt{nHn~!#mD&LYQJsOe~atIVT?I(@IGe=Fds#{ zFlW7W(ZG~VN}8o`7_^DAV(E0nlh+NbpfsPo*ylzDXL8^F6Gt2=*m-r;{Qjbm_X@0= zHQ67Fzl|s)yl}cR-zxOP{{5VC%8IaCNVff;_BNjjiDK1@@5rneaJPx7iGotiIJtg87{BTHvL*0RUK?dQm)8e+ZOnM`vYaBye73R3V#;-U;j-aMHDW25eOIR5r1H0! z$EUp2j;pnO9?zbPTVV2+Al^g3ZJ`sO^J3coO(ZoNgoTbfWknTvEE*P~aVw>k zODXZ?Tn&$WTWZC(D8IZFdG*?qzpaIjFBGC5v!Z(EQSNsh>K%r9hp{+R?=YN|^xEDF z)jN!wsI1W(nCFYBO5XW#@~g5cN<1G<{qn9-)A?}X>%>Z)bD?^bF+VP4;B0F6RgRLtYcrt-XC-t@XBf zwFha{qwW2J!@d5VCicXVUP$&{SZIH(l#NzSYT6Fl@wpbLI;SlVkw1D z=tdWNl$}$ID8T}zXU^Cl>CW&~-Sh^xd zD^me_Ct4e=%o|ap>djna(rxug(KIdkWW}8Y22~Uz86e70%EM}?p%f$M|6THT2uV5W ziJ1=Du)C%b?V{>cDC()B#-OS(Kcb!nI1%llMxm3P4zli=0>39}yf71Fw6Jo;8CjcJ zHt#=E3mq(S4?pa8GCYwa(>5h&4VBG0!u@!c!0Tr+hg29!D+P09c!e)oH>4Ke;HK+G*O!j zt}47i9Aq_8Z)r-Z?Ui&K*R_PKG( zbhlo3|AGM3^I&Z7Hs()CNDVwnTLnG}O?OPm0~6-j;eH_)6EB6+B+hQ`xt-e5(^wa1 zIMgbONbdWHUBdj;)tw!hDJHmN+vX)k3e`5Tj$lNV8AEO-(B4FiMyw=DIj}gCrTAEe zCK40PsU-_FbS^@<(0%Hv?EwfKR01}&I5Lqitpf1?S^^b2x9H(|w6S@o0IK(|kVsKV zsA;s)R$o^ke@sJ%Dtlgg0|DjWwzdQUZs}o$k1uo!ohJsM%x^n|*tl2HS&1ub8fbx4 z=7{cfyBP?Ku~_MkC~G%aS`%cVJHbAVOZSvaO-;s*F4K8g)6=rBp%YtfQ)WFHkKG{f zps+OQgaFJQzOfPVdL`y^-Y+-Au!y0o*nEicXHH5HafAT_vo!LY1lv_H^M^aiQ4vJE zr~epw?0v0SW2nHJ!f=<9w^yerImQ?WPX);$=o9~kf-_}?UKtAV;~uFi;f z$m;$4Rc=tAli2e1vM=}-A5!NeB(2ra9159;QHVPBTyDW3tE@kd8%gS<0ErTR@*P{4I z@X^}8+J*_P(idjwj05LInF~Z$j*Z=LmW?ZydTv!IJ~@Rs;W+oh;SL>=z6que58kDD zqqqbhC=l^bRGErl4h5X{KRG{wL&=uZCbpNjd!4?*VO}yC5icc0&V7%T7IwkF%nVA1 zhcu=lmGCvPO#>pV7LN(F7C-OY!~Np0;flI4+r~bARsM4XcEiiX7B5(4ZoV1%8aSAV zTd&lQ7Rf@;2oIjtCbOK);xWJr(;)yQ)9}^WdqZScDx@N7cLBJmtkA!NFHvAU+)2{o zJ7465)^71a@j&eM7&URfP`1w(kKk%TrPF@x&3c;Nhq(E(KIioH02$^|4V}GHXo+3c z8GFhfiJKJ+7s(OT+>7BxN{VxyxbvJ&?y!CjEnP|<1BfuI*__59$OM4U?J#s^6{1kp6qTi;q z`u*pjDpf$?`Vj`1e=E;E{Ql=fLk{+=g5ECVHB`A8ikyG`+nm_*X*75RqVQArl+mo% z&D^j(jc7V@8cDNxAafC-1AMjV>wk#Z0AJf<*7;g2F+z2i(;k!_R}!#HP3&HfU*iJd zG{9@9l`(P}6PJOx7gnQmNj^0*RS1*>8Y`CcHi@_uMd@QAD78AZqSr18O&{3y#3w;* z6~)^3+u>yg{jrQ+DEYPdFqn7-`YDrKOC_hLXJIyrps^Z5g0Kdk7#S*3b9Ld@q*hQy zTH!#o7jh5T!CcLwZNAekf3M?$e>e>qCm=?zR*TWp`fzpKT(7y-NZGjw+Z`}L@pdD8b7G@-Q_gTb9r zxGgC`6kcflJ!FDP{@sMS0u!k`A8aOiz;EqJluYtaw0=iw2zMF}70Xo>YIeOyaloEu z`pPFWubQ zO>>x-?0W2ZSf`Mg-H%s9m*#|IH~eAjhquB4JIs!K7%HGC0drEH^^m$4@<(ss~Z{D z){SnR+N}*V8|~igP+zh>@j`6I>R0#2HUZg9y$d|MO9&gX-q7Oxq|gwM1TQAGLLFp+ z@HHFjn5gRLsjU|CC>|SI+vt}K+?yAc4MW3N%ni=v(}QknJx_#!P|Mb)FvtkoGm@Fg z&!{l;mb`?j#yHJ_?=Lzy$*S?aP}V`<_0LZUsaRwQwz-DGw4pKpeaWi@493mn` zNEQD|0P+L`6!DcpB)l6$IW0%|m`AjN>$dq^H}0@{<;)r{95^ZBX!(Dme^)9VV!o-G zS{`9uNM;(A4T9=@y4bwFp6=>YA?3{sNc|-FNm;726azNT!+4MAMznz&7Z7~+^~;LZ zPG@FTY>wXHs!{8GSPZZyMP`$Fw0e1P7L(8C*PVmW!gBj+lKgh5tC4=R1DSL?i+ACS zDP{IITgUI^JKR1=Q?h@)HoKkzh)s@J0k$@%a=FXf%`-^)l35E&%xW7U6rDPoz87TX ze&zxa!^Ym(lt>WE^)I7eqOG^LSJ#-=Hwts+aQM|f4z{nizo*?s4>`50GA*O!7Xsx!{e8tkE%-myfSUJqt@j3d5Tvv8GhLv>_>s zGez4v;wGv!m5n78?ncH{hBw=z|D}9O)fPGBF36eP5S=>_R3)=tu2(mR=6R_Xcnre` zFi0vvWDz*s!IGtan92{cwMLKF>_R zXM4;NV>SWMt)l!1_QG%~)^|qj4LczGY=w)>*VaoL9KO8NeC5WDu#)sqvwdl4-SZh3 z)P$Rut_8K_ZTfcmNWnyT0V3l+5a8Ry0UsnXXrvcC+@lVc^us^ivl#8J1hzAWVIqVbj4rXqggKkYCm1W*dGjI_I!2@_Yv-ntUiXUV<8IK|paxtq;CRiBiADV(c8!9WBTYBZkdlkcDx+0eDIg%Lak2$v1JA%f6>C8+I}4vDehio}cTq>%eVY+5T^XnDJ1u%%TZZt3JyC|5TA7r|=K!!nJ#BNJMq=+~ zQ&yl{{wqR?Z!F>|CoH_ojNVURaMrIXhoCjrkDYFMvp`&e2ft*G%?LcTP5?USi}Y<8 zo=9IHV{DU5B!CeMH%|S>ZBp7wpC~BM4zioz{pMj7k8UG2h-U3Dxh?=!3?DFKHc_^| z8FLg9J%#{0lL=<0bu3cP<`rcSBvPs@oWgAW9x;eGPI?Y;G*e#M0_!K>@5xml;WUH! z97MGyN2$_vy*uw+Ro|_jLe8g+frX-Z+f- zkWp(X>?HBpMm^xL#G?k)1IRV#l3--GZ%CUH+*|foa7f5}A9esrqukQJ46-er(D;X7 z7s5TZg#E3iD7=vT6NMcEc6>}7Vw$I6;8Q0nRJXfq%S^lGFFO;q(h!Ib6r3$wnfzAN ztSb9y?iq7>CSfLa24tTNvpKE|f00Ch6S@!LM4dUho_i9-GQ9YqvfftjHugIkE4ljA zKIaFOZN!waeM@GG(A^s+ug9l5;!iGK-ZNZW7%ptOMSQEKnz|KUxe9;d6l_0HT2loxa~6E|Hro zn$Wf(c5B4%^6aRV>YQQS7)t|(X!teve+4r3S_2vP%^qUpGl!xX08jY@r?cs?brB5cbn82Q#B1 zZ`kTuo%g+4FA#VFuAS36P>56_n;*Y#Kvd#3ly z#>VQggEuQjE2GuRpvgK_i>2Qa5)amH8YqoT3t`;@GzY>k zKFp+irn(w1NAlGeIe9-FPWP1 zuX9cT!R8#Yx}FP zle382(3-R?C3Z#FA)t(*8TQVyGio0iS!#t2tGnND`C3WAYVGrU;JaDjaVfXET)z;f3oADTgZT+R`n+@M#syEA<-51>>8jLa3DGNL@#13KIDN z_8{_Nbcd3Xct70BxDuYaQl++h&rcJ=mK-FxQQIhMj=2$f(OyOL(*vO|I8G(5CiwP< zK{eeKYICRgO>JXNqcr^_9WmY8 z^3RY@7-rV0Fr4N$PTy+g#d{(_rLCmQMk) zSc&={27gnPY6eAr3k+LGpp7bx&|{#zPf=ykKj!gwb(64M2)jjh)J{lj%av?8D9IY< zimR{GjsQhSR|2KQ$EHQwUYhxJ5n>P>6yL%+m0C~x{-;evq#hc48d9+$xFGsjx3PW>bv>T#3{R)MNORn=_=d?4mwZ*M*g>?OoN zRBd(H;jYv1h>rX7GJ9=z=SM5&qZAZ%;|K>yu=1KB<3VX2U+VUPhqd|8wFv>%d?;AP z2^cocBR~&md9-jPSoPh{o0ef}bV>%9Ia(Pp4ycO)I5~_wx@9AJ*n4)$5Rsws67rM~ zQJ+f&H*u7~A@HetmayA>$3Y82rg*f4y}z9U z)qm?Ku5|2_(h*mTP~?s^F)R3Ry{c{$q49!a=LcfDIyvb6p*wLTsq-Vx0(OS}tS5?Z zG~7E|8=%Hnm*$2%6UClAKkG4sSA@?hhcG6+369}P>NA0pO14qaj+bFQtlKrRDXCR8 zvcbwuzCmHNQUR#&H<^oB;DLH)`^8Pb;L}#+Hz|~ix6c^I{TmIFYh#>J1gHKp-l_nZ z9j9$OE*vKpSYRqqtBu?PhLIPo4E>>OkXIn?6hSXTmJ%DLLQXOK2L~+AScyD!JRNI8 zPtH0pqnoVlhDd(|M+W)0auPc`Wz<;`rcWFsF$nc~jag8bw2w#PK2dU#nZK8%S}L*BXMxwZ z8omvd^9xu;kfFN0Tf2=tSB;dwF%Y>*ZvU)^K$!gu8F2FDs_CQmZ}=PtdTk8;_0HLv z{7>a~2X-`_r`R(0_lAb3 zzTMITaPJ(RLv<#6xYZ8_c&qUEQ#1NAuu+rq{-tD(puV?zxCZfS&P#71;%f<(bwVEL zg%EqRI{AHlXEyY28c9I>)q>{0folc5J@S`&a$p#4bPuV22v^-`BLu8c2u|y!APEg<$P8zL5H9Fm!Gc&w+9J{cM4($xuW${ z-{gjLA_9ho2aj_W$p^QHPKPS!36pNY|ES>&N`WbxDm;r z_e3woT5DKc+nfj2D6b=4cYD+-J`%|xkeo4Dg#LoY{`I?>heg0KhwZM2+VM4`3}^=B z&B3LmuTf%OUlh)yAZ870R5c})-hcUwv&+?nPU-VJ8ZV2@a)||#rW3rTBDCI zb1<>;V6p+ulix>_)O;eHO$;Bx!K@O*?W${U!dX*I5UutyKu zrH{wZwqAGjBg$KDJ8%^AT6Sz=9#AMmq$_G1y*Kk+%L?ER%H%HfF!(BK-~tkU*DB>u z>_oI-XVxACm6H!hj^b_?uQpE3fXcq?D#v4~uS`_u_anUq3@bsUFYFqhUnI(l@%G=g zmuPkqsD83tIdBMvgnXlYO?OqoC}^daz<+((G(pfPa~@dD$Q21?d1QFd$tOU)vw=>2 zsY>!n4N`a^qI4n10@ZTE9Q}&$0SOQYl?O8A2}1l+e#F2<2mwUn5K2z`7EnV3Bwf4u zk5w`NvA{HLOaH{>i2hDRwd(jqAKuP+YTzqY5Fykmvc|U|5=vOgy`{+}A%{RRTliyz)uBWs&_{3b7ZTzg+!^^BJh48aWjmk=9Wgl1! z$Bf@SbS2&u0OtFao#L}|B88H!FVx6vnKBA1o=K!i8-2@ZKc6Yxxj=K#X zwR^atoSY9g6)(_b7r(6ZIVPHW^d9GP2p7VU5vl!M-`Y2u?DIZ;&^rzqxbBzJwUja* zFyiLV(J|7~h5OrH1tHNj2aK{=usM*fH1I|w5qy>)l$(Ex`0dRVm{4%XS4>@Ku-3uU zP#$M({${qxO@5rI(8pS=<@%d-QP&}4-P+o`p{$@b$7Gi&1zQxYJTC>tk@_mK9bTau z;z#fmHwE)f#9mVSTg;;v74RBmos>szQTfNE$(GUvpJ64O2LRpS-QDn=Cp`B6(OX$p zsa%E9kgZQ+|92}L2QLxM%`6~kSl|`#Nm7P#L<@z+v~?f3rYwm*Y(T_ZpjIA0pqKDz zG^!=I8i|H4YI<;?Xnpx>suRaOtJ{43a{!kyB_~()RWJ0}S8(a&Z~7?6RTQph+`TGY zgQ|;rQH6?%<#wuI!Vwvm#&)KR&(Z}WkX1iX1H+37qaxzJU+?h-M%`WNoR6~f;~Dtl zcK0B!Cmcd6y>+~8Trs{F*2|sX6X}ij_tV|QLF6Eki?cg4xvuiI@;rvb1aP>#q9J-Y z7NyP)1Bw#;9NBFiA_Ltk@z-$(>HOQt@&l|Sydj%EYUKhEb`Wjyo^E;?TG-d}anD|6 z>-a5RnAoY3T-1|mPq5}@8usfUQ%7YTkdApp21TZ!V$@e0XhCQ4jIN^#vtMgZSVh9B zFhWPMR(H)#3C-hJgr4j|IwTwgXbT4cz>}*^Crfc;m{S8gv zTE?6a$)cVd=#QXpZ+0*CB9RJwc-WWP37kU=`>*o8{+Hh;?dRg#lVb23 z^CLHGr*c}epy^UKi-h-<<-OkJ>4lD{D_2GbNi6i~!5^tFtkCkAGJ9>a+O5TVK+h?-t_(TVy&!2}UrN@?g@%5h@ zsa%mG1UIiXcnq*(d9&YZ#>g?f-Q6S14^BL<`NrmF+y47w5H7g`<#vE^jhnS*T^_N& zIL)I($|qahCd>wqoU8ehFROjRdTs}5^(7mMLB8m|8G7FJ z=T394?WALct{3dxDizebz;#=2i()`6TA7M_gh*3M)At9wEG`_u(Sf143N{c=$ z&TkY^O{4`oEDdAC@5jfvr~pO;qtCr)7m*;MZK{9XUGzAPNSbI6dw5v_ruskjABOO0 zSE2%`R`(J^Ti{}A{|{D1ZU=)Uq-G=*CP^qCEUlpvPzT&V-cjbkSRo!gL0kAHhKgXC zoDJ7xqb}y*aQ!#538I^9Q@+VoX@(>#lz&-z-H}>zG8+hAs!o)@+cp&O)Q{SOwdBZV z7xUPbt%Cv*QpRU5muEI}N5HAc94$f_s5JfDgRJf__`glV*lJT-E#@ z6xhgS6K-m!ggWG!<`L@k_|II=TmXrjtn^;ZaKZXCm7hYHC~pW75Bi?>ZZu3BHct}s z1My(_O|*6BU=!qZ2;mK^FEpcDf-oLnAAdzot&6H0?K^vWZ#rCTZ)aXa#b15uGzURM z`n9WaAV=|M7c0Jc#BP)cwuY@d4>S5ZIBffS&O|5}m|}lUU}}^6ig;%E4sR~lr~ez1 z$*wrghR@iODPVFB8(1NWjxkYF(Ly_4E0}nkVMhOX2B$`IdEzPny1i6)$^<{ra}B^AY|g#Ber);PXOCV zWuC>ek~0I3LoU|@_9}H8 zRqqt1Iy>u)=ay4#p+C_yD>1^aB+kF_g#9HovJ#6L7`9Ca)J7g2I;V{t;ZGMjP#ET2 z(c>7`^=)OA3byu}OU?DWTgt~sR_E^}*E`M!8#RF@+{tn;6bBDA8sUrGDPV}+9vDyN zx|tV7iYumLCmky#41+wamMjD34du!^Nf(V8fU4fw91k~{KGrmjcbN{_GoZWWHEYWE z(V9q^9pAL3j!)`3#6Sa3U2)!}``v97j|(FBJaQRzDbvAByX7-z^TlI{M6zvKv zWiA5#`}kib1L2W0aZVbjs=Ow~oHV+GV=H0}aHS@)_bi)Rol@r7@W=#C$KS6-zablm z6$-y08xqQuOMhuBh>LY9ZVOb%S1?DrSveeg$=eiZ_(&+?Kj>{?AEI-t`ZvSt|NE#i zlUk%94+q~6wUEVXm5#;hl=j77<`RWUygcPkmK9~;o8fCdZHmdO5+xt*`~;6%0dI?Vv49hQyLeX_9h0@{2lZuh z2BlGT0idcpML?^K_1W6aoJ+#yX6(=+ckMu%(!mr_kdFFJKeLWRW32t^c@&gC{({xN)&2Ul6|Tn3t*vAMqAJlR(H!mIi%Xa>Gde4Qm5T49&tKL z_T9>CX*2GWM_w&%F+XH?bT{Edx}H;bmZL!SOuxKIfN{y} zX2y<8wX#@yjz|e^GZ8dc6D_}76mnBf3m?ByB6gYJof-m&r&a!)M-t72V9~0NE5*%* z%0AGN6b80cm&M|%M}ZqbIapO#_zYV$#=TsgMipenFuWD_T8X$NVU4?u+af!-h(JW_ zfrrP}<5Yu}H zUDMiXf?X3vn?k77KH6v%&vC@B^i399is#quaq2xh9l5oT0v9c7dlpF@Mba0Pt zBakk5FuKM@;*sX=T=7r{Nn^$xKF6veb~Md;0MA^X9ADkhF=B*x>)9jtnj=0#tS9ga zMYNAfj3q)GL`sfU5bZmO&tQ5Q0oZt`L5ouW$$RVXx}+3v)4{N=z9!#*61PF-5dL-15g!(12bQ19y);d@8IT%W7DlPD=I1 z`;n7wwy^|)^3Q2?^t80Zpxb09@h1R!cLkvSz8x!9C z7B1sFbX~H&HmyEpF0?Z=8n|3;xec*JPe`%%nvG9}A6-k`@8_M%Z`9r+hj+WAP#})4;?BKo+!K*|d*7r^i3H$E`K(!2W5%&Vz!q zN|DL4*2Cwn-FgS~WPFS$rtE4Eg2~0Goo4G&L9xf9lLQ~6-P=oy&`+g?o~`s3aA3(h z%!Yp%4GBn-4nhc-kH51wSych)jrnx*lsaxfQ&P0E*?!#$zU)`5eRp{KxNP)v2sMyf z)&b7#Y`Wa6OH<^Sm{o@1+NMJPlYJ1?=9arre2(9t>i9K&vKeu2Eza^p2f(?y_LBxIi($mlr$mJtQHx@m^z3v384fGelFEx54QoNDI#${`kfN|B4&N7WO z=i3CRJGYs#FIoa1zayVo<9llcMO9vdGK;p4$*Z^qVb%L9-h_u~xz^NZW^d@KoJKNQ zb2e`e(a5G7pRxA)fkmKS==h5xgnZ|{M1}VrtqUyqBT(DHuSVlhes`O5V+aJwKVxY~ zu}wPI5gA|QOGk@QLte+*#bcpEZV~w+@Kod7W16#VGn1MeY{8s;w)r|@$k7U{3pd7* zA4#kM^P5CP;(Klj3*vKUxGh7mRpdxg(#K&u^gN3<8P|DKI@rVr`w&+H?7f|6m8yeK*OEvQk` z9OB=QG=HjrKLP^fX=NywPsQ!G%=E(k!%iSHN%l?T-GF+rTKa%>$K6nAmv zdMDg3vn#QJZqdG4)HX?D0?hUHrcwjw4Y#>7l>#!gZ|6!@mUAdOr z()1;}fz=3Z_^=-SG+m{-9UZ4tKR@;F0gA~ZP4}PitCOql*@p5C*b!xH9>l%wbi2d- z8v4leal=x?>_`I~-1?WZIAx$pV~_%kG7bu)Mm^p4W_m73he~*)d!&4!tP_$Vl6}t9 zD9H8#Vx4A$nEJpN z!T-XnyB&{3eX3BPNKR6yhmz$Iwa+zdDx)R|NdIQ}Zt}BSsLtvL;Sqv6B&DlF9XP;f z@_2ZTu%HvxBT%W{JV-WZuPN(Vk*i4l4xeWuPfq6HMd{L5@Q6O32xFExOh+vFDdOGl zou~DOHaXXqf?q%<*)f&mKlVPCIfw@*aMB+^CS;wvjl<{-5K(xe{P)AIfSEBrjX-4l zV5$VQZN-;mTz6;*VLz2tUboPXxzK*hUBo<=-PApjZiY=LWNhz>7%Lx~i}J_AoyXCwIw|?s#Ey6o9I{w=K z(33I#bOryY`sRKjf^F|1x?DKRgey+61VYP`b60+H*pe zpE+~-(UBsJ(Z3vyn~ebs#4Sw|iuRdncw&u2mRT=n2=U28>!nv!?agPWV<{iYW)KL(4xKWFRt>ER)sQt|f)64(*fUNhEiOvli>9$lV&eI`{z}KJX5EMEazeu2odGjccNc*AnBT1ne+!rpGwT|xU{rY+L z?Y1}2e>cNUON?DnS>LlXN_Idc_S=rXU8-+z8r;1HAqRR19##=%;%`(3Qy_46tzZS= zX8c~eU;dc(u!YtN_yV;om@L^}>JIE=Wj5b8&7!ykA5F5O2Gr#2}@F z*SBK8mS2PPROEQ*X7FUr`AWRxNsz_F%%z8v(&62`b}FQ5;0I20;a1Q6X(fwS~1s#DudNzY7dvqODmolr8k+*1C#c zn!9s9D=qWA1K*;>Wb>|gg z@CaO9RslHO_hV|Iq zt=j1e;zF|o2a$SxFAp1bJaB9B6bO0l?AsSN> zK4ajdQ(t8y{{3Im-VMj#Xjqp+DF6m~h+@Dayrv+r^9O5a?YA$?u`BR_$C1(`s4#QdB5B6TIn94iQGnrv)^K7NByvO{ zX#5B4d#u}juvfc|>Y9yv%7Y`T8R~43IN=?DSaWTo->awf@00WV8jh&^QT6Y3pbdco z`O=bYT_{rm%z@(#n+<^t6qng}9p4{KRHE;ely2*r zgb9J$c&&D9d=&>L77)_Q+T&YmND=Rj<0WIu6AHYOtqn`rlwhCW?aBDnzmr0S)KH}b zScI118^1CI$e2>5Cy^G~TiN}o9Oq{hsM~-!8XE1yBja8F+v7z zb;Dg`JDvIf@QVf@GlDuSu4v*&g!89F@+2#WjP3e;N5en%W|KL-#m--snobJpNOkLG8`$k82-z<5%`@CNu%T-uDz4P4EDD&woDKBs4@FT4w#ma# zwa-QFq2VY&p~I~Q`ZM1?2j$%Mu3+f+^bZ>>fuA5iYbf!T5yh0=g}nENG}B8j=tEM*zv%(-$}Ou-?to$&Xw?bCsiQx-~XAGDQmJ0N1bL!}$bo0@~{<0G;$4_Gv&M!-fx;A-| zo0=rg&IPUWnllixBpXWz~1`r2CLnR*JS9~sttOcoC1_-N3t#Zia%)9|Av zniln)YUHbOHPt$ab1O}LI;rGFis}TK#u@?u@`miYO-9O>yoflIz#ufZ4Wg zv)W;PDE%-s9wEFn5OW%ti9Wilp-Ogv%^F*+E(=485hY~moLKx|kTFVjf%WlAjC6|i zb0K_jkTY^(p__QTU*k_=IUqknM4-#GpE3k1DZdyuIq|_B-Widg80#4kQHBL!QJT~I z_@#p~LDV6BS1vGqa#4cRUkGs`bb)sI6+mN9%2lKM)%Pnj^wS!*#CXBPxQou{&I= z!o%WD_z?TXh{Z-a4E>-Kumtb|ct(bm_-U@IOyGWO;n#%xz+EWzy&hEDrl~!R02(Q_?%(%3AJ=%ND5XQ=|Rd(pi*S`>pv+dT47~ z!@F>U*SphT72k8_vbEA3^Kq}N(|A<^=)McMB;Xa5i0k_BT7N-1Fwg7MX!lO|Z{B8R zZF}||Qk6AvZpz3p{>M3O6ZB10JnOmXn%}_IHvVwn{^CV1V~+GzA4k-mk>m|@o>AnE zE9={Zqo*a4c@g0#w6ERjD6W)n}F-T13R-=`;jJ7_5&}rie+SCegm|nQd6M@f}MYb z`B$2q(VxM+5#IyI5494e%JQb%k+`392HSRjy^4%xC%+osDxwWDbQdPnLXQ1mp!w{aBJJPFQR5lZKStVP zK~&L{X2_PEOe%d_bI;yZKbc%ULo|IL%cG_bosTFbxAM$uUcVL`Wmjf*REbYb9F~cf z*YMt*jY51=vmWju$5^tBy*I(^F4v&ZnYp!P>e@-_&X~%pOP_j~V2TQ0a(<5#M*R7^ z4OJ3RCW2e_jB~@W^=RSLIM_fTA8nIzWZ~q?)$_@OrG>Tvu2d9FL@_UWxTn+7m0c!Q zND$ridEM6fu*~2P|`HXKaVWHVzAbT416=@ zrDtwI)PWvRQ>!FIiDOc{g*z*>XA%s01L6b2z=lauENZ6>ojO-FD)$;1Jx{xn1Smwh zhcS;Ha@S(D0C2-6t7przHG1>d)a`^{F2ihnY6P8%Mcc-=VqoGr%Q<1K6FOVTI7Bq+&brMVHKH{jsEJs3v9Z=UCxzn=US`pm zrKQM<0bD!^2WJo*%h(eHTo8JLdV~B3%mMbu&2oMhfOj9Tl$~X+3bJRTO1XM`(}9Tb z40TbrcHkxvz4Uvpwlnp=`iRj($n&N!UI%M9eIvlgIKu(}h(&Kcoc@|^QNc?Cv=HYE zlUm(bZ4RSse#f?W)I87iGnI&fk zxJ5yD*w=ZnZtTsTdd=io)2#c-Bno>FCeV6Vk*nOju|4{^`s2~yfARx`6^=LLz-$jQ zBk;(4ZDE?W!6onfRCFp_y^b$rLtQ^^Y{T85qQcMSiwi|3phot4|A3gMz7 z;rPTW=gj$j0Dnrgq4JTdO}BKoQ3q4$2wnuw@5y7`Xj+Abgxbd(wBKem(b0d4lz~3; zZ2x^BjGL@(R5YYVy<1Z`?LVO3wzzP)YjZMW0xptahh(X!b7 zB^(%k^3d|Vnr`7)?{Xg^RC)}wGFH$?xadE_n2D!Ukwy&-^8}vF&SU1SizyE@!o)|p zk=K+)S-=lbnS`7iK;zC*@s`1#KI{L`v^HegfGWA(K<3?QvgO+-Yxx$oBcA>(-Vu{p0E4$t87(PIj{V^&mRWhOGBkBtaB-RLVt*B zZZKcL{(2_rkWlybmE+o6UIudkD2{E&z-hE-wjj0T;$h=aSr70}$rz@meE5nPSXxf_ zV&f?kJ<4fjo`wDGeD;DkTCJ#DuG!_)ngr&{kQt?C@V26Lw#ZrWGp7S2UznNcGxtb< z80*FFPzJtZdp_(kN;Wj$Fs^|%o95gTmj-mA;qc{#OQk{A2du8UJy(c9RSb=R_#cC4 zx@Bypw>TbBMP<0z?{u^_akc&pL8;%|(cKFUXYB$pc31)L+uO`g>Ua-Ha8&y-4w`vK z0u3V05b#h`-j3dQu$|^TXK}U)0`8MK>HR%MlbP>AMJ!&n^dxZdVU zb#(u{d60a4S04H>m-bM@wMG=y9?DtyFKyX!?F{FRf_QNiBLLwVCKJqmD)i09382QY zep$T#F~n&=3pqr+n}I0S%?=|@&&3&3#gVhtCPkDk$bHR+AJ3nvk z2s_Mcg>A@h5l3&4H4zzSo8E@%sHrOpBpy_E8N}I;kaP0Sz6x5Ckv1)+OcGx^}7_@@GMgO2j)7U z&gliFV~rH{44TgZB*jekOyX5~IwA&GA1-;v{NsK^VQ>uLjtCJfK$5*1o7KfvE&C~O z^s8$gC>!cih`TS}l-lB$SC;-1<~LkYsIS>cMy`25@)?`YKFLi{m_6)rQC82^{GAFR zTuZ>jIdmIk<;2q0d>TSh(nd*LcrPyYQZzUGsn|^L30pevatpUs2-nO3GR6Z_?G~o< z%>;AXGR0AbK{yFX9K9$WAMZgcMAA{8|92>Z@Jz4xp&Y@s3`M>@CCfg@)=mBOgI#y? z_z*!1ZwZpkb$q)3xIa>;`ho)Pr-~KO*2o~}2V)!hY=K5G*bOlVr#p`v{|&ZR+?k3y zG%P~@r|~R55CxwuNbGnBZ!&YRJF`5P_LBm@ofOA8M|7qh=FFIJcxR$fSOKJzDCCJG zH!uKDK}natUyU^f#w|D+;V>;aMw&G^85TY>(AHw+*LEH8Ejq;@L~`E4?CRZzw|T`g zD#ESt&)q;w_mWMMnOzv!RE-GZ!gM+8pHPBEfC&HVT$Ed8@pn4$`1ixvfukR@`IlzX z^O%V!b6EjJ)|S2z4GPZGs`US z>au}u9)>jeESr^$ZE<8MPPz}7TSrTSU>+8ZGNcWdozGkP(qRoe+^D_=g}_5g2Am!z zuU40`r7Os}kD4R5p)UIG1sG`MV_5)Pm`U;4rLCMKNwCh71u3&B0j*W5(%cD)bg7$~ zvPz4d!fceMDmVXJJt4dD+;SesNO5doo_T_hATydHYQ$+1-h;y1E)o+mv2XfJO0F`p z`x^>#^!U?YB@(^z`BZyRe>r;xEk+M{IMuHIzTAK-PQIItXX9hkZmcJX3=%|ri zgZh;9BF^Hmd5bi;yH+*Liqfg<#M*MTlNuE|dW(}@ovF1|P2uT_P*U9lbc03aXtIE; z-Fr2k<%>YRZ1&&%Nj3h%zOlJkU08t->suZ6KCp!=^ILkah}2@N7j|-2KYqn8g^peg z%a$(Nb_&h0LG^XzE5z}I4Yhb8H>Tq+m78)5zKUWqRs)FphL=E+;D1)->*{rFeFm+#;hmA_)Xj7czXcTbTO>b=R^Gp^kVPfgIKtPr6VQv{s4Q7HlvE{nx-z%$Q?|8-Hc-TO9RIF3aAMx75?Dg>2rR zlMf%62l^Rz6{hBJ_s>~MZDEmUWrxiw$|tQpU1z%B&RZu9d(&~G?TY~c4j|r@_fk?K zyYo+KEj=`Wp{Z{SWtZVY4JW?|;|addsZ_mgBuk2q8q;L|+vyuv?9~loFIyz9d|}o- z=A&n}>)+qLKd|i5VP&d?y>Zn8u%sN)dzPT2KlVYKjwTPcPSI+iZ58vaVf}2mp2GIZ zx>il*_HK+mRfE(Q-r;XqXbrxu1<-^mva>4k@T$aSe^n;To5F%te1sO{nXZ=dFd9c> z|DNZd9km+X-<&OCFnYvBU@#F8b3T%DmAI!y+-y7gdIkCx`gHRI%JNoLmSfYm>G5>7 z4?Ha%jletg(Lv}ar^NC7NY4_QSHDc(a_o9eKc+UQwzOx=&-U{}j91L{> zr1j8uOFdE>+o}Jm9@t)JhVkZTtmZB?3)I9c|4I_HqSN2#qxHx_*~kr|@7V0@a{NFj zOZE1{Av5!n0DsvW+TehDZc8#oZ-vJUwl%?%m#|i6%0<|%-FIdr|0^J+qF_}7zmM4p z#wNcuOre)yTIYAefme=-jt~P_B3HLJGw<@}iuJ5%*f>0+$we+lboC=unepc*85(3`XY7?-Fm<2`4m(bWEcV zMq~=b!b2qzKNQT-Q6-EWq=PDL+YIc(4|X2gNtDb2flUrKMpSo+j~%#;BoHkqZD$8& zugtQKMSiU28_+WsRPjKqXmadGoqpE7RH-0NkOYA$w5=CuO2H2xv6^xjM%&>J7|(N2@>O%UGmhxmo*m_Xb`;l>c|Wzl*IJ=q(}TDT&XBcSfq zus>S;1VOx*sXKV!Uav|Mn|v2eU~6dJ75|lH#D$e>Yf=HwSf7%R_PGr;Srap3NJk3j z3i3v0jf0`k0!i$_;gO`&g+N2(&Ht$kSQ0xR27!U@dV>Gy^Vr-e4u&NVmYi(pb(!vv zPmv`QwfeY=My*q!GY2kZQ2!%dpd3eB+vPHGe%8zgP3UpCk z7eV@$>U+h4(0Q31MBZCP*~k?%N3bKblnNSChp3W0Et59v+$%Th0 zmHHU1a0ky%&$aRMTx2?AA+n?==#a_vC(ET38PB6ON5FUJ%(^J8q-x`iZa3_4DKgJI z7@`Y0ZfunAxQ4 zMgEx_qn6~EQ|Q!>^?z;dbd#}5{rbqJVFe=DY;^)4kjZ53V6^~CWdadEj1g@lw**J3 zkL{mLe{=PFTGu2l#P*|$DOKCzogZupqfFzM&wYzI_Zf-Q*YPBY6n)~d>VH43Q$_?@ zU#dlJDoq;zJ!Tyqgxc@PuyaqQ4H-R38N1UrZP7hf-6z>SSAJdVle6l2w*f5}yY@>g z8mmi=vFnN*;jw6#i{zAYDYWGG^-oFaZSBqpDLBB8&2u}R5$3kMzOE@m^O@drm$!l z*I-(;3H>{YkU9 zSMhAf__o;f;Ev)QQUcpaL%d`SrAxS_*n#MMIwr>*?SDXKUBJxL5+2UNZ|T$_?#s{w z3HU5Y5JAY=g;>7g^g|~n4f#fr-HXgYsrK}m_%55w#pE>`)=ESps)YN;4yLciQIOH2?+ z%nd`?Jw89TlxgsZD)fy_G?_vGg!?69M4ZEXRfj@&6VUZ*sAE}jLod~+%w_EfixTZS zivqPg*B=s&;%YS20(d@f*Hgwpzm$T8qcEvI!A(13fOZd_4@|lOOsj3zW!x*2PF7TB zf4S@U^}g}tqIpZGHjyHJeDCq{%_>KKdiJQQ! zXp?70-|PBj|0+DM^Sak=^a9Ew?W~7(@lsF(WbZPhMw9UblIgVV%8uC#`y?eGVw?pX z8d$HPyK8q}n3uSqKw-{!8S=gs&@9xZgTTM3<64*@_bW_bxqjZhf*=IOl6F(aAdc7 z`~q4&Y3lE=a(Q<11YeO=9zB6aNs@OWKS9SahVjOd4aQqs{zjEhP~(FHT^LpsKawas zyLxNoUUT%ioaAnLPu`e_GkJdXX?#g%udEGq#+Gd8$9Kx)5)I&<2fN@&*Qj0mhV~un zA9$~%O)Gjq;FCp9CO9{VY1U<+esqCkl_+O#;RXZAlU`d>BL(v*+m1Oj(S?M($_s(h zU@&*oBmY5{wSz9625A;#p+*^{=Pn3#Dzg_qmHj$twndgf<5CD*dd`3uBm(vW`CHMR1kFoB-gSkl za6ER3)hTgqB=gyg~4)og`AoYxKA@{G^_t`7!QCHt;(;V{) z{!Gsi*+VksoUNq=-Y|sP<|=gC^4Pgq8CvkBc94(zTdp8L^4Xa`+|yhkK|LpDa-6ds0&laa zz--oQxAt{KnFv)EK}UhjL?8_keCdmY#Kf~>4A%c^nF`)u5d%9l8DC_cbs=ptdmo&9 z9bPO=T@fW~sN%gcR?V9}yr&3{v46~nyN?E$32mznudnw)K$?iyk2l2$WE}|tydVxTkRhFA zk3*S1H3IxwbK=lR>Z8f!P#%qtpTF4Mu}10r)N3M}D$cOfPxZ!})J_w3&qxH#~W8{?T+b z^mxx6L!02d#3w#>e^B>adp>xS@R?P)_bP7!Q)^A{Sza&4Xo2>AJVKB#Un)oy+<&q6 zrS9tnaM_`q*Rl8_-Fi`WPmdJUC^j{EAsZLdm|vQl?#H0`^F-r@Sd_3O)|}z7U9h(B zq?dK&*iLXro*`v|Jr`N7;*^XbF|oQ-2f08kO$UT@vMjl_dbYA}<$9gUy4DF)5@@If z$08uch}W25H*Z?toC?$sup?%+4D}3!D^Srsr>1lWl(J!kM93$lFzYx`{UIM#`an;a zemybiGgPTkE$ZYf*S|ISOPHHqVeYMFvGLr_Jto;+-WFmk&s^|{E<6IAv-9s7PZ&&5-{8iUMl(7ezbCIJ}>$=^KQ=a~z>OV0_ zV~rfyj{y|Q1Y1(Fe+!|hLthE!+s-1JFte#X$@eV=zt(NTWsaDETsif(BuFj)Kw9|y zDa7;6$)FMwSD-}K8J@`7djM}7{8n3@Ni9eHwfIoTYx`|FWrqwkY08+7dJMbbBrWHi zPN3slSztD*x;fq8kdQG>Uf&gRr36c!U`=^kMv?ds(MH~Qb?TxCFMM~DYo_s?Y$<-K z>3lBBIv4l5K&AXiqG*)_OIZE#^2xHTuTqUMR8KWB@QvD}1P8iyadKkLKYwP;hx&b} zF(OIpWd>Cs6#^hna>eJpmECRxI`xTMU)6H5%4(cdY6-G?Z%2Y!lWJ{H7+Z2jxGI{b z*e}Ju=L)=fr7TCykA=So!TOx}v1|cXwTva42mI}P zZgjxVHZKkVSG)!RG1FFKrc_9?$?8h|(q*o4?HPa&wv`!cJIv6+miOQ!b?oKLe^?XM zp}9R-rA>_aPkU$bjbOLtZ1p`gck0|vR=L5AqG6KgSlXVr>(tW;?CXXeJeO5Svd_^9 zT5tI55RU4Lpg=5O!rN(e90O)#Cl_(z4ers1MlCA}Fc3cMPFZ&)`F_p*1x3Ul1nQR> zCp{}LM4v_~Bp9Ntd3YcBM-lzqucz|xtM2KmvZ=IJ-?g>+_DN?_Z!fO&=e^|ITF29* zZG6%H;@2aiDqlZ>+dgl-Gk?M&YK`>C*N2Q5gus${H)PL4czBcodue6l4WL|MF4waB zjMV~!Y8`__>hu8fb7u%<8*L2c6CQn?eSF$*QqUX2u0kZmHq`r4yu}k}uT1v0PBm}e z#Vud*?yW3VOFCoz={j2mrM5@=GIX5-jXyM#8-ho97?AUT$-c8tF%L3*#dUep0h{YH z+#4{M%=P}izkZMaZ6F$gO6rPFxN%80THr88K39b8{T}oZ{Pq1{jxCU0H3?-WO+<8V z@nz1;OVl-CIKaCLjRTo1p$(*`;FAm=ILe+MYeB^WhAoqTcB1l2m<|&%mxtT2+2G@w zzT2gu9XwuEAG+v*nbKZlz6P;U-h_Ny#fS9rJZ9mr`Dddq5K*T6#dpa=gqPD%qCjKy zZ=8Dr9uq&0C~_PqbWz!DT!dg^%TO^L@(s_|^>!rOP+m-2Tuh^~lGUJ9$vBTCz>FPR z&hgn3VQnVGMYmMs5zOrY$&PkZI6i5h=ri<$aYv`WMr~>p?WQR^+k}=yWXtX1bZ@`r zjHmp@VpBiYvfOVFPQlM8>+C?>$|vg(%CEy`8E9G4%$0*DC{{7Jb_Mf;TwzJck_4%@ zzlM2$AAnh@?n#xMJ~!l=`u4xS6mH>P24KOe zW}uaqpjwVu>d8q*jW+igLo(4Fqzib>)ZW(_3Pd>L6YP<}-~xgWU`CrE-Dilnzhq2l zZL!OB!Z28wOncdx^bNnasez4n5&r=x$bf>O0RaI)0d+*>C^Fj$aCnRZ0oh$Z0^$6m zI-451I+?mS85&#bE3q)qv(QV5voKgW+uL2?Tf0|@-qktW4~#Wf26R`c%Vp`sdTni% z3S3SQ2R2g$LKU-ndByz_{g>T0oZ%}h2|`TPvyxk70y8yx^>gvLrTvmNo@1u}MTP(M zDlzc@3|3zJ6AgVH@Og37HtA zTSMP1tLWDY(;5hSr2N@H2*^x4NkjX!&NhkEMQ4#ILR?Z>1-La8zdIdke(onRCmd6F z4>=&+lYmiR{!kcuqxBoFm{_rxna13~-8s6odqq26d#ksCoW;^pk}x$*NDSrwF7-0u zg#pC6*vHwi6~o*b*}SW|Z66+_8CyY>JKvEgw4nHxF0IOJ_%D&jr)xXL#r%pB8Vg8> z6)+V{1!MmAy3U;Fr*|Q_{Sabs;i>%8fK9y03XnyxV%Tz;{LFw05GyFElC@orT70iw zQyLeO;&N{K1-Kp^&_nFyQw4spuWZ+Mm99-otS7Khs}2NqW=Tv1RY7*(74T&w1=dg& zTA#a5eHQ3MH8~`8+OjeKHKIOztH10H-arE;$93RFpoO#q0u_ z$AD&}BRQ~>Mo2EG6RZlQT8fFZ3B#f{6JD3rHk}iNj1!o+J}y`ex|M7l!$379pF&7C zNELdOOe4)eBd|J@XsdgA_Osi;}BWwjv!TJtO( zEohXjfT|SWHJ$T-uV08)XmHmd8+9NMXV4I<|F38CsD@(#8ng3Kx3T>GMsKq^9ogKe zi%;TBktbop@&5ijYxxxAVWs;z69ZvjStvGA_4NH=|Ji)6($;Kw5%0v2xA~;+6a>T~`nqxAn9f>2`h zRg2RtV)SCP+GUjG!dq~i0|VtCdgxa0btUq0DFu1bg}%0qCbxq(Lzs*wunZ=Ve9ysw zOfcp4r8Y`63S$L(vUrYycX8>bUS@(VQUWUvZZXKYk;i-bi0Ye#iX=3SPv3a49f}bmU9e~FH;K&S}=upQC#r<3^^(1NL&gH12nrH zxNi&w8KgFfjkALK|BfBw7iAnLYf7)XK1Oo9*}se|$W2{%%xzLWRna zvPqu2gs}#%ZD$>?qiH% zaH7U^Z%aby@X-SPjzr~PGtaT>k-)Tsv&B$9?S?KAU%tKhk{T`g(iu(&{{{GPcguHS z@PhdSYdS|eMf8BYqP)}4LA=8$26@i$k32t z_)&3&KEg3T5%%FoyjusS?`a?uW4q_oUjSZc=_R;9SD$QP6>CG}A&UY>6>^Yc`XSxV z-k)p%MB-Q{q(e^wDM6GG2g#~^X2=dai!dN0YX7>s?v~#2nBtDx2aF!dWFh=c13&DE z;Cl+}M|fK>9Cy8yA&>RjRDcAje}cIY6DoicB)Y91D%t=0lQvTbS@-W;o`2JT1^qQG zkFa8|&E+mky`F_1()v6&%y}^onjoC6kprl&z+)S$KGtcX?(`nKs6XA^aC3PMH*sw} zw6I9tLf_X{jBoNFX-QLv6pTRBvPyO7yrA-UE%tcr8`whcp%Qnxk|WM`p+HQ$gC)3f zIi#5kt)LZ|alaZ5$XE^*;3y-w&B~+dkMP`P>0oJf4o!(Ez08uF7jtK1jC1{c8jQf2 z;=^F`;=t+cmf2n5j9&8wLo;^7s*`Ehxh)dHCokEs&`DAx@|9GD>SN}v4IARPeDrrY zFK29OLQqM73;;mAS*{hs!BVL9*v%E}S7sH?3vw1SfR!#d=`?`t(ON2iO|;fa+G+9& zl=J|TZy_RLA>Ng083qUD{*A#Wbedr>C=0iQ7Lb%>eoB<`sKbpiE5NJJ?LGBki%ONX zNKWot4D#-JN-CDnBE9q7ac>YT#snq;#0AR*MTwR*?X-X)X2rgbxYyg_s7Ew?l0?I? zna)kzBNNfrGAMKws;~&r2v1p$;K)I0OJE2K1VE;7AMF8mhFg}3$0uUH*ZqxohD-*V zMHq7YBm%Xn?ExqZ2`bE4H~ZTf$zuS5U%2gw$kjAU3IRkqd`EAz2x2eiA+ZjOrAZTwh1Sxxkq>*d^W(Z^nj)F8D2COyDz$W%+YS>9z z+GvAn4_fjJo=g-<#^kuJL*=OKm_Yp$ydHBSo z9JSV)+&PsN-^Wv_Xea948p6G*;HD^z!b-NPXl4-lS9%q7Rn@=8wtfLo$Dv7kX<*4B z>U~T16?W*zfn)TY^E=`&0TAU!gT6AvR4C!B` zBco;2QM53idvgrul8p}#Mr+9dZ@>4oj7IA-de1J59W zjeLl(vy;K|G-aKn91J>O*|Q~d%k|P;zZ>u|DO3b^Y|jH3J0q9nKk7VnL*HO48sa2D zpD`~Y>Pf8gjW3buxf-~dn?kt_ZWWkC`0n`#P7II_ZN)tsm=Weo$$Ex4^$u~pW9;v2 z4R>aWa6|Atk8p99pJa=$=pa=qtmbG#6z6aQJR%LdhnYBfdWV@{#{QuUQSHB@42>5% zMv1IG8+DtXprOe^ zCG2V)tV$nkU3I-;EMyZ)JhD|o6f~ABvg!&dagK9R_b8)4>zk3BBE1U8<6SN%Irw{m4*BH9Nz;y#$Xs^Q1WcuYjUh7%2}q1@ zltrTn(x@ri7I6cp3DUA$e0Y6f@=F|1p_eFFOr@T1=diKz2p&*ml#szO!jSAo7YoVQ zBV5ecfneh^&hl*M7SR#f3CXG?iAV8fg`qK3P@_g*jcmx&x=3R$PX$0#5NcTLfcbm` zvvj}okWT#A1J15<;>|iBu_Mj5NiUMrSHcIhNGC@6kt=%wRMH|IZZ}Y^DK2fXY5jqU zUWw&2d%nD09Ne|7A=UIttstbqx0F)&4;d)K*q@zS@Xlll*czAqV;3UTjR03;ySB4Z zu*Q4%6FxiR~F~6O3^HZ z%4*iIz^$VdvGsa3j|j@4`NwHh2;ubuJIBrPWlyt6e>^{8qbpiYVu~<}u!$P3BRtA& zy_AE$cOpzBaZN!6?jRWbfRp{c+@S#!Tg3Y@8r{x#QuznW0L?yuG{X^LKaW??07oiB z6)&BNBdVRS8S&ov1dqwS;C;-krQ7D=XEY9bPk#%8z|F@{;c)(WP0HQH+&(y>p(;)4D=wg$+16i z9d{lDy8Eq2zemZ4YQa$aNbDR*#-tTAwV;$oGQd6@C-$bqX-qGm-lxN`4J)1#RBV&= zXD`=%Pz-;3PII8j^v~r3A96x>Nj$IJjqple8n+y)A&tlaJ_`!lwpFrf|NJ&bM&vXA zCSq~88kFlZib+GG6;pl~g~w!p;G&(u`=QLQveC6MxoG5zBUD2=S^VWFouo4tAZ82F zZzSY&oB+MkZfq`>{fewcR!ZyxJyaGR)Dop(B#Y4lfv>aiLU` zGS}_R*IijszNx6nue1`)ISEN~mYa?64<4$%10vL~*lMfj&X>!{pvn}Mlbi<&qFMi* z5oSNKYLR-4)%qdtJ<@t2c3jF}p$Y$hGWc<>|z7cH*d_meWaMW-H&EvqwO? zB~1!{a6lA^jF@xxH@}7jg~{3)CAk&j_zNpN|2Y?GbnnaJ^1l%7^sR!8r>D0q+UvH& zx{a%ps>`ILrK+ldww~`l!S=jq<~>bwwYy4EZ*y9Vh+%-L;BT2{SZfsYMpTrFenF6J16C-Yzy4Wn4|*kO}rFh{J#@6#@=g$4uKYrO#r9|I%d=N(<(3D9IbOyeXhd z7vTI|Lb6C-Cq*#wLOg=JF-nV(jkC~vnj;42HtJ~0z?J)RN3$WW`W8ar5w4MT*xbdw3ag}mc)+90zt#@3&3kjD-QqSG?VMvOT^BcW&Q zQQSd7DO)5O!1AELJ!VRW$Z-V|6DJ&R+^GUgg-=LB%XvA3+Chlxc)Z@!r!jI-^N}21 zw%rSOZL&Ggw^4ro?N>5y%URVJJ0bT~Z5xWG6=D4EWPXsosX7lyphszs_{vvReUJJ* zBtQ~@qYqjCj5wT|mWm`J`-1UL;k8uKoP2unEY8-1@=LVs`<2ZSepZ$xg_)3kjbQvE z1GHEqdZ^8(C*xs%TA1NVGY^)Gc$Wap+9;0=iWRn(XLU;$Pr1DFItMIAS|eUNi`V>f zSc>eQj~VstyL6e~yz0$P5DU__yg{|)e3%v-iV+bWhtMq6i z?q=SC1c=GI4xxK-Tbvb-YdmE_9Nh_}?AT$^CG{T6NHpgozZtIiBS?Vi#zxPiz?@@d z;3Ti0e2jfW2!Q^~>FBsCmFAtG6%aWi#0Cs5h#Y}Lk4n-MK)wmzx(OiFkSMi#WaCc~ z8Y3;riw{8C-GqrS@6VW%#C7gg-?`oVrr-{9`H{%rd9gsv^GQch!TJPn1-7p%L#+<6 z!ZD=0ITeu{b5In8M)c2?juEdbucNrVGol6^&(jJr9X9Drr@>`jPJO4dJaC(**`nNIl|Lq7bq@kKCf7X<4pxgOI;^vyrz? zMemvG(G<#}?P!hY3E-C!W=~MRg_zvLnz994`QX>&Z&{*T8@0MK`?+qr42~$W-En^W zsdG^^jaRg}3tt4*ufuWrS-g0}^F~bZFurm?O(+wpnjLbOsE*p%!%0uxK&b&aEGK>A zIWxbRfzF?tS3CN(d-!nw&Hh$3LY9fNC$Pybbyg}kzMvMt+rg^mo@ep|`2I7kI84>jFlc$}i&fWNqZ20dz z1FbM<&OPBxxw?_sRFCuL*xCiVww)d~?*z%+#+?XjxMc4wuXxnOpy>H&)|RMACA>*9 zO-2hvK{AWVpMBlZ?zJu;nmx+A)xd3Yi>513x`u%3iH8~`7&g9)FO5;x$DHbX`BPCQ zauCJ@L_Lo{a_wQ3>b*pp8c2#9R#=1P;fn%IO%Lf8^CjhwzYneo4CL)}T2g>r@Z@^Y zR9|gtn}=)p?;6Pvf0cl)7-*<%OZ^4nYQE4i(1mT&g%dS`gJZ7zY70^{nS5>9j+#cj zd72`{e|AaqvFiVHz)H)iiAk%M)= zPxrF#^QxD%{{ca9-xLrhFQIf5#b}Nop~-Xj{6s589cjKRLBk%D#|>j}u92Q+sg|DC zLZ1WxGm#hz^Q2*ssnJL_SM2D|D}|!(=sW!Ge4X8s^J?oUiz|bAaQSEygIf3oLmYE9 zpoCw^X6RrI&C2(RL^4?H35Y9Ue{94F_08_|NwV@IGB?RMHnwjHnD$S$;-QurJa2?c zrv}th)(Trk>3f|mXqx<Bi- zVltvhybdK1AFn-cksqm5D4=t`7kIyGL!&={h^V#tVX4A=br}VunM`({0H5aP115w4 z=bF|OCTjk6fjX+Qeo8)#?vucziOJSJp=HDuXb*6TBpoA5n6qhjeocg^2wH`R(t2jN zT|UT0!ac7o@kRc#3i5Z@+8|F4TJ*y>3$|iD;(30M=`X`_^E_2BzQcroI(5~w$@8Ni zuNazOL*}H}7xVs?;sR|me8#7d#>-rnafQi3B?%7*7pWFw(d996?9$#~luvdb@v; zq{)dagnt+1+p~0)Cz6CQDWqB<@H}L}f$(K}CwwuNA8rJ`d1o9RkutDoWy>|HU)PO# z>t2MJIzENiBn`!qNN99x+QK|wt{M!b)f;1(8ZU!jpmW`tNdBlPDOd}nJmzF-K0yXq${P04 zE^y+#P5(MDLqOq4hBpnHyvj|b%YJ^H!zgUdl~~Acxd$4ac9UGjTNGg;KhaR4*o<<^ z6s8)dHk_%_@0*3$4O^OI;pBD)eTS5QX3Zje`4a{nIPV;Ami9nwl^X<`^24w*=hieY z?6C6Y+~NR1XEnri7ep^e4Asf}@=ELOGX|e#hq={-e+D}FSLyv5{|=YQ#Yi>+%sH5h zV6nQ&^mCr&ox89phet={^=k2DA&zw4XM+Vw=}>%uS_i+S)EcZdBqv*r;e z`f|EZv?}2W1jH#{{~b!3c)&(2smbW});~Y~+D~DE{xQpx%F=iYYOVHJxz-8j4*AaZ z-A^*9>@?TLHrDKm@WXz)cyg`t2J($#edpS@MUAH+JnlRU_E=_|R7MBDPCaBc{yLXrvU6slF1v^od)$oz;$XjJo#T0Ms2x+)xWqt?5q618I$L79bM z@4H$VRR|M6VciINW$CG+5;U=XNfB0@6Z^}3_mw!aDzTD${~~QCiDc>DGrD2an0!A$ zsde#APuZ$d%Hm_ez${K885y4SA*1eouy~r=9KSX0b3!W0KjvS*Z?9nD)X&`+J|3<4 zAt%o@(}Hf7Z1?VM`NAfk=3O913FnI#|FX-euE=6MsCE;7 z%;zSr)4S6&U^sWS%?DSP5;J-Av#TdeMy>#ssA}+NXLNC$;@vrQHyfg7;GKf71JLV( zzfdz2Z*84NtfFS?oS)Sc*RmF$R?biSR$KpQ#r5WWAsbN@D3yprS}qs%xwt7yQ>hNC z&jcGcmArRM3yGhl>NCf{_1JRgnU?$Mz2-9{FUp3|+a=6jZIk{Cm#3FNcroXp6D;yEkcTeeV&5uQ|BFczP~m zqIZ14=t-x6#^RsT>PPE?*?c$`tq0x;X!~D`iN(7Qd%rK&$07HDrr4})o@a_D{7|(`Ns1%0vAUAjZuTfm0F#b)&+-`m*K!@pw1bX8-eca`JLn=ijN5_fIu$niOx_ z*Q2%9ig7%V!_Ay5rY5(pM%Vn}#c}Tn-~CyCUc0)tjpcPOT(0fXB&w@?lnD6+|p70GXcox8LPx z`Bpk~)t^!{?98bgUSX;oipnt~KL|>Mry3|mPiuyKTxfldKrp&A1ioT=Obg$uRufLs zmLG&(#cQl{udbTO-3X3g{exrboh$@vBl-&TfDW(f_Vh5X-oSezDgClo^8Po!y%R`#B2WAECq0D zo0#Zo3w%D6j?RbV#qE)(GsU-s@si}){^-cp?Ox59gr>207-l0>{3XJ+n`$Zb06t&J zx93fD-)}eG5ND42g|s*U6QBwP@d0a#BQ@cm@?)K$q}wn6T44fw#cCRqDM$-Qxvd^5 zOJGSFg&vn=XVae@eH5VVi|3ST#P8U88Flv_E_Xw$d5W=WbPmn0Z|jhF2||{29yS-b z3(Ro?p+hmcr5Vv!7|4QMXSB@Sp4&XUsW_k3&n~$u{=NX^6doOF*DK_NLPFlYqiPRWu;tF!LydQWNvbmtW03=SHu!$$mP)et|H_#)~1 zl9D}Qw;>QSUx+se)2Clie-UOxlHa8QV#MxoIX+_k%u{C^#t?l?5lajJZ8{;gLH>kt z1i;80{@9jrvh`))`{m&e+QkISj|hO^YX*5v6|*n55FjUqQxMP!sl6|a zlC)XE!UE>8f9Npb>>tT+`!?|R_U?MDHUBMusR3yRM1@4;jMv{CGq&mgG#;R#fy`hb zGRnYKi(!M{x?V}<64v+i@XYI@$jXO_3&HRNm$z?L6mTLbP=lX8ezB8e?cO0MD1$g+ z6%qsv84|y^A>I^brBar}VQtYA_FuPC8Fe@KP~ZBhSBkKaO2V*;1JAZNUZa@irY?0} zFk&g;eJfJQ>EGt#$P!-{sT=ipf$yDGIMVuOXKQX^Us=Q*-Hviw=`ourv6f0s=Y_{g zIr~ao>q;H3NY|_8Q%|5n1a}r7=nQT~-*yUU*jTOf?)<84=!-Wg{OO*`A+WQfoPNK= zeMb6nqGP8Lz4KCQ+v!Saqf~=gI_qO^0=6_oCJA81yf-*VI~Nn|GwXPZRSC$gYyJ8Dlyw6 zl6QNk3JfvQl2`RhJ(Pl2n1Qmv7*gDH*uk$K#_8n)vmFCxK!6^75))BseCsyh z=1E|bC2#!By79tn6c2xhJ*}<@5g?&>jwcsJLNQFOMvww;{S*o2mKzDNcy(iQviq*K zw_0>8suhw{mhAon#b`?;?`>QR5;oSflq*tlVuV#2U`tu3M({q4;T5~9 z!G!}Nczrd~7Ykys@qe ztN`>f&zEaLxHx!61*zq9f(bG)LY)A$8GNM8J8M`TIN(01p41ZkR#Bo)!p3P5!a$uc zfJ7vd#i)s_X^N>})=-Z|`}uF|WR~A!AthXsankZdG=V4G;ES}mw`)Vj%0Vf2yQa=g zS_b2wW+It0A@)CRm>COD=luwk^a8vX&_^U+qP;5ji>hgb?P#NQ>$z2*HCx{69lL2y zBgZ{kO42DxUvN0XfMfS}vYn>NxhM-&rNgmE&`7Omj}C04a~sn8whR}i z^y!1eoN>FWiwn3pU1B;t3ot0NyUidc$wwuz)iGHdIjjl)0fj(%zt|~a@=TzRZ`jOp z%8&rY9KP-p@)xVuPE>X!T=7fkvJH%o?!HS8n}cm@>3S<`REf^4y`4?^sj^8WQx^}; zlsBbK&s7N%r4uf>^Lj8PG|nWZa$XKpQJudE{r2|cXej{UK}0H0o@Wo7CC%X6LlSt| z**iR323UF<)M_|QZU9raz>5a6%!Z^;;0Io|SjYxm_`c9GoZX@L;@K$#q+UC77th1( zFKhAaRN3T`7ta-3J6Ce)jOye_L@8G`N@{@<()f`XD!=+cT7!kDS(ow`&hAirUD_=K zq+UD8bqV!1U&?aS*@Vv{Uyd3!o4IA;xVUirLO|-ZlS;juWNAFuVl%f+LwryONWFH_hZw95%|8s=u7N!+ zMOKiL z3)noV!V6g@X;h=d9Fx=g5JBh%-jb9nvQfHI1f>tR>p|(xLMUArqZdHvti6gVly657 zDp&;~E*}qfweb+o!K+3;x}{zi{c1&p9H*t(Sg_u>w5N+psV8cW0#Pa$+5Oxj8#(P* zwE2VF&5Mm^*$hK#VwXiy8ui3?Iu%o7S9ju)y3~deXY0yzM>L`5TAU1@6lzLkmVLdJh|Xgxqg@HtYbhO#<6) zZTNRnEP}3!AP++fXd8#7wE+S-yaVtaE+hB2>D6X0ah3bb^aFRoE@U!q5G_I-NVEt- z)*{Rc6uk!f=7qRDEkHF#;XAf~&rsGii8XJbjon-}=N`{>*b98Y-l>XAM? zAdW})17bioVH$jK*V`2uBUN$M&C@)$OAofotgW;CW2}SE5aF0<}o{6C1oC_(3!J#$r}Ol_gkWCEqcE%C8TflkJ|NkJ8CS*3bZ<_}vuApZOI*S1 zJG8ibl&c2BCM>|cM$($pE6t%0Iq~lQyO%HDzBxTX*AWaZ{c1SPVP@nav^0CBS%HuW zA~lGIvI=~tCVIB|K2v4>1FPXVN)&Llp3ePqz=R*R*jK_|ut|MRXZZ&{#iEd$vFAHK zsOgh$)hs;cvje&0L)kR_9vgY6FPw!B;&aNI`H;$&Vtn{p@e^J{bF7n#@a`*`%h7OESR0wr0F4K89(4>OBwBwnR&&^qxC^C)y}QmGjZ``o)&b?A_0 z65N=sHH=j=bb<*~a~j-SnJ%I+*5idL@c=r2m zw=iL4R*Wd~3@{W>pwwz>5Un%W^G;ErI?kitP@inf|CeH3*^+hKub9Q^LDm?r3}1(O zuI(I)a|5bz^~iTfP(r)?eTy8SV`s~Qv4fK=le?T@?Paw-ixq^ ziby+Ue^~w+(CiPFz&@J&Vg3{WTggzu6>)&F(!}D9=5oz`tkiV=er#;H<}Gvt2c4*& zon|Yxz64bMLR?n5`kS$OfM_I5y);GAEPn&oNSaGn$r?#Bf0~dqlgicKnd#0kvy_P` zT9X;dU+EWOLj}ueh2ke)z-{}KSp0vpcPY^;Q~2!SfyQ;BB5K9KEWj&@$4}I#AV*-s zCQNH~kD4&8I$>H_C-c*Br=jCaawLW65w~2GQ)Jpcy?kQC?vz80HDUK|gWWpVU0ga$ zow8ZcYRMw@q#=X7Ow-a%NtXZeilh&6nY6ce#sq;;FL#!W>@)n%5eP~F8OG&N+5Z`638oQhWw zh`3K+#BV^fXd|9)_yKLwG=?9gm8d5mG)K}t^oYM@S0`=_j{xRzXhs3M_~zW8Rk#5& z#o~BgnG#%rRA<>H&^-eMrD)NiVCI_J$`xDpwnkm^@UZ*jN!vIu_uG5>Bcpvd>~`A2C*3E;{^-i= z?CvKmVc&f?fB)fJwmsLS-UUNoN+t_L28C)I->?T>090y@OvcH#3womywONyapa5E5 zQ6H_MK18;KL6co9K3eIO(@Px;z+w*bin-Ce*a!`Ewf!nOhiPeKQ(P|CX=%x$lQ)ga zOJxUa&6`I3R#1>m0v8tA_VI6Z1qw||BVJArGR}Z2h;y4az1W}&T?OQpH!b7~GjCdq zG38B{Jdz>Otc2O+O=pni8`rc!+-x89SC2NkNSh65)=rvbHgZ{{vSQ4E?H*QD5X<%z zT=e*2Z+ovt@Ft@#PabgJc5Qt&C%8|M8?iBTf}L;RDaOynh`8*GgB^lwFMbG8=H*kh z?}1Wm_od_LWp6inC$*^F05mfG=J#`WP>sALBO#%KFvk|-f&`alU4S}aby5qT6X4Dd6*WPwErZi!Xxc~phLi( z@Z?9@ugOL1n)nT99xU`Bu!Wv2+DvCl+HK$VKJSqBThjgnf7*x(JDc02{SsjKpKGyi zWW3RFEI{TlpupYc#teQ@2A#|UKa*VcV>(*>`~NYgS|6s+IkOsKy3BMUu>QWY zW|44;Pptrlx-PF;TRSED)k<+D)ye5hYI(k(W;tZ)P=`!)`CPic=h&hpO&vr?{6p!| zl#pu{A$DzfihFyS4NcNhr35agAeHUV2nba>KoPu_G0Y)b-`v&O@Q|(meoOZlv4?Q2?6_ zjsGT*F(B1mxrZfjaiE)yII{Z~>xDQO*Uom!Vw+t%_b$eN@^)nGd(iHIm!{sPqQ+#|;W}h*gCBdqB;`qx*mng5!dxP|tTatRmlY zfiCzh^Kl0FyU=snmtK=7KmHzRcYWwCRE&amf8)XY_}Nb20FYiF0m0oWfaYM7DFM~* z>mOa8@{C!b=w3LKHHG);NuXf5UHZI@sjyA~L*#dqbBK3!4A7J-5 z&B2GsO7XcH3E#Wv0Y~1#ut0Z{GtLLg3#iQDts%kT4c<_Y)W`i&GYXy={J;rBayaeu zJ}6w5C7*#no-s(ZlwKAe;XTqc=`HlZfRhH(q0p8ua_1)#|9=0Vm(!&q?;K0A^ zefYG3yRPu>OnbPn3O0A|-G;ULF6s*Il76a*Co7b55`r#P9tkHLe3qKuvAuh!k&7l8 zKg&$@K{d>D=N`Zv@SAi+gRJs9p4=D{<)M7O5njveMIl)zpF`S^o17%BfV#t)2sN*) z5h{!yjyH9)oB&l*KFwkKkeOMOQ-t-aSgx$fP~cvSEZs0J=olSYnZq(GGucMCLTMvs zR^?FEm1`r@TvG1 zuslZ^ket&wNsVV~=pT>U9-EeEtXA%oM^vQfHU=LymWe6<{Ub*ZUTLxaE~v@TuM$@3hwecFw@w}oumu~keOFaZu+xh&Rqaw^xxnA5K_jF^S{6U z?N==EGAu+N80H0;p3jo=Oim3oa}{j&JX2AtVJeJ zNdW&F7dK}h-G-bP1~6&D!c9!BE|C2|O23GIAzPOX2dA21Yk-b@#L@5`0gjO4Z7G`P z9(OybL!xAm%E4lhAZ<)~!-t$whi&4bCTx{6bylW_pUL>Z*G$Wt=Z5*Kdnu%#Z79EG zyczpD4kD=Niae3O|@*f*f(EFFB6W9J3|t<51fV10ca9`lJ#YQqF1;EnwrBeq(`G>@hY<>U{P!Q!t*Om2jwpGBdBGu%de-yx|ju zMCmNfO*#W~OV*Ee*M-4T}AMRE9_(!Ey)oTazi^lpLLOwb{ z%zEnt0U?F2h$WEc?HVH?xf~m7cD=trOEYb`u~zRq_K5bM^TphpkCcf#pR2a4E_478 zPxYy+!`aImjg+}<8-F!Mmv@7wBoBv!>LU%c%T4}EYQA94k~g~x_Mm$EphyHwci+2B zaDZ}9mQoOxQurW>i^*QRY)=Wv>XG9}aXhb*RIHKY(NxNneYCR+l#!(v zW7)!%)kr!{p0SN?LpW6+|8R{@h@<;7@KX+%ovl;jqbD<|;Q zEuGYhrd+m~nqqa7#F!M^J#=;;Lz(?FsLjas-2+uvn>y4NP2W6A?Xb?$*@m`IG>yx7 z%dqE@;mDFLdu{{tXr{}PnKF_G18blf>U2684w{nlMbozQf}-g$J)%uIOPL#rrsX1$ z6is0%2d>`*O$F&_os6@RUK^_A{3>;)aY65F=oOZwb9dM;hl8)+$J@3;85NQJPlIl% z1!RZ4vjjg4+1kd*y=WTO0H*fDQfJetJY9^2vNqQYd1B6ovNBiHp<-F1nLh8X2C!j% zi0R95V%POv{V;y@1Nrd_a)+Qdn~we62LIab*Uq+D3x3hG84+A%Bjx1z6LV7V%VEzm zH@R|LoT%7K!MqXTIz-0GvWpv7$o_85$`a{P1Kk>G4K*2)(m&~gUw{7c=9iydZf$!! z{y6^O#TUwM_4Bt)1*ANt`%ulTDXk~1#iZAJqZ&=zO3`e)ZRi|v9l{*0O4(Ecm$XvT)fh7u%$H8 zC#XY)7n#TIW(ya&$vbpMG|Dy=%2LZtsFRha5%W@q@Lxks3UyMblR}-$l?ruIsFN*{ zlD!BNQz=@eO{ltEQ+40=)WLu~b->lrcsQ>80e|o|Re;5l!BIj5IbWD5fQwi33;}Dl z_4uc!0ON>ujouWDNE1kLffUaLEN&Mm9t*)Nu;KzMF0kTdu;Q`MxrQa+;)ShL0xmA# z;sP$7&yFSF;PNB%N&iD zUSp=jqA8d8Pmb`6_}^}qPk`*FAzIrwxEDq(?(|s;*&G>) zY8nG$pHDDUb_4Dms>h`P-&#F@ z?;8gI*ob=M@4&Bp4_1KZJO%)M>20BooFMSL6uU~wFP--9M zvPV&(kekV7`b>R5(cMn0M@Xp@9DL{}*=|te;e4AMDemlev-CS1Hy3CK;iX827qA~G z9z0G1RuJ5+pp60)02&|oNnTJgd(}TgUSo}^7yc>81TeMf2lo*p%xl0>Q7tPMQ1S#9 z`@46zPFBb=F2u_(-nk>noq#WM<;*vmb=`6Ahh=UHfacnOoCoFa4yAF&2&cqHK z0g#zj-NTj`68bK11L?oN{~@G|A?JU8|C=V0F4d1P8;&F7kmx7Lrt~CB|@AH4hSnB1s4A!)}wO+gKxvXmSzIrJJDy7e*0UFn@V!u=H^{ z*uu`ntrZdwKFL|Pi5%0w32>=_ zvIi_4Opb&8AkEP57xd4Gm=C3T5}fM=$ybDU@+acVQFo57F>Ax)B)-gJDoFOFbXRh_wiY-c6(40P`>XYfP<DAnp3SXY6>z$0S z4lvvRg~iKzn;_>MtMH)>M+)E`#g=%yA?v|&w&CL&=(Ec{zybLj>B_rzcTtbYwGHr2 z(s@o75${06eR+I_vkyYR?4@5$0MY~4NjQlIcZ16eg@_YW`hvm}cf>x{0rl2^x)&o$ z*UV;`F?ysiO!c$w#z#7^a!}K)Si*U0DqT@-V_(DWB2%xp>f_Fv8NCZS1+L|zDD|s% zd4z|T)(8;Jq!MYp=axj=9Blw+jiD+lra6NEx!P2=jmcbIXtpsk=9aCDDvz5}w>3<7 zdrGFl+fyhN-ku_2rvp?8Z%@v&Ug=ge72cl5rNY}Iygg}ek2>t2w}&1_mh~M+il)Z| zS?y=0qN(r&u`4Lxx` z4QCCd6|Dd7jko60m-~YYKAP31;LG#^eDghel{g@!yd6H8PL>RP8yi1v9rPtf&aLWP zKQUnQESwDC_G!)S!yj|5&*#J2Xx-uS7E*|pK@;wtZn%4@4VZk&-ShdCU$sik4=4>b zDO@@w(t3{{36~B$cQ8^^xLOA123fP`bJ)&_*foL4|#1jCkH8k&|S^Z+~Qxkh=n&!6d0E$5K z2kB<-yOH-P^r(=^UXu(_ec3vCQB>eH5_`cYy+B_EHjk82PsWD#4CC#2yQCk77L?#n zTb(}x`wjUL155^^VnaQf!X=x+Bgpgk!T} zmrDdi&Ww{7CiY-^5&~L@&j1O2jxV9AtL*kU_Ov~oNf?go#_q1JuCA^wSJ#mM+g;A# z!}jPPi^G|9kEhcFtKsUucIM8^xqbi^n3}UHH;n=Ji;Z&uX~xWwSBGEEXO1z2O%a2j zAq2tibhCFUcz%jF8&hbVo(r;5Vm`#eH*!A&`A4y>%q@+b?{BQhO~!tN#+1?dka7n5 z+T3;StSM(LO|}Z~AfQxarlL)bj8Mq|1F3n zYd*^on@B6%LO$Fkhg0&TfbvW~Jte-EbcC#xy&xGXo(5q?@|l4G+crDenJph+(^dj* zgi@X0=1}Y;)w;r&Iw|`Rq=y8 zxp5ua`VAH^KwYxg3Q~Il!d7d4r@cG__HHl4d3iWDJP$O7sn-4!bv%>_w%>jYvh9%h z%5eQI61k0H3+{8Vy?OJVs9&2@LiTXP^9&(-^nTaBop9;-K zH4RW(2~dLcLAGaw!|vQJ6|k-M`Vg?47O(f9!%SRL$O~^FuEx-N;(>y^2ZtIe-yG6S z%8u{zF(4Xe)(Z$D#6LEynP^R8q(p6hc*l(bqOqf&4KPg$cO!a31;_MHfUQ}&jz+O2%;hq01B$=m80JjS43Xni zgFiE!tFp^vya*SPA$e&~0fZGqcSSFffb3mCXUI)_4Ppp~_R|O zRn}(3j@}qAq{WU}`tntO=8BztJcS$G4so&5)Mki_o&CnePV;n5ik)Vn-=x@S*l*zc z8I5`oTj^o1(XpevJsfRd=*IT9(nZwzifZaT{ZONiZgX16?vOSo;8!+&Z=VRW`m^89 z?Q=i-TY_Hsv9AMuB=vpyNNVu>#Ag8b?@}FEHp|vz<@-|lrfi-N&v8&`-A%rfqAm|| zS`UhMPl=7-?VHvr9pic+Uuz4 zMq(nYOg>!r$PhA#I6_538(rS8@kRt^r7pN-CxI%Pr@qC@AcLAUa)L;KlIt0f=c$&_w3>K<0@YgKu5}h&U9M5JW)2ZfsGA9ZF`~3T)qlip5{&X1o4{`wUzeOnN=c6dnPnFp29UT=G~L`bH1!C|bLNdv|cxd2ny_Y0USNuY$YDIiQG~M0nus zvvZHEOF{UShquTGt>|VF;dl}d?ISNbN~<*Rx&(1}nBs0?vJAeC7}?D*?<0&@3b3Flrz(p|tT15s^Nw21<8s!pAqBLEg{oW(g-S7FlNa z0c^{IN!g)~C$`rh4F=AKSzDlngP5J`4hm@e{iv(AqEm|N4*iba8FYr&=5pa9W5`Fk zFqG!t8)o`(T;Xmy12RTb+h8WLoP2y1v|iZbZm3;C9;~Hvp@|HZPK4#7-WzoWdRHF` zP8p3l@B$umbR80k&?K=R&NS>h8iid)-GP|)AT{kv$450pU>qv&Z__T%BE~z2zzXY{ zS~s271-q7*H?>YrFx_Z?XyRWx{JblsoViV`xzZ+~{XvV*3J!p3X{arkbijdhflbko zBa{A#n;V(}iis^sx*D!R=n*|7S6e*NEnA!uKukL6k9vaqRJ455tIw&5!V6wWQLx=k zSJoUpIOpOMc?Hd;E_WyE|yk8^fBX$8T(KJV|BYclI@Rg)wQ()3v+5l6 zQMv~OJ78QZ@~iED@rHN6c(((JdzSh6sCPg!iGZ?q0BnHfcrd*Inj1Th|C`(XJO0n+ z|Hizbv-p3wS^gh3Hue+ee-&U=J>(kv{2L;lZsYf#YCuiph@2*~#kpzZtoZ*Kgx3cp(C&@lIJ%KX~{-tUhaTmLxk_ZsB96z4ZO`i}3n z$>=No?H)9?`Vp@0HOh7|rf+!c?PK|>if&#gC`W!$MHu0WW7<|EB=iitoyz*+dFa3r z#EO0r%?7C58uJh&_!Yxr&2}hb5p_uV7IHr<%M~n!3{%CVM6!lf)JMl-_darPHIsc# z=XYbxvSVF>9zj(l+2=IfiV_yq;XIo7N+|Xk9ai@mJu!uw+Gh@sK*T8~T}IO_(AoU7 zFewwZJe?*yY`}+fVg`BaPHhX2`xqa|+;;GA6}Oy_x*~wW^Oq16b4gK%q}Ltqm(JHV z1ZN{h%NB&lY(Q8kW&0$R!g6<+`|83mE%XpjdAw*|7)`;7f&sp4e`Tx^2e`4XhLx| z#LR9blBPDkKN-WWh`Fei=8l7b#9WI_QA!^f=Nur1(ABo!IWCmXe!i@d_xmDs1RA4N z^Oe;5ae4kM40L=Eezbgl_Qlyi8K4b5$e%jlM@TQ6u{w?n67~>dc=}Qq)}4DrFuv*c z2JO$!s78XC?q8X+R4-yvoTck}KxbX`cA){znqVA31q7cKZ*A=nEu$~1ozt0lh0?+s zpL6D$xY(sB#>$4%v0x%CAM{idGgk4WTyDz z$Ex{qV){a1!s_vU0|~1k)w_y{2Hkcl+B#G;PDG_<){SmKHIJYYf=LbR+Rx#ghPPe~ z&myi;bFy6vW9}5hiXb<^np>+No(3z|-K44*ivP4uHF(mxV<28uoA^$dEUio)#FWXe z%j=TytDBV4mveoCmtXOgoH0!1`6;%$BM+=(c2`vlyEsx;FMUS?a-iSWK8a87-gGe@ z9%nzLxibE`vQVl^6xGFLI3ehcf0VK@zgyddP65-Un?R`kdUEsC(JrN zQt&28SIbOJL{>EtM#MjRgA6-E<=7`YBkJ(%h@B-Bs{isyf)I|6tHHq2NSr!fDZ+ts zi%%`R{ry?vUmJqM)XId{&tapEYHah`ILw596k#!kROeIVu}Yr~lE?b(m&cFwv*D4S z(EC{lx#PA$N||Kg#<)%-6Xd)%HCD5=%BJsxw^-CIA2)RDSYU};PPA#8_ZgLLxl%J{ zVtbHHkpyBLF$Wd?B5T;jv$iFM4YRhnCia@<)S!*#hQo5JGKZt(*H@ob)ZX)CZQ5YH zCNm2e_STr(ShmU4XH&T~Y1$%#s9|55Q>0ZsAuTUirI(pProzJfm9o+(B<@UBWxbji z*9geEwlQDlI|8$nin&5QI}iQ&eCrmLg0ptHrpU(XnRmDuW94dLCsE;9;TM)yVKzOO z_I8l5(7^!+Mk}w(?K|69Xx5sh%FJ5Rf(o=W!>FEIsT^$tPE(a>zg|~i+N~@T3xPSC zr_5?4dqKcl#9MG_i-ID(NuuG_Q>EIzUQ&A)=2q7QbW+uIrJ8XZo-&%_=1NsM3NBG( zOmW7PWE0j!2m&4=eFA~#hZE!XH;H<@<+}_K!M%hu5v>yScTP`Wt|a-dK=rA`D><~I*QVfTw$!(rLr^-bMgz1r4T^AJc z0vVAekl-kosnEp%^JpLtmM&nZp-^jKdg5CH1PV4p{={jr_slDrfrJs%MK?rlX8P>l z?7b}rg!rAx>889NI+j%8O$ zw#_BeJ^YNaJqyL}5`t&D_*trsu@Q_kbZDX^14C8$pi`Fwa>) z6wiqak%QwV`t5l`%O>;x@~1GLU||krApkOK3c@z-Xqn^iv5Psl@$_=wt8xaj5wTq_ z#Yu^cm_dURS7v^fXcCHy5*{;?g{azq)X2t(p|t3$^WMT#(J~2h&`OR)x#Q)71n!t* zIe~F*Uiebk;7?CvHh7eb1sUO|mN%an5SJAs?0zY>n&hQv>{zutI>?360KmO?XdKtZ zK!HGIJrG|TCg*X!_Bg$Ha9js44A=zI6djOk zAQzqJ2bg5toIJ64?_MFcAAj=0ikfM1U9IHo!Xuct679ii|a+)nuhJghQ#_Q zFc@oe7J-AILC-)<)Pq#>B_@&!5sgj~TA~~UGt(ueT}RCo8sfPE!-1si_s~`)R9hSx zv6^*i%arc9SUrZAl=J0x`A^dmjOhWK6Un;St@vC8Q1q8BJ)oB<5qYS+Op9KP8fdXA z)_fTNNYQi63SaO+EW79JEZI4^H9Ya2cZdX(V0xG*{~}mdwo9<%q4ou?J^yB|a(P@v zKMpPYIPVLgqCAHM#XLUz-&?SJM}v;|_i&)U#mjPJ*tJwJQ%4{;uv>JH*H!E$1EE3{ zxQ0SEaqEHf6f6F)51W<>GqvoM91s+|46M+}ZB*LVrJi`?Pm&bb^mUme1$;}{rS8gx zwR^MVvJ$pxijV4bWRY~$`}KITgp*gyF($kT`f3gVbdRbUFNrJ87VYD?qv}Rr&7}h( z$XWPL)z2Lr66(rb6~Dg!LJ3;~$AI`1mf{nF&i2gDtTOF|tP|a1o{6b7E=AnE6YLy72pl(mYJsns6sBBZx15Uf}G`orD>l=>DZOsL+2;B zdJkK#q$G4%D`8(QsWNl})Ij&5aa1*ltN{J|a{^zBV0{_2?nk7ve3aZ4@>PPR<@0=r zCL1NC5xscR%0p?m7L*1{P#WNiy2IO3YCvJA`@V9hdwCV@L)R=+u8LK(GEjCZ+V-nx zPwya9H71ok2p_L5)!z&fGQ+ifYdg@arhDsVv$??a<<39#<=3V79kO}i= z34JBU61ucw$|#DHm0VnGBBeD;8A%z+3ffH_DomHK>5iXs6AD6E#iXid&?(EL8qRxM zgHbgqI=09wAVF3DMt><|ZawH#Ft^5h1y*GI!XDs3unqjaW^F!Lvr&92RP#T`JZcmR zNz|&^S<~9BtW36bXo>+3)%`^fJ15umH6YK~$NME4KPJ{flDsOAYS!!XAn4}3$Wv=Kmq2j1P1~5SzqQ&dGiVCnIAJIhYSEjvOP%nSlzZM0slr4%K2PGNlr9 zO2REg)E1$}i)08EMC_xFsijAQN?4d8Aw8^w!hw?D^a3~P`78@EO?+?u@7_cR$NwJqj^A)^8A$alS2Qs@c zirXU4G}cDqB33Ak4N#0I_nYZD01$o&P{A%pKSVIidX~>oi}CLyY)N`JQs&MCkvZ=a z=TQ(qIeh|=^pHuL(6EsrK@BgI3Tvqwn6IkiSd=XcNJ&J0VC37Sa@T~Sn~Q)A2jgmX zcmd~v^7O)mSa4$9 z>!75f1t6J-0_qR_{z0q1|87ek9jvcNtS(FKW#v{Xt|MEj=xgMhM8*-54Re8uC^(vVkySyqIVnindb>r#C$o<1@#;mNjdkF`e;Y=a&Kz zDd(qE%FIz4MOS$zG9OG6|Kqb?Dm#`B;z>|PapRLY?j=KTlGrRrU9RG5+|8;&{^zUb;L^ck(}*KdFEjWQsNcCY44eEv*E zyjO)3d`zHqr{RnYl6Tcy6eRDeR)0$Ku6othb@OhOEDcYddrRjP*;=oVW~bbMkE6o=EU;ljN zmRLs(+CWPxOviaJRK2GtucAU!ovMloU3V(#x>eLVRm}g1eyN;G>CvCi>(Ddn)D!Dg z631g@XzNuHKltCW;MOXMn^p~%D}rm)0$(1lM=K(2u$=B!toV(`6%@Y@)-=TpDSo3G zq8P(^MO=X7|5~x=KlYAxw{08vDnx(m14!-IX}*dDL)WyMhb;}7>^p;@*h-?!kqk*r zmJI{;7#py?+@552Qo4I?MZ0JgLC)DV}HZ{yesHJtTV+^W`Wc>`|~8X=AtD z8xn5#3w~dg$*0nnk5yQi63vfEXKCQkmxcCFX|pm_Y9ZWq3GRe69fjtvYZ`02gsqP4 zgV+*So-Hn2khjE#+x=lz&Qo>Eizl4N&;m`EpTBr}K05hyd_4m2HEPG1(bO{dI_v#9Cn`d=&$AtC+%H^!b+j7w{$P}g^qIFtTJIjiMn@lmWv32qu>Xn`J#m0McN4<$7^LRy=GHDYmv} zX#uw?yOz?okHxiAU~9<3G^>?7irfyFz~QVV#YH+BG2^SI@J(X>2Nfni9_{Ke9SzI> zQ=@5NsVQ_-%*&PXbWP>6SyoC9xqP0VMNx(VrFIfrTCcejceIj}KoC&bneT9*?aZgX z*k-N^e?4~OTI==oZtgZ)Qprmf`q|ob4Z0GgXa7#+>InUXo(Vji)M{Z71 zY&Y%9?iWvB^aLnzolFx-xNu#2CY*If^B3TMBXC0}kp_w9Bf#k7lLR~H@jrtV+`Ax7 z(mTd5lzAy)rDhk9idkte&^=UXo0r6(H$YGFQW1+j)(aFMHv8?wUte~m0$MG3t3`C@Z0Pb!uw|v_Les+BO9xivNYcNG$ueB-@N`$ZOn<+JkzDHee zb|k|X)AO(_$I)Aa^F{c@ju2X8CLQX@4$l?D^Mjje&;@uUIgZ*|I z>1qy?ib!#4+!hUuNyoL_700Q%K~A>dkx-&pOQ!_Xl%=~ssg@hnP?5e-U3JMRw96&m z$>EpPO0>H8y_&d*YO9J0S-)5liYq8g(Wt7j22%QgBv95Bq;hO`S{~b>v9Uc|>Cg`L zjSnqK&YGiY)PR!O!B<*Ro^@bJ0k4?`mK6AUV@X+mONxUNO56RSQrFv9XcXY8l&ju- zY%DYy!`oXS>_qCK!%W*qF-VZ#)bgZ+pZwWZ`2 zF+9crt{3P1_M7al65E*zVtXd?Vog|tA`5sffF=p*oN3Kmai9!RvjzFOoaq)Nn8JiT zjtezzMLr znHBiIXfm#;GGSL53-aiN1T$48@sV_bgPjna^szU!7o(^CGZ158hPT|7Zs#yGNNw6d*B zw_v=1^^)S)7~UY-tjJDQDo@igdWOH?k0p7p!ZW0r`VgB`OXM@zK)UKy@U z_f)aa93H>;&Rc*rlDVFu$r6pSWURb*!W-s5ZjfUEO(dO*URr@Ls>f#Bx$oV9aTDts zwWE_^625U%?Bxcs0HLw`<;+`9S`^osu@gJI_xzuO&TZvRgn>&K zcC|Gf(oYZfVJA844Ncp}a+Y@aPj4O2Rpi#3@OvA=uZHltXHoU(uIq65h;)^cvu|^X z%8tBMb(}n14mjvwF~^kC*e+=`=c(0n8hwg7PV78Tvo-_t&T0KJstpydg{s;Sp#M9G`L(#$vd%GVcn$Ux5NDJqIkp2|`g*7R zuRWi)83?BO_m4jlQ2zbnuLK@j9Kng_qRz+Wk=BH47P;E=*yxH`Q5|AH$vgtWr!(); znnjhMUG(nZJ)f4KB>TZ}l6_c$5>bZ~LyukCVR7XxHi?F$Ph-+Y`l6o&;vuxsDfwyG z_yd3B^AU&NX>uN)zu|3tB|eF1!jOw(b2yqXXd&1HLV^=O_X2pHWfypDg&bjkpHYDk zfO{=Ehsgl=gIAj5}Uv(WPz~S>2xLIr7vklU6q| zx%Liw`*>Uh|8~1G!U_4OpXZ=%d4aYE>i5Z;lkw+oMklY1JL_(w-zJEytM8lL2do9} z?{?#|ljr>bjKlVJZ?8ApIp~ZRR>}HbzWVZ$S8qG(YQ*+QI&Zk1xPGsjbJ0?+$Nx<4 zve%RAI~Ml0HtLbpIj7n#JK^TKWydnVZYgEf3f6|YWqxY6Cur-IW(9NIa;;f^UvIzD zb}3nZ1q(#oa_Oqpk>}lp^_9z*^}F%4s9WY(|FC!X*ccyBUNPHu(YThAnNf^?YVbQJH~i`7pUz{W!{%FSUeAk!z5~Zb`f)Uk<4t_yd+s$qxRpMwPti}o zyT@)b?)Mom%ZF23p@pD#fz(ON`+Ee{ejS75ejVz`S11v!MP17r!dItXiNAO4`^?95 z&@8-aE$GV~@QXFaSSHvQKj{9&3Gl=_K0f!ZZTQ6BxOzMSR}XYqz!W+nLI!=stdPxY z3m$-{QjQ_Ws{?CJBFiU<&{v?7maQe-F%s3l!vpD9wYv+zgh97Fv#+VNcLX2EvP|n~pa0r{&kuTlI zbpX(7e8i$>3?HtM*GipCO~RcIy9#Q7mX;a8aAmmYh!V&Hk}q^)2u2MM2kp<2mM(g@OirJ}u}D=;t9FYFz zr36TSrkZ;o#oXdqSc_f7CzT9{)qZap>ReUP8fquN%LRdpLWsZh7NK1h{mn{OQwsd% zL(SF$5b{R)yUL;7#Pu;!M75*4eVQP~$^&0=62O=Ezfusv!S;@^aBfSuN7U$ubrhD< z+FZ5M@Mafr3GcS1MHhwcj-Dk3W6zGJx|U!V$B>+s`Hha@FgpDk>fYGZNywyuRinU!XP3~Id!okaJb1ukfT#gICuUPe*ZN{`={T%xp>l|hSMw} z@MD*T&vb92)V61!8p&SPGGWM1>Zgre#im6;%AyvhxNl+0H!esVP8+U{wQzAZp&))| z-8z~xnRLfUY20E%h3yJsE1J%npv|UnMiJ+EzOti*&qy6FqO*9Dr(CROGuB96B$%*Y zEh2Wc^=)+-0V$*F%81-2!A3}QFC-iRc~38UL5}%n4Q(We$+E?E_cx*@Eo$Uwi6@2h zr+38^U5yCZ)6Hk5E`e~n#_>r;y>1e0M3_u?$dO7}MwfMyO*88fv^ccKQ_%1jyVOPA z^sx-t#shK4b4;dV@g*6h<9mo)NhIU{+;ha;Mp+w=An2@NX5U$E7>E1*Kn4iM_c9;} zboN7pCyaa*4M@b3oyPM;I*-BH&J@6+ksZy1(4fG9fI`a;%(X>L_{f@0#m}jW&YqtH zB-)lo9x`M(zxNDapcP?itI|26@qHejq`b>_N5{e98l)pO9rOnf7p9R>o`Bg?gI-~J z&JE-h)&v0Wf_4we;U*@Y^douwjp=w_sfKU?X(5fhV4)IknC+hVE{O&yMw{{O+}S>? z3=y#mdlN|ymKNzFWcQd)9`iAJc^pEKkRuL5r~|*fFe$_Bq0rstVd5C;s~|q~7H3x> zyp_=~(h(8pRH#~QLyf9ftE8JwEgAUi!Bw$H6qn6qn2^7vd56m#p+zM~Fjw>Y;Ab15kizd6Az@Gp< z^}m}2q1JaGfpG^=GmfL@+VKHD(m}>>%n^h04D^cce*jDA?iApLBaVJ^i+*7+6Sm;V z?XATE8!LkRChtTJ=S*NLVMH4oi(v#T_5q?{iz&4Q-e!M?llk+5?SKFHhyP}|5AfrM zh`Qw_2RQ%X+0Q_`=)2d}#J=>rpYdak$BV?L$PxkVeF7Wsb^`|;0hb^QVpZ(0u&}9fvBGw6ywEER{a~Fd=D|8OgWg~(qf=m+sg0G08GD4V^fHua3KR(? zbnKffX2=jojbfY#$`<1eX!j2J%2Dhjs+DL<_$kT<8Qjs;C4+IP52BLi;pkX;+o5Yp zh4&%V9k~+^M?SPq`Bam&_|1aPDP)QCC&57M56fh`OMK2&{*;1OTfL+geo@JP}- zMs$nW;87<)+PprpFlubRZBb0K!~rkR-lxjM9Y}#>4V)_CHQ*+sgLBJA_QVR8bq+CK z)-}<4_LQBxIA;PTwkLW72n$1qNDApj{Dj;ecfKcb3lyo__u1 z)4^cS+hZTRoGk(n8Xp>OkFGXR{%hmlVQHIsK6S{NdF;h3^y1j)#+&291!NQ@_iiJ{ zVRhqQ`&XjFVoftm)M`7Mlmz{BbYESktGZ>9jl+fO!V)+zoH@?yZB0NJ7Te>N(qgKR z>3H<^)ywlQz8k-Mb8-Sdb$G!L%vEh!#5;pjcy(3X>od*7j24>1Jc}bJ>rpFW>M;VR|k82p1jGMTvA+U8!67EL*7$%ue~W{kdJK+xgtC)NOoj*h;;Q#-Bdjr*ZtE z)tDsQcB+m-vUIDfJP-fv%&#~x4<)qD%fFuaPk34$TJQCbD!2Z0&dNiF4c%sV2%&G5 zuao-GM23pJLG$DGg%j>&6 zu6xU-tPMR#*JhrdiM__8nVszwod1Koj5e;|EGMc>zmwC8Mv01%*8k`rXRfpiGn&x- z!8piecX#IaQVi$Y4(D>XWB=W^I_#~Bx0u5tgePMsoJ8+zFZrag9{~k5zUngt%Y3_c z6Ylv;b;SCfuF;^>{Y--M=w#KvObf63nT*_e9WWRyXg=L_KcO{goQw(~SnG@a5)F>f zQ9F`BY5RMSxcs<#FkI_334}=$juS+V01?ciZv7PMax8#X`E;l_$Wa`OF28$a*K1{W zzvwB1L4RFrqGSOcG+3`FSkJXjt3<&XNxw=I9IP9YGEwk!vVe@(tvLAqiUYf;3XH_T z=4b|{KF_+JTXCTIsgaTF>27#S8+8}Taz8^J-ZX>J%*r8yu?c|xn!)(LSQNH8;#No8 z+(lt44%RFVwmRZgN8DU-&{Rj#1${?3KQe)XV@_=ad{fWvf} zDaUTZ;31W@RrX43xK)Qgh`tsgAP7p0Z7svN2+@9Ta3QS|zWJaXECDpNmyUG+T6aU2 zP559RC zcz9vY#8y#+5m=?xQ@!&TL$fUJ)W-&To}5Y3eZMt@81@@NEsHViR|Xk&TA6FZZR8D{ z>we!8IVb0aU;&;U} znAS+piaAb45xh8)3E1ABL%37K>&KbKxL$+LGuif|I0#kn+Sl`2&*zuE-Z+t)YeA&p z1B!@4&wWid4DgBbV_rwJAVyfEguGdX3w$jul7`T7hhg`T)>Lf!50Tj0A<^_@o_ zQ@|<(8}n)!fHADyOU_J2=E0rae01j|f*X^(DFEQ1^Dk9m-85DU8T6R1PleJj=n=)P zCg89it6|}ArvQl>_^=*In9Uaoq#@CxdT^p3#EgsZ$((5H^29g{08Cu@t6LtC`YOo_ z>D(pvwP4e*7N?r4ia^EM7=B8js}gwurK4hAQEcbKhSL}n8oCEQ2KH4MDESj2v}}xP zw}u$ju(4K2Qr>*8-x>61c3u!WR9r-|GmYQ70FGs^-4OjzXP}E=E+?4Wae%V~55D>O zqZgp;;kft{X9_LB!v&t{yx6&m-$U#X3^hD@zzaD?)cgq6)CuKtq{2%TI057i8s&)= zD~qoH!>14d?BcH;{;Y0(1w14#4q(9H;m=0!_%5u1$A4DB!;*EzXW5)oR;&eZVGM3X zGu}iEjyGwe1$3z*T+T>dycpeu!F)ElS#Z}lZy1ZT(KN|Z1dRt*#8v0?kT=Y~Hz2U; z`9sj(efU0ajUKhp8cL;+n7=-6i$7>Ep$Nk!39g%>hg*ua-FAkegEdn0;7KW(>MfV< zyoC0e+{A4HhF7^Jjynq(Ym0?sKTo=iE)`1LE|;QV+^)+Nym|>XpMZJ`t98M>vR}A} z=(K?zbPoG3m17NsevD63D>#1ukGOhr4hgiy7kbK-jPt=M*EW);TvfoQ{EGnD%fl?k zMS>_HH+lsxy$J$`&*TXTjq`G$0$9LHRg~ELJTC+QMfyTz6&B~P44q0kRd0!{&ikj5 z!zA`)+@jmF;hK9EtmxT5zi04f$$Xwxb2yYT@h5PD0t$kO3vY8q#cIdGJ~$Q*Ox=g| z{0bREKWCYu$(JwDQdIZVb8Zg-32>00ZzVI(JURg1-X-RP;k*+ zUa{Dt?po~P!~Hx3_XbaC7;7!>1siBB+Mi8ru9>}&)wT}zYpGjQnRgxw|A0UGyCeKd zrU<>(8WOH{RHM8C0$rGbAbtsc5qhe4*2o@L0)%6C6Wj>U>Ukrq$#!dMwLo<_(zNfv zA?l8PFFX9pbmrD{*#)YSPo>Bz*`8BqRoxPdYe9Mf)mSJtO54=d#&k8YrTV4Pzz+A7 z3Z`CQd*>N(0j1~#p&;f?s%^x@=g8KllBea%6d#@gb3y_2B!M9GT%`!|mIR|fuT;Ce zq~TIsv7x3%Ls8K7@LlzFpQ!XzT=%K1+Ik(Y5EdqSI9?XZ4WUB(1EdaNPux z#WGok5^K!+x*px^33n_+H%Es0nMt*^EVXU;s2VCj?f1J4)uV<=qEpSDYP<$JU`_VH zDm{+BU(KV&s$PGks>d76MT*!^^mcJa`~hQ}vW==#SmZSIe7e~*Wc;9jf7e7)Y+b)w zK1s{mk&9B@XSsVUuXPn`F4vnfn$s%ZV=bqkwj#PjRfAH?N39h-u3CXRG7bmI_~p`} zIHWM?h4K{ZHORzPBUq_nMHkgk$B79w7t)l^YQq z`}+ypK^_nR!291j5~`#ry7{*Z`0yQz%L)yqV1uidmDaej!pkd_nduleF31~8taIli z5eL2ga=Tm|&iYZ%7Duo$%Za*SR^l<}4(U+I@;WrlqGIj_%1-6sk@aVn+0=0qyhFpd zw;j9w&GFI6_;7I2zlB9@cNacRY7OH4K;!UIqw`5}p;eYD35Iq|Rn^=o8`We@&eov@ zv})#8^MWb+`;UHs0MHDpoMX zgm!8M`Hkl^q)*Icp|N{q#B;liSPn63!>|1RVz@zNGLG7o^#k6fF`Fu?x6QJVA%{B415x z1rxVl>C3S7nKPl+m*z1?eaA;On>D)Ll&=a~uTMLA=L)ZnTI47)Air$UP3ktlrR72ENh$ug?d`a&Z=mU>6TzatdU?NzWnr~Z^_3M<<$8|N1q>N zy`Z@1=DLY(x;q>_$pti<+C8D)+X0qp9t73ni6 zpZ}nL9wmGB;&M7=P@U0_9D7>LU)2CdAdDY9b)cJtIJmt;@h#^1cb8t!%fYABCH#iBfTAmz&JUOrw?hmFX zANA50j)*x)kUtf)x{q9)_Y$Afh-&A>>A4mR?_m~%K%^(^Gw3IgBwb7|-*Etinshb# zl@Cq(Zmgodu}S%qS6x<2LCs4^H#JTO>veIGbCInc*d$o%S);@-iS%1(NUV#Q?2GYpAu#58KSLV!Jo#mIQYo?p2S!E5QPD2!$F9C4PD4bcW{0o%HRge z%dfv=Z^LBWqtv*%miua*)OQv-{+-)l!OhPwXz*_+G7P=B)b2p5JbX0BM2dgT&{04AmnZw#vr$?)Vq6meCd&P&l;=H}3yM z>D&JK^KW9NmEwmY2v*U`X}iG$Nv1g6r~)FYk(lqw2|rxaIoS$UFOy%M`%z z@$s?yIP3=DT@Qp_zxVy;pS^;yesErReiY-{1N+!e;{_BYB;ts18fvvwS%@>$2}TDuBoNN0Ctg zNg~uVcaVpLdt{4A5G)vo`o^7X(r?X(TW)!^5|9ZudulTC9!E>*q=~83!p8DbTUVO) z(}BIXNf9<|g_d>B6^Z8BrQ;-fy==P{lcOE9jgw;6hEvJl&49I$HCP*tALL^e8Z zH-uXVPl=miy(|8lm@MxD$fCHno97o*TkXnl&v;NeE$d+rXq{~{mf%Rs*PZv;^%G>d zv_t;j`|}<`2Pg@I1>XeoZXpbS4xEax0st`y!V|3g0q&Wz>%fEeFC+oaU<#31Q4VN8WP5c{|4qUnuu?zor?}{CF$ptb9V3eSxJV}UP!e1<Ohw-TMeM6KFf`T|3hN4z|TX?^TR)Gq^?6QG~vTgBSQO^@9VO2J;D< zO`RCG2_q=@O71g$jG+^JAu?ZbOWX)w(cHjF!5__p&`Mx)B-PIWiiYGHgZPJh4!dWgv7y!zUbN~HG_26wzPFlDKjJ# z%K}aahp0E~CnCcJSji)BMgP%$0{Nmyjb}JO2-SwrOIjr_g=|HNDQlu$FWbjbn7X%opQ*CmeT_Tb_YK>U1foh{1iN!c7PkTY+Y}wFM(xjZG%b`GZ zyBKcXV)&BJ%yuc%6gU5=rBHOnU?JSMBirQ6u34DXSq3MPJ-U1qe3g(IjopbLH7=1l z?Aq}IXwqSqlh@!Qz$jQQ2R?UvAdHZ`??m1h=TLv$_)( zV+na*%>YDh$R&1tS8DM3hJRsK!Yb$=B)ljDPK z`Jwp1;0NiCYNw#X6TLYvA{S*6F6!`fI^hzB3Cubyg$ZiB)NB{mb><50J7K9N*;%?u zhsx)cXNMCk2EyaNmQ_@tD2^PW)gGtSo;;5<;yVc!YD&)b`a3iYXTxDv{I`2D*z5HB z!*25b?(R-{QqKDQJ#3wq+>w)U7LR8qN4qQ;|AcFCPSNNV(@tZ})DTO*SzHJs}w#q>zvVv2;VELYq!$T6A%Mq}$C}-_IPDZ`{ z!SHa{%ZyENZ5`~Ika5ASg)QO_>MT6Tw7ZO?2?Zc&IorIhJ`bQB9ldZY(jT7MT-IosoNm4WmY1$$G!*{(K^TPD|Z}(6C7*G*q%D} z>dfQd0bt_!*hP{T8E}OMV+vnDSAA@1HqQ%s%mA`UZ?a zO4qA+@BvALB~M=hHo0dYXlGuSetoF~3j=#3_vFh*-woHiRE%+2 zXrWLimcN2uFVj@j{!wKm^81HFlJ~>H0;6&4hIcYkX{Yi$E5nMhJH8(UI0sn4nLKzt zKJKaKnt)QLVm=UG8O~3g6Eg%!h)AxsWsjGr7nO&22oy=*qzbGb0u;Td1M6S*jzqV0 zBKRv-kvK$?I(JgFKuZf$;u7T$5EMCy(^|B4u^pfwBz^-4evU6;W_Q->D~;`pT?%=E zH1RRB$IR^PTn0Q<~d!IJefuQagpq)?YM0e5SZj5fWhL?Ynh#vIsP2>4&uKz%`SWj{L!-Nf z0M=LNp(t%A&fYp}NIex}QkBjVzoZ_EGvHgoeWG|W`J5h^WajlrmMz{&v(HHm@8m<# z^!-+n2~M&ckbEYlQlPk9$|T?AIPVf_6{<~m zjdjBvQ-@y8etXbi&uV`We6j16o0vkmn^P?DFWqV*Qd=^d-jrs$TVkKP`>tEHiK#*C z8*esQq`l}VNrcy)bw{UN@=AW0eRIE^+i&Og+qt^7bG;h3bKM5Eb8vgVrTedK>3UnY zblqxOx~W@5*Oki>pQhX0Z|RC_ug$4FyKcaWXfI5=FK&wLZQXnAJ^248%B|5+&rP~a zNhymv+j7?rfeOeuC>94+VkW8MYB~c97-No;qE6&YRi#=P1n%hRN$9{NFh$P?%8!a{ z#1%xpV>Gg8lD(X*ix**d&vBROzMuplnV~?^4Q~}Ibw&Lx9RHgT4T-iwF@mcLgr3Hy zV*}@pGF*@)-y@brA`$AyyhOVo{&qATTIRAfpDY%w{%CBs<|C`yTH4lR&|6GK!^Mb; zf~ir-fLm%`vFJ8I-b`WnF>}#^>Z8L1`7|#&b|$hi5d)G;+9@WVK$R(nP(rq8=#V`^ zjdqp=rC$6<-uwf1Ka>48;3s?flM-^BBUL>)C|01L8buO1c$B_Lk|f+kh>;=wTb_PO z^Wpv%$c&E)a9o~;1`u;03SbJhjZuK_1mAN^Kfj<-%DMw839R4Xe z*%O}0F1_}=P?Gr9uQ%A}rWTtR)s7xj1`*v!`RAGx&mw&}R z3Ot)d^Cp!UCa^JUQZ4iQR&Ku~| zrmTC`*pE$HHAH+I>sn~vc>bekPg+Fb7V-gT7dtDn^b8BbopF$#K! zkJtBenc0b;0u76XvJA*w87j6@R22F)cKj43f{W4eH-3b!fb`?4{Y5J-OHmwvaaGoo zX+@Z+Et%8|ilX-n%J;n@6@bn)J2cjTEzj9?<)e%Lpq6Nhgw>a%i|)g@)rHR@j3r z^``*~5H3?er_{{wtRSTg@u^nC>+cjYl$9Wn+R96G%)ycD$4vEui$Id5^aPfzrgNkf zCeyh>$fReKrjiJMqx4aDiN-F2Xso(E2MWQ;_wMNzp(~7pla`~=u8E2x_}l51$?I^3 z$y~RNQYY{3YVtl5BIaQ`|kCZKqz-&wI`yMuPC!b zx^=qoeQ5kR=L~6^Ak2^xb#X@AZvE)M!_s^U7mbDWV9lL7ClseL%Ntb6=iK*x3gD#` zv~w*FA&zxeu)){f8X&lYO$nONM~%W-_+Ai1oJy(G;;`w*oY&BGJdeuAtRitm;E)BQ zYXmFeMC>I(xfh#8f+wEApC{s*IC1Ov1Rs4Xku#1gGU*N`tD$X!``9vD{mBHWx6^M~ z^O3z=bo$n$GZfgaZMk`+mOJjsOGWn3C=nH;#!_o__nsJ0*=St_n-2e$v?6Ci*``od z;tXkmA*mFf71%_}H}P-agkS{XGd^jWLPb^lz@cZiXlIzF9;k1}`g5u*ddHdSk;G{g z7h%SA7vH}s?)VUo^Tu__;Hsfn(8tiPDl%07*LD*H3P2{07Ne40Si5<;XfV~arIuw* zTZ!vCcv1)^ES)BWQRt~7M)Klk#hdcD{a|(@*gsLoS0d2IN`<1P7nbp*JHer>CoA8j zc3Qqp+{zTLl@Q`Jia#5h2`I7@@fI+m<_3)f?2Y9+22Li)L|rj?Ca&skp^Q!T(z$Ux zpFEXf_~Ct@N-76!F+NLq>OQG>@Q#SQr}4{RD>8_=LqH>l#!pm4lhaL|jE_s(paodI zP2(Y66YcO;I>=PK-7ejI?4oF}EaH52eWvFgXGO5pqgd~8O$u$fy5FyZP^j5Rl%hdP z$Co_ZuD3w5oCgqmwDiK|@ld@%}s}eO+mZZ zn~Gz(!OGs}kI>#*?ds)G4;vfrmd5O-dU1OwJ9XQ_~vK^%#((+@rGVGhqtCdXGF zUte8ZB1{f#EoE#i5dR7q+lV0+M8re`I=0Hvh4i)k&N{KP#zac-LmlOQj92g-{PAzx zWs_ezeckZw8_P%0sAAdFO1jLPsX%M@o%203&|jz{v2pa5L8yMdp%ggB$G#sD1t{=; z|NaLmCil+GZAcZ+WcmE5Yn(qSee=+8sE&Y8`v5Njf$8lXnx;uDY2g!SH4w`hwG)X0 zughoJQ}@aRx(I9yO^iVXT0ShQ%OJyB`kh{MrXXFvm!)ZqzkmPp^E~(w_(QE6!tmfc z5ncZM`(L8_0Ac9_4|kSKXPvo1ufV&(t+$SBskGQ+^=PrO-a0qX3bh_LZvV)}=s3%m z%7tu&Uv)`{&{Nd5;Q)_di_%4Nmw`jCvq!MSOewui+>An{jE}D^XwOW+=(dNZQ2&Ig z99Xig;>YFBFd5J;?q+q(M6*8fKoSFC%TqINt$?zsk5N@(S$yNj$D;)DpX@o@@u6h= zt76_y%~!<)o_5TWdh1`r8#S0D8dX#t8`%OGpM3E-BpF8yF@80Sr}FTp!f*xZ_c1(J zr6j=gKnxcE=p0siKlDQDZin}=1J&EV8SXnj2TmK*6a+p!Q1%`)*g*``^q^8}H)C^_ zfTmk*44#;q2lTRt4zRaa0sgfJrT)f_-t$2r#W7=sOM6XzirS2l6pE=-e_8vp8L8a$ zG}q0djCL>18bbMhAx=z|+9N;9mHk8(Whb|?pHtjn$#DYXkh=u6`1ywg(+uwJa4nq4 zlVk!CI8C(cw?=v|SD9I~)J+<~s#cxZ^PrDJylJ-HJA3!?!fcu5Z!d9Trw4c_`<*Sz zZO`VuZGDf+htM&3MJ}R3Bsg+pEn((Sz@UvU%}H>Qfc;T#z}lV7_|$GQ5_&;!%RH6^ zBrPE2C3$wzUc+|M4T&Ixtf+~yX=f&e<>C|L<4-;}WC0oDlh2IHi>uF>X9q|?TWuPr z^j=ePHbdth+u^KZwmb0uaL_iHN3{UWry9UZ{{!$=aO~eDdE|4+`)DutWd9zz;;EP4EMl zFy(w%?jtji2ug$vPi^hD$?{qgc;_C~M<=WaJdM6MKd%m>2C$&Ns2KxsyVBr|>+28R zXQv|XA=)T>_{saT>&xrwt4}^=N29!Rjqev866Y(;?jX|bj(YnQb1yeHLIsaXy~Ya- zy3my6WO^W?;pNFw)Qr!)rNu3jw&1^YLOB9QXN@8LQJtq%hee2ceUga_9_^}yiS5?% z*~uh@Xhu3s45867KJ{%88e9)<^xM{AJJ0bBi++I|>-nm;^56tve1sJ{b#LeHb zr$7`slwF*;{-w+W_Iw%WmCU!m?TQFA^bOY&DJ9M_=S}p)6@9bQJ2pPDe%8U*^tKa- z*t_VNiotmtfx@v+q%!I77%j|Hy^Jppk19%3&44dn_&JjvCMPO&WZj`E5>I*S%cUcO z{i4hWwg^bw_3RmR&@H$|Ey>BVabH-T%`|P*m{!fTiLzHd%THW6G!{9DD^s1ig5SAg zI5!-pZ*pY@B&$sk*(6Hz1Hlwwf2PuDigQ>>rxi{Z*e$_RHFcljxli%@f2VjR)|zaR zCtQxb^siccaN1r^6Ud>Fli>!2>{vT2&fo3fP0xG^e z6Oqox#wYj((vPAWhPZJk+D4m8<80yR#S}Oemwf&dldO7T)C9M&{LBRI=2A2j+OkQS zOqD+oo7&7qNm={E%Kutor7B;PP998ZzKC2a7y1V&M7LHD*N*@+G*Y)W68HiEJPj(Z zj#`dt2G5<+IxcQaPCXi2=o@vz?%;zSk%Cr(~R zNkwuj`Lb zn^4F=PX?2>&;$U=$^0!t=~BwLM+$IE<9B=UT9vw7TOLUFbzyyRi@Ow(_6IciFdB2{Vm~ z2s)Y!Cgbrqhd~Ba7-XY&j1U&(lL7DvQ@MCTEJafwCfIUZ5I&k}lEk;$Iew*GXw)v; z<*UXa6>M%@iDi&*kZ8}XwJItF;89>X-ignXMVP4pno?6OYjcokL?^?^U^F_Cqr*j> z2_l610DbE*S4fIXXUTGk?4}gKDgrxo&>a1KT3FYlD())zpHvgC6GH%Z@=gu^H?Ij= zTS_kohwx`I9C9&UT5+nnCNLf8iyB*@rC=8hExi(CVkb(h3jgj!fwmJfDQ}OJ?;p2} zuo+0)#VrBy25b=GV?fX3ATX@WPYQ@zA++QQcPox-KDo_s_ZJ=cKMmyi7 zOh8j_y2{b45VdiqhG)8H--+vmI9~9y=VSduOTBf22W}|GK*u!UVGUY%BWNSK4(tGH z8LBF6Ce$BnGfNb`d=Jdgn7o0>2^Nk=F2Mr$%2sMcIa0Z{{=3LUZrDOs_;xv?TBjCC z>H0|u9JN#4Mbyafm9)6=t)DWoChI25EaX37G_78T;0dZ-LB2lept53Jz^0LNP#84P zueco#awWlX!Mfsyh9}&jp$C%}^OV^^37~TzbEojZv^$8x|Fe*g zpW>ydwlQ@9l_HG-=whUmPf;;MSD)%fXjUXT&o9!mI4XQ)6B@jy;p5N&oxIj(!GbciB$qwM1=MRTccL|w(30*}x;@Kn|I5QO|DDIx>)pKyLkR|wk^q(vw- z#j01+NRY~62;f&);P_5EFHr1t6por~)j)n$j&AExH^`+fTXm|&`c?JibogpSv!}yx zov2~_Ud4~o@zyf9JD`EFe02?d>GrMhXw+YVX?X#;kn^6^vMhVj>MgpXuGO6nI+M;x zy&(-7S}3A=MC4hxcz}G-Y~aHACl_Dqu!X0C76=LExEYlq1a!4sqgtt0D!01}0P4hX z9L7>ry!iI3c_iD(mOfUyxSd`qt@{J^4(UycQI<6O(qwu^FgmREcK6Opbz4dc#pdGg^&}ykf_(Nvcp>uD0>$>O(H^^FUNFmG3(3Rp`DyQRSEhD&@ z$8G(EFcBR5I(4UEa#fUNzZ$025q&u;n)OXBzc)X$P4=qiGICSj z$;v!+D=n`yxGJ(nznhU0`X2Fk_Ojz$PkW_}^ z4{OJ_mx)YE9m^izJ#A_F+`}Lv-@~@szVN`g3;WRU?j5w-Wjlc*AbMfBBAX`wbiksr z0lcAH3FjQEw+;FUk3*Fa3tEn}h}84F4P1$)Y^eB9D*r5%7$&BnY66-Dh1BpQEbO21 zRpthrVPo_I`0FqaK0E`m=+Ia%;lp_l7RJT>L%s!qfZ?yy1NhD?iBbgP*-G*zRDEf*VmaQ4;Yd{DnJ6EyQ}-JnMw^Juy24zbXD&mN0+p zxGT?b?Y>Q2q1>|#;giL*Z(!Xt<;ZVCvCW|sy(g*e!h5s`YPQ4d-Ihl*#N3YA+3Gy(98~{Zj(b(HUV=qd9O1#8^C!PlgrlV zvOj8_pTqGPm&3ti)EoAPgJJjO*#tmw@_o$rtP25cNRU@}%W{cLO%gL}i8V)-hd(5p6J(r?XP=RWi z1d!-wo;!<;WN~lEb6z}nkibzce8ih)a|;7<sva9%B8*QwNx;x?DP1E-{FSsSXo1E^Vf182w2y#r_Oz+u%J_AZ=qpR8&_ zadl$v!r8lU_AZ?5Z}0M1uj*4oCEB}i_AZ>g3uo`b;riUWa9*SfM``C3oH$IUg+NW$sxtzuB4bK)EUQD zurS*Y=#%MGmDsE{?`Vvb-AOhCtEL#~0&F!D8%&W_DW?>U%Cnzn#Yp$#L4p$Np!*ED zZzpr6a_}+gYB~$DB$3OO@shaA)vH9{1>CL-kai_woqJUa4NLG9DY$a=@p6^#=(%f&y^u!XsFzRX-sbXIqO~zyQ^Jq;X@vD1&|T4tqC}NLR%0( zM!;>l*%2URW|(R(r+PGAgyba-$OEFGaBP=%awj8jj#_5zQwb3(U~Hph$YeoXS?)rQ zq3nw&osSM%#IP|=s#N5wES(@MKb$*3V`iR3V`h>F4)IbMa806|2#ksvDu#C(83L#d zPUITvh)x9^Gz7xc!=X))b}2lgrz?SLwoXxF29a)cq;u?97-u1~qtF@%7Rt$HH4D5l zMq*>H=gcXh3L`OwV%5QNSYo$~oOyX5MZht})v(p;w&CCY(V*S!^bhee3u!O=?Ln`7 z)NQ|d)fx1Mt>4PDUoL{u5NTz&p@Ac4Qn5s1>>YKtX5etb!=~NDxCyct`QbiDrpgUV zL&gA~XO)B3^3;242e_LR#prjtz~n5*eahWpib;pv0fwFl7PvzlG}T*BR6{f-42atm zr4A+UMJK==oP?Ih=wfwXiyTWus0>o9%FBEwG)s1~$O|+3las?Tdy8G3un!bo|7pNw z)@~ZGT3-ro&e}-1U>Uk)n7JffEr>|<5*WBdSd6Q8H&t+Of6k_92JR2Xn^GnR@pKL0 zu}2;^#mw6|GX->Frr}`{8tJCN;&CZr02rb4|35RIfT;t^O%wdcI#aUVn|OG(g?1wR zrx`rClLy~(y@jaRQLT2^;Sje2J1+PgD&W9mSYYVR^QSc*!Dj^NS^)Y9xKcRgF&8%7 zDD+?=y?ZEyCcpAm!nijzVuP8Cv};V$ABmh1GBfCRJyVk-EeFO7I4B43Az`iJW^+xx zU@3-!4$j8caij=?gBQt>iNpei0>i|nz+=SN=Ll`KN>L31{=r)DE@K_)AZB#pIl9o2 zeGnn3v2K?j=H-@z%=ZQ`FnCP{ALv*g7dFx?19rF@yoNkT#%YCFeSCauKMvZSe-9Vc zZm;vp+n;Vg#5yw%XhtD?B%XbNTROVF1p32^GCt_Vg3MTtD z0-JaEbN!}Nb7&-$TuLIXsur9%LZV}|+lDVS;moT7KLcWku)w~$9s7@3!MruwAvgm0 zg`lGH%U7H(h!g}?#;8T1H03hyBd=NxnjHiWgaP=y_5wmcVsNEFy(nHp*osniV?!vr zq(P|U4Yn^9F&sG3pb*>og4&O#ZoCKPpE*5%)cSe=qeYg1Hglhv=cK~Zan*0`;8oK+ z@>-hS9Q`Fwn)_!N;+2=O&4>=F|i|toN$>Rj>Lg9{i^o4s3v0oj6HN&?@WHT zBXOi-k=Tz}EBrIg*)X@Q0RHT8TC5+At3;Bijw1wH49x!13Bsi~a4>Sr6rb+dR-!e! zv!|{Ff$>?gdcgQ$cmK@4ve1+UC}f(F>kWC5(cplZezud?R+$ z!cWakz&uhO=a^m%7$y_owsk^kSC}JO;^Pz()4`12>fY6;mb!{PJhCjTFPs^p%ADJt zqR5Acif{gQL4gdgQ<7-)bh;Ltxg${SFYA^FQFmABIZ@gIy4WY}2{g%=$aK{0^r-#< z%wzm8Dx2fr-<{v;`Jjq*cMqO?RP4~EimPQI+=AD>gqs|)sA~V-#FAN-=%>8c?ca1_ znc~eW7CNI>0~YClD3LDMUFjoMPxOX8mI#A@Ppxma+qJ?%LbxREzObRaIG&H={g;Asc?h_-F%EL}@x| zUo`jdo7YAO7qh!vqfp$UrG0Cb$&p4+++ykMD~Ikcld&d~2O{w6eG`-F@@ePn+j+_+ z^(K^1E1o1}hH9weQA(^Si%O?*g8Mv?6(jA|&^xyrND6*|rU3t&dSRGYpEeD*-@-;L z`VUHnhtqrn4yE@$D+G1x{K| zqet~Ed8ZnFf9tx{A>uE5huu}eW4OaOry@w)1bjfyfaxVF;BNKq=-{D;b{vNpw^z{=xi!CZ|maXu5)J-VzT1 z;k#!Sq-yfxU13$9JUU^qrK>eTWq!sULRdq%JfdV5*%8DyPG>cxdotYwq~1EOH4sO+ zC)J~n?Rm!Vz+==@ttZqT`!nkl3ZHu?~XX5(9nk*G(2h zUsMzF0uJTgRd_GUqn31%%@i1{i_qKZ(#Wc)kg79Izh!izPhUr`2V#ht^@`hi#~Mt0 z&3})!*5=Cc^pP4|s#8^>WzHyi+aA`G)^EB2inESo2MiV(qP|X-B;_HT5V$CWKhZkf zxdn*t2v#rQ+NUN_?hc{9KD51ZG9q{>OPe-1Q1;f1LM=b`)Cpint-=_>eRGZ>9x<@R z6oAejPT&{m_m$OIF#0NxPFanvbXtD>`b+Tj4ZQj`yv+S&>wOh9TDU)6uzmhPxhqQc zcMy1wmuu_w`ye7n!D=+pcRpFU4H~VMzyx14h$nf$-Mfl#Od&N9d@8wH_Y|yZmW9~5 z_A+H?S4_kE&?*q-y)SqZC=z*!oI5w}LvbZ0&mY#3RfqhP{sti6MjmhLfcn0Q+y=a? z3xgiP$$_|sD3A%n@YC@PbS+L8QD-KJ13}-D*!5MbAU6^sH--(w7+TjK&V!`dJ{~x~7vnmcvc?`G9hAh(LU#8oF+=&Z-_!(6Er{W8ZGT<|>nY zRif49@HiDdc)@?d)YOM{m^-?!TuXG`8VV{X9GqIbw4=+L#9EcMnlu9Yb+X9tc%H^o;MfwshY2I|6+J%=S8{gr zL3etkz(H;@U-A>OTDL}a^h=y=8r@78kETnFo!iS}<02!IR+|7brO>Hv0^ivUh|YcB zt*t4G50b7D^wVk{Ax_tLd;x(L-Hl9>v)b*?vt~IdpJ3sv*hJGGPTeT??l^3dF2}-f zt47o~?BBCuR)OOVMH@?EgysB8wiK#-`B-!}Cf3tv4BAr_DQWcF_&=n?XRT=PktGX1 z16v}8SI^Vqne23RclC4&oag+VazQ~8 z%pb@{9_>(or09Ozi%m4x0$ArfiKQyNlRZr&9#dOu-AQjjN}r2MAZhMHV}RCgIqXW< z4UGEkrd-4G3MuCoyB4xJsHB|&+|wT!t{yYvMe?`o3`%=KT_mQ2!%IF2=79H@ZJgvS z2VruRr=xS==a?itWRhBE4Tt!}2|C2eN2d>Rq~BNfJ%gtv`Qr}X zTa(P>9~zr9z*3?=gm+ICs#w9JfUT4BicG`3+KWV;KTQl;Z5fT*LQGHveRY~Q^Qx9(n$-OJ(u%SF zw{->>D_<)I%-Ac8S{J7z7WqNjeqBitn!SnzCbkM zCQHbBoJ1O#uWjn(S5Z`;#lnzKq!L1N2Dy!zD zmhl-tU?J&UN0w(l7!Z}JDCf1AGuUZ*aQw??u`UN0BCoII0!u9mJpK5aWMyTNi)-Uo*moz^W4*j9Z{fq25I%MJ!m9nf0eX2UA1CTi~?S(*kv+&fXwn|Wo zw1%}E_cs^S4w2%~rY!8TosR(eQR7i4m@xzfoYyc?uCvz4SQ_J!^n+jZWHY=7RF5kV z5CKX>_-s92IPtm^66k9AAQ4Ys6T-!}h1RIB`CeVeUS=P-}&iRQaU-qy#_{0uSy%~_7Z^LQ!U%5iO*ph(zRiy}IqjdY}9Gzify{BlWc zig4(a0c|`gJgx4hNb!;$=itVj_3&k~pkl9eYAZEDQhaj8hhgD=2~8 zKiMng1QjQ6sdXBJeK|wHK>f|n-{jMg5aKl$0tdB&nhU`@AihfEuo0@Liek=X>fmdG z{@G|;B~35@$ugUPr_Epsm9 ziZwrb_O~V6U!Sx>c$M)yPYP65tAE+&6?pU+nnem-=$Fsv*&A}ro2*8%&6^hY^SLa@ zG#@!Nn)W$Zq;JH<5>m*%fG+HWRl5`J_!{QH$JMhJY%eUJg`!|OJlg)drH#smV z^-}ZwTwU&rxaw{BOaH->uwT7ZnTA*Mr&z-SJKpVMft&~qcP*@38!L{ccIDAoN*l}S zU*+9tZaogxa0|GkK*im0XyxxMtYVA|t&>}-B^lZ8iy@KwOGuJgikw zV_ZseBDngmeNp4P zCGBv0TJ}kKj;{pL5&f&d=u%Sw~}+u!z4ic+&)`Jcz$M7+O_g z;xH7p17NWiLp-i~BP;HpGAf{0b;4^7@zkkOs8RD#_vWC<=ZS>Q3%EGMF13nELF$y( zD*G3M%%;J$fFvT<_LoC$CbDXsTiqJg>P{)m@yj$5k1_baHY-2^Ont^RdDE;k6??|g zaEA2kgnBz&AC(Su085iaa1t*VOX0J;k7WKE*lT-u|9Q#iFWe^$*L@+A-5(SxQRy zTsdl&MzUX&gWS)eC)$PKn=t6kMOQQ#Ty`n$CiyX>@9Eh0&JSZQigU(uM_z46^`eTr z+UbiU=vs<|-!|&ZW5}OdFT)?-%D5w9Zr8H2=@0P8yuYP-c>zNpZV(+?ms5vfEpLPJ zaEw%j+M^fD0*iVe`&~3u|B-Csqo~!Ze~`{o_ib-AP5|3C>=u z$UT2wr&s2Ket2mHaN0ervXJ(BP!scA1%*AeY!MNPqfgbDD+(?}3{X?r8TPb(?HOPt z!#)2r4g6NCb8u-Z?u1^%DJ~dI)VJ-8QjSf1)BfGi7=_|@iHT0n5WvO$ajUg9K@yw|8rsn;?q*X+O7$yg}<7_tn^4Xr?AKfgO6DhhVrMaMd3{0jX0 zJo}IJwEAz2pf(7_=PFN7P?s~7_Z;2)N^qmn08MaSpF{QfjjWI! zzGJYct;P~RP~umUkjnRf)gFZ<|3lx$=Y`A@%w2D)X9QIDE+olhO_+y)2bAc;D3$M@ z43aI!$6EOc9mt2A)<_95Z&jI7eo&wT7=bK5+tb{ z1p`gJl$Xy7jv+5pDQYL@!5815p+v!#CfidYygS!~R0{h{})e+TfOvRny(A4uouxDl8%`Ng2Cct%^m}) zw+5wV;Zg#bsdqs}ahvbYCZ5CD;@6yKG?k-hWQ{6Rf- zvVwBx$M%xHt&Jj-nXUx0k}Q->I`E7ZRt!_@u#U#;`UFUpgyg@dlgJg;j`q&CQO$kC z-y-H(q++I=HhVVlzJ4<5-N}+jS-4%qxcaa6K#-(*s-zhHlsq#|P%^uwwgXv)pCW_i%T-#eVLv7X5ao^NsY$->6r#71njt{r+c9*^w- zhH7^LYh`^5>C%}u_G|DsLHpOiV=Oc82$WV_)YPTs%mzF1$t2}nzmx++p$Jn^`d0Xi zYT*3KU||IX3c)+*y*awy8jBIoazcABfq=fbj2?|Hh-Akd}Js2 zWq7SwnrNf^9;wgHz07WP#Af zvNm#ZW4vZOL5=>4=Uxn#3!|GL#$FS))q9@yq7mzHJin{2o#)V!RPs;GPS)cI=|wXE z;_n0-IeLMrIW0m#DDPjBoKE?JfLy7k@juxmB&CDdE)^?}MlD+}##N~7`N ze!ytByj$O(gQPsV)HIk5T;C`+j3k|3Enu#kX8=eCH>)j8OHo9Qem2Ce?tD)DQ!Y>>wMYufXO-*Ff_UKx&Gi#E!&rKzr_WreMT3Uv-e_v0AUR zkCGveiIB#Rx@?sogGFX|8x;tqB-Mw%!NN`Evr(F6{Ff&jqKX*jk#_KTDW#e4Yq1t* z9Ghh)F~T>Ic9t*xSh*8@QKIN>=A;yHCWOOTVrJth##L@*5))Rs_y%mg_1Yyud+gzG z@p$2$Niv^Q=ja@(3XtqQ_xX+|HIn)zzID^0!G!4rUW(yfyYX$)of5er(*$zYj(9_I zyQ>b&V8v}e$K`3h@XhP^6?AyZ1NF&a_f2 z>)W{b|6KY)mp{niv@Jizjg%=>XY;TdB^5s%;`J5k2bS6g>07SkZa3DQ1^TmM&gMd% z-J(BT)%T0?XQ9>)G$Okq4?0o~7GK%q%?X%1H9Se#5z+`ryLX{r`aJ{bbY(h=c~lFs z9pcA{?=Lmsw59^|&`n%i1NcL@{*>b_;-4BmGU}H?7A5>k&6DE*TN9hjD0%v|IBcVz|X#U2hsW)m$WMcO9LN&P0|706K z+X!f>8Q|siU6+)!*Yi`DJ~QPu(jD=F+0xe$%A1@#lYy6CUH=XBFVhNBY7AC$xf{($ z)CGcgEZ{aFUrfdxUUMD>)AEOUjLvMd=n7vJ6&BeGOUpJ*iA1AY6T;lqzrq$gOm@MH z{jdwNCR9w2`;xd9k4(NamZYux#rwW!G+mABk+e9YV&mpJAuLw!s4^b~gU(M!(CB!x zMf&L)$A+x)%$N2crSlf(d@i?Fm@dep>=wvIBC+x@$qDhUa;_8zdLBC?1dNP9O zv8>jzIOi*PBu?ZWKw7B^KLe?5g+&WW7lYk^LqRY%xbYiCDP< z887`LO9ZzkPuWL{lCUjpPXhx%-huXDbrhck5Pszk3bw*l-@2fSuW(SW!bR#gIZEj|Kv5E7LyPa8zAAO(=CgBH-&(6-IAjc59g zd$LMRMrcRTsYB^Z8!53;S^c{GxJzHW#b{JMHoq;tBS569U_<~PgvP7q($msMufNn9HM z+Pae&Nypgq7*^dVn6jAR!DVbpg>)TF_34U7_GespT}2|Oakrz2YOdCXOPFL-Gx#tS zidEU}5T>G25{`idDNlhsn@U!Xi>;Z?AQBaNbkCu3AZ^7O3EDKDwhLZk6c)ZZ) z3=Wc0qlftL@jk@v=&VV7fCOUjjEg8|U#;qW=&A1ALRJZY&Nj$O7vgn1lTkB<6NNV& z+3}nCA=#So2$G_}$K?-Y6Dt@O8ei$$Xc*K_?D~YG$Dw`pjCr8FLds8<1a9pr} zpb#ldMbjU9&Qld<*R-Ey<=hx`&!wlv3HOiA_-kn@P*uF=>T%XS8^%X?)?o{xy$9iy{X$BqhlnM-=4lzr?Q&JkgKfpOyCi_bTLVx$i`>d zVVxF}{jU-La5Xn|cQH4$ zGIp>u_jGizwXk#aG*o3{VPs>Jkz!-AadmV+`0v3G09*h7vf diff --git a/R21-1 postman collection.zip b/R21-1 postman collection.zip deleted file mode 100644 index c7a8f5df32d8ce22ebcb55a0c8bdca9268542e4b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 126550 zcmV)HK)t_EO9KQH0000804iFYQMZL~5WXJ)02!+d03!eZ0CQzyb#i56Xkl(=Wp{6K zYi4Y3cVAL6F)cAIQbRE=YIARH>>X=w<2LNC82xbDfJ+uMDVK)?R zthU}cc4j-*D~A2|k$U=VIkEG&1&2#%o1!R6A}Laq|2eq#U7G~q!O0*09QXl%03Gx? zX2(2uN&oiv-#-64;D3h)f4)4J`mRf+k>h(;_QA;k;(FGM0C+x~k}x!`{UEYjxcz8_ zugTvF5=Ky06fDTg1BVuYivE3>sJqu0K>_?b=6@&r?=k;tb_HMxpeKNS1z+>I>r5?t zWL)^3$FRau4tr@1`yF$jU(JmbP$?tB zG$W%yp5r{1vwWOp+3a>kAUO^V zB{Y)ISV9vC)tJA?rZXkL=Y#9tS#Ak`lz4_gvoi*PambWVPeOeO)tJnRE!Uq`a%E}L1?zZsoV0h$WzDX_1=fdVU}#0&}WHT7pRCkz1v z>~J}MS=So1B*;mCxyS3Y;kLSc3ho0!;;0XoDMP`j$k-cg{VTK2OWEBPE#OcL-I0 zWCS=+;81}h1&$RsQQ)xz2VDi43hXJcufTx=Mr1+ z|CT(%GftMZ9$Lakeec^?FtDDGHVLPJGe;D-2Q$Zr9-YuQzrHdeANc}{LJU6ue*OYE zmT`J|7o5@mi?eGhfc8Zorjyg71-+Z#<;1voB*wyXprql@h4H-uYR$ig>J#F?qIbUi ze4<(N&!Gis`|`ato4Z8ReHx)~;17cK+0U=PJ3WHG2tP*AJUlr%GLL(Q=4f(g9-2oX zwE$CU0iOKe?Y-+i9a(dSKLAFK0y6hQC-Q^mqxcf!$c$g!GB$4oo3v8+2_z?9{`l&5 z$;t~i`n06QB2qZNzJC4VFPD@i zyIV;YQCDbS%i`%ZDxTMu-(Ftav>+Wss~Ti#m>%(oqvqFZ63$_u6XSa*22)K<@Lsoj zVw@LGQsapPFz2blvk$Sv0888?=ezM_;mRInnf+|o#3c#jD-TqlV;fhmjC(&w)gZAh zEYI^JUR4UocygjggOZT==Tlnqloh)p2AR#HXT$M|3n^Au_Y@+lMsm;XA@CP-15_+5 zW#7_P*iJb0;n6cg?*l`WWkdqi=n$JdFi(shKqbGk92a}V0Fe>siSW=k58oQk{vt4# z?+Tq@SoX~EoG=P3P*O}-VF=ggz8}hpZa~*3qz{+##hvSfj~LytJR9|KK%hK{%g1)G zTfkeleO573mO$$slzxl^5(H0m9`DBi)Qd#%ndir=r=p`4Ae@sango>M;lWEDpXPz$ zmuS1tioK$S@!+&%K%c$w-b5t`^f_QS_L+GK(^p)xZaw2_>XgqyMy+H5)u^tQQyrW3 zb!vmhC5;DBEdm!rB+T4D|HvV7dv*QqzpL1~fBs3>bRbs3%0Z4RrdD#aQ^8?)^zp{^ z&o|)iHtcC#1f<;4YS__A_*H9niT)2Bk&a0WsnWfrO7}MI$0QzTSZzhinNuo<_>a+& z4|J&Dx*a+fQTd_+9qqq-$D{rHE4dS~;xJ|~Xg#c`t}S25l$&LyoZ9GcaW`|Kx_+bRImo7i9uG4tQdgm$TLqwQAII&&NnVM_7r z%mnSnC+OFg`twuU;TEAyZ#_Qu%lZ^J6T2K5>%j2iTS{Y^!#M5KCRnw|3q{c!T|^ngtQ1eZ2rQ9 zBqrXaqVhfW*|-n+R+21s!vr4ZAPs zDESPwpX%F_pP;N5cFMoB439hjC+`R!U5CoIhdM-o*&?Lq4>Z0Vz_n!K2GDaAMrECin%lKm4Ka#W+61&B5R6vF9Fs$@M*BLyCji{sE5$iXN zmGfFb^C*aH40#{Q;d8m(mco zbw~&qSK^k?z^Q}ff915e`tj$!>pwhGmJp?~3PjZA2arKb^Xh$rG1I*!LYhc^cXlsG|y0L9QC+*+Ul-yCdhdo||7my6Kx z&<*-_5vn&~+M6A1{{rLKGsyQ9xSho2@dxxA?xVRuTLu`_7GYDr$RLi=>Rm#c`fYp~ zQEIzAkKkQ6nwI;4E^t1G`E&6aUV$2py89`!`frm{<`Mn`uH(Jk?HTipXvR)Y7FeMp z+t`(}E6>!4>%> zmWN#g0dNFKRfvf`5Sr6pgz?Ojh@K{M|JmpA1&%2uxN@FP;|Ey?Y}{;CLM$Yacu2Qb zh-4b^upt)ag`-7?nJt=Jd*bPl!{T>Be29I@GzzxXrsu1c?`I=!-gn3Qw2N^tH@_LGb{30!NQ3_m#Yd978v$G5`?+hjp@JRSr%BspV@p zDD%j|Z5ru~I)ZgC!$?-zI3NlsM3CW2=B8+RUL_$D%nB5yXvAh2*wrwl65;oeEj2h9 zV|?R)Y-28?EI)&IER~9dEJhS0Ikm7MPQ*IQvO6eQl?MGTF#%3!da`&s4_@Jh4CoXf z{b;#R6HD1xFMB4BX;w3 zfqLW{NR7KiqzFASwF$+DCp5G1OrmBu;CXf*L8{w$X{r-bZvo&&0vvi%cL90XG}T?( zJu8c`eH#)pyG;%F%+S+#ovoMMkV|FDH{bGv>RC?0^^|8@Ii|F{XA9UWFR$1`VPDQz zqV!Z|N!eqe4#XSl=%SzHCp1r~|IXiDPn0{Q4hjYN1%(yCctVhoQ3%wJVwdU$y_R>F z)@JwA-Nsg1u?$n94#j_d@`kk}TLkHy0%+>5at%Q+dN9Guzks(dTF~vuzDj+ zkrCO#mdIddQ6nHkcvcuhJjDp&n%k6&lod8C5risgoQ&g~vEa_BitMbpReY&j*qlUg zpme}x7Tww-kKaoumm{fN)FmRYE3Uc(7&2I{s^IdJjg)o1<#6k$U1Q=gyHZb?A+Oj) zHm-PkS9`M%~S`^(%J<&F^Cg zy|^*OR{?e9%baTm1{n!H7t>S>abF#%Q5lnC1ljiY>gb9Fk!5KV({An@GDhoYHAdIf z*#0^j%aJw50T%(DT&;nvMP*qcI+9%VbU!W}O-?zsu5=i>P4FcZs)Z^`Xj592&>Cf0 zgIif5D=Gd+Y2uZ_y!fI(GU71vZMq_kM?CLg84V5}E^2sJ!)h1T)ea497U8lPCR?Fa z%Gt6hM$kN@Uo$R56z|os*Pp^XJQ{ivu}cVhEtnl7MvS*u!B^@o=Yo~xk-WqSLadP~ zG!Z_bYj%9S$M+ss+t0n{S`2b6l^dM2Y}+9G$Z+*u7fRmY-|vWfBUu_EmWE7W0P)VJ zVG&U&#%1CHYLXpz;j84i4IptD?X{bR|C%9Vn`YP{WM#2yHyRXo>a@6c2hIJx_ zhH*;erIz?`hc2e$-Z5KW^T+Zet33Z%9$6)j`3$C)u^aT7-I0f0Dje=iRTSzM7gCp@ zxTX_ST&p`7s%Dz1!cx~Ux-pH$?xpWm&`)8idx|FBQoXds$iY=v;GptlWc;{J_DBTz z*$X;z_Yr{Vl2h%~e#1-p_={n>rxoP*fZ~9HO&GDgy;-BZ*|L{o>uRgxxVCzA`Q7Es zrS^NW6=%38KDOb^mc6cPM%T5X%UU|TWv?7oQx0Y~`3n82xerzOZkv@|8{8k(+P3;MEw z)^SR8dV&|xx8`kF|5c4cq4ob#+xl;X99Gr$g>tyimV=HdtQ=Hze>ZJsR~>&ZbWG&3 z#OvAFqG6o6z4FKG)Zk(tuiNLi_c`u;j(eZu-sc=P5LVR4aq|qf%Ft$$-r3}AWg@(0 zDm;@6&t|ss6XMD2wnou@SGsR%UNE{X432aUrng?3YbaF*XIk%mst!xwi-8vk{Aw#%upeL73$ zcW0b{diHE%=`3+NAHy)?7=@?zsf8s(lV=zK$23P_`XiDHSCyAg=b!PH2Ef_n>tbTp z&tz>N1-H+b?K5T@$e1k?QmV{wwGa?%DPy)9d9T*8R{I>)hn}NqCL^`aKh+H*_fyAR zEt7!yibQbASwcVYz-{D^@E{ojR_IYIXgd!`2fh>QfEQFi#`xHE-Vy`N;GOTk{e)_F zemXDOIrbss^riv)pN%;e=bHF@*;JzGR<^e?ZrxVBEWsqitmR>65-&wvn9acyo4(YC z`TH$SA=Ucw>C*3*gJ!cX!n12D|FXn;lW_`yyY-}U@@lR_LrF7{7?QWQG%b|;e7+F6b;05>O^#ke%s7XY#=+au6}E& zRhtypSKPPQX1O(y&q?LGe;`jW15_*1jksm1Ifc+*-1JJ>&dLaC40rWds)#fd`$^QB z^ywl0Xie$|Pm{4X8Y@FKR1K=yqCyz&t6hf5$s8NAP z;2$MYvkcCdx`pB#HWRJZj*4fN9ou_;&u#<&WwG--x4hXs@PlkLQK`UmTru}i;&Tph z7c~(z%EXMa5uD#NNOCQNK;=}dG`Mp2WdDjq+@QU#)nKiFXG zD|a!KMilpH3B|T<+-%S>hYiHdG8?z|@qqT?0lD!$iLx!b%xi`Mwwt}oUUl6Qr`p?C z-n3mW+;Of(UvAuU3k_`E{`bL$sk}$YC~h;lJ6H2Gsl5Np>#npGzJUeRY##W)Ss-Ru zNpy0*GEoxI~TYg$*fA_ z>ONON=SwxEq4OFA+ah3b=&Gg=Bi;`BWx|c6d5To&nzKHIY;esjXBrF)p>S&H@$Pc! zZFki_uUJF>Z=;^AQk&yulV7>QYFJ;k>!I=-Q=!|r^*JVuTvAR!jkszo_mihZ>Sls6 zk<@&F=LJ>qUViIWijA5@E|>~`m)-|z# zuEl*{Qh?3KPm{}98?{szAvTB$Hf2@rty(F3kaYRVz9yPNZTc+K{U)gWCaC=;sQ>q( zLMK+0rvYQ3s<=ZSgHx%!Q`wzU^xeW^zDX&yZ7R8GD!pY&T&IYoXekVJ6(*x*StF1P zm#KDd?&Fl3UU2og4IWZyc{$siw(Q$+`;}LlE3e%T+3jSC`hzuJ`3ueUT!Lc55Q+p-PXr$^Tt$=GYa|Jb|w-N+33wXcUAY&Tn-ZDQP1r-SZqiq1AH;OWpsug0({ky?@D7^J8GEmH*+9=d z27Vurmqcd@UdP#4EXNsvNnNz8dAh6vAcniEeH}M_UN^1ots8n))G)V6)3tT;GZ1l) z!VpIqv8MElQEErEzNVKhbFW1O`*E!Eo9N7uei5&1ZtNHra)$j-KWl!Qvzp&V6~G_5 z^4u<*#_-4trYoLB^t9NH0~=0T9A3Zko(`tlHug4d`}i1V&$g2nbAxu*eST4wp)Cag z_uh~w;?XAn&*Sbf+=QL{tFZ_-L?JR`nC0^AlRPMFr|AZW!zd*`nbi8733 zX9qpprBJRZbErmsEe9YMn9JfWS=ypRt9rI#Y>_SUx7V`=Afhrq5HSS#?)GIwCm|FA z;D8&PvyvsBz&0i8*)mPaHFQQQN<~E~u+PPb8miscRpv<=dyr!fatsf01n9}{ML{dH zG$e16rUDnPMe-A%?0QCpJWh89^6=^O7ma<}ot1jETW|2(Asu{Qwn#6UdBB_1lJ4l` zssNd>&QJW2%a^Q$Gk#4WFg4is;?7N}F58K2;Mnb#)Ew&!%w1%pGH-;d}ENper3#%%~^-j!6l z8+C73haEM-FtTyE!>)_%b23DiHy`*Tl_zF)?1jb?n9C%r|9jvP>Y`{N#LcA zP!c|BiJe)B6AePWiI8nB;6-hI(#)0096}?Bl~@)=p04Hc!|1rEmG! z)wAq=mZz^}kKj=L@85s;e>X4&Z_;#;F4QeHgs<Za6YzN4^98 zPS_(DVJrA}%O}J%@3RLOa0?jT%Oy-rDTzFw4(A~xV4Br1mIKaj2pwL-<&AERGqmN#=?kEL zUt5{QfsiJ4{ykR|L{nzGDNRJ&Q(QvrEc!teeZht!sp$7L-PEiFp#Q6qv6JN@yI8T( znZ_`gm=P9&p0m%t`0@Jci<(`rN>$deQc-BW&eL9LoJg+lT?<4fll-aTxHec?rH{p* zT0t!C9dxU)KEEd=l!7k_H`AQeO&11bq24s(6ti`iF7KPAkqA7+n34tqwvs9igi>~0 z_={V|MYT7x+zgC?ujSB3hf9PuF>9Mocv2Y0x#=%yNS|tmMC~5jwMxI1z=^i` zp2kd)wqqCz0f*i;6rxO%)!py6atvVWQ3~Qs`E}slh$o1(fDYTk$)}cX{P>HXUVQQ0 z&E?l5brV)~)$ig(iJAE^`)SSL^w$me~GtCUGELKEFoY zR9PwO;v*bS$M4O|Bi>+MC0GVJDw+KTY`$E<1f9LJPC+z5*>~AcJb|i>e$^8)&Hv0+ zMUJsCmyIhtNL-5C0 zdq~TP;k$jE$nVo;`8IaMR2%H9v@W{UOLC&6jRIYK0RcvYY@XQY3g%saCT0;M(qNrN z98xJ7LPCC9QTxN%b{KqS3IA3&4VD2Rpk>f16-Z4la&9r!_YFmE9(016+OA;5A^n}31}HUt>UC^DfZnC;oQx#Gxnq3M{l_3t$`GKPkq#N-aJAH z|Kh8{w7mB2%}pVmd;%4UAIG`ni%i7t5$nDSKJ==bV^Q3YgR!suvfXywgkA@U2I$5* z66inXc6Z>O#P~vku|L|tjT%?bjraY?-CVd;clN`+5|pMa$9*FhuKY@Kdr*U^@^}Lq z%qo-^2W!NRY2P;5mXL(}^|HlBGLS*WggEqjop3|(?luyE=0Wu%Wu;7y!QsfHrRvM%?hnsS z*?sIqSER`sRY8!F+yn0wz74OxvwST8pcZ!ET_t3}w)Ng0nc=QB_b)L+cE-uDopE?P zsoppZ?+qHqbBb!PozWx&#(lWqX~YPV-3JXP7<4j@9KFh&|O{3BtJW ziLA3o>0H6p;a0kZczTcnu8&xfdg*P}O&nF%EmV(hGm;PEaozE3K;D<2k2u54^ zInZr^6Zlj7%gI$Vrca1WxAW5Sw2Tf`D9r%~Rn#w_)6^rdgsE=1vyimv`WJ_%=N5QE z;ST61aO&@vuiBWaTc^eMq@%xkMn@<{SD;-jKwm@&6x>z|cMfeJw^KJ=`BPWRK0bcS z`KV)%@pYF3Q4!X;fJOKEb7RSMrdxUrRiVL#d$2t@lUW`f87$H8l8fDunipn*CQITu zSSof{OhW4>B@`LIS_Hz+EfRPq$Ipf*&9$G!Y|U$7K^-PCRdEN6@d~&1z1im|PAh=#_?`vxn*bBNyikKk!0i=d zW6LHknn;3(f+b|7O;RX9F=1VTGPyp8K|t{$Q2hlxf!lb1y*&5=K1JXWeN^0=Qq0@b3Uur$-T4jGE;#Al1^9b7m^h9i zc~w;no5~#_AP=b#)lIG~^P31P)BP5~NGnvpinPP)&)HGql*L}*!O3hX1ZA>ZdUk-oMwG^el3uxuDx^YI zl}feN<)ImKi!JA+@h=gd>uGVoe)j$gMg8cKmN0qb%)6#-nx9XxS3kaL?@rpeD_zY7 zN{ny=efE5RBUYv3=_1jgC->5PfJ2@3knr?q*(DA9n0LNavU~$i)u`BE! zkzUk4%tEi6{$S(>vW8+^<9+ndE7fd_b%pnB`Wt&$8J!dFu;?9C9_xy1Y`D|#l|u~~ zq&=kAdE=#8M=&eabuZmEI8j5d@$z!Ty6&Z$lTMKGhZTrMhQDY(fcPi~Z7A8zg>7?) z22-2KhpdHL{h>#p+nT-AkhS)@W>X}K}CXlg*GR!i|J(Go{Gb%B+K(+I^`@H$~vQh*=C7XW*CmuV@ zYF&^MA=PUm->V+g<(XGx5*Cy+>b^HFaA_w`7(~rUJAPWGs_UvQ8aueC+Sd*4z48>Q zd8^vxmh^eaDgsRU#E(7ACGaGxHn||~-m5ZPU5{0DyldR7x#jGyQM>)BzYRM2rn+a_ zIH(Eg!upmbs^8kZ9Zi2^y!M>MYtOumod~#_IkY*Wp=>j2Xed>3qF*XI@5kUN}n)87~p+u)mtr;&V%JXUhxx!97; zN3md?NhKau1p3iBOG}oTCo6B2wE{n6!X5T@D}{<$BvSaGV*J~aI5Y^g%`$pgo|iu{G3TU(x z1kftv_D)BD z5v+fXMP>Qj^3{T`du)cxU@2KH>KNI#_&^?$r7K;M*J(^HI7I>z zKa}apg%In<-TN8|=%K_;W7T~Ge=P!dZH`h~?6JFaq`+sj*9c#((8|Y`#R?Wl><*=1 zJL+^py2XolQ|}7}a~;eIHM^JsCDZF*S1zG#vS6<*{ba0A<-wrAg|r=BeiFRpS`gWk z){u;16?$SB!2u!$YU!XJp4h-;+JzFh--LIE2i0e7Ju8>u%`1MFxK8a9ne0N z#^dEiLT2}NWe*B{jT|rO=#;%3`v%yRs7FvjSVFIYbdMnwdR1TTe8{iXvr$Nb+T|Oz z)i+YvU;fYJJXU9)n+B=M*i5uRZt zDc+|I>^BS9$DYU>Jh3ZDsmN|li#SHxLX>BCKSdGlu*INmZ0Pi9s3_XLg)C>+*`5n` zsMc6jlV{g!oe{W^6{Una<&KI5f0kb|3e7zXlgUBaISg!?QDBk990%<$19KFQht)qj z?ts=)5T<@%TLXk=^@hvCVR1VA9RcPZ4$h7TTL-|?Aux0VxOq5OIUal*022qo!Oc)F zkkMugSSv)_3n3mE6^(+f?a|d~qN}@$bnXML_5oMD0#sQqQS#$41} z3R`!ev;Ajzi4(j$_3*3A$HwAtlP(pKqwFqZix{@7d1#goCBr)YgSH5Dr-^{!cfg16 z4@oe5NC3<0$sD5MT@_kgr*VB>bssdnYdTdg2M$ui6wVTQ-T>epmTr|i-Tg^zoKCA+ zQS(3(fA3YoA^c|qzBg8ij}e4T-+Tps{pB6^Uh#8&)h>Z!~~=( zPkb|QpqXN%Qw%&~S<^UBH>@=&H4596p0DIMo?@!VmQg*8`Q&vaPj5J#aLZ|f^`+xz zJN@q(()?~tI$wRTYuUdWOwX$$4X?&@yE@2hj+VES1iXXVz7Da=XLBx*in%VDt|95M z%4wjD<3?w*2M5kS3pa44MfV9pktN_bPa>SJ%VhekaG+Mn^t)CAo=O0cG=*tdl(tM3 z-J%4zN6T`_!jIzAw_>8$BmVu8B(WmcD<+6d9*BuxtF$?v=2o@s@&;sc(<-E$)s7u+ zgb}4*A6<@3xQYEX*85;Fb84maNYy&3Wb7D83=|oAN4o~kgZ&-KrZKKd4lHb?b`$BA zF9k}($ZOivX=>&V>6DD`x!VzjS<{iUB6sq|iJI^$%Gg$Wu+~GVN86pDAXre!@j`T5 zKMB9k**sA;SjXnB2eKB}z*h=2g(3X5!M{*tZCdV-v~t6gN4Zq6pZ)e`jS;AOUZz&6 z|Nhn>mk+m!`v2lYlh01b*75p2CX`MIeWxG9s*ZcUyVS;_d9{Yk6c!r$w|@hlQM1)G zneH5^fVopaz)Ff^g$Y8dMoTw$`m|iGc?Y^RFE`FWj!B+unLXGVyw$B|;Wui^QJ8u? zrjg6Ij>>uIojQ;1gng5GlK-~VZ0%XrOEYb0uaIVBr#8ki#{*dFoIBTp0}Is^!77&o zP9*yqoICu9YtuN5)jnuLRvT9$@`*Kd??|*#l=uW!*;?goZ$f)cuCC5U!;_oQ<;9rH zT({1|CKr%JE5k>A4gAH!4&wl~e_=PK35_UaI`;8LcBkgkUb|=qEJ+!@@dIwn^*!7g zz|+vW$Il@r*ZdY|TD02PLBv!bbm;34YWZ;a`_(n+a&uMBd^opKKg6jUPJAHy++1x? zJig2?%*Y3im4S|@2YhsKbN1nvli^vze8{vceeS2~V0%fU}x?2hS$V&&H4aBHwvIpdPDcNR+-Oxx2f zYhor}FzbQz?9!eKQ$M#6RY?<^`@(|3^1`3KhVHw+h1%k`*+|MiUwseRF~J5bA&?j7W-Yw z-Dzb7D9|zW`py89ru%^3gCM{kN)w(aF*iH-(yqxyBtQXda7YOK=Ej7O*EJ}2ZV*Oe zIuQMB@`q54pU2cK6_V+{3H6zsCr+u8=L(}=W$;&zeYm*woF?^=RM4PC68f5T^368+ zqo|WowVT`F7c%67!FK%LE+I}|N}WX;7-6mX{eJ&$%Q@^j5O{kBdz{^a{jI~vZEwHVb8ZiA5C0?8E~@+f(JH6J>NI9vpj3g` zGdby|hmssY^bR38mgpZjRMv#NF8yT?nmvQ9R4)5U`jx^RTq~==Gn#&XPRp|N`Khv< zLd})}36!!ioG++|BPDLdrs5!$s3iU3t9q%@^Y}TO4d*Odc_p|_Y7;7B2VyHOvyF+_ zqgQ(B6tVQXxhUX{O%xWc+hXp}+hN7HJg8wnIkR|DMD5t?l!z?5>0eJ6Z zge$uO=0=Eo$W1F@V!|QA3AK(s-28rWZe5>!_;~h#Jj_31xJTSKUNMe#A_s6i!H&lKG7u zihiS-tS7{O(Xx)p+DFKD_+{dMnl^MKUZ%Vl?xjc>=6%WExDUt7=x_w5o47%_rB~ig za_m-VC@CmuDJ>*4H9mD8v(xfXat?qXRM|Oqs3au4Gq#pb_XG$ zQqtEgF)tBqQK6_CY*CXXV$?Qbq?DXwi%uB}t%9_J&rNz^7|buSvoPEe0?U6WHNtEJUoMAIrut%?ou0>?2hJp+22+B)(O8(kxnBVLXt6be(%nH; zVM9Tc7{f2Hj+jgCG`aT(fl>Gj+lzxvsXaR0)DPAV(MsXco3+8YFB+MRlk_x;)spAX zBK#sohMEI$p*MZ(Q+u$k3aT6PfK@=5P!T$mb!K-2a$%Ee0rq!|@$Mn+6wi zZe%SHwYb7f2_hHxHAj4qALqgV$GsQM=K^bz4)9ZUJ)xH3;n4m)?8W*Ja%d@|Lwjnl z^HSKkhO4E7o#EmE6 zBVRAhzTzFKNzM>b)H-2Bsl{P<{n5H}XU=x6<7uw!?JDNK%CtN;9mj3npjmonuZVr> zQ__kv^=3^kQX@*~xh1F674|YCvUc;`!Zb13gt58qN3df>i@<~5xK^;N8;PCJ`s1_X z5h8Qwn@y%A{Q5iG?d&|vz`XdK^*tD%?Zqtm;YYAWyIy2D_T+P78AQ^dgY#5`L*O~v zFILiNmrLY56_fsWK8^wMnOSk`WHm&YB)9(xGRZ#Hr6AQLT*+{@QA=B9U0}m4TkrOI z^;0DlT`H$7KWVzp)smf+&Tv}eWJBwce$`g4RLPuBBI}s?=DXTtptAqfy<(P~5$f5} zH-2ZVo?#WHjlTRgT&;N$wdlUU{``D!Zr z^@&qbth6IXkTt@u?Jffyo$}vkxq&#HR~y8w{sxf|DzU#yz7SK`DuoUMc z6gK)zB5mmJH9AEPFIBsP!WN{rt6L!Bt^ytQPpPc+cDMH4%J&xw54}Cuf)={#-aRWT zNGLe)DB8e;a95-zg}xe%cV&%GiEL#>l`b-5Wve+)_-77LrJ6AhsffhEZcTUR zw3oU&nLos%$y{KkwSCr$FF)4lYR{allP-)&7fQrFtRf6S_u}@t}DS}YLsBJm4K3}9~hg~fx2P#X&s19{iKCf zucLaPCw#TJ;8lH*tD53gYf_MQQ-_GEcC$dc)6eR}$)=5G;8W=YJfe@AvEEZ(46vDn z!nO8Q4ZOTs^v7YB|07kGn9{CuYpdl4ae3Mrc(x6G`T{W;&{{dH7oCks)6t<68^1KL z5=#o)D2g?O>iozD>se8J>gtzh2O#Vzq`Ukrev6)yMV}SENSYykku#=p4)Ckg;>)5$ zluQgxwsY3JDrVLkMUM_fOqfiaEhH+2RwTHgjW>$fv$(kH6*q=1O00soJ?JCo%%FlW zsju*6UxutlY7HzhFAJt*A<~fz3cCbf=e9xEJI8S~82>leWuZ6xTK^)eUM3nS2`6GJ z@v?v-8U~cMuw|lwjzC2)@(2ExJaIkp#P#AQY+HuGm+YUELGg^-HoJNvyRTi>{TJc&x~*~-&QnZUw?)oi^!IY%TbEI~89{AK zOh;GOXG7~`5q*XS@$vpQGDlih%mAZZejAZq1F~_Q zvuo_84wpIAZZ---_p&h@6FlvM8KW4ZPF|O}cef!FI|fR_G@6Z{VPYZt&|u3=LC7El zT?2eyK7K2pwZ+&*$};o95n9R+2|H9Q0Ivd^Wl*eyT`NzTuK|!{@M~2z;fdxIfUrf7 zYcZ#UopT+qwO0;o?QaO!Dur?ma<`|}32R1oF8H!mcr$*l9NC;jVAmGbOu^7!)4Wj2 z>>&?xrY~9lK0^t*sc^_f@X?(@*{TSm5EgxM@u`uB=^9Bv)*3A>)ty6We6)(If|x*= zHQ=RWP;T2BB9m~W*P?SoLB)J}IQJ(dXNQt`e`+T)tDbd6dFD}2=bmnLUY&nNQQLc4 z`@2=s5|(v`=%o5@pz}pm9gQzW1MrIR#n6hT7+;KL#8kx+qg{R*kzV7AvFTE5d@&4| z-C^-Hz8FS)+Yw*mi(z~*>NT>3ZW><{b;U2(5xyg-Z>i17k3ULbNd87~my z1)?4L>gAk78o<6FFM`3o4ECkTnq_j38%*t0V`?S`xq;-mXcTTl33M3oOb&8`jC5KF zbmZ_gImnF?w50?(;X#vwy!(Koj`>R!iCbegb%>~HH(!``4>Yi@SiAeLL%SOVptaG&HG@Kf8LfRvNsra)3CM9*!=Fm(Eqb{Y|E|F zz+dt7fx^(-n_kXPAk!8ow|3ed7@$nXNt|LxonSlXP#8Xq;gk3UcBQq~wwzeLB`vfE z(#DonD`~Y_?M=_ap8S#(KL2pNWQET?WG`9aa}U`|R(K7O^?#HVev>2F<&W4I}x? z%<Qj@M)gmF?0{K_QC-_U^{v;ybTOej_wegR_S*<1VeQW6|wsjE5=Uuw?{BU!A z{msSc`7rGqVc3oe-kykhgR84AFHQ%y7nfgC-6s;q53lG?e4NQkd)4OfFdZe02ap;J z_LJho^}0h9V4PdyOm(oMEhgeftnk=!)=H-HOjhl_l8a+i(yAqZEwlEpevV~>#fk87 z{E5=>Y5io5tpI)N(X>#=zJ?m^2Vjm24xy ztyS1;`EBFBO1ilT^x0C?LACcRVY?OGu7ser>*0(T==d{ZIW1@ArKe#s)i51On-W5+ zCjfaC!mr9)XfLq#QB(YrM$|UuulS9W4W>&inV`i9)@|y6({d~rsPJcyt9uoOS z^|lZJHB$gSEF5^4eyGyD2RJ>MEkf9+K3_}9uBe$HOD(TkEv~EPf5pn>F1D@b;FU>i zM-`p6zM97~UC7PEk@}AD((~sJmRrp+EZPd18$$424mz#%m=@FjJ;2BeBTsbBZ^=5D zXE`IKR$(7{LqMwlkcI?SQUH^vwkp6?LXxDUAq!fD^Z_yQI)0h(#CTosEP)+ z0$l4QsOSOqOgaUXKD$;+SZOcI9d+Wat#q!zCMJfr6x-_*)WnaG^9ziM-8iNGpz}4E zmwbbi$6OYzS9IP$kO}{1V_}Ye5nEa$_fs%X4CFdc_CwL6jog;!4=x- z^XpFrr{^eR1nvoj?U!qsNld92>D$-@=}pe&+;ODz21QhgByS7#1s|PlN7_zds`KNN zM($Dk;zaKFmOC}a)=IQ+gYi?f)!DzW2nP@Dp_*n9Lmshp&chO>e+I-oU!nr}>dhI^X<04&%^ zy{0knei1HL%$q^a_h37KjBEOU`V`Rzjx3crIxZcEmGJ2@{DeQ)bMq8SoWpyn&QFnI zgto{~o|8@qLamgCYAP)()=I4$P%k~fXPj4y>&A+~_arujk?a;iQY!dJ6qUNYe8{Q~ zt5?9SJ(y=GOL~pN<263W=f9x{WL!MJ()W!4=pY_pJ;^=v^yV95YR{}@8PA3YrbAoT zyZCmFuAFaR`zADO=VuZpOy3tw3Q{y0mOvg>)O!5)3>(xha`~7uT$Zjm#wGc#abh%# z_l=K@_i)8ort1NGvDQY`z3n&%8dW#WBLGD}y1xLjW|KVtBjYiQUzc;=GTz;N4^}Li zAFK&&;8>m8(D!+U(aGn#SFfTmMswYkEe3dK(f|*~-W#ps&$D6tRWRWC7QOVwV@d&N zDKnDA362Wii%wZ))R)E_4s$3)D<<|1T5sSx zlGc!WrAh8>LDkY`$EP4q+7lBpZA8#Z3?^e>fI(#Z3!PYbwS=b`Q<;d^)sy57-^`Ab zE$0VY^ddloGkvt&Bu7=3{v2V)*z^_6!rQ+qj_!q+FV2LC-1_ zd0n|-x$fL$Ft)=bgMG?f%B=*ErrA=bc#8}L9o&*cuP0j^brg=G$QIGL1Kx|c;H+Go zeNwetk&nmZ-f)3HU4Mu%Yp`H__~jY+NYD#D#a>O(f*E$xvyq~WGkA#<^Llj##c;Uk{r6Yx{%H`<4d&e4-a>>Z>Qe%9$eX=DWvo^+oAf`p3Zwyx}))rF8e ziLEo#xKEg?1d606Q(=h(=U0}dV!`?6+?j~y8gAPg+~cIstkOZ|4%e+vW=`1(E7}8d z1P_!67yB>mfHQQ=m|4!f|5KtM_6Z7JPN$wF)d8X^_jNJ19Y0YC=8H!K>V# zpL`CdL`@l_@*SG3hl0H=g1sUvZyL@L{Y+ypOBI|!w=mQYB_rRQamQdj)Z&yZj;!2! z^m{0rZ1*DSmAzo2QoamBBPW-SJ_QR{^tnHes@7wU+w2wopVy^4Ey?X7BDiHrYrUe< znzqa6DRwC7Xj8Eix8B=S7$^r<7ifIMMIwTyIRnewjXA5Nr9`})uPcJ<42_&FiiA$A zBsOH;>l-!J37Cmiu?Lb^*mriIZ}HfiXKbf;tl)h+B+5v3QW!7@ zLD9bs*f7$woSx=SawY*J<#7(GO(u;$Rn(r;|*txo)}29TmKbjGo4@Er|}9->q@F*HeE-xBVr zIrF6?-G^|MpjaVRwR6v3m~l9Lcxz;uI8RDV#lH}fbe zz>MaI4?|Nm9chglVhSp1TLN3(G>V)`S{U{9WNvx-a;BF6!1FT#$3h+ybaK)_vzQ3% z@lKC$hG)T>EQ#BU<#mx3JKuvEW+dW7}=kOP|H)g>Ilg!p7n=!x{dic2r- zh6M$Z*&nuJBbpLl`9adnt(WjV<3f?I zUhrK|CVk}xNtpcvOi_qoGLV?FTfN?Av6ESLViY)$?Pq7eto1BapGG`9b8S2?T1{I! z7IrO9dVMGOCV2$AblkL^gm;TeNur{Nrupkrs|x7Qp~d#SboYEO+WNLz6Ry%;bHgrf zD1ND0BSlOoG!lO3$juWQ?jQ?L2#CGM@NKv~!A~8NC#W~dvPb_3&Q|p*EGG8qXnuut1D71`7vHYf@*GvC9;l#=-r zl9@Ud!!RlfenwDnU1eS+Wj5r9in4&_G8?{@HZboe0Vk^0{rP_cBPX)rMM9Zq%K-KWG+pR`Bo86A4=2ja};i*74^=4~G4sN&X zia~IB(=~)OR%L6bC{crMcDca{nbQMtFTEJ*h{*?ou1qsb^gJ`+L072r91N9pE$JB1 zIcRhIn5V5$zm3U;Vh3RDusD>&%2EkD0v1;yzbNOQu5vz3gDa!D^BQ*aEjM901lt+U zmXnCGUj|dgCI+cHN16}GJv7>`E9ppVwNVXa!4+O88&fDH4xEIVnh-9Zwx9Ie_@fvB z=s79=RgFKrXT86o@aIwqRX#mb_3`k-YJGmDDEH%!Wl?^fv=l@^a|Pw07kR3v{^O6+ zTkNN{$Q6`_i54YsrjAl~KV_I=<>^^6=6!SF?wR_8;&~^v6$;YylvA1T)V;J~*$Mw2 zT8-*78quWF?eao#LOW7EpSQ8f8w<##h%?rz&zkik)t%LIX-0A<)2oNFv|Rx;DXXB5 zU-YKG+s8dgeWV=Q*Bg>r!6yIOX*?#jMRQPL?^;9$I$x-0F{X)rY+Mp&dJS zvofR;*Mz8kjUd0PZjDr0Rfni5i-aO1ezecTyLTJ~mFc}H$|%=;Clxv+(8mX=5+_}Q zqw0kST&!rS;zrfltWw#i`WjVPqiAZLwtnR(?!T$8USa)7n(u_}^&av9zIY04bf;QM z-i*2Z1Z%ms-&iu2>O>}U#I-$}-`@)dK3Uw3Wdu;~4pDhv(aPZ;@MZUI5!;rY>s>lGUw_ zdhL-V5-4IJ+n+sB3PY1c00NAJs*TrLz_eEoT*0O1&g@YWG!{kpgdFX=f%hUe|Igol z$^W37N_64d$i(d7PR4sY2}|k7*j_jR6q<|(hSLY2!nxQ(!6g{M4PQnR!JRIPf#tK| zX63@&bcp{)i6wf%a}$}GU|KeDUux=HyrZJYOJc)0HuR4$!Chnt`pVda=U4oA zS5trm`FPhiqziI12f(hRpxtndKMFw-3QIY1_Zyf&WrgqZ%I4IbYqC^7nEn`JVx$x~ z75qH?Ze>O&c3jwO-oDK3`nY!Y%E8i~qewj;+h`RT&*sYsWoA%Qe~Q6NST3?{C*NY$ zL=)O+a67ga+XppW2IrG~^DuSK(w<~0 ze7TBtjciC#87|Fr^r(b>9H5lKYdu^9`^N}a+HvQ=YV7YH95wbQv#W@SN)dghz26<@%VWE(Cjz5hX>QfzPWEUjwg^fZ8Gh5kM^fy>!5vH9ucgs zHKbTDojUjx(^}~btixBl;H_Zk7gA-3(e1p-%zAXH?MzMYs`UG6tRhQG|Sl)8JX z?sQ^BMB>`6x_5JP66dZQA&Pu9;T{OUm@{+1Gx13FSgE5~3_+h=el@uGnk(RbG5Gez zke47+RYVK-1V#kLj%`XfhEb|i!bh8tX`_PSg+|=c1Kw!2z>%^afWnjmK(?$CUwKk* zN)Kbt_$laML0ipV=q;C|Zy)M0!w-;w#4GACuV}>&T8w;4!Ty6Jf2mja%9OJ@g+1%k z$k@2dF_R&(ilkLWsse56WbOir`KwA9dfnAPUj!S=Pp~-{4m9S2QAM8E8INEYL0G%{DD{WfDjo7CN;waF3jiD} zxw#YCd|>;5$rUS2&RPVgX!o*P2{^&(otfpT)s@sMM|EPo_qVxSRFEh=G!zEBRo6JGBr?H|B6i@ z-F}>O3#+8%S_vsZBh2X1nV~aG$eVXpWIx$OsY=6U>WO$Icj*{D1u$vF5uNI8fHkO+ z6P!jvXDq8|xCd7fUC;6Jx}MW{0_3YjQQJd54aL~Q(hk!(xy{9ypxpG}c$Q{7s0zGj zSKLD23*p?^CE2{J6;R<&iW-Y>C&#~NXr_9NF-KyqEZj>k%wH;U9!xH=On!J!-f8d? zye`M`LS9%thuU-9u4@wVwRY(3Z^W6jc39Eg8$|hr6Z=GI?FntT-5h(Z&W^Ig4h)e- zvGmuMx5JCCt}d@{&(Flx!mm?zoDFX{*^7sZ(#EuuBu3ZGr>38PIUUPcv#dbF9OI z6@)dZkt5vN)OJ08FG!W`1Sr{lrtN9Prp?K!;Qd#uub-5(@|Y0Z#)(Gsm@dIKLcI_R8J-u_;m{jJhtAW>K_AHj6A!kG-N zS62^+m#=Su(T9!yfyfz#akmoy8-_scc3#nI{8@EyOsNSKe-IVd*E9?U4?kL((pYsw zJ7^OcpF+E(Ag*aiHfB$tiMyT2^x)8(_Q#O@Y}9M?tV6Rgn)KU^-eG5Ycwilmzys}W zXRlUNaG?lf1~;E}>TV2n1#0Z->dTAM!R^K6*Tb9h)7RG*x8Dsvy}o>Xb+=On1FZ9> z>_Z6 zX{q(6<7pe*JR1jxN5_r*scALL2`st;Yroq)=p7xm502}ehH$CDrrQvgA2)#GP8u{E zbvG~lfuv8HT!i1hzCI_4DBLQnH!Z9+S7kY3$mHa?A-UxS6>Z*nb+N1ZeE@ngJ;FdyOP5m)IIFIW}jLrKe{ix zJoo2w;^jI3W5Bg}dA2k!4l;lKS=f$)kv1OZ?oNaty+KuT1n0%@NXe(sK;xHD zAyl*Afzx@Vks|g2G)Jl`MpZa}Vmp&0CLI4@Qi`98D-8RBVUjNCWC&yb zdExn<0E71qTC=IVd+iZ_**<`_@WAh7I9%C_SBAX^^;#J>yXDt}7f=VF;XpmUx2F9e zb$b{@M%as!Zd3fzT+f_#1O{4pbh8{emY)^}N&QX_fvni_a#V@sMQZ@pFTx{OglS&1 zp<)h9Xu{0_huSxB1t5V2$+Jwa+`5_+ioU{TFD9BxasZk{=NFt0oKwo?Ft%Kvcw#9s zx1~_!Q(Tf{pICl2kCh>Pq~uW2W?;#+@XBcEu}f*EMweR8w-#P&zlGhw-=Ybxb=b{V z&A5665V{3W3U;sflRI5~muLQZnYb|nH&;5>p z`}NCvJCOAP)?O@NfQ=Y1>mo%Q%4=f6A56!*m!Xvu!7D@9AfgWG*tOn*vC>Og;#6^i z`HvBJv|O3a9C(Il`~(|13KWm8kSNYR?HCQ?obV8yP}T!T&+-%AHaq-K{ru$HjMv@u zuY19|KZTBgEEM`>$n6#{U#Bp=C?A$N`~bNy3m=Thq`4Xn?h+~(gs^8o7x1HtA3XrW zFa^N%Ocz1`-wvV4SBA(m<>9)X%jO!!ne8oR=A##v8e%g`wrAT-nPYsxv$cnDmE)fR z%QBOW{SahG6!=E)py6XgcqHeST zgfopqkyI<1Sv=?p1?{^zxJoBcC7KgNH|NLphVr9;v`@r*zl>}RBMW?@zJcxKiNL6E zE;6h1wDbORyo>e)CfrIXB8dw#-FAh-Op+Ydh$7fBh$8i0bWJib?hJ1sMBY*b6p6JW zdSr){t&a72`kM#3pqE~U`4>p1TQTXTrob7731l!KJI4R;w=RACpcN~-)m3m=q#o-H|9nkG$Ciqg@^qshJJZs(qR?paaCYcGe_K*%qU*=V$X zej?=m?_!;KC8x=S+{TkLmK^D0rT{eKhD0HO=sKvYQ^rik8^FadF&wTWO~5jA+>_>?no?g4Z^C2NRCo9Xh_Cw4=kx1SN@8b zKje%nI7OuS4kee`H#nnyznpZ3PxW>0qJM>FTr?* zKhC&9CQ8oW%i?8~PtwmMICd133votKGB+(+qWJ} zNxZgL5ck7Tll(Jx%ci;Sn>_b(goKqv^DEA6*7c#6%Y=b$X2ncINJrQ5|-w6u>paA+F@gI9|^gYm_Osjf?uY@(dwcLAX!IS zraQDPw>qce3(pPE5BN8oPRdvUGIJPS;Vz@wlakckIf!ZfT_RrOY#0EpqRN<$9-!TTzYnH4 z$%nPq&&BD{hK0LvX|4Kr0`@&!mJCm&S&oY#D1DiyY!}HH@ZLDESb$3-Z|@J!{^EkR z84URT{=Ry@Q+3>%EwD_gZT)m|d@;?PGTlK08A#P=O*p&RrDbg5H%0vaVlWt5q|YQfbiD-~&r(|{izHclmv9tI%QF;QMC z&xT8-iOXg{TnBrEm+~vi%W>!G`PzLALM9mW1v77~VIuiajz#emLxP_E*6tQHS@l zL(*WmGAJ;+L*zO7e752bItOzx8Box1ZCGG*9irm6o>X7oXM>pmemF44NSv?jn>*fi zg`s7~=gAwEa*S+3^tZNYbem^ACOV-sUmV)dzBU|x z1Pen#l*BLCVTE%H>t;mOEf_b-?{qM6-fAZqh^gGY%X|oNM}O?ozT`Kd9rh*8$$n_h z1&mY@9py_TK9n$B(+UfBRwl=T@Ur{?cHpp#`?D-PH>Gqe7U&fYG7X$YMPi3|tlOU@ zj?;j>-Ag2kt4J7lO3S$CE3-TUwIqm}lp9X!-bX``Lfrsx2nynMEQ=g%T7u-m-TD%+ z&K`#QGnv+(P-;5t%`xn5VCaob7j7Sud&?SW7q}6GTFs8F+8PaP7gn)rahxg0QAwfg z#m(l@8aksJ3F56DJ;V;kJ{ADOxa2kH59=ZD=cXt8Ptx;9rXgIE-h@iUSK*B2Cp>O1 zJWX>5f)`{WzM`Ifap_!sJ-NFECJVTu_kwQW`}efpfrC(-dgbOo@z#)JL7C`o$Md$uG;j&PYr=Pl!I1pO68(PL^rSl1dEq)0Ian(VZq?GTnf z1TB~z*~y8{IFu_EclyN!CSG6?%srzP5~-`-+F>06oaN!f)QP;*IpV498AyjuSI(pg zSG`!AGdfa;;V$fg4?q&5VqvJ9;stsa^l+Y{3C#-uol=yR#bSD6}A5E@e!Ny`J5U3jIrC8!uKpyv!NP%k=I zNK)Ab>uMP;eD%dF)|f7|-ToY8K zXROKj$h#X0>BK1!Us&U62$VBa${&Q~Azs_w8^a9Aj^K+d1=-}BHM>7FyTF#=I_!ns zoOZfBd`HW`bEeaR#t65TbB9bAf$6nQnw@j5aBB~tRSOCaylUQP13S~B4J1ewGsklf zA+AsoSy_U6d6>9oGU4^@7!#gfWEE!^Wbcwlm=R6#87*u-nH?mxj8hw7Nben2c?y+> z`QG8?KqOS5p?W!-U5>CITsV~xpsGA?t7QeKBU`n_cmV>^XShWpSY2!|&S2zX6!*hi z;|BYsR;mA5@c54cPX=xGm>3|>9vDT?SVwlL9s8ik<arfdko$}C3#tY%zHeNn)B$ z=r1OvlX~j0n4x78{Mro1>qBb@WGiY>#ezS_l;<%2LUM`iF4f4BXYW=1eTzNf z^Ti&Z)G&_dISdeYN?-lF>mG3hJ8T{|dre(>m4!u?9$Q$=iZ54)^qla?aiz-a1kZ@~#t6@tEm5Sfj@UNmF{4T<)h~OeG zibEwKDZ-OKYa%SoDYRJzd)FF`;U4<~TJ!L&zUjKK%V7c7gN3wb@XMxhZ?&97)_lN%OYVR2R|;h0g=>fkN+jXAu2 zl2cP%ZMX+tg-7&7-qSQ)ZNBUK5QU|lS3}3M2C)J#@zFy##~Hj^BAQ1XN@O}_Bm6EP ze9Rjp|6v@nInrQx$^xp7kP~|k3$*ZMpnwP2YW!j+&Kb6wOBD43!lv!SOz5R0l34QO zN_bV}kQ){7u$2zuOGlDLdRXD!3Xz3yPEBQfy4JusAUmwd;l$Zr1?%H)gqk>2)ybU- z|8=2rnPMswA7jBj*6y=SS++eiR0FlkAd-|Jb!YVihR%%3ve~sDgi-F%;$<`DSTckO;@sZk#l6 zB;u`%cP&)hT%i?#&|JB}ydjzy4;qZq;`f%8v6{mRTFbN@(dIHKrm@4h;65Y>aKbz% zu^?GINF`~|VeDks>Og_kR1~=!aG%t$(@q z1f>(glx*TTm1O2y@hBNxKJkpBJiPb!Xg)$&I5p*TrWpiG6UTi>kjNF>BC)}z387Nk zl40lExwDxD66FcX3tYkYtiSg%o4j;xZ#99M?Uz zN64K7Th#W{avdsbhK!-Z8{J?sAT1LCP$P3dAdw&h6j0y*LcoF|Y4jJ@3j`Aq*r*cw zO{PE+Z-E5PY-w}=47cS6NIG?({Ri$0M(2D3C59v*!M>n)dlVJiIM)CKd~L*tl4@?D zhYm*j*V<@dEN)>BKtXS5Yvz%X7ZO!zyKu|A8(}liE=$A{5lIc6RQy!ix&?C{#+@f^ z?JJs=d8A$S?HYxKBJ&i}H*j-+2LYgCLWFDG>Qe(a8ODhe748M4X0|sTnh%=!KxuG@ zFA{-bfZyb9p?Xj;C}T?Oj4igLN|Vv$4hv&)J?WJWB&gmA@CcEoFr@iIbcKt{N-7sN zy;`lVB1xV#dnELPm*WYKmH-X250}phTZ+Z+m1tz=(kW0zM(#y;qw=KZGN!4rbG1_A|7*q{K3X5{cp zz=3Z}R3=D(6&w*gfvAWu4VI!B%83zR07LPv0syW|JfPu~5(;%=h@$C!4n0UZX)AVB z)MZLs8G}`h-U{XQ6NuKNrA)fEvt5$7tZVV@)B7(7$X26A@vrCqAx%myDWJdfSnt_L z1QWUw>0~a+pkKI;wF?sZQx>$tn{i-P*yyHG{YaB#(f-xR@#fQ|QwIMsB9T97L@KmBaP2SvH>#RUrm*mp&|0OE#Bp}_d@sAY|Zt8@$wX@|< zM<1tSN$FQ=zALH-ouq;XXbG%_#2j}j23w_fn%z_O(Rl%r@Wz_aL%nmEqT zzlzXC&P=?KdFd!_k@B1l8`*QA<0ZEHvd@*>qUTC}Kf+MHibFq1sdsk+1OST@!Hk<- zIPNqXixnJ93!E{^wco-|hYmOR%a3Fv z%lX#6vba}QRpYheN@4Nh7K0J!j(I)7SZvzMig7z@3?`addB)iBY-~|VCFT+uM9AD5 zp$XO?x@6S50r&0z$rkMqT4@g zzHYUfhZUoF((D5HIA}G`q%{0{&~5cv2Ms9P>~=d{c=KbU+itaw;IDS4*Ln>fd#z3z zezw}LJKYodh2;;M-<%&EK}qXcLaNYQLF>iShZnDqx2FypF))ju!FC+NQ{^R&qPKK5x&(c@8_#8HLJz;q!Y_VA) zQjRBe>O2K!`3s*ZI+^-(GEJQ;An+F(IU;WUKWB#{G|t8(EZLkx)$+@h2!s}J&hSV z|IQv1jHffBH4sQ?YxpbFTAoNdFAxRv{x)^neENcS2dE=GnG~83{P7FD#!y2B{Z+r% z_;o!&;R$-V(?MH_C~4|t17%b%ct_=!A(DvY<7sAjpJ7Ncxv&JO7Q8p+z`3^u*(FdQ zcj;Q@@1(mNT5d!YCSpsK;&(;YFGjqi&eEvmNx6QS^Q1at20mB^qR0v@gR0$7_Q(QP zQTU0fk7a*|IXKOdNXYb{Pt=X;JBl8C%~9BGXyC1bo}&-dM6;-KNjT2wz^Q%Fcc@_< z>oFS%?PaRsu(~uQ;|>f3ksR4&{0N2}YUHdV!WC!9y~u*4wglc63A)zNmE|VeXT9$E z0g3|+Z9!KIHGF{5IdyW2q?ZqxXorMkkrY%Fe?o8L>L^ubsP&IZ^mQ~91LS+DhCF^< z0b0xw1~9?opo8IyB1g=Ck-EM;JRse042yGjYq|CnM$T|yo-7wP7>-l5ty7D66_%QM zS15$v>~B_$Z(*fI#^y(m&~yM@-K=gJWPN8|X^3kS!H1EBWbKKt9z(LhgjS8(_I9XE zTx|p8wAFNYYUq;$#|E$GC*L%?M(4G0@NJ{pH~{f2o6l-HxuDx#pqNVU&eXNgZHfKq zeDhuNplA4YxG@6+6LA0u-2f?^pvY(FU@hXLc&?4>Xb-A}SpB1Q7JU#65GD4Y6QbkS8~^8d@0pblCi%bwIsJ z5?7Kf0lgB%2T?6p;qO7cU>rApXdYuVg_iuR&MxPZFj^qw|)(4n@D4REbP5Tm%I zeQczN9O4~~+8|D^BZ*56&OuG}vvJz(ylx#gjiYYo{4`003E(R_2;i0EK_L}iIA(>E z!jAfZU7agBSO>A_7NB{-j;MF4M1+M`sU5EBG^9wblGC7kzzwInvpw-dVkD_=14*%N zy+ldfeB2{k;R$@Y1i%#zhiu47p%G`%Z29fHQ^!b5eA4-Fyd@Cv(?IJj{_lpu!r z1BEKikw7;B!H>4lZvGf=15a%d+GO@-;Hbfuw%3iQJ;P3!dxqXDDyqlF_4Y4i3A41# zNf5g$0++Rr6E)Kd8BA0SiQI>&A@ntzwyrnH-vXIFG`NpC$H+y(WXh2>C$wW2WGb+v zIoI@H&GX&h%1s#*u?kBXfla-!VqyK2?Qw^eV6TdL+)WR-HLxbYdDA8^mlAF((_k0a zxmXYZdvrCtgF?i(*b_J-?)^J#CBSaU9Y#s*JvBr^l&5ZB8NBf-2g3o1pe?Kt7}q4* zfP%>B=IpvJDW5npjP zQ%K>9H1SxdW3a$TT9>dQ2$ynTl?gWOS!&=Ht&^z0e5=U%p-}7NBygkD~PF!LP3Bd9e|p3dJR4|JP?gFFx7+_(ft!`oyq_ ztq_u;sYL&;PoOY1L~1lac>dtoUY|^c*4r!ZGkRknRm>gaM_o_dqJqi)>+@p655KhD zYV$qUTP^ds-f9WuN?f<{GTG-@;$8Q~n*4tRM$3Nkj4hy|Uq1ukj|zSo?Vs0t`9jao z{qNO!9q%Pk4Kw%#cYP%0ee!($?^QI*e!?j@dRX6Q@;rZCPtuxrr|lxn+P@~> zd7u7_tqJ&o&o#C!;TgFmw%X_g*zB$Eic5Kh?vS=r3HeCf-``hn9OnjHs=-HTjn+$ff^XW$>)Yc#_*SEf+xm9( zYxrgD5OXriGz-7XS12=?ylM@bH48nnf1NTfquET25 zI*?|NHC5j;BGdW}*@l5DIRht^?q;jqBS`5bpGisTt7>V1+=rySTx3&EUs3}ccby9t zf+!1-ko4FbPE>wR^;V`!ZLylort{_aeYFSvN(}I&n&%YK;<*+olbdJb?B(ioJ*sA? ztxO&^&Pcmhj%RJ9uIPKuQbzMYefl6cs5C>x?k1CfHuIitKJu(i2*?}DhA~o z0WT%GISxYVNhl*d93-8129}m5 zj(C=EEqQq`?pA-owpcBTMXZX&AO>d+o(#_8&un+Z=#w@dFQ%*cJ33IK6XfDysP1-p zup`9cFYS#r)ia_BIKBB~Gvk<&{kBe}kC zjy(q92*DAO@u_LX8sa>dNal0aG|1)?o2Wh#d;W=r1CuY;fco0Y47Bg*)f zes6Ed>*hZAKKyU&SLpAq=AVLV(4X&~XS=VOO?B9AsJ#I@I@fdwec@#DogJLRvVZO8UgMV_J^s{SFE= zv7CE-o48a_VWsPxGIOkNEE7fI>(MP;gmyO@VrZNd?lQ>Y z9`n4!#|47xX11scu{MQBo3#3|-S@;!{=(MZ+{K?jB z%0fDUwEX^EWABVQ68Jz=rYq_Xpgk+Q`kj2i7uqa*8Z35f&&l*Q)|8u2U( ztL|up+kJv|?&;1q;who$rFfR&uPB9ID8Y&n{aS3qJTI22-WIa3xfUvun`hJfb9L_@ z!(REWphQ-e)OxmVNU*R#7Hb9`SNmJh7QEa6ZIJU=j+6K5!WB4R~fn8}G%T3ZauG?Ni z;7%9I(rUF@t=7_NceU~rOVbr`YekpUiFC1abt1h$`hU?mp7m(xxzc4ud@aQdi?3wF@N9LB9r#|%?U;@HVaT{Mke-a?VB2?Hp_~A=9c&J= zq(kjiYxQk-9*FqL$Gk6F-B+(Gf4;gB9FU732dM&msCMDou*rB3z+$E1Cam8M+@C$D zjLZcEHKuGZbYmH~f~mtI>&h>M8q zPzKmp$iqSH`fL~p#v%0Kr{q1E`N|v3$LqaM8FtiT;#OjCiA(ZApco3s62+=+eB-l# zha5;w%0LtdTlPmt4Fa~tx>q7C#e9WB#CRy0h(>LVeeTCsKr?G79ca^G1MUI;=R=c@0c$p1AAE4)$1thdeb&o%ISV`#%n^O*38#{jiTUp$VgXEg;Rp}8 z5Hv}%Rx+wz_@N>`FgA<>A(LQHVNgrLM2(;fk0GIH8!;EgSvbig-9KwHo4c+SqcF#$ zgDDV4$-+}86Y81-32~O5?GBw32+nYPq2wg*_l1ou^pH6SrjjeF|DlMvt|r5j>5L{X zly|vE3nT#q@#!tLcIo;(?h-<(Nt=hE6iNW!@X%p+)TL!VVx^jNd;_r*7!vtf`a@k( zH;#Xii#tP?C`&SNOj#BUgTN1CXx(uTb#v}GLJ5xSB*PvcAwqtyPk!AlLR2cfyQooRH z9v~g^3N(RoDuAa78<%#65#&}F{jdgN(8K4*?{nZCVNuD+94iR@zH|jltLWD1`M3DP z%EHNH0S5pDRq-jsZl{zR{~U}iZ>-k09bGWV#k!6o980qpbvtljE>Um$9J7h_#y>2Q z9G55_fEM_Vg-f?3Zf&6?G~`B}1yamGQInLUoj)s7(oHkRA+dMaJc1A`-_w0d`NZZP z&Rb%a#n}Y#bfpKh_|}s)q%w?$+&$(t=q+OWydOYsJ0b$z&=zOD?^f6$kAav-RQQdm zqU;T0;ZTJ$nEgbg13iof{vdz?1SAFhoebgO$iI{zV$Xr<_Em+Qi%aY~nq@j^AX@Q z0G4rFO9mFod;M@JJP}HJ>O^m!5k(&`jL;asC~=;*&#oI425S%w1U^`hY%Bax*O(!0 zWyJV3moDmr$qME27?*n#`1p}fo~S2X@g<7-bB%g=)A%t&y|f2`MMSP7)J|knWXHx! zANeGGjBVrH&>25uL|Ife4f2VyFtDvmUx=MdJWMt>aeaI?S1KLqr=GYm7<=G{0(C$S z29sF4H`4kmO^$#6`CI=1Kt|XR~Uomvh;KM-Lo zMYP7uFJ~wXYO8dB`1(79$Fu7yU6H<7NLys6^(K=wQi@{aYoK;0(7`dxLe%vkK^E!& zYe1C038*9z8c8IH0+HCoC$agBjMRci zl-2F^fg6}J6bds9c<4#^&{5k$pz6A*8t(ZD9%0%OOgnXU){H%vv*c4Q-F)f!&Zw!? z?;{z-huu@mm5#Atf*I=D8#Ccw$a-Ff%j-(LU#IPeb;K=NZ>;NYh)HM6pPwH7kTkER zv@VEK`98V8#zh%ypMX5SjpQfV^DCf#b91wHQ(yDL%k|BTjoSM6$4BS(l^F1<^z_!# z&#xHNXyVL=YHF_~F-&y?Y_8GvR%)J#2o>3?V@#nc9R#qmwO7NZb?H11ULy7*N5R9# z2SU83_eCMkO4(haY(J1F^BVF)M}!Fcu%qd(G9IfnP06_|TviILW?N>&)$Oz5Y+F{! z=)dfE*B@!T7fmzRrS=zy*5;b}Un82ld9pFhg)rGbC~UJ95DII0{ZuF$h^-?ZKHmIV zf20YPz}LsjrGw8wINdVMUkvW{rcU6kC!WA2b15P{+M2ZfNTZ*?r-M5LuQewo1HFq{ zTT}m|I%x_YU7>J)lWsj=dDj3?*_u1v<*H?dmMR?rlR>v;u)tV(x0`BdcU^g)T*MtyHjm!ZaP(7Yiw2RZC=~k z+S%IN-PnEo^Q(Nw&cz`2olv?4Y7yXqw!33EDObROZ7jd!v8aA~yxpkQYPD)@!>Vgj znPTQRib->D*S+=U^IUG)c~QL?xpIJ;jo-m$-m!=|8ehOZQDHi!4C8F}czt7YyK3{^ zUbRv0?^gGAVQuR39l;x0PH%6g@w%YZ(_C|YamITexoNFbc=8DJUi~k!lZ%`g<62 zQl@*wE3WXbuoypf+OkrmnGqoD~Q2m$FVAC&E}!Bpr@ zT3xGFI(+(&eo$z%`)+S(!1Xotf9de=yYN(ye~VNqW+PsxQXv8sniVUFxtMHNNz8c? zQ<-r+oxtqupM2SRY?0aee*gIFsAXYeWk)pv%~*QYW6RJ1za6)+wTAyMsp!N?h0u8Y z5DnZBXse|(-qKa*GGIKd;8-mx3yDu<>GzNgpeQ!JH#y(w@A8JIZftGyYNJ=<)gI(k z_iEcayIcJ&TWpEP*t;mVQXxtd91fFNJFVl>Z;Oif6~E?5@9^u+?&db{?>4HN_1<>1 z;cRVHx!9^zw`+C2;nX*`_jY&uHYm^TE|F_lgJo>t_a4)cBPW2w7s}qbjQdciW{h=N%>55XW`m^2J zt8Z-Zes!;kCWZ&4%DBW?eCBzV!KZ_0q_BpL%UxEG#_!ss7wPI6f=9-#uer z8(YM$P-Wk@8C+|5XQr zs^d(Sm6}}W6)^iYmV-%1S69u!U|dW&u;Q*IJyqS(xDrH8-V2Q@%kPhCwmrkOA+}=B zntKy4$T`+&>WwF*dIMpU+6fcK zJwYg{I`F3Q^`xE0B2*GI?g%7^u!p#(JDcZp2b$^<<`?bO(V=y+f84@bm+Uj(wuf_Zaq6p>fax?|;XqhwU%g z2m9Uj=?Q{;wk`lugy^d_^#DyJBV)!Rm1+G<+9`gM&y%0n0ikB$@Y zQ}9EYjVEN2y+?x}38KcM!ss3x8zwIkrTYT802)D6k2!Vkb>a+N{OG**a-1wv^`u)+ev-JLch+k`7G z<#>I)GCl5*O2E#AUQfR9{2Ny|u&f^lPq_;Z)l%Ia1e%#tw^1R|Zt%1KkRED?>Q%v^ zPYUDtk5)ynRQHFo)&s`1?PZj@RH-7q>7E{(9+e5-4`U7cw9|b6+zXFFRR)$B%zd@$7~&4!J=n$?KLtAxGf^Kt|&GGQ}w7OZPuA) z%rB$)_^JiFs?h#+|LCH1XW0i`P~7SdG4fifCrYgfHgDNM%h4FtOlV;e2muvBqOq~J zy)YKUi3J+mDAwRy8fS)5yD%L_=#112K+_ox&|S09Vud*%Ut{=J^N0FG;ofM%v#wEx zu@3=-3bWYT>@&8;n(Pzy7W;@#a1#km!o9fA*#& zi0u@%ND-g%a{O))2Ob2=bku=a6X#3ijCU~y8|Lt-@3dJ&nSYyZk+RB~SC100#0S43pST!8I=C9wDhc;o87_mpy!Tcqq8 zGeydgOx8@d;xm4@0n41J0c#2o{lu+V9-rBQc-%1GZ{Kliefa* zdWI0aNUX^ay()riG!dm2R@S@rSdy|vALH{oqU3E`;t*cwiHl>d_s*UQ~s<~aH;!JBuDrpabbW5Ky6 z$WIXP`y409-Pbw-Zc=mY$zp#i`r(6OkzB#RceBC3i%66&1#YyX6_f~BNRxouwjb)S zaeiX@=scq=DNq%8reIao;oKtZA|fjXlsB=Dk|vbmT1-%tEFCFMbEmdb-DK)C1kXR$ za!8znB~3AM4*$-M&qh5VTfH1X+e#Dzv`%i)^0;1KPY9AzKs2!>nd4 zJDsyHXU*(cAdq;fjX7YZwUq-pt`Rd@NS3PcnK7rC=l8Wq1D@a;eN7g8U8-`&)`(Tq zL1i;zH&?+EYNLs}EII~$c$anI$X?tbqB2j;vILI47o1JsdFM5Q$MJ zGDcrs4ns0!R0nj&>ckP3+-qE2wQcp+Lr(^fdEWV6TNhEF_lbOpKK!MQ@lFBGsy*NT zJ&jTs2?sjl!V5DRZ?-U+ipXoBErduEQWW}ZtW4ld)RCq*1E%W>{AMCvlU^DkRdZp&uiYy}#1I7(;?MY0$g==b zgyu-#mqVTtx_Ag;KZ6vnAa`tsDa5^iAWiF-mS4fslmkcT$>6IEtHNyU2L z2SZ%yiR!Mn7H&icq_7qrhci@~parBVIp za9_b@@1=O4J=OaF4c{>gu^W%ZaglxGB*rm#bJhr&f>&$aqQy&nPUty;wP4pj{hW+| zRp`TdWPDaBi+bauQ-5PcW75>tK-y#(4~dvD+)&Y|H?swiA+seZZ(7gjfZ`48*?Y)e z`}z_|M`MDeXz@wHJkx^z{vvdEPg&7Tg3m&$&xa-*1J-Q3J|M~3?z7%xx3dj|g3$$@ zidin^zl#WOn%Ke-9&+Nf2+f)Wqj^sWT2CDD5`)&0DSCMU+aDun{UwjZ4If$d@36Aq zA))$(bn^h|kXMv(X^685m8+z*JB%Q=!sv%J5Q82*M}D8*@K9J(ax%vXLccFv*v-0* zZY{XRhd-<=oJo~%p!1vVcz~$1T-u5|W z6YIf`?D0P>!|ERk*Gx;?+Cm8x$c;P;CY^&bf=VWuixsNLmx_M9~KfBQypuN}T8Iv+G6$uT|ne;DZIpw!$Bm#~I>QM#e=%(sNPUi(-~o za+W9RNv(N_qMmNWlsAnZL)4om#+8KHiHwTuIDM&=`SdZijdw$5{E!i4QQ0)eC(6RW zwlaMob~5oW+1$kS@!352FhmX3U~Kb-AhCFFq*X1N9RL3FxBdfwjLPrQbY8??@AqVe^^u1DKAGDekdJ;(huQN9m}5J z9S>K*NV4;QaQp#ipJRD{DEfTp#tIC*$`y$j$|s{Vx9p76h%5czpwebY>F*K=nHjtM zL8h@_?!F=a#3Cphhn^)6iUPxHC7 z2Zxcc65+4b_HZcF&>1i0ub3|+HTtbRJ-xA_r>vB*i9RzDMe4ZZ1qz?CQlv_TJjQl8 z(q#X9Urhv^oloCe(sY7UnIn@dxyG;lA0*3=WgTZ&j?bwVlA1kRGI^O@0mG%~SI+*b z3G0n$q0jME{X$ZcW0z`NjgIMan5F4i?jEo77MPs8(dj(( zNL(l2dY@K}DmDFCDb$p%wgcyFKp2y3S-Nd@Zy9B$(LZI8wnVF5o_S1tPL_nk`SkyO zQ9#-x?n96i;LJr$fh2E5o{!MT63MWu7f5(qnq!bWGiO~*o#j#f^YrBcK3&szo)H_qYy-BXH^Q4{f``|bmfQyKe`kTWGQYc<&fIO2UL+ln*hounwc)1I z)ppxty4y#-%i=q#bmH(Y6qmBT(zWwlX<6+FE};cpjwR6O^-ACVkG*SM zZW4&Xufq7-je!6m{<4}_>zLGOz0KGeW?>g)j3EO=t&Z>RE|-LuqyYjgEN2|Qwv=wz z!(P5USK!+vF%eTH{S>Q7YGWOb&`_re8jz8L@IbR!Jp1}^5R z+X1iV?)g0L^I@EIz-3Wz|2uKL@4DoB*J{tZHo4v<56d$gHkP(koP?3rxiPU%ar@T# z9ToWVRp3S`kYBHYaGn3UwW{!S|M)xN4}T#oC?!%nm!dL};W8ev><*YzCtw|uDr!xD zS@qWUqHN}~sBEq{v+2c^tf-pahZ$4_Ry>2gvM)X_>LS1ddX@I2{c~sK&-t?_FEx{l zKS{G6`@Q*%4Fc`pOd`IwG>P|fVb0yw=GV?nr=%*#M|Z(`)&40J7tl?t-ZI^K7Oot3(X+kp!0ifP{3!QZheApOP)99} zr0LU&i|`h5Ra@aV<}2*N?qoxgJ0WBgdi>8f6^JtBik`$(kwh$>G^0PI>A4jD?MbDP zaPi7W>zk9jeCl=+d9w9YQ(q|vakz>`&Ba1ur|mC(S~4X1O|J2jDa3SKN6bHSj?GQ$ zv)DO?U(ElJ{BCa*vXM-;+DNYE*i9;^2(_`u>!+IAGrQyT{PZm`4s!|)M>7Zc!Z{J>Cy-Sv{?OXHG_@*K2NoG-K-#E-M%_d1<`E%CK8p-KH;ci6% z+t3xq(jDd-Evrb?2u35?myxF1Bg@bT+b@W)6$SPc2G9(F3j^#Azj--5f8u*yD0B=C z>s!2RnFZGEn2S`<6Xc8emD#WoLq@#<`L-Yg~TL*Zt5S}h3< zDajlFCZ8^@-(Aek&B^#8Jv40JEZS+IC~n*-;`A6l&E&^OR`K`8Jqp^6ys!M^k;D0+ zEy%kh+PQI~B-jKhzJEJDdpF6d1H=kqM(~bie2ZtMGnX-@vYz&Yg4-7<@^CFQA z8*7Rs?D=%>sX!I@RB)iY-}NUnc7xD&tyM^g^wRa|PduLsP542{eN^)+PM3~$6_ngN zN^V^SC3ig4LihY1gv9+a%eb^+iUCjH+E7VJ8Z!bEV@)gpx zp6u+G&0OXY*SVFxRFhE&61N^!U)83)%Dm0XC0$7IoUAc51|)B-6dRYkwZ5TR6op9M znyZyMaO;RXzMM^(bT)>ht&Q#Y@daYg+H6#r&C+q|+al{mNZKlf$-4s%OiRxX<<4Ym zC7PwG+Q>pWi^pYlM_ECmk)pEbTxNAtw7#bF#kD)`v-jvC+k5ugZ<6F_vMl$ECuif! zsi~QY(8e3^T{`N}BTko&b~W`~dUbjIu7xzWD%_M;8nu-zSA`oo!1qfN0(1Xo4vAbu zB?d(i;%;+_C*xtH_o9Cgbeos1b%381#qCm0<8im#X^tn!JZ^9l74J&3I-7j#aB5X> z!fFMA6IPS41A5Re4iWFz(>X>38b8qZ9hHn|d*{)vLbT#e0pvdD{6OaiI=}n~I=`Ia z0i9nF>>NWaioj^gA?Qkr>Iv87nAphxN-}}ouobvZZ}{SBB8J`&iVi{1At*Z3Ol*x# z9|EiEh~9e8!0Nj;!s+&p?J{VDUJZXV&~a_-u(&OgygM6F3Tk6gmOV_#(!HTCy#x#oT9Q1E(s*zBP1-x67OTTxGL|u+nEQifl?VvQ)hc ztHSvC8vA&MA3NgH&6R6WOgbb?e-8Ka*{{Iug}2LOP4icCYJTV0UQ!Mg38Lge*A`@3 z5B=fVRGa}^6jKRwRseTVr5|p#Ukam{5j35T`md=9d#6pzdJ-kfE-hA?jL5pN#F@yPMk&Tw zV6_M*vIZjKk38`Qu$-pjuCbc_goEKf_U@%OZ6FH6@PA=%RNuIC7bU2zRFWu4qAsY= z0H(FtK!k}Dsp@~P%^lJZ6g1;=(5pz#BFmYvJ;&epAVCUJ3GP-I)D*(yX`|5p9GU87 z{qFn_>&Hp{src^pn<7Z1TOVehU4CkHeP&XnoywwL%6u{xEfc!Mq`tRt0+wr@o2R30 z`nc$@Ql0%Vmntnj_p7Ndr$WGa z3eI+^4<`FHpUmwaO(p3RExC^XNje?MinkzxdW2m52gnNJ?d+ZmE}N#K*_Y;g+W#(> zKj-KBEUg24yW;^%?^xd+W8x4?vThy95vy|Lh?Q(PVkJUtxnnPDUHg0NTfqCp&cCW(Eo=7;9PAPj2F zdXKtVgp_&?Ww0$sU2Q|QNe(5fE?0_b*-}&sl%iUR^aGJ9TUQCv4@8+fZ4|n{AIQ&f zMmLa?aI+i8=X_TEfDQyY-RTF?@AvchIqAeEGDr;^_ldAezJol1sWW(r+~k|C2PS1K~e=1;K6cslNnf3LQSyvUFs z!KOnQYzuPZw;_dwLrIa#l@wXFq{sp#MOGpyvQ*i+N{|#;nWV_4zkwl(} zlF;kb!@BXCK@cV8FGaNksq-AlU|W!)+Jz8=-}B@OM_cNNg(_-~*HX_aZ%G!qHY70#wpIJneEuZ=f-}3DvlIfP zE$~I`e6ZP_ooi=j&uk`4jH`DC&03{GhQ;QvNsIMnMJ?`YO|7U7NJAU$R|mUlGapy4 z1sCKLgB#x&r(q7v6lBTiBZ}jICyRE126TCf1VJS0(C2D$lf%rFu@W1~8Mp zhmXsi{wV+l0T~$dQ%DwnlTXj7Yg?vEm1F9AtB`uqp3X%DcS=|~F7LjY$D6^X^M= zGD2jrij`aDT`R;?=-Bq|6?ejChr_a+JDW-Vhm0B^ZI|nXIZS>9 zL*{@IfipWOb`&HbeW2j52z&!|6Za-&5w1-&He`VN))%{OQ7(8?mPbH51pe1F>bk!D z_=KAYGGfN&fNjE`X(`$@F~O`5pGo=Zg$o6V$Da#pMeS+u6(^bk)l8E&8s?J(d6qyz z0~GOQ6elpqf@NJ`n=?Hop2o%Nr!zCsNTh77A*KZ)n?|VQ8uOunPbd~5lF$Lw2r|Mv zp?#tkQBNVBV`35%8S2ZGazs;Q9s|q#6HUPZicLDz?;K*)k^xB$n!;Ej{eux83o1VE zT=bOISvP6;f?!mNz;U3wV|X7Obvxg-`zNjA&O0OTBjvsGi2+W~(%CTZKgpImvGJfE z)e)7bQcTUiFKVoDf%%fZCVx=HrVjc`v=LM%)tSc&#vEW!`rDYlI#7_fC(r>l`~`%J z6$@L&H8DUT!W^UI1kxsoO&qWhW)stk8+&L3%ni5>kX)X$E_+{{o_Bxhv_)cFwg@4Z zC@*1a4qIZky_`Z$sE4#Dr`+RUEtELW|5y&1Au)k(jUpp18AHQE^^GIylfpOv^P$=e zufeq@4iqVa+Hek-XT!RX5}qNf9FI=F|Ne4>V;VOM5WM8U50W1!l^jyeEV(x__WK?Xw-P039yCes%Ao`15|FYW_ z)r+a$WyOCIm$^m_BSxJc!AL5fs}=}Y@Gy7iutX2KWOeA^(H`(wyYpT5u+u;N;_J>~ zPdttq@B7j#VZ8QUB)^dE`+kQQ_6<^lH}rmX$r85uFpC?Dy3i6zOEQOPAvcjA6EO$T z1OzS?xIFJ(AUQifJ?otJeq6!KrwbEZSVRzyjo858^~ar| zw7C-W;X-WRnARdyTwZ$w|>AP80tAh17mcTta9ZJ zFpRgy6T@S+;pcSy00VMk7cJtLpqlq%0Wo%&jxxZp9bzBxSeiFT6SxLf@>VRne-8jQ zL2;lw8FKRBnS*{wjLs&8Ap}xVI&%1CTP}maA`<4&5p~4#a4`62R3bGFUTz3Hn_4i0 zj?(t{X@n>*jQyGCQe!Ae?uJSe&H{XzM?tMpX>ug@H;VD^0W)>r3%lLFu`|FgTq{MW zp1Dau$iZOQA5)28nQIe`x{!)?^@M!*&oD}KpqKmu<57={+{NjZBx3S+t#2CnR17i1kNqbMH&2?eFEysdn$l#~PI z6Xh-CSLHoLc|RRT(-ir)l*iXddJ^#<3_F!KL!s5 zGbzrrhPGJY6s8eU>V5eHFHsH5I zZlP1BZQ>C~{OiiR@~(D-7r`wTA_2Zi&CC6n$9-`t5$@6Sa|DxcBF}i*Be{329z5~q zphTGy^u@N`}= z6@zU@=5EZ$EL&Vi;+%{@zPULg8-~Thz#)S*+KF z`^DzIS}hLA9wqgLK4|XML5;IfK3thgJ%mRKJ%HrY`gq)~L#3q3E_0{U2rqfxe}qM< zV@91YD=@RF(4Wk2`p?x;1*Mr;&BF|t@Oi8S6vqq6(TUty-^aP4#W1A65p-lve^NB$ z#1#jrTC3E4oWS`UEo?jTBe!0skeU2UzovP9$%jFEI#Ctr5@>H=k_URBA_EPw>!*gmrbj#`O-7AZ~cg3^r=|D;hXD0Y6PU#`rRa6A<9 zrkKi{x1}krHqAi|udds)O1zA4 z(78jJxfY%x!$Y=x6km@{)%(9`8sFQm?vmkty;!Xcc8hhr(I^tyP>Z{2ja2knb+@@U z*hGzQZ3Ew$sN~vmGl@yQ0z7JUkr*Ksm1vp<7#6A84^GrlwNxwB7buwrCrOF$wbq5_ zEJS;23cRy1uN0R^9P1mGNCMw9x3wJGbNmtR^6&+kMh6Ku)IB^tOFuT6K1YE#Qeyx% zQci*MPxvN*MkOK>b&e61v%0*orF~yhI;>%fyKJxA;4a(g+Z#~3 z0QZshR!dhw(A;WivZvCWH{}iNsSM*PZ>MRBPq&4SmSXS)aG@?U?6gNWjIUcY|-a+&TTKP8@+KmYXv3rC(=hT}x{EQ~WEtP~Bt~k6Hp30B}Deu9WvZ7WhK>{-| zADAcXK!?4I&i(ssUX?KKr! z*6E#1OucU~^Tx%ac|a`gn`J<#Gob~{gC{}4o#GDif%IUJ;AqL?Iv^wV&yh3UXFm4u zaJOi-Vsp9pF8A98tp99r4vE3frEAv2^dP%@XfW7ZjKZ?XNG^OS1~o_CHJ72>`^#Ju z=KFC}ShWMFPKQI6db~=G9LaF_fmz#Prk5y$GCxqhlm)PQ)D5OmQx`k(!6Xueq9TSf z$kZ1)KQu~j1;@eBf+U&O*6juE8f^=kf$h0+GqsDU?@C(=PSiU7LHZC)LCQxz$9@gYYB0U>x1UZ(#BIqSxwOUUV+P3j&DAiw~)%U5AGVlMPLU zA7dIEJH@8$@~U-eGO8yxF~5pGQltLp%g%GTBjVnmpW&OcfBtI+g$zaUJVgQLq!5iq z?>xvOkJ9fPaHp{YyY=81(}AwVi=kb2mn(`CW6@s()yI~OCAe2}x5Q)0b4hq4(4341 z)QLMx-0Y7o!$eb#8X}hEl6|T?KAc$^h5KY_eE4MPm7U|mXQni_p_L< z0(~Yl>5$t;?h$RIXNj9Zl#d6W z#?MNATpoO?h+9njp_6}Y2pY3E_Jw6((KmFGc>9FxVD2N$UG(IkD-~^DbmvHhT2j8S zz(&QGiywTB9raK!Q&nb?D|o23WKK-ud6T@!wdu9w?LBY=G79l8-Ql^ubgYT(UrOS) zsP`9<#CzgOq(|uE*lP2!F+IdJgRT!g!1Ln}zz&r`oaH!j2P2XpGpSzi^LXTjLTBqx zjq21yEBu2x(Nexvk7Vz9%ugB!Vgf1(3Y5awM%o^XIwVml_ustid^C5_>{AXiIJvVvm(t;5dZ#xIvm>>>7XU#lW=s=lu1)1oO zdJfTUP`m!M7})svsm8Iuh36JU^LG_FM!~8Qw``!FbyuoSGl=VQ!}V(ngHOw(j}D!t zsd7X-dQ0y6+KpXMaLWz<=HCzHkOEYJe#(Yl1;x(|mAa4$`NWt0n2rbd+qH%SY=`z` z&c`Wz+p&hspwO(`yZ*qs!!P|fo>&rC07y_|f1K@ZO1|Lh_Q6jdBkSsjk@vFQ%ibkvY-2adg{v zxOWrA(U#_&wT&Q#zGVvD0y~kX-+gmg+)RK@h-*O>-CQW>BFXC6(IR5+hAMrmRiWGiVUc$tKW(w{XEFpdw2_ka~e0Uzz zE(`mYP%-M3VpA=U8^TtmgYd;Tgm^Q`VyqZW_;E@g>J1vJ%L7H%;z<2VAeqOnSpk41 zG@ww3`Z8iD5=4<;q9m?wK{TQ;_e^XUbp+SM4Jq|U8G;k+5F%7Rrc;{vEpvH?C?zZE z8-g_``h;@I1mcOwV4!2-kOx9tBMie$OW+eF2auD8-Fj*EoZP_D?+@g30M4ku0dqN3 z7tYp1=ihKXACh8|YVa>4&717{SYDj#;aC0B%kyvXR$cs_!8}+sF%MP`ZtM*z{Nl9z zV^AZuY|M%6d6skF*Mf*80?gXFxafX)(rIIAStO^zz=t<;vp$JJ36Ur;w*!3(tN?#< z#V4&mY`3?!rQ2G`az^E9rJ|O9IR5rRyQX7OWTu#cgNvA;!~uFCD8_Gu>Wj!x$nk1t zS=wgMET|T@`|LHEO)fO1KU+VGuB06Kvu+eOnLVx|2> zyQr$2M)8aNx?0>js^EWWrBmrVaHgRIl~W!`-xvmb6VmKzt(oLv z-R(VYbXI5}Y=KR)iPsoi0GiEpi zw)Sp$NnRtK{EK$0RomM?EFLy1Uli+YwOah5(cCYpt)ou6+E&{wwY~|Sd`U@&K~pfZ z^p&slFn!x}FFBKYRggKg#6RW4@k(C~VeVIV%`-&d|F`iydW4s4>D-sJ)cAPf@GH2E zXra;WbHgRsDvMZQL#cm*0-fiYBv?BbiGEstu)bO;sTKIER!Y@IeeGkQ%wRk)+CNg8 zjl=d~@u*(iE!OwG*ey0Y`>mpSbfne~)xA!mezXaJ(V|dMQbZ4%7%wfs@O(i;0;71d z+2Cj@TS0AfF!pSs*w|PuTZycDh?gz5YZCco%Tzod{0a_rt#3G(E$2)ZZhu3=#O0Xw zebaTdy0MYra-8R(&y%4~wZuPp%mXm7NZ)R6M2D6w|MEtP^15=n99Mbwy{2$E&hzd& z@4oZy8+n#@hUeXP-hJoYcUCa6hF5;!oh^~7#V)x1%$<7YmnWP`nfFCD>n#kCz-Qgq zhZW$i*13UzP-$WpEha_x@Zw*v?H7R9Z@d=UlItnACI2-`2$5IjEu)3#MN?Nhawjuh zg0>top^T-enS(fUyidUe-WK>W^8{ZVJo!B zQitl^tdQYzLIF!)woTEPrTrGYua~KaHAuf=Z129dwY6? z=Z4c>^tYaY)@#A_4DenHCZm+Ck4dtExi?w?&VKVJUS^#P8{W_$Dk~U$De5^M4(+SC zL|1}Oye^gtHy7qw%s#V)WaXy%T&62Q+(330$h1-7pFA*317Bn%Xj9-XZ=x`^ z+5)zFJoH9}>G>37J_Wf5%%>ppDah<#J_TvN(OvGMFrR{466W4$1vq;O(wz*zDDyeU zEMasG@}$$tXCPOEi5bXTnk&JpoqWPEOUQfmF>!B%P~%skG34JOtwG))7!=4QGY z43{$0QWcgm>bX2ug85R$>ToS*9$yP?)SPivaH}ogfA)?RMjdG=1H>y^xW>8iu8TC?y?pT#_eSf#B{nX8I**3D$Yf-s3wZ{J{ zCH^|6D`2ph{}*3_tGHD?HsVaUs;fQ|J~QJwK|MPjpY^Gppl8Q=c04!Kv*S6To*gd- zGqdA*cfYc;Lwm-4Z=V^}{hgArXYQLusY`2SZ?D{~m-hAS`1O1CPYu_)(ywz`v?{of z!-_s?q@C1xpmtKVle#*nV;#MX9&+b}*IU{=F9fHD>v417MFZc4j{oz*bUa?`=;T~q zDVP&J^70atp_X7Sc)f+)Sew2j;q_L}cL&0W)n4o}5cJWNV$@Qc4cB^sXkNIH!dUA{ zulIaqBL`f)M5vbt=Ye{OP%ja#4(fgE-#}0k! z1fJ`MdNX@2nBL58AL+g9yzr5|?Dmn~%FYL`x1hIb>$faSwz5m*N>yv#5)e1DBSC68 z&W75r%LBpA`EKZ%t{o4udU~)i%Z(dZ>Gd`Y8|kj-HCDaGIuF!qta^=gbx^OddK*3D z&I|P#>w-|Pu|5S%ud!Y=^crhk_{bXTRYR|_=7V~TbtN!aW36blTLMN4tQ9T9*-(3Q zd0=*R^{Sy)S2t&&aU(0e7M0WY6fX;3l&NPae5HjfL`)z}efaSCc4&PGz(+v4Hv1Bi z>QBx4I?mo{lzV2k&v5zu#f~H^N8iLfH-bQ zM8HddxIW=BAp{h2==;o(S*Ov;kSR{h8`9v93jcZ>ZB}0^u)e4>M%D%%nqT1sa@=!Thpbltmoa8NQ9 z4S{FZhw4X22jm|98H0ggSz~#XRv_Da^l8WkL=my{V?$E#3=l zshaK@Tyy`rPpZ^ledTQmkOs>oC-SKU(Tt7I&Moar7^c!MEwX1|vB5fTV1tU7ys!05 zqpbkm2%A6a{eWzvvZ4y|5)!QLneH^Ek3>(O?TJ4G`n+PjiDBZq&}6fw^EJn$XEoIH z*y1-G8A`=4`%2N0uU9VlL5hE={N>IvD*7Z^d_!>I!)pk;m#7D;)8|J9RvX$MiBy(( zLdoZZe&QDKCcJqU!*QB$&K0`WBZ^piWPOwvNZdju1G}DuOtjubC!rT+qlMu>!iw*o z%k=FeJV-4*+$-g5t%u*BR(~Q$ic%{@A2-3Hta=C0U|SZzfq*j6A1l|<9i>@?`dJ&% zevzB^Ix~}1W2Z3&exs^Ek@Q1>6)4G1CI6PIm;Q21ewxr2L~huDKRQx9b_YW)X~N~C zd?|Kl!f(-d5nMMPF)pW6ey#q8F-I3Ji`=$Xs9r&65}*pv0GUstI=l zQpZh~l;G#Tc6nw@GaoPBk#%n%5VSJ$Bw)lU#Dro7e_aYSE;YA1cX96#QRT!tzG9hmt5Z1mbXFNQ2!&UX(yaF~ZIip=pNc=?si3 z-Q>%I6v2rdR%AS1S1K--%BV!G-1E%BbeU-XwPeizz+D{-D=+JH6dYGSS%(#h+@Y1L z5_!T}=gd+m-3T!t4HvVHcqdScnM2~=Zfgr$LoO45pCk=n$j%8=B7}894p+qX37lbN=a~lhqfs6b; znKEO{@g#(7A!1Y)3w$7f%--6q2nrG-b7KeAi;$lT!8iswrqE0Bh1%!~WRfa|2D&=W57NfvC z-n4F3a6}2qM50~@9u$Obkl)^*o09=k6b^&h+MwpoV$8jsxCf_)0BYuH;mJ4)2RV6S zQa%V$*V`Q;AaEusP+I3mz@X52S|4Dg$R6YcO^YfP+9}&jEbPGFO?VTxGbS43#oYk` zVBO>*n@EET1Bo`qDjC3?d`PpS1wn?@zy1q)ul;eTM#-=YeRg1H=opHG8yq|}L*!@_ z?0JKWp6yq12d@>M{9?m@qp@w+sX$>;;oPmf3PPnZxx=|i9auf!nzP+6Hi`YaF!uGO z$q_HW8F;@{p0p?AEYNL5(;_`mRI^|te+3dsB%VDTJq9lmXI!?wVU5|WOoL^TlkRH8#qy{ts|%7WkwX$ErH#9I@r-hC%xHjJ*Maf`2UGH` z<+sr=fa0lKo;oRNUZ%vMi#6t((ZAU0s&ck|=3s=wVjnCiu=g0$iPAS9Z$Bt_5k%Ui zaVA#lhn~zuUL&kesztrBw;(Vx)AB~4ua9Xktug*&-bq-|QIikVa!>BO5J{b6tA@}z?1-~hDS^mJ z3o@dA9{t>I9E?bJE8^=#x3FlhxM2!N9@E+ zpY2^o3X-Meo--RjMrN(NHb!)odEh zilcO+PqxupT@G2#&*dU*AQ)3BRT@*dl`72VMbKMy)JN}MHm=H5brE%vv{NUU^x$pV zS^&2P1NuKUM@w`=Lm5j|nKygd;Wl*J3yxS@D~qTwp2!bM#F-a#Mk_M-1Oi>2FbyY8 zi1W6Y>HZi@oJ*kC?tt0Gs4-6m^jq}C{p#tE!%k4`KSN&9ci2{9xLMpSMCJr^W}-m$ z5ZJdY4Jv!5cs6aYP$q+3j*{G&b_7YwFBk4;H_{g$%7y~oJr<~KW&Kx zj8u1{meG2GyTJFrU0|2m&~7-cl|TBY;E)>|zTe(slX)|TST`~kpL_aTh*ZU5;rk@b zWh0{aRue2{z;e6j#KDsT46iN0P_0xkP_G!swPvwtQ$mo|>a9ia;+qPd7b0aE{x_iL z+pVcCK1ohYw-9*vyPT%%sS~_%* z=|LcfzeR&#!yYp45n=cHIYI795dzRp#06Ee&O1cKsSWn|J>nx<144lS4)}yPMZ|CG zaJFG~c}7+vqeLJ9Y2(ZZ#8fUz4IE6;hf~YabgrG_?cR$64bjY$2ZHwgZ9;C~^5r;B z?SPZGLDBu%RrWV|i=?&1)}-0={uPRxU3V#V?*)>rIcfm%3zmEzV=$$x*tZ^Vh-vDi z0ldYY?xd`taMgP>C#MJT^FA3169zblnp^H~#FC8Eoef7;>e%8=?f5S%50HvPY>rT4<%5|+o*;W2D!QW4&aSt)Y-oR z&;dC#F=Ud9;&PN*^?pxr-7FmRL{15@NgFui)C4>@jOY++f6c26?dM$KgP7xv@vxon zsS81w=_C~3HLP>eef2IxOxNljB3X1n#bIQf$F2!T?d@}n0K)}&aLGS`DRabML(vja zGHq?}I9%~5C8NBQqjX(2slIOD0UP-HDC1MW#oiiz#IrK)w^jW6o6n4Xiy-m@oS9Z+xkfWVJ0>yo#F z;8DyH;%ad1Y7%8B<&6d^S0!st)P$sSG%=HtYQS+G|6mS0{0E+kDYJea5vv`i-Vp6? zR%!~1mYLimFa51Thu?`FH5#I^f+NmGTgW`}roKt-lQrbMB~y5@Ljd?czz%%43Lin~ zyAQRmA9;{XU3&MZGe2wy%*mYKdmoq)xu43IV>@5&B|ltY84h0-^8BE9mp*JgJpf|(hB=9EZ@_c90fKX7&n z?PdlIUEL<4tBhsg2Z~WmLg@+w<2{?rBc9veKuJHF*#qGjp&I=t=C&(9yJ~Jn)xXw1Ye|@7%5Gs z=;ZB6uh>;X>dv5i78}f0xV!Fp)Kxxtz1i_S^d(Fb{E`D_g(^w&e*>4sgd5^F5D<_O zJ(x#xK-C)V;~_nR;y8q8Nzx?r;y}pTL)8-e=ah)%AZX2XUFmO!3aX0C>P>F&?=O-O z2#|8=1W>pz^FAdqXOAOo4hxdARr$>dJu^HEYiiGqjwz zO7aS*HQ{nB)HLZ{-hh7o!EPd?mNu9D0G{f6LaKIg0D6_dIdk-b8Fk8L{+x5w2k4p4 zz?hj75>k`HRPItQ7>8*Ja1^!p)Q~bE4>@_T)*dUK-ZSNJgYb}7HU0CiyMm{qrJ=gc zCs3b)C9G9W%H(s;A%(i%C*@M=bfcwBa81~XTgeF#S6d!UxI0Y94YyC~2PvtLm#4&k z{EyHWw_Jh0_cbbUfDM0GdT2vp?&)LWC@X9Jd4^&nyQ~fPkA{pQnJuzJQ zoeuqgKBuUehV4##NRdjNu!sKCB#aXy@=zF|xX$zUPL1%B?rTmwf#>IK7Cu>{4a>@v zi_UwcD0W#!PHt9IFTS1Chef+-%(17^`^`Cj+p={S?XlOzTj4a1_iy4GV;W?S*b$A<9Tz?NIivX=8625kE;Ty6#v)+5&X?qvoytrZM56OtpgBRJg}3otK>);k8V%}xw_UI6H=0wb41cN>$v zvK@)12 z#;J8%m*rm9SyJ3nfQRwmL~uL4TuoFZ#v%>L#qZ{7XnLoNI&?jd5gXfONfIpft7Z$j zawJOIlVwY?h26r9(I@1wcY!XU`^{Tr=8t@fTUz9|oGuc1nJtK~i1g{lAX2S152*!y z&2_DWSp0>?s9JC{3#%2;1SwtKss-6|1}D{c1X$pVSg(vG+Gii{cZ)WBC-wLeU`pZzpK$S>*3zhX18CgWu26A z)oKu3s75lzm+2$D@ZKe5u5MQcgZw~S*5m-}ARpcjaCcU-dOU|?-8N1A=9_xw_(iw48`eRtVThX?u)Y9EU28evGq8{w^gDvywy{oalc-r`vBjAg%S}QX-z~m9|BU8Qc^kYFM;sf52J;v> z)&P{~Ij!&o0WbeiV97?0HU$q@6KXr$s7ckQz@2FLJ@E@NF0%vRUb?BFY|zE2LLV|A z{Y!JB)?J~l(y&Bu3X;~v%k=v7`st_CzN1l>_mZIA;h$ZL0`Dw*lS7dxj>dQH`bGsV zI#+iE!b&-EFu}ul?P|t2MwB+unwb)IG*4D?g|ary%FFxHy?&EC&4PC{Q*)0dSLKVt z{JLXPuH6|M5IUFhTfmTvcAa7h@UZK-P5MvUpyaw({c_Q|@F}%NQFTMCDYZpfbweoc zaHBx1L)3MF_W4wWpjw%1xx(BiCniJ{Mkg!mtGtNA`cbF`jt!s0NjmV}(-dG{K@K)C4W z5G`ae8g!}bX`Oc3x4%L-M%prgeHNsS(}cL;e+%F&J2xe#1Wb7;!l;r9(8U!@f)95VuVd4`0QYm+W90R&$iSo+G_f`4mgukon{+s&Z-AIRiFxcwht^}VzS^*m#AX31% z;g>dVQ*RsQf8yk*S4MXjtI5db^@(k(Oj}J>Cdkm=tkG?y z*}m_v*q1S$tDw0+9N>|5J>jfMtKrjL0|ylOI9?ZO-E_=DXq$338YILC24Z)9;~e?q zczPJSO6ZfUu;jHAiScX?VW>+2N7My_PwI8o;As?B zjzAqrCnJvSa6C=)%%UJ`38fz96tnUi^Fc%pK?goAGh8kj*Le7NExj3Uc}WPMXa=qa z8%!=np2aIX@19<&5@Nif#srQ5;h9KrE-3gyZyVB2PV=N3yg$zN%!uQNbA)DW|Ch#( zREyDngMdMWV~Hy49Br`~%h|8=It< zKV{4BpL6*?Wz#R`RI7*QqE>fC|6gU}$D{gB*%k#rMZk&;|5G-W888~^R(A8OY?m4O z^efwSijl16A&z+O3T!_Kej52#JbmAv^g#*E#SNt)heyZ|?dT0o>9})==Yq}n{*l!M z$9aHl1nijXeJC?b#{trt7%PY>Dj5OU{6Rki5}%u$V*x(Y;n*X<&?PR~>PA1qE2wg? z+<|xd>(wc<1<6&LQfZ8l2cHEqeTWn?o?ki!x1FrfSM1wh&;%YmxHMbX3+Eq5p6L7o zF-7v3Jmnd%MvR>Ip!Br|{1dI{Gd6#)54cBdmmAAa6piaZdcoJe*)Sfth{*1uXRHu? z4L!Z4YL;&H8b(bpTeqc1`|GuaORtdsCf}D5pKkS0z$6MQHs;sy`KQC0he${Hq(51-7Io2|tjL7O1>^Y^T-o{V z)^qN_>*%w0He|zjS8k0E#zb8#4H!$*Rfx4W@7NA9#+evj5!6g54kb`BJ3f5JO}k7d zv6=fKUtT-Rr&Kvwlv4f`FI!sA+JeY((jSe6FSxzOy*$ZJN$b`h<+M&nmJ@`|cWxW; zmxhM|Jsv%&&+HOIwn)!s0sNf&qT#b>)sHnan(*W0;~-G)3Zdel>gDQjl(c6fo+nW1i-I1Hy^lc zi&j^OWJerCaO`nrDT>Q&msC3-t^IdK(LDOMYDX99L=4N|NBdT$*0EnP{r$%!u^jdN zSFYp_)4fSZIM=G*JB%E4Z##p|1k5~1xF5X+nYG3}*=w96lG_PLs zLiPDcBJBy`dBT}}MyEK*qoDGt?^(dGN1kVu#}5un-fdi=Gn@wpD`n*>M68HZB9#JK z^8;d-=!@=2?QNu?%cD)9ERm)|yYGxu*@SBanK0j=~J94tP^2NoSQ6wT|2dpbW|7{U-1BAR!seiDZORB}M7A@YHn7 zT#EX^n8e2<6sp5##z^rx$2VQWD05mf%f?t_TWIwxDsygWv&s67h2*Bwvb^MgM@I7N zYB@9GrcTLhFVZqEkY+8CYH#W8t)+_A0#k?&W-!fcm%_Q>l*~;@|7)1-tJ9BD@Mr3B zfUNrcDzXz=pYKZ;S4h5{NP zU6(bc=`yDG@2TDXr~$XI68p5UCVRLS0lf{k|eI<2If1ut?^b z|B4oWSNxNB%imT_yuYUvSXNc!qa9>uP1AhE?G~})HYoB%q{7#;H52DPl`8_ zVY3h6Ox_ekG7WP|W-!$&aI8RWQoy9jf)fqvn6aeNlA_pJS)ejbLIe}ZUbK?6n%~R! z3tt~{$`y8%1IHu#3jgZz^WO{Wf>-ER>a@+r{hj>?8dbU&R6wz7>C_1R$nU=`WW-T+WM~4vB7TTY>9dC zW}WKVUN3euTTx)a?0R~FvJk@EFSi4^CkK0#^4 z!ZG2y{_3QL*$i0-U|+Yo(C&ArWz2Z$#z4aObT53w+aW>YmR3PSp!aDyP~h3?6H8j1 z`#B93H=35s=0YZh5R>Q27HAD3bGKr8xCL1$HIJ<%{~;CpFkXCKt)}XeQce?(L*0lR z%SY?8WuGA-PJE7G1?H}92TaBFapW^ z+_Gbeojm*ZNbYwqIMS1Aswf$@t6)(ihC7KMnYOuyUzBNCiQ0PaPk>ksHk_FCoLwsf zdq-ZBf?X++U2-TXd_>hCN_bFi)YpC@g~NF76-I*_D-%;9xzvuCQhO!t$!#YMKj>0j z-s^oURy?iDlmud#7i-NRjT6KBM2r%}e5(NMI9rgDxM7-hEUx50?h3(bi_i{@tLGOk zmbeBcHgQJ}PL|snDHdd;%d)qMd%A$ODy5B_0V=g&niX+1g>)RKTrAi7?9x}QB-qO6 z5Jh4JloVGZm~d`Z{hnrcP#fG%@FKE2K|2ZC`JU^_x#ACADRWRLwl^C-we{s{w!LVx z3j`6gLvh}b&H}~ePV%N*`ABr%9-QjityuqaBV!IJ3#<5>av_1HxYP_cF0H)5J7iSk zK^DK-kCp3AiF8*I3GA%xQp5CvS4*rNdP7eCi&q1=N4WptRgwpT<_})2FdJ_X^T-1S zNodzsK;4?#p%~p2jIsJ{-g#MM%3F_0qxSop8k^%qo~J{t&D@iLX8W1l-=}aC|ULk4DW&{vm8KfGXee2t^}hVa^GV1oP;Xg ztS_*6b#$_uHK%M&@;$x2VC)vVueF+by3hF6|6Elp%f_|{X}klC_tRxwK<=7@Q5WE7 z+qlkcPcZBoVXYLqJU$o2pR%MQL4#sTUY=Y{^qiBq=T`{bN@Db89}-kOIyp{kox&pNF?ftZ=UjML!pRTv{-g@#6Vp zHW}YEo*>MkasC2dy<`B@qs1rMc!d-ohW4#!3#K6~(z z$yrc*CkD^D2e#N@F6}wHh!3~S-3O9<74c8R*gkBQ80i%`dDz$=QUiRch_LNlB6mhd zRD?b-BRY2>}+uA~q3hs@huE48t7qSBd3FmWa2_Ehx0`!k3;fIu3 zt;@+&l#W|kPrtWA5X@sMoy-`oi;L%$lPckzFy{`kb;CCX3WcB)nLkgGA=$r9bme5!_pXw)Cbw#Ormu+l=AZ6y zm}!(UE3Y@i1y~b%a+lvKo>a~AD;a(KjEZy<(X)ZvJdY-z|1Ph@JhZWD?6QkgpXX$t zOY`gx0nCoRuRPRaGL8h`FP_%dN^)-}RC*=d%_+~@+IeRs2cjUE{wNBi0XUDcf^ItAkaM_;|s;6Jii$w2ec-{F2pENZ42=}ipuhMD0 z4DanB%9RHfsfU$vUHt}2QEn>i-%d~OOXhd&5etFtr54pU8Dr279(>X&sock%R4;2r z!IoEhoxe9sd>CC9pC>uJ^03QT*0b@G&ddD*kyrPoDw@q4J- zEmy2U&+)>@cx!7DEtvL|)jZPR4*b4Vb_rMp?>=ktvITdn0)ERzurAEdp%p-vj8)gG z15>9Jphx&=KZ_u=sq5E)wGq-*&avzoxQe49>*A7MZ&0cbew*HiB`UV~_v9C|@G$)W zn>S2{Sf4*m4|+^3HV&fet*X=BNHkja(kRJU)IF^xCBVc_C6R{qa9{H))UHyg*lMD; zg;HdRl}Oj@`ygT6Yn5z$r2A!Y%!IOe;a=jLm+rp#rxhdmL$~axBJuUY3p?9=Y4Q6f z<#t{*`rX53y}jI(qq`dEqlHn<3K-CNkh8?JfHQQJtI}`%o+!O4%GDTHMWnWD1m8Ra zFPGTP7`#@+?`u;3uOCV=&!B)DjgjRA5U(W8#l^UT4 zz&YZ?`(3WlHeX|@T%fW*S&`J}Q6?BEQlw>z|Dv4f!A`Uxz~;e#{nC?u;G2Z(n+2eG z5&hI2^t3~3u^JJ$gi5hi_Uu6sqM*X|2+qOqumgH~Aa zrxsHdIKR&2yg0>goY2PDCZKxgMAGunnpqsNIemp+{H}pXIJx6A#aKC)=!?3AV_*=# zqJ}aFcoAifN;=y>-X?(KHk}MqLmRRI6(GPP5+NH}va6v8TMmY#it4g?^x><)EgVo* z46=x@!z(TRwS>BNovSgj4PU%mm$7K}o673eW*GvsYF$q`T18#>f56-)VI zH58==&!|8-w%t_@yo_2*8?u~G8N93`&;oCR$1J6TUg=^Lr~l|;)nC+l$GMZA&ZGuB zA#!btr71ZJty`b2!?QTKzTs!=VOEX5Tf-a_T`IIGD5tl84-Q?*#Y)6fE?l=n`&4y5Sa{l4IqyK*#3Kur=I5EazB0 z@f+hY}Mt=(l=wzf2o zX2v}#awB}O$TPIjk70bySLRicWF-_uLO130-inBs19FQv+dae^Y;?!<_89V3ZTJzT z#kf=QGl#X8R_g7fMV*^qJBdiI_dgr#Nkad!?{N?V_DPCn6hxn8vYtjO{(riPzXlt{ zfrOvJPnfs}eR?;CenXHqL=CNG-dZia0!iWmb|-&+7OPQ9>q~)pqnZ-Zc@d5GIutWi z5oAKml|>&tAvJ|Yk$lQjiAPxFoH>ESv-nfxxJ6;78)^cWiWD(2`lHm1(llE2*>6b9 zqbYoVz@S+2el_-G+&06O9yNq*uZ5lUJZFVE|3uIr;QUNS0*^z*C=QXn%n#~JFdvMi z>FJF&GN<4s@3@QRPK~%@BH+@dxGkQfG74V6YT}8}e&@Y(62Z8sb`j{iu!kg~FUQBS zHl3JhMYODG?LDRuqDg*1e9%Sv3CCJNC#WJ8=#VoW;v$b|X%WL-DF|2dnAG~4vm8WA ziLIZV*VHnA&wJ6))STyrty`u(Glm{YF)eBV%oks#@_3GuMP8&ZAT7;2D@Avc&k}%clS_#( z?xEaApn2c(7kF)-=w%t!Z(sufqn?|$wNx{fO+8ncO`fVbzFWK(5mr+0Fg>z^9w=vx zge3Gk=3|@gG)L08Q$6(~N2%_Ks#=2pSkU;}KI-G0ol1L$OhgX3(hKHuVE2)~>$#dS zaIEQUD#U5hI(Q7MQtNa&fj3gz{8T_KZW8erKNb2YI)v4@Q*R$Q%rWK)_{~;K~t-uJ%jkUUM8=S1#4` zahH-!KuRDU;r%z5p|zI5WdDMo__1I@v6UN$dKhx4Teh~fOUTMGLd9C-F}&^sgnY93 z64ig>%8q*0qezL%-^P)6Cu|ThL$O?68=;G4%lhi3TJDXE*xaU4+z`=(7i&#F^Bqs$ zv$1&-P$w}@#*EPZWYDJk3FVNc2kly)0jD=nt&;=gKxkDjgF|xu7jeIaN7D=;Q7t@z zvPl*(Gn&sJ@!@b~qkeqM9^4}~Mful>-xJE1-`*;1L`8sDFhw)?e6zQS7|RLC5F>X% zLNC?>x%Kuxr~>QvJfS$yYj$aXJq0ZCFMRO0i;RkkXX%$vx{+79m3uzTx|nZw8VHvk zdfd!C*CK6~dGB?avF;n`yb+9+ea+%%8TebjK@Th}gCJ_ooMsF!ebyAr;E-kmLL!3c z8LLU&x%j7R!VOnD2V7msJpZTUs8}435!;*w>1%r zbA_+yFaOOWg$K}QuVxu=LNSAy1i;YFgL7SBf&7&p>L4V4jK(gU?pVp|C{RU%F7ls@ zwHFYS9|8^iPla7klxYVuCh+rMs82~UOpFb)Np=~9#Uv8wrRDBPq0eC}_6A^% zG&qomW|YnU?`UYRV9ev_#vw~Q1;ruCJ^EW(r|9TMh30K>%!lH*gE3@2KZ&}?SrAVv z{(*n6>}NPH@gjw;GsAS-y+K7RZ#&LJBbETeq_q!38VODDN6AzGOxW+QpxDBLFOFga zycg+C1ulaMNAE-~5Gw3RE>4dBGH3vqK9mM@I7-qld)pmIJ#9aB`s=V70f&dpe{o)u zLszBxYy?j}QAiZi#o&$^+O4k%@>;U_NAY6hC5~EElZDWx_^KJx;>KaL2=!i-qO-KB zj%UcTEKZ|YjkJmxG{nwi%FdizSsBx^n<$FZDiB461%-722Wl0`6Com!OXLi?@;RMw2^roo^Ei1b7C(?a`dI2T+ZLtUNSA_>jY{sjNNDpP2BngeO)rw7msRKT` zTq+MPx<)6T#H>8BW?hauI>#vBBiCJOdNqEy*+Z2VXpJXw;=0vnha8oNqxRwjAH@n4 z2)L>>%A_V>9+O55miMUx>M(Dlyb@1OV`TEep5mTDV^%(51AjUy(h1rmbcXNMjFF^# ziG@&#f#9sTZ8O-_nbN(06uOT~^XlMFd#|EgcX^J4Sg#^I^iJ5+u-60PD~|)9R6gX| z*28+&!V%1iXPVE#fBuEZ)~)sCn@nl6!-5>sVssssuQT^s$@op755yC66qp+$84D8( z8(s4fQNfy*?DrCjbx_$8XsJou-|EqS35YW_vcCtnV#n&kb8@b)CXaF)B&u|yH9it} zm73agbelUaES|>aFQ}Oq`9eyS2>TQ@c)$K3G`?-?gnu=TAN(wn-Ovh1nl@zEobCfm z#U0o(G53I6D!4zLreS5YSA%Y!Tl5oYjHl>_si-FVt`T|g!&BH(Tx8TK{E1WW;5M73 zUWjPoTq^&Ey!0Mh%qsbGAYv`IpdNi!>t4mX?yMR{Hu~=-`aq;j1~R%_rTXzgW2toM z_qYXFl}`C=zC6`R#>hYIr(t?8jGXkD*VaQ*j}7kqs>rsio$+$b_{i@n8)GlmYZ)iY zhq&yq)9&KxRrYwb5~My2TlkKahQVL=-s)=HhJLYLl8extv2#aAa`#(&6VSsq&1-}j zauFR|IPrJe4ohek&O?^9M04T$O>p8bR)4ub!f0mwa+0c`O>VR&jKpdQlQlK>`vSNM z6T5e6D%`#;y?ZRJOK)7O@Gd;b66#f53eH@sw9VfkWbx0)>K{cv3BL*50?;nQP5Z{5 zD1T{v7s|aJ05pqbxyhg1UN~1|Wx;bwPPxgr3FLFDITGX%J!idg^{~TG8CMuaqnE(7 zkVa@fH~g(iF~CficsaQss!RUHn~w%N!zDNGex!nvKrU3@w2R8N@x_QlVNX5~9VxA( z;biVkD@gKgqx#(G7jF24a{e;zHWFx6=D$Qv*jSOH+hw^1HO0S6<*NhfHqH#uoPWIK z4+CC=?QZ@)AP{Xu0zKV#$-ot{Q4{UO2caCW+62H??w3VwBGLX6$TkOBxG2awPnhS7q1(!K zpTP!mboSXD5(jp1@P1&*v6G156vjtmvBq5U1Kj2{Qbr@jtg|VGCITx~(p17G$lzqu zX)uVn0TRP#vq9=ZHK#SNN#tNaoyecv2dyG!1RUI%NTM;zvm2f=%mQ1Zi>zC35H5lT z>m`lC7@sZZeUN}d5obh7L6)TDj@)ZfDkc@7IMlzCXgB!BDa;&?wFe53B=fl zIc><#fDM=HlUO_?cj#f=*+DD6h|L*I3V_Us6iT`1O5eYU*+sxd&UCiQN9*i&VlKB8 z@^rKK%DA$kRhx*GT2lmEA_6uY=<~=RKiUX^Aq%-k6#z0+CN^3j+w0oT@(9IcpY(1r zSveqhJU^Cn?8UBF(g2$w!zM#Z%QMN^6Cw1e?3a!WDTZ1E!7-VF=D^(37iYX1fIvEx zf={xlK0V!hurc}esSnca9rD=&L5y$d5NjWwIq6zI4W$&dmQ1^--RKRNBV3_TOoC89z&x*jc>t_FaQVH=`Cmxt$UHGFxLNZxiX? zPKhj!Y^v#YnKIL`6VpfH0Gi5qJLD*`u(np+&9t!ipZa)kx@^87ba6IV+dP*6{^bNi z(>tow-f(!a5&P\WG~GZMrY>r}7HOgm!`gc!C>SkieYbr(R0os2f%yvN`sgo48U z_5lULPyoizh3WI(D|!gRJS5ZH^tU*4vb-g*H?DachK%#H&owY9XD*c8%R-XD_#UZ0mNVDK${9(4!aq7#ql-bPGV zn(w?7SNz+*48jy?VAw#&s6!`_JhYS;-ne}5C0)-ge>(LNBU&L~+p^`D)~r_Yi|I7E za#LxQ8AKI621Cs79fH2k@?PV6tp6AQ?eJXbga zP(5Pk*3mD*y{MDV>$}r|axi&MMq8T8K!11X30A?B|8*P4zbT<_d=3fcIarA?Jo<&7 zI)?>~#%nlh{!F1aN7~OC#Q%u(bOy;ybHYSq5wDO{;ySs z6viQO)I{xv%$}Q1$CL2~I)ft%>#?(i$J=IyQ8Z^{}Z>Ew~dAvLxQVOz8jyE z8E-M+)iRgjo?PV7csTK`BUyk=@wm;ywwNwg#+>(fQHz+nCw-zqZP1vh&Vb@(B$j&H z7xk_J7x(+~U&<>&5c25FILRZonTeiH5&0mbZ(M55fo!(?6*5QXcyG|Hok={HgeE!@ z9AdW{d|n^2mSERmn$Ka7hRSa>Z+y!47{c<0gY`k!*Eo|O%k}=T+{CzWVgckbk;5T* zb5fGnHe+T;@xP4uK9lCJi9|muq0{s|apx#Zl@!k~%1fv${sFQk91gOd2HOj_?hlNK z25=*uYuIDja0O)dUb46ghs5df5-ht$ji4a;5e9-hB99CknW-0(b`361!n*z$cgGz6+t{WX7Pq{_vZ$lAX z1>i(u`_QBgCqD`{*pdWhk``M@Iu%a|jUQM@LeZ8fDbbWia$`X#cPTLG_7iOXR@ciw zuQnoP4fTIIwP~9_gcVBLU?QrZo*Z|Vv|v~?H~0b@`2?c4&WLtNG-+>{vd!VsXLc9vjxcl_Ja>y_imI zfveXM>?3*Ts&~vDn4Ms^bqp_|`@FNE>pZkoWz&g=ai;5ZG z-*{57c-Okk8j;UCqFEMFk*FbNGji|i!j*NORib+0d8WYP5<|&tX~}5JHa)oWmJz2b z46Cip5OT~QBd$Z8AQjeKW1j?z4q%8Yo4C0Xk+sD|L!Ozd&_%&Wo|Lou8csVpG9;UL zB=0$`kEWHH$X}DRu?rL>Z>QlH{cNvXv}VKUE;h^Bu!;RLsX=^8>7tRh$%g2!A=ZP? z5L@Wr=aBrrN?dkknMzW8WG=&w#;iB@-yx#=Xsby^6UkYtDw!xOgxH!L8b2D_6eBw+ z=BTzJ^=_3hQPqL<%CYW28?~6PD8(l68K86jEN#!W7M(7b7)Z_+A{$e$zw$SR7)Fbv zot-Z)^qoa^#R!IF2xn;;e1VYw!R1!DB*&~h+<_inMb>i0lf{T=LTgpH_DDOb+;uC_ zf^MQI`cq>JlwYwLjHx$$-quTL`aN-48+ec^>zmdIUixE+XudsItb(-bx@d`p8lXP; zM+x8YJ{%ocyA6bL)H%{6jj6C>K2p%AQ}|<+G=4j|U50cX`Jl#~`1Y5e#uG@|y#K^JRoN$g*~$*OStYE6_{xy#b2`NmDCz>0_{?KtSmW=!HQXde zI=xEe!ECHL1U%bt7F^udhRW;xw7k|!j{r}HWht9ZMG;&^4 z)&TTar2}j)r*-vqjb+!ij+?jsj^kNegtV*uGo>I=&A{5Z-I62w1j)QYlFEQ`byce9 zs>BL9aboi6&U#8wN6T|jw`<_~nI*$U2hn6rvXS~19M;9{Qd0}qacyxM13;`IU&BQ1 zZQOvq_&$ll`^d1sN%w74O;gvsl1wGJfO}cL+|ry{=jq*Z418+F^m?3Ut|*8>)8QKFiO;JIhzP|B2Hv^-Lh?2>PV_UH>S!=tRvEm?FdsYR%^+ z1f8 zY3;`$CyW0=9i1%#u|=}Cfz!G4e#nc~<6=q2bN^L%RiimoAwmJPLe5oLuweRJJ@=XC zymq3_MCLsIEUhllaBMHSt zJV+lq0g6?NA!G@ZOoI)bI4HWhFdQAtCm^X8FdplTyjB-#oJUFB!S>sGFlm36H(w{`ZizDh%~(N;4OsQ+y?O4v-PwK4W^0>p zLwU(>;1s7iXcvv6ODyFt-UBc#t%%|_TI%@Uj)zr?+x<7@G4A7li(aCSLa)+>TCVH_ zyzO7mK)%sof2|Lx-0of}b(r=KAGX3Q^AEzmH7K|!BPt`Hi$iS>>WL;~`E(pSTN2V@}XxS&;%`gN0f~Q*;8WTN8+(rXE!*oQ%f%&4;HCw2rugl`8OPYak)^UKc2gJAa_JH`Joi> z8?#gLV3B4+c;~So@#8u=DP}tcC~Fve3`o23_ON*dt2Uy&!}XkY0H)S7b5*C9aKr9~JxO12) zpzME)7V?7k1(VyI`l4_I{v&7qGiA{>5)08LX2D1P(WlLf8#J4N$#dSPxTw}%_(^fm zXm2I5gXy+*U(aX^2>&-Qv}C9V!(-W8R}VU&9H680sVKJA449Th=h(v z2A-FfhBmlXC>jLe5qfgbzLJWA_&5Rb$|i~&afc@w>E9m(gXq*DCW7PK`+F`WR%ts z>SBG0Iw3a^da-&w;Fe$nWXYrB=C(Xhh-+RfjC{Aw&;Gr{?j$KIphK4v+NPP*NR4OM z$_y4$t%=H|L{#2d%iJxMGJoA-7pXY|y-F(chPF#7JdQdlt-tF3j(UoILzj0oUG+{! zpIAcJA9LNa9dtHNCi^UFbjxNZWUmpv^4*=*nB7E4VVS#j5WBAwN0L`tt#D;gCuZzC zzbT!1EHa&h5BEE3X^_wt`Xb;ll%yn43?6PgE@(3cdN5azx@IhQm}cSkzpPPsMI0JO zEHirbwJ3FnVRmn;Cp*CUqM=Q?f9ZSEq^>t8!i-D}51|wnhNf+alrLlxIFq+noy@*AS=QYkZu%yp;(5 z?mP`14oz>I+erq#4tVb0ra?Rjx;NL5l_(&;4K7hgU7zC;32ZRNo>p8nQ{us#ttQ8Yef#PsOAvNwut0 zV#p?dgW*NhV%%>{OY|9XmC~R$NxJo`)ExO>w7bNdW^Ki@WVkZG6FMqRWv2dEGj|3iZ6eT)Ude4~y$lnutV zebVOX;QNvp9sfF|+I7WMc=Zwo8you!3_N(}QHt&XYU`oY76?oOgxbZ}(!tDG4tVAr)Oun_S zhCt=r;p-|{uAHQ;ev?5z6R_W_6m}AR-Jpetn|cJHVQQFkNCLKH%TP*t&v0w4;R|&m z1fChOMe(Ti_(82NRGucUkz$(EfCaQ`LV;r&^h84-uRFm=so%_i3al{{Hk3s^tTi>A zrdE5>o7U8XKtVEZ13fLpFbp(%`Odm5geiUT`DJ~U+hOI25m$rEIvW#>MHUs&#F0nMr-7D8;GqJH>%kWJvr;f}-2R`bXO(4l7iWad# zwaTZvp^NL|pbO2+sAc~MSY@8YSkXk%$6a378V15&`m9hqu#v+nOw6m$oki@?@nG>; zr}HBw&9og;hJFG3nQ80^tEVj`4d3!kFp0E-uME_b`e9SJNdo;+gnIWWJisV*V!A8v zI4Dp0h9hG(4Y#C}EOqy?hXtUD#X(~VlP^Z-5txHrAL6sls;Q&MIB zU!oX3G~Q+9E#x0%QG{lG8hQXZtvAttorCrfWUJjh`$!CXbF>p59&Dwd-6*o|4(}^a zG&LOgD6IING^O->(?DAE?T^$82x%gQ;XmJosCs?UAo|CFuu(MeJos<%7JQHt`No1HdKLfDDpxN_4 zBIdzdpO6_}q3=1(h$RV!;?KgbSN}CfOTNf-e0NOVj|gk9rdQi&qf*~xw58ZXuHIf{ z*cLKol8qxV1BnK>h=b*|bC$F4_lUYQ_Q)8-hloOTR95DJDtvcqM5~waAj2nUHn_YL z)#RZ%PQ(HwV3q3xh|}=QwXnXW8UGyYHf4_K^s+`3f@u*8^eo~2rM(;{4S0~CoO#;E@jMWO{w4a<3d9s0Kr^lt`1#gG>;q zm&A3MNO|>LmRo}f+0E4(u%4{-8sgM#2@Uf2iCT!6dqIY z7hf*~+kG{XKJzM-*hbfig!cEA0=PS`LHo?mpf{p6O@iqi(Tboo@6D^yUQ@ChP6mP$ zmVH1GBg2#&2*tABd$wD+(EHr};m}ODSXCU@dHKS!Hk#Ep*-S=(?LdzosdVAfW7Rhzys6DPMK542wg8J#2zm%#Ky-T zl#ythns$HhJ&6V$()a$5jCUW$${@XBdqiUU2XJH6=4|67VfH13UeYaQ!3cJW!bI}( zu>|O`ARgoLc-%IL4&vc_7l820oMGv6H4!|k z9<;h#fH+~G}wS}IAdq6$gD@aN+TUBZc6h{ zCzu4$`qtIp7N=hDVH8;vffXRY_~}XKx4a}1QEzfgmy6POTq!71e#YbptG+;RXX3X7 zZPO(?k7XfDGfCqI=@V-Fn77{^jAN+p8shO^bQ{EQ&jK#%aGzWXLe72J`<Z?c&|8JCa=U`q*o;*!cEWPlaf=6eFid`aPTGqLk^W$ z$^KtIA~7u%C=VvW1jy0D4g5f!fD|+vCsRlwdXd7a1`jH^ zC#>1J6GfKL9mYO3vALiQq%iYrLI|Y*swBxEBW1(h;3SjA9Fi`(12G9q52L$`J%6}( zPO?(^TjS9jcp@2HE!;Bvq$fu9U6M^-SZqw*Z(cLj_&2YajaQZo)!nY@qVWnN)$VjD zgP3;$V)m~2!LeMCx60_^)a)X4jhGDQ<0J~K1(baK#f z0Q-E`HTW&Jq6XJZfP>|gI#s6X=aU66#PRHo57nF0_lv2sQ{*)B3m-aCL}oelB`bjT zU>a(fn;yHObMVd#`A0z*Q2eaU=n`fRM;F&G9I?_Ih19|E8-KZc#4e%Y8LP4h-G2oZ zQVB=C-;%KP?LvIFx>k*MEo2jOP8o=%Wq24(Dy#Efb(#Y00(?nDF|w!m5$rcHM{2XL z@W_fRz=PC!lc357DX7v)lm=sl2UzLkH7~heOLY{sWxk`4)Kby}ez(Uy&3B4h%~4=E zpwe?vbDB8P*(FjLnRR$!5Tl*B7XMF$HKxX-M6-236*AdkKXlX5Qdq)l3sJj*GW9+y zv8p{$!(!cLZV7qpx#YKKSZGFeEitV_j-ftjBy#2Y&b09u-(GL>#CS5TzPZ}@`S4)&u2M$Bb-P_m7@Lc`k~GS6n&;V*XI9BXbivgO zXE{!P_^x*#(%(kL}o6^dsgMO9$(zZOOXo{1@(AsX%j4};A4X7_P&mFo-_(@V#_ z<>hW~EetQ`SD{-B%6$Vg|kyrDGcgrqSS^^FHAN6g?vGkeD-U#%@81FUf zPQ!rQ+w9&s9I9Ml)=lrt;Nk8{(XPJ%%?Q8mVQ`Jj8mC2T&4DSOC>l^Pt>dW7y$bHBgpj_AcMsjqTP0?Fqfzc>`-6Q;k>(OT6qf2#W&d>?EL_H#x+3=a%cI=V zHTNU011?yAckBNd#f(!Ba^bn#vz z`o?kEww5`H4 zW{B1FSUBDGjxQ9eGrvfBM1HpE5jUXo{QaKzq`h%6p%5;oK;80d&XQT(2f2Nr#NM^j^kRe0< zx!`hK{ZUs2w&aQZBMRf$1V!4y?MBH1--$X_-a~+X7?y1{Fxzk~eu|mSl*O!)GBV7*N`|nbh&L*_g@0EJS=_YoS&y&jD#_az zNVmg^h4$oI<+}EIN&1@DwYMI(b>HQAaB{3swDbKvGOQtIY~-lyo)@lyXR%Bmlw!9m za@|ykymimksRf-O_LU#`TJI`|%v*l^`Ry5#6qGVLC#jRB05{8pyZ;B!&ANQ9sUA_n z`kq&S;#kq+9@Crb5#Z3Dc>5vBg@B~XzY_Z-`HKZ&gn0~3tECUYhW(dBg`Y4E7L-7X zM2e3jxmcNPtN`@?4~9xJ?Sf=YUbbKD;4t^kdL_#)%dA4Jui{1K}$M9VK#vXc!5=(FGOMZsd;k0cj4>rdX}Uv?5rL*=|rDg9N1*O z4wMCKBydSXQ6_BKFQRukBHD*KN)QA(Ga=tZA&2QrFRx!?_lGpzLa-m^KYZzlxPu^V9yBUFzP2M! z$_*ID+-~&?pc(3C|1V#fP)a8*3B@E`%6ZN`yV>?0d?(fC9HM-Odx4tT_LX|DK;%*Q6#va4Pz zMw`ot9=8qD!k&NYg_@?NW$odKtz3#PpI=S|KR>}O;)g#?zkbwWOwU@|!2 zN_Oo$Vg;oFX%q|XJ@fMsNh8S(N<#&83R6y+eIhcf)Ifi|!tCnpp*qz-hEELYIEoA( z5SqkMn<6&{Hy{~AEw>R(U$UO$Anx-AgFGz^VwysMhn)c~>IX9I99ks9f``L0Vx`SL=X0%NbeecQ{uJb_$KgfMe{UP zRk#82-V`8OU_j2Io(OGUVdR9`{p$z~;=tVFb_Ew``8xJwGPLcjovfn1Ap@ zePbMv&I$r)k}BO{6uswot!5RJ-{3^*i16ixb@-ER{O9!a;QPq#eH7k(RRjCM1=fn` z9p?k!4&#*m`bWmEMJRn0zfW;Hzv_o|VEw&ze9Er=6IHqCL56P*Wa?!8IT9VV1^^H< zwY5mRC(qEQ;kgQoIw_M_5XQwE}1P!k*qlmN0cd7%ELAlYRkp++{-Icdu zoTrY*F&7^gA4eTOVjo4#N@+>B1>%*bvL)g;;)5*GtkZm53FYV2}gfd*XU;bMQj=%op) zvLp57ejP7;eFe-YIp-pRI^oH$WRJ4L2jKJS)5Cy3rbqGJHby|8a|c7bjv=+l!79C? zi3?it&uK(M2`})|;SpzqI=@)Zv-RIFK#9VZ>gc>YUpxI=#h|mKp9o3H{D=5Nto+r= z`@R=wv-Th812^HM2Itv0;nfHNU2O7po|_j|hb05YhrU+%{QAe^3Gi4lmcc z4JIGD=I#nG+P8bViOa5oKf~-_x75d8y9_My_b?gz`=T@1s8sS?0lp!w!egz=Zm4xa|7VCx0`V3WZm})LgjLw2~JVd zris`9;1gaZxZI|+!Nai`P%#-$1s*$-peOB6dr8`SA)DoR?p>^%DB;TG`!}#Rrj}m` z`X?;7{sb{E$U(D&p`!0V%IZD#&WUt~P*mp;fyxLX6&R5Tg5;=G7;^j6FuH@Ryu{A+ z(9tJ{gg15-@RJ0g+(U0$0O6VA#|pW>GHV#}eL;byfaJ;&`i1##WBwWO;b@Gg_!42V zU93ZX$;zK6F=6Dsi{!rkg>)2TL0tPx=VwGE>7^)oO3*0m2YXuq>xf|Jx1T^5!GO+S zcg4JgxJf(@e?lT70+NVG#dgPpm>TZS^5sb!K8WMjnG{1ijP&I*KwTIWxw!{-l_ujZ zhPhFYz8stlC8b^o)Np~)J{ck?K=EhB=;ize`Otv2cIVImd;cNg4*@j0GU0)UJ;Y2! z`|g7G&W1_KqZ`YVQ}c_8E5kDndt3iC zAKUpF*HmZb!$=>DY9Mge+z{~9NFIx_!XE zG{0p{cM!0Df(g$ZH-*?;!Xr&h~VX~fp~2rzO`Yx7+JPf#3-=Xk1g zZjFSU&gDByC18HVn;nanuC{dUxCk5UF3E-F%4D@meQ05kd7FZD*GtrIqKZQRUmaT^b&gAqn!6Wo+O|bcLQxdXM zats`=2%ouH>^$24R7ZABb@6^#0s!An8|wMRhO-2n#m3(%rGw<-F_^wh%>3i9Yr@P~ z2W`J*?cqeXS0Rl?@bw%>$|?7xIhQi1t@!;7d!zW0O@ujJ)x4lYf7ZFHT_9;B95!eP zqm{p_Je6AlUWjH#A?lJC2N6#%v{ zxh`fIH)5%hnbNq>5bRi+G^5eF@mPr`LG!-Od)2xK z7U{8W7Qgrz-PN?*Rkus*WYsP=CkEhN#whoZo=z{p!F?T*Rx$_Hx?e_~H!I zo6E;ReeO6^0P>g>!aIBIqg{pBL3^TEnLOhCYvGIfOuBHN2!~k_#yKNgjoL69mo#5y ztJtEyb^n$JscZrJkf4}4YM&Pw5MR%Vp}FTJ>ipM9clM>n%>l>}2?q)KCv%s3CM#bR zzno=J4y|LFV%vfUm(C-0$0-Aq#sy?=oJSeXdugdRQhk}E&QfCDvscArJ8d0vWD}b; zM5cy|NpCDyYonFC?D45KUrLX%8TsFwUM*Bao1AFq(UR+00*?OHSTbAI@dzytWt8DV zOg_ZEFd*mU@^Y146Bbj8}3tdY^+6 zaRQ^|#CZ&xyAfhv_j?*LaB|7MBL~Re-(uV#UVHGwK)Dp{?C^ZMo&xg}{VG73C)MyP z@wiNgQdq8x7$gRvGJ#f4}6)-(w zE#3sqc1QRmbK&s$Not^fB)tyR%>Jo7Yf*hQsbPA?8o>x{IC+_#D;5Igg+*`9be`^qD+7f1!nGM1C%vxZq#`ZEKb0aZellje8$V**K9 zG`Hqjh2`31Kwe=`SjtK%3(>9kyZ>qCP?l5RE6bs()VX4g_5?C&)(%TVFNP|o%+K^c z2eJe&&k)Q&;dTF}%K(w6A`P!fx#)%c?X@TmS_~nMCa=Q(Uz32BSK_Augus?j;m`DU z22=r6Mv~XzhXG^(T||uUom2c@gKhrT;DU-u5Eh7Y#A?Yp(!LH5EJSO`Iud~h86}c( z3HdaAl|UAVWs=oV(q^^oL8q>bHOu-Ml0nozve<$gtBLwtSccdFDXpPao0>g}s?#y> zD2|dZ6=bLW3MgVqu$G96BS+5yL9!5~>vvA`1*TZ7>m6GZic|3GVcOO) z?5C1p+khH-W&37j-2o`U*_%MX{@;UnlJ>`X(-#&bY-4$RuiocmI5N0Umt4S<8BM@M z$oza;f(gpV!>IK2B?ierv=FbN>ICoWR0X(p)r|Cx$ zwgDuO`TxprrRMg6f1|(-V@oG!%u}uaI+riGS3+>-zd87u=_~#B7%C9U#J`;&g=lN` z7F&fV#VNEaNXkXnpxgTUQb9I=tSb-~iOZ$xGDQph?415xZ9WVjGhRS28U*uy1P8f5 zl-i$+<7#DG3U(*(uLtjEQ4DN0$+YZQ&^Y|98bx_dO2B&XQ7Xn5MItQ@4oJ5@<=ND&_w!RQ`YM6m6g7c4qb` zYZK{Nzv2?2%Pb(xZQ}3LS&3JZ^`!!@x)$%bHkl!PK3bQY$$*`f8e&6fz?!?7j4w@9 z(4_!^~4! zSuL*zCQ1=7i*LOKGWyM~7ag7@_pAd&f|u1Gha% zeOVd2jj;9iROugW2+8a}VnE;F$?dIYS+~t|=@&59XzM0jQH0{lH`iZMql8~NKJZ{Z z<7%%j`OmUnkY6E6lOUq;ZedpCcI(@4cUi;%kGuC^_xjMu`vXLIP3{I}yzMw4#1jsG z&PGnen^Ay*;CL&g$F>Si2%%t;XRz%64BA`M(oP^dD?U$U%#+{9yjl8VfkU!L_?%~Ie+xH78fNJu4Sco1->8Pt@zmjqw%GCLuK>+4^WhqA(R6Sn_B z?!TRG@FCg7)E8t1NN8ij|BIRu1RO6t5|lvmSeFhU7N$>E$mVTl%r&X`KHeF#;~yw^ z%1rQ;JbcI<#`^&9FYZO&Q0)0?kqo+w5f1@;_Yiyy3Zxe;V8}`zWSr0M8%3rxy!7>C z=AVXH6KV^}RROtPi;EqoI;}DvxV1S@2(uypBz`FETzdd7-ugzyl#A0C?eWc@LY`xH zL(Ro$Y$UZ+kb;7l)17bIcV5Z8fO(BxVo*F0NlH~E^Lz^9g-4SG??7|7cI9U>-Mm3uj7@I$Z&FUEjrC7nhKd=xE@~`gJAY6);DBY!O zSW`Ur3x#~=%Q8hG#k*R)B_kuqHp(=jSQrXao~qdb|5Ta>Z~&c$^WmZiyf{vvyVRBP zoa3!_5M&y%ViRtma?8aA%}3W!EJ0mB-@LJU1WnNlrl(@&Q%1(7m>lB;J^x-pl;vGf zYj{xZmIBp&HcWoA-AP4##plYR|n>z=iGys0JucT*U?^3!|3Em_!~l& zhppMPvqa*ks(j#MCm-Q<% zdsqfw`qm-&{v8KQ?(qC1K|bPpl+Wny&^G{C49!81keK?`VZDXIB;df}H1YoWoZz#8 zt_75ZG*AmV3@IjA?o{9~cs<>NcpKd!z6+v2gr69y3tsfW6+tk^vIH6?a6}?Xl%=%E zPMkP!)Oa9y$jHKyknEueH!(wcht1vKn5R)xb>PE*LyF9IXu0}cb;~ZG7_R0q8Qd^1 zXvUh%1?{0PPYU6KeQ<%tBlOxn$^m-*PUYw2lCQ#xr}2xy$WUl{yPTapod0?dPm}rL zbKN!t=-=o)x+z4U{!!ov>&^IfQzRS@-ZXc6gT`|v04cMWAtY4l3-BFRj^FR|ebLmt zC~VfZv`M_L&Umk5&Rj7Tb@@aHX>kSO3$Y78(H$ zB!^wY_K7pTjubnKVc3wpL(zR-WVIOcV{R%kZLGja(-J#Jm`prp9VgrJ?Dk$XZ_yzFbG z>u>*O$fCMfF;FLzi?DhE%WSHajZ`b)9;=Y3eH@BuObPf;3> zV(S)+HFWxJJLAaveyTAl!L`NNyFg(b$S|1&7u2B|{ zaH_>cAk0^ojK5<#+7-B*&V|P0seT{$bS+gx5VY&kBRL4e<9uM9pSKL@g2F0nkk~w< zBN0;q@D|EjVT3XNMM#E(LW6QDTt^U4K_t@EKOwZ9L4njcg#L(!5UIA&BG=iKJfjV= zyTI)H@6#;PPJh`b2egWRE8Mb;!nl?gyaEqCkf;hBfzEz?g(0lJ@DM(| zW0*ndl@3NCj@P@Wa~{5iCyb=oluf*Eq$5HVF#@;ZhKSFC^0?l*281kDIcYv`4c$ zZv!}!IKjZ6?}-(#!-rb#kFO*biW0g)6b!*|s=+&pqecBg&!*5h7eA#K6oO z_&own!NY{nAO-xC8kX=jB9cVs7t3tgi^4YvC+03&`>K%yehG9QYIQ+L6@6Ve81M72E{OVLb&3x3sUsyrUkbrV|O66Mm7+M@bwJbvycP*GQC3zs>f06DtP# zTnIAP%&=2Coinh7`ih}P+imuR!A7;Tk2+wB3e7_<@;ULO`m^1Vs?wT7$QSE^!HaqA z>LiMUv79c+z#^jA-JE0*&HPdQQkR zpLt#zW8T>VqXH1(jL>dAQVqLH)GIQx*lpU=8u=H^F9PO-7|IMdI_ZRgS{jdd;(wso z8CFU=9U}=6y^?&mBB5~u{1c#w(s~7VA$6plP%TxW^r_a&4+Zo`9v0(*h?OS{95-LZ z?)9}5TKyVh)JM_+ZUJwpwp_!6!6dcr2iIa$r4lC`oMX$&3GDOXx-{~@5*D>~N*ZD@ z)>Og+2``~t(tKO&9QhqIvJyvm30Q^4ugW_=@Otd*cE=wei%R|!tg?jzawm)ij5V{x zUa2srKyHKNC%7OQ91;$h#{$5D3rKVEsZ^M7>y0RWqlXcKR`;~U$0T?m*X<(2=iUsD ziQ2~r9T}^D>iqq+xW7%3@6!2MUO{bcBr0dH^@=Oc zksFMs^ZIG1vRnEbo|QBZAENz^`$@kbBi=?YFS$Gie`l)hvG_|``h8nMTd_OmQsr*~=MeO|LJE;ODQ*jL&mnkosU z@d&YEK!ARa@C+l|XqPT7M;8;lEOr)f*cjs^=x*?ZyfrhqW7fnHvBpYQjlAbbwpM(mqc|`o-qY390tov(Tw@wz+dr~xG z#HZ0VP6~8RfBW^tu2IGzy2#re)~G1}1G85MplfDjBnq0G+7hd{TKyxSHv@^&4g$gV zP$EVZY0ts{W7PV!c6AY+XF72JssWOO`ciB5uqG2qGeNuejDBWEG>so#FSjlHpAPdZ zY7vHT^@Qe?M^Sq*#cbfH7e*&NjsXj5IM!;&=x4!rBTf}Sa-1tFDYT0Lq;^~^heP#7 zKE1*Fl8@y0GVPwY*GB5SyjrDqN#BxL6Sj$lm@$#BYTFQN&2XO|mxX?q#_BwHUYyDs z_-EYZCAY|J0{q0FDZ4?mjxmF2pvYg{p7)7%bFcZs2PD#x#$ng{DBCDgEopqct5#4?Gc-{RWIX~?jUHzt zrU_OGeASeGGw&nAi4L{Z8xiZ*dHU*1RWPG5^Odlpb@4C}K^h^txTa-(uqO-Hb<@6M z#Z(xzP`LH!y2L&2*0)G3T&J-HMf)wQdWn-9DPvSKN3#Zm6mcIj^&cn1jIz4TESzpn zVJF-M@fNTrV}VmK}psjq-?Ba7lp%S57Pd&ZlOf2DM8T0w60un)TW|;Qd)3@;Jp_K z4Bm)+*aj@Xh+IHB=>Ouedf$}LPI8jZ>az)vji>VwZylW%+IkBa5+zRsdS*LwoD9Is-AsB@&JU;o-~T z(>{X)KHWkGNty6&m4mm(jF}S<)-~@r06Zfv2VZ?p1mmwgLBdDBo^r%-sIWt>4>{=) z=l1^n;5)6Rfv~ZbojSh6a&eVj9S&B(_gR@b>U_VV6`xiwwr&Z-r7;PLXM+>CE4=?B zY9|>le=iVOM}H@F-EZubFg~@ls(DH3gonV8Li?6==oFzgz?d5gC&(RiaMo9n>6g(1 zRI7O)!Jc(tGr`KA1S4Y?9F-NztF?)~?||vWwkAt$G_$e<^b9EkBXx_iA7?xZe*v4+ z)PA+7L$N%IhGGL2xOp*LMpC>HjTM9F_nE+XhC(b#Wm(;p%Wsk&cdhDb2y|yWAS2?( z3mj{*PM+va^ukW?luccCTOXG4ff$z^0jb<0Y_kz5mfzV~ipsGk1oM z*09R28e4(fu`oRe5MBZ>T~}`+iy_9cokYtraME$#lYr>1E6{@3$mBD#SfJlwDdQARx7MHD_=txm^oAWj6)q_7pL84p?`! zMFd@`d@YLhn%|jG2O4pqdrID5*EPB%JfdSx+(#wOV`Ig6F2J|MU)_yVV-SnCibP-BQRR2klAUNXTJ;3t}ypgfH5wA1>EOBgD{J8aC z4l5FNWZ&^pat<0)wz|(9{39cLFK=wi#fK$YOlsYTICE)T#70w&d3l9ZQnxCrwxmG^ z9-x(q_6B3CjB@2kn= zoMELJm};OJxLhgk`xt`?cFWEi!EnV?sivT!jmtCGSp{@iXW9E z0=r>ven1S~xKG}V!AjgYb%xhqGQ>o;U%L+uBFRM{D2tk87>V60SqgiNGy=PEZ+e#) zMiGPt2D#Z1$7ee^UC<>}#HvD}y&0sf&%Hpr$pN-u_ z95srlN#o~7el8JY{`$;u)2q3YD}_0#CfJNm!}OP#ETaPBxk5rtAa){4x}u9igqVe$ z{%CLP0D?tZ1k!nSo?j1LSZ2{N3_fDYnQ4szvio_9&NO-(HIJEhm{105W9R2xdNlP6 z03UK*JMngJFKrIrjlHti@uSH?_1MQg_4Oi=)qEjFbae+$+7n;xoz{ob58=kXUxDyl z7s)Njr5)Ofn!uzeIVM5k;|}n^z#&g5@vwZ@ohS+`S9K&SU3C533^tg3y}|}W9#3$N zlDcqMnbfp8NS^hvAMGn6T@S zwpd2p^m3W;y2-V_G%1gb9vnukjpDFUoBe)6aJUvlqFlM-Id15#oRG%$z)a`nF~%X2^Zdij^>y=y=Fvm_#f z8Ubj_42DSPon(4B+Bt`=OtBF$F=D!ZFQxw+=)5PtQb}tNuLBuV_CD~MtU2)Y_hJ(y zp(Z9qbik(71t0An-a{r~f{ha%N5sAqY1;lg0=g};pC$5x+a%;fU4jxIp%P2DuK=b$vD?o?Wx zVDAy%nOu9x#*|&;*cgW!a>IQQIG)}+RS4)4@k*kLhsWue&G!HNOg zohCT98Db8Uvyty>9b?& zwu0b){40pErsG5i--Fe#pdkzwitk>6?Ec|`O+~z0eR*y0{C+w4GI_9ZkMY1(r7vC9 z60r&{D;c~qM5DThK-d0|7ZQ%qrjRc?r_|cRMC6A*LLixO)auF})>dJn7_#0)mZ%=e z^Y0X5z3l3wRYH&Aitt5IDa%Y16(b7vNQ*IGA6Z_Xd91}4Rtknk*1eemEZfa4!y45B z84+*n2E&L6gd4&aZ;Uiq_lQ6mkckPK;fyI042{7@8&m|tjE5XCf0R=(VN~Y7h;PUF zvRSySYV32?GN|%?~Sm(zR!?ikY{-ySH3%lwUNNj=9Dm~T#YQ9E6 z$^VH8$x66}C(2{cyu7^dMk;br;p8lQ?z>zY4@}@d=1T6Hp`HFaqi25*9kcUZ{W6~P z?(9<2$CH*b6mRR!tzUe`rZJaX@VYh~Tsezb?IpwRtp^Cq8&uJgghSCST}rp`Y5ph* z{TJwJyYMf9n!cy&&(PB0N7P?S?JsXf$8`%9xr?05zx)bnyHz;S*ha3D&_2UkhRvGw zkycw5R(XLh0t2HeqlSi7PE!Qq(qGLG- zk0ZHu3>WyP1I)&m|Nh9%1H&&f%CkoBVq=hMfWkJ^c9C`KJHQ!Q#A1-UF&7vG5&2oM zJG1S+v|@Rx!%ym5bB@PfcQKLU1xtv@azhkdr*>hvMIL^&H9dUrDeNY6w+*uB!zIO? zkQ)xa%_@SiU-se0n&HOT!rjQ2c}OKgcudH zO9{c=AD3P@wOpXuQj{iOJWX%TA0g-HoLJWs{$(q|x<+3Q6D~3)kCa&MBs3}L753M^VXhCU0?5r*< zYy8!Xx!2Ptbmvc)(BvhZeICY!-1i;p=iSz_-48BaH}Ch&?Q}cl&+Wv`RE0(9CDsCw z22Ea7Dkw{w*~ks7FK%vNJ+}2`3+JtVg#Fq5i{8(d+vAAc_uB4}?9IAwL`l_VAj6}e z%+d$qX}5OV>ZG>W9%UUxWi6wZhAN?%8)o;+j@`Z&3W-{MCeSy&b5H0g#`~n; zy^7?*NLL`HuXM;z|8#xJGL|D4WmEhP;3S=FY~7j1i+IW^&vF57WNPPFpIe&Ujy1d8 zw68PJ#o^W6^G=*~{A3oR$fjs1c>Ae+ZFq_Sv;ZW=-Au|2phW_gP>pa0?v+BdrIN=fxcvwcK4fU0l)n#RM7gpq(32W)uy$kcI|p<%7^ z@f6cIRK3|ahU-RL{{Oyf7#eoVu$)IppbvBQG6vnCe>#G$hW$d32BGCI7BCP91r0}i zytwaP#!hyw`8=N2^z?kD0C=EzoJD}?-vA(?5pOj+7_Sd{7wWHf!QJ)`BIC)#kgFsI z?*Z2Z7F_uxGyxK!mGL;n+ne&)kRbqMJw7Na;l49gOC~zNuQ4nn=S^&qd`42}+?j=Z;ndm0HJaZn&~ zhY<=??nYh5W)r1w(&*qg?%1AWS{4Hg&HjWL;%@x}362oDM5UQ(=)BypdC{nfxyndP z8x=8e*^c`vLO&VEQ6uuDrC%d!@_cdlnLM%v%nZXAM`Bq4CM6(pvoQ{;$)L4C_?T#i6}T|EuuFLd;4x2FD0 zkz9^F%P}Tqx3)3ON-n!7xzs1PG%mK(E9_&%UZBqs7QDAE6NQh0?-buaNOY%brW7ABh06P|%i0 z{>X^ee>T(pEVydW8B~>uVT)M8i&xb%{Hjv244kxVDu8A-KxPaxanE&Uz!ukhfi412 zmpO4UFwVQ^;l+Z{20_;s1glC{kB0h7kB*XtYE#daON4yl;m6GY zLHK_c)iyUz7xdW!khEUG5;}>v4R+<|Jw-3U&FO108knMw7~JB~P5s?W9v-o~9~6MM z){Prjc;CWvodJCgcaN&)C5zFCd}1n*)!%eCyO6ayoG%n-Z7K8-DY1tv5Q3NpvtV^d zF0j=f8q8=aB}Buw1Jk|vt+}bm$Bm{2Ax|Ok@*OO06-#_orJ6!xRcS+`QgJUetK*%m z>F#i!#bmmTqFL=hm~-wvA+T>S0C*VSn;jVm%5eBCU>58>x-fid`2Vm=ZD+9vP+mBh z*pqSU#&9p|83Fjf1pW`Q7r3HV@N&wPEdCNd`KI79Pmvk7%&BC8Ewd|`Ps{8|rq43F zve|N`NLIEKS@2WNFgRXP$9y+lUeCxjUW2+RY`jzngVlJkf~y&cVSf<6;A>O~uB|s}M|f$DJ%x()3J?oMf)q zW?3?ynn_hLsZ2A6nv-TKBpP)RXmt9UA`gWMN>fMHm?O&~VjNz6a?Bbs+0?vss><79RQsn%^9(2lG#O^P-ieNnXUNvM&`{wdQlUG*|AA(^}0tM z^YFdO*MAwUd-m30Lt_y6ghGqx5-%H_pCmDKJ_ z|KL9z9V`SOJaWhd%J-e2yPz4Ic^m>S``deaivUY)D_ReyDGgxmW_R9*2gQ(R#gE`+ z^&&s;!XLDj;o=UZ7tg*HkZSGBTs-$SKdr^HUuTmGUObm@?Oe*GGpT(e3H4jmD5(Ta zOt(j-DEFENX$2Ohc3mo8xVS^k{g3K9%LDzYd>|d^u{_Y~hxPkBY~`9YHcO4 zRua=mS6&j+Dt1w04Dr?R10W3TvzCDP4nMQ3_@X@OMg%bnyr{S`;}QiF4)1%h>@#^3 zW@4YRwq>$pc?&REwv?TgELLc-l(nWx!mMHQBn!`FnWRvS5_8N>??VEiA9zcVTv3eD zeI1nE+iV7<`*WeRHb&2Z&_#O{S*YBOB37^tL|i-`ZYkp-o`ctoesoJcH~KY-3MEcU zi?Lv}acNr>mvT?kJ_~#MSGA)5GsmcdyyjfA+2G zS5`p$TWe&)XeDo4gEx>5Ywrywglv=0aXM?k{Vf(jCq;idT4wx?E#Nbh^(E^DTV!p?3J< zyP*eFeo1^bL*kbBX?O+Sew?^>FgRn299pPVAq7`Kx$mca^2%{90hFHygExdfB!9Ye z)C`BJifnVAaFC8)-~<2Ky&Jl|@ZYsh2JnEmKH(3D0o{aY2*j;!PiTx}#YHzy%iJz~ zv{_|s{mpMu9ejoeht;H&PVgZIH;$T`4<8X$r>~ZKZl)b!f zk^&J9$DntkJ%QHll~Cv-9ERZ|XrBUU?Dj zY;PuUN8eM%F?BM+99l@`R^CyD&FVqcnXU|9$A+QU+XD!FmYhJkvGB=Ph&Eyq_jQLH zpr=CH4-l!|Tihc9&lVR-zFt3{9EP3;!{OXZp3NBaepF*8Q7Gm=f`a>o@p1H_zPNqK3}UTLIqJcFs-=B#m1;uaO@)Wok&enpbD6hZ@|TXwiLl2+TfHLX&aof?sQI% zmW%CF8!u2HZG%%*leWmFkhZ}o>rUI?l*=5Pavl~@6KUt{5364T+Wp}I*hjlRET1A^ zOBoxlCJsWLA%Qw=#bgxy;$cB^2wzI2#7Wz)j1k$H?uV+MPLrlq}96gFME zLM<*k$$1GQ&y7NhFYM8-uG#*S&J$|uH#C-#Upr8qL%ew{Gh#we1 zNSm~b(RE}c>I(=hX*7Mn-tq`vcZQF_s5mrcXkiC^_Xe%?4VWnwuIkc?z@@3anhk#Bu@utk|GC z-^{g?tv4kaY~9~5cdfm>-N%o+#v^N|yS-x?-M!InzdL%o``FkqFRlL8PSz6k_1Wp0 zv(u>UnVw_L83I!>nIixeRO1GQGxS5CQp>a$C*Ra`x*}?`CqqF2v_4%|WTHMqwz)xz zx~M-|`IV2{a1t;8_58xXt`_XPwBpezo2KQZs^gNCO{YXN zJ__dqGO`%<~jyxpI2Csil} z4oq{(EnxTR%CRR_1vix=b`On~FP(sFh@sX&i;&hBOy8aIhBFtAvsFU$^27kVgl9!N zS(qS)bblkLh9TXMpzo4>;dF#_zbEI(tG+zsyx|2K=)IuJ^lqfv4IKY{k92<`-GAUu z7qOzZzDc?-p@uA|&%WIVZf-Z&i}m2Y;0X@mv$)2`9R*g<^#ji`Zmo1ruy80{ zC}mh?m_jQ%WK9n7xe^H?@g&EUD>dlu(D$zZ1@70^rf7t!pqN?U7m~|XO3$W#hx@-9 zC$4Neqw&J)A*PGMi{KpV5fz6NoIzBnVTjqUyw*fB|s}Y)i%#CP6i;IU*75GpBH+_XIJd}URYIu&0a6qy^7@w!1 ze~O?-Sp*!C#IB#}=g(aXUfcXS$kn*5pjTH)#zrQv@5H6|K6K ziC$%59qqvHkrSFgFiM_tOhFsMfdkj+M{XN@=2+qKp4hj%Jg*eXvwA;4A3Hb@5gWlD zsrUA+<=_J-e8MHVlIG%}ge$P)TCs<5hW7(zVz^=DWp3x&!u6(h<#0}KTesI=M!yf77V z=N(-iI+6S(_clr4tJrg$EL)uiiI!AkTI*_8&o)o9+2X~jJ`25^$kSJvuA3J zN4SF7d$f4;s8kI?N_=5m8L;-pYf={=bL7xoNja3$TtW%BNTqie~INYz*X&4NDM}GZ^K!CCJBjH%X0O@VnfZ2~yDt?QL>4tZWfp#XdE-YSYADG~>T*TS z7IymcZR|fwrbN}ADgq&B9&fx&O!AU9AQXHAf?o=V!9UE_Opjk*-E9I?7@qqv@a6lv z@U7j!a7E>hLi&Idd+ojVv@bD(0DGNR*4Biva;x@cb9vG>*E#`HBdmYefOwQ1auuRMzCMdJRgMq ziWL+FKJW#;TdVWFWe`h@d*? zWy(PH>-r~lzB!*2I|ZTdeA;Vb>y7A8yI6NT`B53qX{J zNL4Ce1&^?_q>%lvg)BX$)+1vdTuzszsJNWFY7r_*Za{w0%1TMkiY@|2xr4xnwqz%h zoPrOWsqYq;WbtfX-^EK1g|MnUX1Cwo#d{w^A0sJ*KOl9xG6#907;;x{P%x~Lf)&r$ zSQQQmEX`|NDe0nwoaNH@#Sc6O^i?`T<_c#a`xj~H-V>ccn&7?hf;ILv(TQ;3A#dc@ zA7S$Z&(X)}Lh-p91>d{rfka+Iw?K2#BQ82Ci0GapYD0!Ow25yd^+~_I5rvQy{2&-a zb_DMfC<8bm@);Nu3HRL~`_tkXPLyhj=2L_1-}ukH!uF+Y^bFsH34M4{5SArY(!&qi zC>CF~A$+>n#y9ZqOno@93Rd?fc+E=n0W*C80%LtU0IQQ!#x{0re&ScJ~}Wnhh=7Fx(+@= zX(cCSKrRv?1YzkT(DoH{^G zCHsJ-IZ%P(9ZyM0JXu2juroe6EWEES{Of?KNIXncbQ?>=l>h#LBZw$8ol~3_#5wK! zisCBa_v@7sB$0^d!MsvDp6fdFJs4?hMTzWKa>7}ubG;K%;o8;3;!x;8_I7P zZ^r&kqt~9N7UiKRHYg>V4nFRuOAh4D7*%3Gv7KT@VnrxIe)nNpCIgu{a4}^hT4KB% ziao3(BW;9gMR&3DZ!^OQ>jw0krH7$b8$XI@X&wnTSHkVu7slTRxXES!)?fu?zNeNP z=G@sE03xqYmpKeupMAp=j0UZQ7$pB18@e-#iMO}NP*C33 z@931J>6O`+U>)HS9y$8B;=P|AI)@tHkMmj~tBEw)uQ+R@R8C$lpq#i}AYDEp>S&JB z$SXzby*nXclO!ArO5(@T+>v`#$`o{r{#9jR$6N8mpHa|<^~RpYz1c=F6NoQJyJjz6 zGz6%8^@Kf>?l`(WYN$%_D6rPYKRUJ8-oPqeHP&v9v+V>kmuoMI2rFVnEP=gX(-;fs z>DXAcm)l#kV$+%%tMx8e(Hj4nFXr}qq)pWMTz6G{VZyB~Q*)}CaIUjQBW>=w*58fs z72M(pEWqxdx=us&3U|Vinnu`@=gqEyEvWS&C@E3X%@1CuBtSX*a4B4IDNr^ABWD9l z+fzcaI_h|*l%7^eD%MEyXe#CMzn9tvA3K*1UGv(9HgYt}Zm3GJ%ev$!MovSGHJGa% z?Q*fNZ+I>6AZB1zdNjraeIdN*{ibcDXED`BmSfoJ%(bVgv6zfh*BXvgYcw%+)0ix5 z-F*L*p4QY2ocYV`hTR3w@GM|^Sov+VD!OB(bxv|`l^0$VT()#lFG|JUY8#rJ zI+$B>*qjfe; z?)1h`FXvaOnqe5h)3O&@BGGn$$6?rH!l=7*R*AE#Db@5PVf7eA68 zza;Sqz1egeZdUl$dVA@utF_=4rOj-?RaR1NKYwIS3K4krG!rG3BXFW(F9q{P$Z&{^ zm1UDOu#olLoRwv#OASnCXf#x1Vwe8e9Q^jnSGT|Z{Cw@Y6fbR86I3mdu6B>{*|t-R?bMb zAVxy-?WS~yv{fJu@0w8*$<6m-{K;cojkUNnKLy<&q1Gm<%O#PUiBQY4DEyT%y1H@( zU{$-c;R09PR4;6N?a8!F-S>ySdC|IQ?T`fDfiZ~`uk;T7QX1(a)FFA0^w?jmAxNA& z{(C^9Y*V2uHSMH2SvlPaFMSCAHB_ZkC#5}00AW%Z3Xqh*u>UK@l zeb@U^1NOd@P*0OreQjg>Ay`!bL{DG5!WHCvS6BfQeOMb5y_LIFvtV=qOB4?|bJipZ zU82x)ftK4vp(n0)mN;~YLzg)8uHn!VSN>X#grXO=fJrF2grZ9*dOjPOgrdLBmA@R7 zP;?1Jmr(S=N=Qlp>NXlZw^EX~%J)Rm=m_lGZr&^BCQe?>`M$W4(Ka6vdY%e+Z`kkD zwvMCCjp@*I!I!X@8>*oVG}U&8wz`t^Jb|;p4Ubt@;nz!AkU3vEcQidDjIgZW=_njpfOWoQ7ZQQN5^<(`(Lk@ zkAUsRv9-2wa4$+z2Yt(REZv3M$ZbI0?Bg~(M1hTBL-Mm!u!C zLMfr-QlXRzrBo=TLMatW2_>(dehA8LH=yKPJuVFv@XbDVZvsB&J$GFSnJ#q$TN zs30ueQ=(vVjmXYWfuwQZt#?p$*delTbx7y2_tH7H1XGL{bfQ!2XOXDsB%o7_a27rd zqqmPU2G%1b@^KJje}&TwH7PHu6mR^qz zOx}`87nJ*K-vAyZg*!1TE;{p|;PGxbLflHjs__j%TWXDg<`5-~B1h_t zOsV(qo{9u91`~TR)K$&4X8`#yrtsL{WUej@*P2;#$JIuaM}pKH!dd&#w-KmD3y_TN zKrbEz#G*q`if%zBx(SWwFa)A&P=|VVx1#j1K^N-Y--^<e$*`)kc%aLWk`QuH0&WPfI-amR$lp`1&JAxR%~}t9GX;Q`p~SeLhvYYJ{;n z>$9P*oapbrPx@}mYJ4~Qo{U=$JRsov;7%QXrCf$V?1zE(5Esr>u!b^ndSQOu-jUlS zBi{=zZ_v4tVe=1g)6)xi&%ebhc0)gkdeoW^shJp2fc^CGWM}jGAr^_Thn|bOu#e)dV+&PGXOG@k=tx} z=ImIAo)u|uXz0wQ20Q8rJW}t4zus=H$(_C1z4~{#_lFg40saWwvDw-`R+zwH#oR0O z8aXA#Hf&aTnvEqwkESO9ow^xLaAFkU1=E-326G?ggH6o*tUwZ)2UC^hhm~-cB{cVt zU*u=%)stPO@||>g-R^Vh|LH-PB3Wgpd4;lp&qNly;P(MznquvUpgb!7_BcVcA6VIM z-%d^}gAHpSmrW;zBboD96S?&ALSINE*1E$o2^sLIueS#x9=x}M{$O9A;V}b?h=nY zz#?_edS(nDdm_Q{wN4{y#B#vP+WQrUa_k>5sD}AD9k($GmZvE6#&}!s(|sw`5Cc0Q zPPyO;S_|yZRr8duPGEvuC3`aTq{5n0Z6{yh=RWyUKNqkzpThrR-SBM7GFGZ?TxzOu zG4xc=^Br|~308bhzc4kYW86I5DSu<*(|QAia?EJ5q!OVVPajF((1W2% zW~r{@%+!gg>l1h681Bri+U{PrZ&=1Ym83HEsSuU1Perz|4sa!7pK{WAH_xI}#y&la z%Gf6v`;@s3Rjc-lRFocyeX8MjQpe9UrO92(ge?j#7oDmD-5jaL z$Qr7yG0;_jmm8*S1Ny}1z^;{uZh|@Ad-3D=hv{+`(G>epjDJHP%Yde)K>qE$kI$DRvzk?Nm$u=Z7z7rlMyV?trk9nBBxDKmU@x=+J!78PXsRXU}IFkav z!*d5CO^4%&qr;)ZozGQUTP#$Nefn%-O^5nitNM6Sw~Z8de*&RFocc0#$$hC`u3QTs0hvic;wX%0=rvHWj7G zZEI>;#$c)s)x~f$SB;qt$E=BF!AtXw1D~C#rdJ+oSCpo_Ksf288>qY+s0w!svj{>` z`mcv!+O2B5G}mBF34=?8vXq9JT?N;7Aq9*5@G|2h;SeS-=@Qv5kGU^sA>Mk8X&986 z)rB8$GgWRpFkJiLZ4i+QZR0KR1i)oKjE5O0*0yTfrvn$DtV&IMi0>&%ky=x>N^~ z&ZyW>|37=z-rG14#J`Hg9~4mYu#>chkkEehC=#{dbw z9G`@leR%zho%P1a^`g7;we~({c4udQJ3Bkex^T$4Fh~6RGUA^qwliPC`>nxVj)Zg3 zJ+!QpsA2EF^rqg}yL|)^u2>+t*O*fT8{6p0cvEP=>7-PyY) zGH)Txc;3~_@`B=&;)jaxofr@N3@fG;@d+^V!<{p_%NdW5m_`NIr{~T?ZR&gXj>S&C zrc-e`C@5f65HhmuqfKT(80}V?bkjRseIgs@N1Szpff(M=f~KD1hNOLH+j-Gx-subm z5VRl(yg|3mC*~_UEWi8m@+FQ{GJHw-z~*cU-Db1@h9Pg$1A1`==5upeTXYoWLj?v< z#B$(A*y%HGfQGylNcwJRn@`X`{8oas1EZDL#D z5DH;8Ibtag3M#O}EK6)((j&T7CvjPO*4Vdhk0z*h02JG%2d*ZBiF zkdrRNYyqteigc{Ce$p<^LA+ZtGGFdb%^(2eU}>$d5#ymwaKqM1&~5unu1r7dU?aCs zZNYwSs}+uedtGatYOPl~{EFIJhtt)qV{MCJ5=?sV=ITAhpRkC(i7)XckHd6=Z9D`H zBiEbQK0izI^z;e2zcvj*wy?&l93^}3c_*AqJM=?4d>v-vLGQWOr9n`f&~MUEKw436p$qNAT$Xcib>+FW5uv_e&TIy z#JZ#+q%MKe-?J>dO$Z7W)lt8kAOtxM7NTH?R|e5r1@v<7HX6$Xr=Bn#=!J74!f+(H5TRl2 z``R@`%A3mzWu!Nc5w5X~?x5W>I!2#J%3#oj5AdRG7~n)hnZ$g^DbI_kc-BFuN7(LV z*uM6{J1CP-%(>J)prbsmF+M~B7UzYvzxDofVIOoy`a+&spX9R*!&YoZs?C01SZUWH37bnyb4={+k>A z8~M+df1|6E_{HSEzgqe4H&*vEmw%bU>Rz?n;PS7Ja=MP|KSN4**!r(d0ncLnx4YYu zVt>(RO84o#_6``Z`m0iYy#9^$E6-Ww`4-Rqd&WvEAo^g%BVe!@0V->KzVp8`JrHoQ zw~i1%)`Gh+0k7T!-0c|6si5^+{x?_uQk9=l9vYVZRhfUgAp81GWBs3${ceMjmy!HN zYv0KIIvIV*pUz%my&seMZlhwC5c-DeUO$nq3v>%SGr5-~jeJy< zRlP`g?)#}5&#gJhlL6TA+ZzwljfZI^=eZ)GD!vDeU2VBimpCWjuKkcYdqA)>#-3y4 z`q(AMC2h_ROft#?ZR?}0ZEfqbEzKnUkk-ibt>DA;_Qh+$Fq*1Y>L*R8`!`$yBRIeOdmFde)AmM zqVasF&ux+4)b2*dG3*<$SM@&f8UyISZ6n;OLioo7xF4;YT-1(s)xKK zhP)*@M(s0AtSEBFALuJgtQ0M*!xo&lRzxPh6x)?tx|S8jVa{Q7x#>r4npyjXR~|iJ z)9}?AUbV~ooYOgy?Y<&}R0+-qM=mlGo?ZS#;go~7IP#*z9gf%!;x; zm^8-?=oZdDG93 ziUW~(XNLy$&H_gjf;ESbQeo=J3R67(?R;T-k&K=C11t@aE#aFFN&K9jsY1MAwJu|C zNE-%W`Ff`V>zyo){o?%S=c*`{t+9d6^3!Zmvzr=o5;ujN)NnD18GX(o8$+)rIinI| z1uqA+k7Oy-@^b0TeBf?+2+D&I*2X_I$fE@x*+CdDR&SF(I-T9+&{KUmkoQVU3W6?K zMvfrpx~!RN*^)rJtOj{P67mJC6tWeX!|LEU1C2=M-?Srx(if(seFxSCptD^F_}USc z`Zh8rbeIxj!0ilx)G+`lns$IilLRn-+rAHTu{Q#(iq7WQNf74*oE?q`ym;@;m3tLt zl_b8UpTewqWABp+i@hyWLF{`*l-T=9YJw&$ANZK=X*#BQZ{M0ed25EDIl7BX#sMA) zC7bHF*Kaw9{DMl`wiVAACz7Dw0p8VC(X##krQ@qxgut&;awu3Saw;zHF^DI1GE zq057z5}2v#8I6c$Vl-D7S%LprQgBs0<9>@xx=&Z3N3;{n+Oi{D)iX|5N}1_$8{3OM z27U%oj0ah(Q3gI?BE=t*b|*;Tr#=RB=p^f!7#(Q|$E#@?z2 zh8PaGE*bf@?XJ_9AdS>a+{`NUB$P)}$2O`EmQo&rZbQ05WhKAL6eg#=uHHji#*o`G zma?o%)}XwC_0x4+r|rrer(N_J*Ih3zjOGI0q}7w&%#x^B5A{1u;g~rpXRoJL*kW?X*q3Dc|as7x6qE4$|IH119Loi_{Z3T_EG*-A~p zD|JlpkwPV|353_BIVVhRCtb zZ$Pp}c)@!O0-u*`t*!Hda9miPs{&Ep8E1v0+NJL*C{miRK!C;fVr9pZl!%x}lo1;7 zH7f>L=Y@n4U>Pe6>l%Erq1OnfN}U-9UMP2G*lpf#v?@e{Y#WHS42Z@YfaLDmphK{p z-)E^}k}G!U^Y8}YEf?XjK+SSH>q`;L4M40}97{5f*LWt)yaui?Fcd8?x@?DYpKx5|cX9+I z$;lDFxCgVc8)@9=E)UXN?4FgW=g|8>L~8VsWfyyl?R(P=Blp=4gu^X<7mE#@7(l!b=N2xhl1HDT33y(I@L2pmgE!SZ{Y>kw*}uu!^g zTJ$N^9E(0-MiIkZ?A#syD7zq9^qC-lfdn}yzUY(nTa0TOnN6qjVYk6ZkAx7uW7`<} z_qGqZjW_zBscQM&>WuTR^H zG>=i*JbIPpA>*dBc?NTuXE(ojXvr0tXSbwzVxNn2pGZ-lp+tg3^hne(^oL)G5w5QN zExpt)zt;NWJdeBNJ}lUQ?AK0!rjpd1pBlJsoG~(Ibv&Obut$*;n}ArI@NQ}R1(Mri44|62SUO!TzgXJ0As4e; zCF&hwz47a-;n@6*aKLmzdPbd_k4$>!dAgcJk))DjOxCFx-ceIuKyW;8$)3Xz&c3iH#@t3BSHg?2Ca7 zBb#0UjsqxkARUYzauIj1uN^a2SPcD1-fcsUu%I&S1AeKxhZWE=wzG+;mZ6Mb1ry*a zVP%ECjys)&v=QlhD9E>O=%wA?xZVSd60i=wfG#8NrqDxMhZf2;=@K$bspPVq92WX_ zt3s%PuTlfr;$9J%PsFmzI80xeofU8hmYljMNHp9W^op3Vk&=2kKb@&M?!GrjYg*OWAuoZ;9ZBDQTEGX3u zkbgZ;;?YZH@lwTV{(AGsL6^Z=wJ)A~M07?XzNmV3V7HsuOcY4w2sUQ2 zTw{RlRbUrJjhRbN7Ekfn9U7a<18UMDWH5GcL6w1KNYa>1^-Ky1<~9Or@_-$~HewQR zCV+4p_;CzK>?X9y1j^|^e+I&+C1yYKwKJJbH2Vf3836kNh#3Gjl*bx`I+D&}w_W%*WMMd+mK&-hI2PqOW z@)9RT8TF_yrO@tYxhlN6CQc|UDowX5C^!@I zmWr)l11iU1T1O)W{s^jDJf9VWQuzS6VDnT|!`#QibQ%BXF#yIZ&_JjJG!ECXg~XLp znFb;f1)LHr4wOTBKCaO%f|nX8wQYDanV6tZFd@n(vdKJ^FDVD24DNU3S=X ztZl>fY5#Hc2#zd!#aznShM{P-b~4%uQjDVy=~6|^VMcMNVv*PizZGZQ)vMOFe* z0_LF+;4;b$98|w^2!>%x{Xme{Yvvw>4id;jfGrg#4%ByyI>FVphC~9nG4j|17LbU5 zN9-=Qmt@%(UwhusZWBHpY$+^O=RpYLiCQvqO_(r@+gfftY})nUE<2pPJXlqZfg7yl z>PR>S<9xZT1cnla% z23%UEO){Viqx$x3b40a!%*ziN-)D)LcwiI6Q{Y&kpMkhIqhE}@(JR}!49#$+j?HT< zRp=wlL5P%PQ$x2v%*nwN$;VvBlFH1P5J5aM!+As^1@lN`sH>%&9lq3PnbFowz{=y;(-hHoI9)XCp)uloER2ll?+OSENgc)-bKhOz(Ek3-$)wPC}J(8a&(_4a2j z6yUZHc%j8@7PelHA5VMdv#>Kpoj+}zo?WC{Pz7|)A-oi~E4rdAaTG3te=&ubOoN*y zCuQEYKBhcbMA|EOvMzdTuG6a->NbApLDGTMv7`?l(USzSeycI8q3X~Po=#A6;3#p9 zq5febc9=ocL8I8&h+2n?;1mTrLt(Uju5!Rg-YKKr8KSRZd8dr-Q07i!!R2ekf433mnJJDnyYrAz%EhkeKYZtPE5RR+Jq2^BLUPDP)lU zD`xSFC9$aVU^&MgTqIq!$nng6ct^nF=?~Hct>?^* z{s)bNMlQQ@XZzHGPLN&IxKpX@s>GeoPI}*d+}Ugxq+$dbpHQk{QW!W(g{7xID8X!~ z;4*MDu7auoRN%H8qYef&FsdSc*9D{Q$i_b^G;RywEwpft$2qB~@3A=MS8nx2QCPOo z+ldA~*48m9TfadW=(_e*mdyv-7k;6HXU2yit({cqB!z-UnhT1+|0)^EcWW5R6I;$z z1TjAucn2<5{+6^9qHV1!*^Cygv5fVQW1%vayY+~+w(L3x<%6BYzO_>D4I(r^f~GqWV=2l~B2>gH=kX?1jTw36(8rBcXF8 z)Nw0G=-RGmo&#pstM8eShXl&})OfmTz8U|sceJ~0+rU>5_G8(A#I}^gi3=1%mvlph zEG^b<#jp;B5-W*TM=~V2MFtGmV{EUtC)pi8Onq7uNy&Dqwh>Z^JRZs8@p!xsKiCQx z!Lc2)0)mFcnq#XegiJD6Rprkvhya(0P_~Q1O3DD6WTN@w-Np@+R_h&V`+*b_o#-=B zdajq?qqJaGtW=9%ZpzMWhe_#lRC|VRe6i`$7|l8^pu{P@_BND7^GWVK77_uY(eOb@ zN5OVyvti^tgdaWY!9#8rld>#KG%cC+zKMVe{K$(f&nJ;u_TDTPUIc(1{9w-t;l+>W zn0Y|`Q~3KuFnUs-v=CAwg#ihQ%?c>gO_4h#igMg@ zHn!XhEcDgNzRI{&TGz|O3PJ`wE=Ft$GCq?6iU0oo2S(z*zyBo&zQckpiLyic#T(q` z-Q=E*b^Rr@LLJ_+(;ox*Wkx(8Zk?Gj0v9qvCD{14bmac@q7VUw0Y?R^kn!__64LV% z<|CL@h+;{~2XSOR0@HODgZiii1SktuK!@}hA6l_zh}c3jAR2N7e0Lj0Hy#gNa1rX8*Dz+ay+(0V{^e!(m{V@$R9{Wipj=Wi-$*tV?ApK8ncZ?(RrpM)o0`H zSxn5Pz0#K7w8j@11Sjw%3saTmExIHB4JEPXWNm0#rL;W{O5!*N$p(=?{mr&d_wAF( zzH@xqW-!nrwoFSS8MTwVm~^%*ckx;3Lm|Qj=fGkMK$lnsmw>RHA_zp;MHm@c%oSg; zwu>3S^J2!v=OKD2hpY)GO!xRz<<}e$N~%yU*yHtLtjN8?<&exHSY4EJ{_wV{+K*VE zIMOLEWxAMfRr(1J>sJj}_I5q9yy&~6X2H-xwM)QU zX=quEoGUD9t=c6^+S-E-<#;kU0d1TEKN==obY67~Ern^v)vK%N53eq+UY;wX!_8JQ zo$FkZQX#bQc*_WFtajgABs5$2{;FQ8nWZyL8l&4;z3Fq)r_yXSee&7eROXrSz&Sis z9Qvlua#9pXn8aZx^TAM3I8n=?+Vm+%!2m;O`drVIdQ#w|pyqGU^jRQ<$zZZ+LI4yD zlYt7b_Ot>W9{I0A{>_c)F(1pP&-qx~=&2m(i; zMGHx_6i-G2`T#RIg1@TUTH3Z@q~X|Ah~%RPCl$iyg{u8oE^f~+KPkd#6t|}(3rDrH zw|NRX9;lw!Tca=!{wTs?6rxY324h2^J&=Unptn(!-9hB-6Hi-;93|yggC)1ssRl<= z)1d~t_tc$f)QC>>*L>c{|;5&2#pj=c}Z-iKp19gdxq-Ap)k z+IT0?*!%eAeSGuI;+vN*07XE$zbXi7K;P%%o9|j!a>jckaMpf{tQI*<$@@&Qw%QwsG z0QfDV!_m-D)$g_aeE$WZG1P-F%-_EF>FveU_tV#K=l!-Ltd(v)nm&8-)_7Kvx4l#3 z{qpL3tBAWw?bl953PNl3nZi$xRrP6&-Ht$GwshwyXRNbjoP-Zv1j3hmXvMWqb|T8+ z4MSMZu6;EC>HZ_(udAjcTNq`gE!mZJSE~k3vujb-trokl8g}}+gz+xa;Hci> zR5!#ak9NaR0j_4h(hdokwMTi1B&6y_FH1s)D!`RDNx2J+)ZJM5E&+Pe2==!}&};ZH z%@WL~=HMbdjzdvh_@sovs&u1^k0HBdVM%PoHOP>o21*9nj_U15nS)04K7pS}7(@{o zFiCM|@v5*a_@_Kci}%$WO%%#=Bl_X5{VJ4>T0!Y>4N8ajp|voAyscrah^8D*P+mkk zi@aLls$N8sfzpd;+b^O$y^YZHq4nv=QXS50RTB9z+%9U4BHm6K@wmHt|JnGK6{gzip+@}l{Ca<7`DrOxfZHtXt3BYBPnQF$Xo^fFx|Qt^n`Xw%3fQo< zp&I2hWLgEDkzLwSe+$LZ?yA21nQ;?>Cqpg+)3%9%V76a>-tXY49b7pYM&rBZGX1Rl zopV|3t-fo{=ri^1nNxk|UDvy2wk%7{rJ)+faG5NY$>rfWBRvxD(@_h0P~XZ$oLP#{ zSQ|W9v?p%RM99>eM3bt-H*{-Z;gP z#80t5Q;i={JAh?P;{mjdZ#Q{Gf6TTr$0xdFuCr3gTB(bSa_N36C^; zqS;;^={z|eIWgSC=gT5(wdh^7jdZmJ*04xaBDXb$#<=6w9==u@JK&Rgx56cMM3s`Y zFe9?yk1*t^lyZ3q8Scx=%5zR4U9PJqre74RlIr+(Id;QK%d!eyzETq61tgXzFDfm8 z@Cs|!N7hKIc5V+_o?FM*+)g$+wf2eesYTA&a8`|)zGY7EwThHOWve%NO$xY3YG_iR zcCSg+jAR!9W&UddOlAG?9R76dudV@Nm zqs{_7l(-GmD~KxU)@JD3sCFo4ysw!}I`1!}ryc6*)RJ2nEx8oYaeo$?6wG=G z&PB!fXxGE2qiK1XzD6y$pO#9SMZQuUp{aT`^FsM4=kJTFNC-Gm?WCx*S#v4sXlJ9% zv-#S+_E`Borjb)trBBw{T2gTd{JbMZBkx?5t+ZfKJRVECRngRcOi)o?iUsErT#@6k zSdj_~(g5-02L_-NW=G20dfbV_RAYas4(QRa)K{31lOywPPl|!xH9SuYc$nyVk{I?F zk@gJHN^q(x0+jNdlOsJzV4E1viK?GRmg{f~ttecQEE+gREU%Mm-T5Cq9!W|k%@q|l zB(qMvO{K=kp+$4ZxF5WL`tyQ9Mf3n6W6~Lt_=V@OAvt|m4`L|qCICZJ%4GL>ckhwJ zB-ozI>d>S~%a~?xqCfXx7<(8j1@$=q3O`%3M;KNA#=;C?35@rRXoKY~;t;VZOaX&{ z;Qtie8M5XFKk!&;nGZg6B)p}ag0gXf(h~G4+vmH;UEE`*#fSmtPgqKr75|4J6$xi} zfS33lbIY)NRP$wwpXjW+38+sW_sL>$(=kUdONSQ`u#jUIzC7}@O;C<|)6Q0U-mhZM z&+SncjeIHQ^EpnQsp$UY?bgQk zpPU+I?17hj3ZoB}pAICnQJ&5*>G^rj&rS041_{fyn)Ms!cznUN&RTgxn_#cJZ3z}T zF~edpZA+gLmgdXrGr{(mVEat4eJ0pG6KtOew$B8+!A!8*nE{qy**`o+O7 zKOWe&Js4YGozWBL*T&mRNPfuHJg;GEn}reUkUI~p7jxjhS5#>d8*h#<7vNF+enKN1 zanq-0{FmsKc9`yIrU!Ms@d>soIKj|4J|2i4(}c7 z49(50^O}iF34atjE(m0~fvUw|)2Gq=)}|Lds0L7d-5u@o72ks6)f%!`&b_#^RQjD5 zjhcGC|H8cyD}`t#H@%FjQBA9?D8jc)px;`QQ7v)h!3~M7MBnz4qUs0f(R~p-ZtcM0 zn!cEML4x`@B3~bwb&oame9txDJ3F{*fXEzs;nM(Re~Y5LrO z4g1{NVoIXh^{#9v{Z8G=vuvjxn++ml>e=tq?L7OPx{c?S?bKZ~{=3OWlra8F(;>m& z9bDig;q@QSjvVLN_wS~*b2zY_5ng<)zMLLDTLw@yI6#A!Fc^Y%?BI<2dU^P2nGEN6 z*}gcqyn3C!w=-oyl|i}AX38EJ$cctVQ$K`$V4cmwa|+E+IR^w3+^_A9r-Qm_eJ0Xa^K-Ai@&q*WrJ0!yc9cjZ{1D$ax|P) z{!EN1ub*&?n4JHQlu3Uc&}!x!h{-hG18)!OxgdaU-~x zTknO`unlW6GsVKrwcp(P=)z}iLjM(Qg&U#?1AXZ1*A(78 zn0wVUz!A@O`o;~o*&CMj=|S(&dhp{I8qB&BQY!qaoK#uiU$t8FMqk4qVLEPP6y0NFLKjbNv8z6_)~ShI*(0>lEyY zZCSlPo4h|;IkN$z==&Ofw$ddmD(BZ=Oumz)*uG;Nqcl1k(D5d^m_`a0N`zBvk9&#@ zKz=gkOV=SbIUl+&*&sf*_YZdf%kFU8o%`8}Ueq6!j*Q(SmFJkt9zSYI6X6eDCa{w% zh%`t7+FOpr101er+O$-oyWR%3NTu=LS&)(8MEX`~1ZK__)Qx=DkY+d$x>iy>&Y0FeaOhXIM5|0Eqq~cNul8aT%4lY$_+aGAjdF0;O7<8Skxiu0yB*q+tj( ziR%Py%KnDO<{_e>o*_d?1{PIA1fz<5e`Y)_Q9f~q@x+T2c}Lo?%qvY>(tf(dY&sLu zDY(kAp|qBLt2CKPdx^JlxmZ;1(Q3fwDGv{#W(kiqRGcIJ!cnuCRP#zO&T^Yi4#{J8S=z!7a-%{YDM486CX!WMOTzaB5nVi!jgkP9Xo!2FP%rP<`ekijc$VQkrQF&RrJB_ z2n!)UpGVC-K>v+ZY4j!qDZpgCS{jRocxwo^dV5 zn>k}2t(uTQD2EWqKsmG(I~apE_9bNLQ!DPhoa3}JP;?N-fRoFEP|GsnfW^yT3SGMK zG44%1lfPnT3^>SR#qm%#J|=`r&PA>c!%=e}tn`wU7^kBt*TM>3NG`rqndG>6cmnDu z@{^c#?|7+-=)x7Kf#f%aX+~XIv-3B&<~7p5W*Hy|;9+W5(J2Oan5xYIir{M=%Ql>6BE zB8lFN&heb~_)7>Hxi8)K7cVfC_b39gkzvE0D5&_m^tCZR1B{dHAsa@farTLdaL>GO z?z~u89VKZfszqd%a0!Il6a7KU$1PajP}WS-eSGP`olx3eXou6_-B7*sIX3~Uoo>6 zO6)ed>n8C0x}S5pY+^NlyD7cV30VQk7sp4481<$gcK&=kZH6$rEA&_$6rY?%iIgZ>_KU`aG}luTkZ z$W}M7W6=C?=&Sqi;u^*t{DvNT6`@9%H^#XTkF)SLdc#q7s_=6x>?l~+mI#H!c&A|u zFP?Csf{*6Gcob9pS*kJTavI&>^HlP~cot1nz`-~3%OIpUyK^u0GcAa;6X1=kNVZB$X5agH#rcIZs4j`|?l%)j2o-?@w`51j2zwb&e6% z5}ISRq;0`{nx1qmoeS zFCE8F!fbl3%0kxfOaQTiF}>N^Do~O&**wsP%p)T zzSZYIX;GIGwR|@T3zNrq$r4(ZX53D~T6v4?@CQC^3$1tEK{LOHJU$EqHgtDT4i+;L zy&OlA!{B_f*woh&WKWA99UU36pc!a{{#axbJexcljiw0C-Nki z!%Zj8nw;|LbvCXZN+d8eRwP6;+4P0y2HNC@U=~@p=;~YxY8u3R% zM&BlwTE&iMoL1`Bn{i=Qso$cI(yjw`hLji>^RXxIAjASq?xVr_ns*}B>l7*)!QxtY z^F!~unJrg#__3qzoM(?9zDizJgU|AP-Bp=$z9}r=%p#dNW!J(Uzs#?QZO7eSS2n*R zGCxy25nC|3A6`wP z`DA#0Pf2vB6)4hZ?3m9V&>cZwHW-oqhaX}C@_S_)Saul|;rrz@YP@s1W$X`Q5ehR$ z?KZl0Zy_VRiYRqjx>1#%MXJ_8C~st%@>R17so|OEG=}eGT2lK>D$P_*N;t^5HBK5Z z)Kf4clrIvzeLXuVdjYS4(W!d^gwMYvuR86W2)3o(h=~-x@-^`ZVmL>Roe+t0-EN|? z>dz_A-3enLzeDOcEvB9mA{{O$vHUbk1JD}3qQQ5IM-QdSXU#;8qwN$5%4vfVnT>V1 z0CxZaoO!w`ZP|`|K;v-={{wN`aaw|ktKHKG3rT=;USTy2z-iemwkMngc-zir!59FL zq4^WOA27pXIQ37qzATi0!S!UqB?d?1SPl!PI{`@4z=!p^Br!P&Nj|CvCyu6guMvDY zUVPz)$XAfNjeP#KTb!5a)#4f_?~1Prr=~&8N;FrMhY4$A5+<3zi90W#bX4Xiv}I;< zT_t;vYv>x{7N>p)0=dlYL{9{wWimbO+BKh5i`H&ujly+~tzq*+h#?+{Yk0K81DJAX zbcj*OmBp8Up(R8Bdn8lf&+6uvz$5fh@-_U_kam{9qqArV9{sF@hb8OGPuZGOR;&fk zTnDPu5qd4^2yKhas}QH_ezv27=qaYIEyc8J69rd|(fut(+ip9B(a{Pq+M21w2&1vy za_){LwD)9Vy?U=iuMT{n*``!#XDZJNjch2_OLgP3PgboHSI)Imjnxj$iY19Br+X(t zPT{8{WT0A1U-&7B3iy=1NQE;Cv$!t|q5$1eN_KCdWY^M<^)=)Ql{{$`aC26HB5Khc zS%1YNi%+aTHAY02U>~rXH%MMrf;OBt)qil;ucqCx6hCG z!`&O=KUYE0@(MNgh5-b5zd3?<6TJ~~s(98&A6E>7dUqb33()F$qh4F`)iv?S<$Z5u zGIMLPEcuAmCCHXKc~sqk9@m1j2GLjuHcHymmd11?u~PX`Nnl3@N(56c$cvO>7f^~{ zh;nJ)lBD8OBZb*WmJr8m^xDz8U;oqk1q&HT|+i)zF{ac=4NLefg*ckjd1)41P_* z5Kn4=&~PhN10kM}1R-M89C}^@&ek_o&o`wnX!p8;2y5nvz{(H8YIN9y!3tGcONBn% zaeKyDBuaH;MH!o;2U8$StfdN5&js^shsVp25l%uQHPzjGB~2CAfV{eHuWv|VYZYd5 z^rh+~dZ<;?CS@wor;f;jMCuk0Y3lr0nz?N}-N`=lMZ2laZ#<Ehgm=pKm3kBWfzKiCLTPaj%X*I@;{I4U|q_FA9- zb+j_mwMtdWz3A=s;k4B9I&u+3#ooceF8{v=RVzRf5e&{X{y1$x`eQs@etiH+ao8Lq8cO&Ok5p92!tA&N~ ztJ37|Rst{swR4os5-WYFny~4aMr%_HN&FKd1U|RrXL0 zj9>Gf+;M`LbK`*??F(c@Q>4e4NBtPONON16IKV&#h*=1DKmH&o2gD_UfYLh3>Z)Q$ z+c$_TN_MDW;j+T32M3+wK|({{>$v^nntVGzpNV6bH7dzD9`^MVZf{jN`kAfvci~^9 z=wRzJ$*KEhNd)SCg6ycc0=7Fiu-WVbz7GPZ)N1FekuA4}yOk1`tEJE#94e!sgxSZOz`6&E7^-Se;$2wpMMKY7L3jwg&yy+RH1Q z(8{3B0!ke>wG|yX;Z3Wl8P~FC*02RXaEtoJ%;N*Jskb|K8*WwKYAyzv%VrwnwVmgO zc2fSsR!H+)7`7EV9*5;}L93x7)p<_vNsTyEDlVUE!3b_9(RAj+Zu=#SQ(`&dzBhCD z9RbMK6k(ZXAv6v9j*8R7Ciy8-R# zvwpWHB{N6L* z&`{lx$5#Bf?g78}+MD_#EJ-QmsX9MXBckcDmcMUR?*9@AB}=Nt$EE0O6t)C^`PdIE zhC1@2PCMn+DRbIMO!+CT!HHY|giaIRAiG>OGZ_^5`g4^U^&k~btAvWYK_t_)<7L-9 zu;tIXfU?TH2}NF>j{Lz1VS8&D)}2LnQ=u`07G}{DJIjZ(8lTD6H~C^0lwg|gOlIi# z{QcObU8mTXtJ=T24lb^7DaKJmhqE%BtlZGFaSIO*bb9^$E;pcyZAsq9bz2mPOf*4z zVw5z@s!6J3g?&pWb^w7cgRA+JN;q>^g|*X5zDpZRHR-O7{0Zneu=NI3DF|I83(#iA z-Bk59)r!rap~YA$qX&_UmYu1AyCB$Y0e$vD#Uy8u1^S@#lBTYViHFyi5A|tG4F+(# za6Bxe*jAZnoF!fcMORXlQoKGz;A*&~6w3AE1qho&=q`A(xt|g+AG_#}GSmM*B0*m3 z#9oGvFHt1yWj-@CZZf|Us^^jKhznNbKVP+7!&KdF3e8+%M2|yiu zAByf{9RM0fDiKqhYD83VZhZ8f0CdF1fSp3%NA#ytZ!G)jTzDZK;gEiz5l;rH^bqyFWbt@)gYWjkgno@eH>gFjYg1$0%7rwO}%oKwrP}-j!MYH;4X9^)S%{lK+r9 z9?#F=tDUBT2|{uAb_eiJTm%qIYyif1A%v5N7LxGsjg1z%Vm>Ni$tT6fUm5GidK;cFY5a<{r+#7$ib{3??-PV2xCcY)-lrc zS^+o1i`juR+N=1*vTmJ39OJWtlG2nkl*-arEf>4p3cVtQ-W|ZpHVnTG@s#Dvcg?@7tNBc(!D)0 zS9%s-iq~7#;Qf6b2H-+=g7giO-t-DOFN$I%>irq__yxekbJNLTh?CwPt! zRaOk*v&rotv=KW2d=aQ#$9iUET?YQeGkW0 z{=O$rI8W6!(3(3AWf!Xn#d3qt!E@s{wsNLOeQLPLx4;rbx6qtQ9P!nBB8-{x1#IOX zW2Dr}2&S*&y!65dn)IA!qgx1Az}TwKpm^}y3jy7x&PQGxTp&Fs3q1drp1gSVLjx(J zfa!ihJ+#DfuccW=*%-BFjjOP=u z2F!1U(t%_OC(pNxz!dN|O``l-S{N70!3zN2D`ubZ+v3)homQ>tEI8EJ`|53YHYizb zV0-+1NcljX77Y3c2w3kG>}e32ihEhnb6aeoc)v<_xtd2D+Tjr;ykX_iyomqH?A-&Ayr29fB9_m6nU%&LiIC&FYhQ#H^G?PQ&%;Hxl#?Ah82e<^ z!ioHVx)j705p?F+$6w;lFMw7-AMMf(4Dwa?r8kb?y#6fezM7#P7+qr5Q6=1&MLYOc zj)Q=Wqxs00jJ+AgM8;6?6$e#*j&b6|b*%2!86_#0h?uCCazQ2z{_Z%0TQLWqKLSa2 z|B(|->D%F>juQ(Jg=ZDlj)$9VH8;PHX%UhW+u=os5jm8oM3LZX1!YE}!qy2>CWt7O zMR67!`tE{R*Z`Z>E*bLEJT^YT39`lRvRWrMtRV*-wa(*KD4aLtaH6YQ{ZK^pbspeuAz|?(F-qeLkP<%PEHbQ_@XzrhshI;HC1#+-EX7fysG{ya*HEZI^SI zI#fJYdKApViCe6$UBrK#aB(tf8Y9rQBzZNC9 z5m1%Bsk-hjf)Z^XIQByPFyM#eN_9j~qqLEBJ#tZOB3HuGsY5$PL$s`B#9D%KM51k= zUB++)`y3iEl*VzqN==qe@wQC_3#S+KS2N=a_8ZxfRu70)4>(G3M8@Iw)s!5!t$jHS z$E{XF{AV6E+cnE-H5UJy=6-xqjxDQ=*s0_`PsZ_V@^IKU_haL6EC(`HIp=v&ELuCEVUXPVq)I;saa6KSN0zGr>>FiFF0c2D6)}ByPL{RuR zfR{H@8%&~hNY!iPr+^|fyXAOCJO?RTgJTDWX3yi6Qbh8!Gp z&+af6f&p)TfQdyKLC=S=x+{XWv;Y#X!hq_m?ks7HY60~(3+<4Ovpz?6jVMC#OsN^Z z@`5Ri5`6!}hUNHUZzjJHW02ByeP=rY|1}Kh9EzT~A@G5e2rHhRLu*pcK+ryTVf^)p z5-bMTlT%Nwe)iq4;-z9j(;~Q8NdLNv}V!EQ?^v$9Z|@AWK{HILp=@R@hZ(eM@x8T6%?lL zS4k!~%5p#of}+q@D@plC(Q&FeMtoX574xZHFbTa9WOc+erRL)xF*Zj_sHIS}rT%S5 z4sYNWv9);8yExzOBG;z*@;h=-R83K4b&=BoA8;|4R=f( zdO`bbeV)ZHnIDQ-k%a9t#SU5tSRGZR$hQP{y3&nB0+&A0ZS71&8=H#O)9xE+B0{9D zSSXY+CEMK%>@(Y2i?~gi8l>G|RGkQVHcLcCcD2m5xidrT%n&;>L|JBtR*7baW(8&l zc)c@4{MSqot+l3zW-(L5(0>!u-1g2CkzaeQPVLdY^Fr6KbtOHIu9pwwk z-HzxWX@>YlffUt510u9c|F=?zR40^kGQm}30jo4)4 zZRBE@1~WSQo?s!SC#h0U%ak_3XBb!HN>8~(B62Np9Vr9fVTnf;mow9P7tLDI3t#K0 z1rJ(U13|<}hQS=Vw?X(w?OAzSySk>`Mn@eSWDaY<*88yJhu$RL)$Qpk-!}odEknfu z5ST*W$BrMvMCf8P#*v8eWOO;CpC(UShozGLUsz-=AJ;)#t6P>nstO(&6Fc1D2IPGoNPGM6&^HT2sA`qh+llr8|{ za#I4f7nr#%>Chq>1wt1u7>I&}xVWveX25BZxINNy-Zmb>;K2=Nk3dfBlZXBR@>+(7 zJwXV^+bcMjqVMS?#*;*~~}2yaUgalt0~G2(vcB9NqbOJG@h`h&Eh>C|D0!CZIVOiWMW2y-iP z*>3woXJYf*B$wz26z6M4rc+jO{bdPZFy?=eB*nOav+bXuN>n5HNp}NFkr*wY3&40r zAK{s2e0UKHyP2tkGu#u9uk?~eLR~|GZzyapE_~??oez=}KQw-k|LU0!^)L6{jlU{i z>^VLb-!$0{5Ec&EXpSHbZeVAMC#iE6tvhC?UvGCN-MZbpG3yhj*RsrJZ_;dz zm+)7s2!AbWLvlmLXRq_M7vwZsz;K#QRum;k5-rK-@RAv413K1a?OH-DBj^)QZJ7j# zC=^lVqeD%nOmB#!&u`w!W&%@;!)t$yolqo^IgTfDYXKl2B+r)gC9XmT$Ea5ZUv1Bq z8cFY8&&NbqG=554r*xWz)}&ag>}xPY3zrvCt7ZBs&SLc0lGN9ng%k8<{tDd+#NIJg z7&3uDxo-o1MHcPREj9hnK(e9lEFCcG)jM+V9rppR*zz$gmJ7p&9H^X#aJZv)Q=n}J z_4*smz%|@UIKT||_>c=c)j2uZG7qH`RJykRRQf_k2K~gHF;hS-=1osM5V$!9)o`z* zO>!c(W0_QG7m+GUO^t{s=e-8aHi#5W$7UKAvfL}!)A<28g`Kj6r@a5wnuhmQpujjz z($*|sxv-4%L`~H57HpEt*_UPxN;HKT`}l;ZMkJVID?3zC8JQe)0zy0;;TL@~35Bu_ zt^q@dAmm7ZRZ7$${+Fwa{dFq6IXZv7yX24ot3s2|GgiBZFli5G3;Wg-Nu zLvFP^erarZ265RC@Jy3MgKZybx~Y?iacLOe1alM!RGY_xs!=lh=E*>hLs%o8i+R$6eZG_#%(wiU4VpY7p3w}1jtQMMWu06G9SDeMsU024AHseH1M8 z&JrEWCmpP0?WPQv?#wa{$Eo%Yw;^l_#%_^6O$2Vm58 zu}Ch>nzS<44k3gJ!77yp&yjxeps>)c;2{XN2Yc*IVY7|uE4^Sjcp3&jN4NyIHmF>r zUB*V4R2f#m1U9xr&qC6PCSedo3yYM@aaKbC`naSTdX|hA`CV@mc?)o4YT{=S*1}Xv zy%d{%!{b9^Dg!?$%#D8dGKlaHpI{yQkx1-@3&o(>8QgST7d%aDv)&#I(9~(Q>-MzIFlgVyMaNkW@Qp#1t8(##N~u_d%GjS~SG5VCFe!JGXX-ix@kDu+HP8 z6J4{GHT8ag28I*9l^;jniDvxsT~@Wd5c^(}6u{vB`QuMiA@9B0yO~U&CT>p}`o`%a z?+j{&$Kl+lpaWh60@K^7nWiaQQpXZ#tRV$Nwv&j1?T1lg=wJFk7m=%=(HLZ)Er-S7 z@#JINwp!{gLh<}wWVSW_`QxwG%iu4-*OVF$!-MlA>GGdH{-*8&1jmaWrnZPG9QmXH z;@jvhm@ke5SS`rxct{7j^KPLPtU2lPfL5H3I zM{Cq$p1Uj@s;)hZ0B1%F2Kbo09~%~#3Hk8ahW3mYMzhg1Nl~XwO=OF<(vOQ@U^1Xx zx|`KB6V3WG07(plO}A}g79bhidWcG`7Bwl3yx&V8|JfanFncsaU(>uFoBK3@$Ci0i zZW@AkqdJ2`qw>mQBb%q->dV&<>$zx%@ta{h6%IWlH3&9JhfuIcWcF~6h6?~#wPN*W z!OWg+Q6D={y#1@;e(+1=H9$>4;KMz(%%S=RE-1sjLakkm&2s=vv)C9sF*gr*SV$ev z-eLy)TOLaNT|4?91cemGOfy_*70^#nt5HgYVkp#Kt^HYzRP0Zy>t?#yUd&aaHmu3j4=kB4#fg>i9y`C9Yr00}6oP34r{s!Gmg==?KxHnPly z1^;(D4O8=|=Aijh1N72=js?eR4ou!tScyGF6ZRC%F77EbFGRYz(s32(M)2hpV+l** zOXL!92UZDN;Wb>+Yd1};-PwRo{u}E-4t@Z3X#W@ZK@w>d{D3A*8a&&7)J!BqiLl`* zt^KaFyp{ysyGQlWo0SBfM<1`>E5oP(EErBo#z5SzGND+V_;jxF{lY`ydZy77d=jU!w_j`SHef2zLm0SB)mNJ3G`)CMiTCsnf&|!lCi! zp-YY?<>1D1+fr=jOHPNWUvLOkPEQtA?HY{Ut!eGlSToE?? zlrr$yjM=mKjpq;HU+AKzmFD5hAp%nk_+aYT51Q$(2r#a+`sMH0Wc<1Abf+uZzY+oM zK`0!(l94gET|w6`cB;MY+w(+FnGycZ)Iwo%3`#2}@U` zO@e#TTUb-dFMVF!GSc-~!+W_AxdME(c|fYJC$F%}6O!w{u!yK(+Nv=u8WmM6`gRx# zG8$@+z)d9hDI*9sp6rLe7YW4e>B_t&IY&$8s@wqs+lAtCQ+L6*yI|b^cQ9^Zt;vSt z!sA$_H)`>DBlAJL&^Xpdubhdn*8q45r%4 z$|50v(zIRXh=)bG=dpKt>xRNIYF5qrIg<73WaNHNKg5JsxIFvx^Ei(mq5?Axf*+15 z3wtdo=5=kzt2A&U`4&HIVlV*VyJ8Sleg38s*t+JA#2J{S*A-+nR#s#M-fq9!t_pD? zf=VY&y@#v?$#K)q)cjW!>5!cMPPiwF-3@KyP#SvTffCELZqa(dYNlnHP*{N`-By@S@q{44tU8=8#Dq*Z>1GOYJH%o* zj!;5c={euHUYcqcLmyBvY2-i`Bdz5W6+?9Sxhf)OMW749JUxq}!YV7!&^rYmhYsiz zKG(osMnX^#K;Y#20awpXrx3P(k@Jdj^(Mz@+bm%P9p$i0_n)iICt zK7Tpx?k{NexZ5uiHH_arejNAL=33eU4UFaf9Qx91+x=dz?SNV{0f*ah%dXqDJE*rN z&0f=Pjyu-CIx2VXyP}0;{-I-w+2jG7lCwM9)2s7u)c*GA-7O;lMb{{_l~gI6jAHqS zWKO4T0LV@p7Vg9vr%wZN$XkP6q1LVStORLI6RF#)UHOofj%YHqqe!8l>>2PN3`%hO z6(@9vrwn)Q_%_$DI(h>h;u#T)(sFDWm}KkX{H)nEd-d+=#aX@GI`7p_27~kZX{Xsd zJ?ReGC+8>nlWcLIXjzkUZ~synXwNSTG%uA1zpEMc%)57kd0F&?8)PLngpk$E(1i>l zg?+wL1`#+i#?3r#>(9wVu=m^0AI?&%B0ZWV);WH}E0=ndSc|yoEVYiP$63*=UMl&$ zy3jh=%jL3iliw_ndHgCXulP+7S;KXg$q9bPJf3~*`Ps*5-s0z3zTh{jX_`y?j$h~x zef(a;WR_Cgp0=8Gz-p%H?ln3yqjM|U^W(;_^e$x^li0@ovRU_7+9Pp0@%_q%Zs2^l zg~fTik|3^y zursWcupRDp%wC@zxe^o1K4Y0RW-AGj-+v3`i0-@dpc&iVbX8r14PVU5eg@o&j0MGU zfel4Acy67z12PqigDjZ5nVNFIQ*=&Fp|swgV52ac2rjo7-Mh#i@aCHQh{c+SUsOJI zn(VM;8ZcC<0hz~lw-hmh$UF4aT*aUsO$nI;p=|-o>uIk3qA_7~qO^Ivq`)Ofa z(w(T=O8zJBL%mK60WCR^i{m(>&e4g8{U)yo>aMBuf>47$gKk$B5y=iVK!laZFfVG0sh3T8Nt1Wz7xq#FnduiY@fn*B0z`dlhgqH5pxUipq1Y# z%EE4;!Nj;IG;; z_)rGyK{aFUz=!uho6*Vr!_re=28O><1+dO2iIO~L@zK-W8bf9r7Z}pSS!|mt&$t;Z zKdEg1w%O^V;4)PsU=^>6f8h;L3%!l)v)ij4{nT|33n>Beo> zW>F9-iLmiqp?>7M<^x2M2#XfPU*3&626#3P+C9DQt#Kp&>&XKoX=!$}H=mCRDnPY3 za47w3sG1X~vX7LjI`cJqgAc9FNe3?77+lnQ7wumC^c3#kxaf8Uy;ir~?R1+j@5~pJ zvM|KJud)!x11IDay}7;U(5fuZBB@^de@dOxnS zALE4O&>?iG5K>jpx6l`X@XWzWNo9h2^AXOCeqCanj$ySr1GB4_t@3@nV{j%>*998e z#>BRhCwOApoY=|4wr$&-Ol;fc#I~JGeDl8dtGeHx9s5 z%)4)|un~D$prg8SU+c11`a&usq)b0|UF|QNnD5e_=^+$L(aBsDKQL}DNrL38h0;gy zgzB+$v$>DuuvC|*gKMgNAEA9pufJYTijZ#1j*yftr=mmoI61}j8`;yDrW>!{!R!gPSwo& zYnTXrMO8_`8UfO`H&S(s$@jy<<12d$H$btP-3kG+&C_o+o6#Eii`X#N5s{Alg2$$o zm-n z`pvD{O{3G;ks^0DzC;O5y4M5Lh-44RjIjU08EuM(1>KYgeNGxP%2M+5FPCe?Zv${q z3(f76^InjR;EBcTjap7R$%i|3H>@5$-GP{9|JRl%aMMkfXFvcZaz(w-Nu*P4PqxMy zlE1+7+3rlQhRvI{4so?8PE3gmW$)lk#-r{Wf^Ijh$=P_L!tU=5LP@n3Z9R9`IxSsU z0?wYW_R*uA4>Lfk8k@HeVf9y`gS`X&(8#$wo<_=mNN9(6dbSt!*b#%695&6&N;7g4 z-UI9+);2s88z_kh727_ormvi9@3hC3?g)oaF8pxdb?9W!_<(V3a7}gKc2(+;}qi&y^ zQVa7Hr8rPt2$cUZm(=BaMcvJbGO%wVkfw2B4mN22!GC;DDDbk6+hqzO^ zGD0)htXasoR1Mu)UtA9-RmKiSmbmIS&eqiUm>{Y92;W~!$u?bQR?@58jX!DFiPJbE z<7FIP2)7o3B|6({Jk5x*X1G~ONbR4k8L%C++F0JxI1v%L3@A5NYB&)rCRs@Hh7qf* z^;m}iCLm>^JT1H*deEN)7s$L_R|d$)4L29|v$#*ZZ(Y;34sL+f&6gtCufzGqjXmvC z4t9G8Im*-}oVT~G7+k=wOJ>U~94;X&vhDSy*Dl9_@d9K2J+1v6j%&|rS#0x$pDa*a zgpw*Ua9!M5^0#w(cHvr8fSg$rCeM{02TT+3 zmNy&WwT|gnz3lv1rhxgA_k$6=jJCtDi4D`)(PEZfQ+FJ%~PB36Usr`?a-jH7?T5E%!%1jkLe%`dd;U1dWY0;SB1h!3jDGMQp{?pv*`5BRb zFG^z!UZVFwtv}HQna>XIWLk8wTkDU0MYE>FfZ9VoS$$$NxPKPu;0!&Su(}Xt0Dt9@Mj|f%U#^n{r66Da-gqm)z$@O zK)bdOPlC%{`6T^l>6XA(I8#nZG*2LnG7qQeEADa4D!U8VOB?$!D(3|Mmi_0iL>jW2 z8`QQ@iN5)f!hc4YBXvV&ujt^)xg7j0b_3=1^d zB}~;F0Osix#1j))2@K_om}0& zmoDOaQ!qn5KfwwaxV75W+F&$DYY2b|3T|ODh+c66L+6LZ6AbS4GWn>jWh!T(;u42O}g? zHQ*F3h74z50zpG)hJBZz@;d@&klSh(VLLE;=7HKv3dgOT#Qi8MI>M|W4-~s@)<@a` zZcXR>D3CjDrclCyM)pnqXGg&)PnhtW+s#brPVQn8qrXyOxppZe`0Y?Y>-2iJrnjb6 zmO&qhyw?Cwulle!y$esw{&R)S;^#;H?axG}aHL`r#eEai9tTy zCK2na?OmXloxFLG{s|gfJ#h0v*4ly9<^1wt%yeKquZvl&tL&I59YJIW@wNZ8gj?GC0!Dua_$VE#zM)!zmhM7w$>`WieZNq1@OoeO1iI zQpc=^hK`B+K_6@sOU72qHUW+2^(-9wwl3QMMND;&kS|Qc(a%UGw95NFCer3Y`4?Dj zzh4@Y4*NjfUs7g)5Y1O?4ltAt9G_Fs|BdfWX-!E3RPdsT7*|}aKy)d)r~-yiKGJxW zOAd zEu)3sXinzjCB5UiF*k<@@26Aw<$LM_x2ZyW8$PK7C@7-F6)LD-sTb*T#febWy)TEZ-W!X*!0kLG4q z``88z@66lt{-l^p%shw1%72YXQ$|kLjMKPWY3M+$f}_seCxaWfHA5_ACBn+t};}=vcEra7-jAI1ueV$(dS*; zxebY2c(_eF$bcv53OGQMVdf_0k%Mst$Jb;J#?jF2iahiu&B2LNK=SnM-qbo5mz^Uo z5AYmLQi(Gy*~KL1ST)lfxW=4<|YXcJ^b)rFg`43r>K zUTCQItG|1wFa&$Z1^B3-0$hvSD5n+K;3-Z9UG0t7&r2~#+>dtO{%q6AMgMKJ`4;A` zvh@%=Y(n7N?`pW!XFk4(OtpTF(d+>qeC_&?>}1fOv-z5q=3+6SzbMFY_(PM4AjK)) z5ouD3_PDpcJ1Ysbk z&9LWQJcqVvj5Fh!0l#$6L zZzXaL;BZ7l`H zZ0f$_mql_n?6Bo~r6LO0TY3EWr7wu!ZEkhY>Rp(U7uSEsbOG7!`Jxm?l1`x>`Wvc_ zmKSvExOI}z049f&oaln9)?yVYH2W#fN%eHr5X}>L?|}g=^n5`w!j{#Y)k}W2_$&0d z7=hxoD*X3PeZIp619ltid4BYUR^%r~tDRQ!_Iq3nN)4}wA2*43pdLSx$^k6{FNd4i z)(WoCN26%YB&~Sd1T=(k#~ZmtTCc*TYVb#$&e&vidu(5`U`jlI8d*}&TFdz~*%s#s z86+|cPer`)n*fZP>1jJgfi4^tZv_0iYv^GKg8$Vg2BW7AVM^d8Id&Cn~;!q*i&`EykJhh`)QN;(ShL{wj{&-P{ zzsrwG6dqdMQd>S)%`3PSXf*0V{}T$G?L^Pj{j@tVwDv9%y~=o3DIeGo;K-}a#z(Vb=u^O$gyC7bcJx04*os%wG3=t!qfCq5G{T+k88oR*O|AJ1`r@MIzS-0W_Y>vr6L1sd7PODKAG$Bk#5d2(H_wD$ zxMO4q^ochzSggw1GIb=MPg+9$e|FO15K@RnplP{gdfB%2{we(m$IXIVme&5{wjS1Q z)bk=CxEPtI)jVlh18R*cYtTB;9R%nNaznH1D7{Pfg>KBdhEJS>3 zMq&8ca=Nmn>9+ew2O+p~s!e1r(7=sPe^ciEq3fq{FX<-6^wXy2>ntDJy=OZK#&`L8 zDL?C}ffx#%{Vr#t&ckl%IG>1gO2ggoiSA`^hdmrkv9-B4W4k)lq|vhB(km~u3p-Fg z=;P-eE_a)^uq~At32`FqO_I?(DS6oCD3Gpz;wiJpw8-k|qQtC+5t4V~nW5Am3Kqd2uwq(9hgD$01*K+N@;FM-c zHUDJ2_LlF4NI;Q$ptSqgL&xyivsO)c;HqAgB&}?@kix0^KftA&m0PvJBN^8*o}l2- z9Fu3DP+m+IcEtU-S!m8pLV;ASb%#j~rDl|q@Sv?{8Rmb&ri(vdLyf>@aV%Tp#y z%I9jG+bRgsDnIEri}=R8z$(^iRFwp^)V5hPVAe-;K}c{#NN|`;FSs-TUyH#~9USg3 zJm}Gd#v0!yILUnRGSR&8XOl0rbU-_>@%6%)t0}EE?ew|3GG+MRmPn_q|JyMAA6@C1 zw+Si18t6*9^v#k1Vm_~hI zuNOU8M1MA!`-X~MRum2^G8%F5WaFr)F<56T`Z(*F3Wjh?;qq1F08Rr$%f>U2U9V=_ zS^fqKD?Lo-SIL8v2r*A$;n;;#ZC}kp@mgOYbc63<;lMCaD%p!T2NTN8hORuNWKSE_ z!#nZc1QwW`nuAemfwQvc(;s?dpt5zK*qLY6v7mUc^YC)|F)FGiSt~NN zg;zkI4%WeX;)~M(rAo1Rar8?OtI?dnVq`Z^yYcQYvS$ zVZ&daPTXY0nN|<|8lfv9>sx&>nV$(0!fMfs9Jm5jK$#k`2qNB(As)oenst!nPs2Z^ zkait#$|#MOmQ!%U%KhN5;B8zVa_s$7>3Prt=0M*ktSfl2Xf0Xns-nWS;Hoaw}w1~x15mOTM$2}$Pq-jXbrQv{< zf{OjZ-R71Mw23z;$(4=L6yj2yvKH-W+?l?Q3aqy+Gs2RL{_Fsd1* z3~1#*WTroFWUiMPG;`EP5fmju#KDj;;2o{mvjo37G3~(rl8AS0-rkqCW>T#GOC*L+ zme4L~-l4lVNTOG+XU>U^hmc|D*ZkYlQ`o3BYp(xt#zob(q~^=g{hAf!$YAtUnu0$zDVNqp zfh?9SD)CV>g33UY(2sUFlP2)-zLZ$9#CF%5cA0zI(xsaF#!YMM_?z#!rTIUx)P0lJ z)p3zB{_Cp^O^QU%-3gN#ZQSR3$=%6JW$TzJP0v&5ggW(l>||#Gt4+PMS8V~^78~v5 zl$h4<#-3#5-;GY_65oI#^}8`exL+xy`-n7xg3S&6j2SGaVf`z%JU9n5XhuL@~BjbZvor&Mom(|cnBdBkUojGpK-%l z&rW3!7nO}>w7t{P)}`RzAurwKv~zO0tBnk_G98P+zlV-HZSM*uEyk27il*sAk>`hDZV`T(FH;8Y!bC9VzsSK@$;wmXraIAB*UiA@}ax4f!n{U28)26LP3+@ zZG(ML+4r?&YI$M0AHh(BVH}-(6ay}|JU1h3nSC*CHTs+em3T(AaL6OW<;reD0U(jT zkY`%S1W4$%l?b4oIW-Q-$`{FNQN6rwK>;ZAvt!l3-#xEu41?Cqoz+}8X)Os$6&)qX zIgU_0O_QZ~h#DSFmXZUknmSYM35T6XbTXTNqndOe^UK~rFz_`8>1?HaW9(ZlIVb;a zg1%(BiFo6(Z-YhD3w40E-{g0;w!26T!3jyzDdO`w<*9NbC~OwBD_)HPCu$ZSyFwY% zAUdRY_YZqvXf=|ZZs}R*dr)1w&=UjYyQv&hRn7wT2;RG0iR>73{^^)M^f}fc=*VPeICMFStA3(EMf>NzWqUUYcmQEpL zk4KJ=J*VRbXriu=m|D3XzoMUw$CrDOndH_&U?@>Z)rn9C7^70{jZ1!+UXoM;-G#2f zx8o{dZ$691^pj-`$<{^I!x$3nUf8qAl>^d2^b{_6EygTZi#Cu&1gfKD5>^9-6VZU~ z{7qz1Y@~@I25klJ!Q~&s{;slw-DS2r4mf>zD{`bWniv2FYm=7X@Wml7Dv|0mOG#W1 ze#dQeOVTX3LKP>I(QK1?_Q%NIbA{gB;p|QWmotf;zIJWK=~>~l@x!ryqSYg-_f1`F zo?<;dz$?DQ+OJf`n1r;DB`b z@{H3;raS<8h)9j4dhCD7p7<4aTeyL#4|NYu>DYV$HjRZ>)0v`Z0ErC5KC z^_yh}=+gotIAmgkPE9jWUqmu@|EX{q-%6MftN(G-4D2yOX7!sP;(Y%sDPAjtg#^Dm z%x`>BPN$@vCVc9xia!Lj&Bn9iZBo6CJG@Ly^XO6?WVh8Kqx4i%Rp{a&>~`LT11pA`4;c>HgU0 zZI@^P=YhOoFAo5#L+Wj6b1EC^fS-tYHpKI}VU4$D$2@ZJJlSZ?4Lg(5evE?G+WN)g z4AwPAh60QB8;VBIpS7A=KIE`oMY7dsHjZ^U;a6xo2{cSBsRc!jD{lb@>@p%u;|{2) z2FyYVHFs#>b&qBB(h^I&@nfLJ4o>hQI$^ExmIY=eFjuyaNZ&hCo*qP$+xz`9OCBB1 zggc+S@D-M6OYdV55U2qdHul={LhAJHwONg#;+l(_r4$Ydz7@|2R~|iZ^f*W9kD6CJ z^!H%+p@>apk1f;a7?r+*Ejq`K6_qD@=_hF25r`RSMyr;e%px@Q5o0QG11&iWySs}_ zDLEfQdsSUBn=+jGj1kl|d87WgXsxF+G(>HPlV!{^?&=Mrr+-?qEbY&r{EL?LAxXDZ_S^$&OI2D1KU^ zPeZW$+!9z}g}aEhyk5#L5jijH8sifUvG_;G2$92jL=p1*sV?@A^I|uAQdL#JuSx_w zDdnD@X2?a>|5Se5U#DVa`hru!+Lv+TM~D2VDZ9~I2n|TA-0QG@h z+5O2A&o87`+GpN~*$js5+d)Tjlxt^U#)Vwp%AJf7V8YqM!|I%PBNcA3 zQJ;bM?q6!<41>hY6R(0Lzbx+wstfW7d!F4YUsuh`%QaYePFPZ2dM^Z7PeX-MTS2(W z7l@L&N!o68aj*wGPgzJ%tLxax3@V-sp3#_plwwjwtt)gqOe0q#_X{f@)JpjcPO>gs z@IURveK{#znBzc`2b+1I#eX8mN*tVBPVe^AU88_2i&h<6YMd=auSjQ=hS*!zTWcCG z%j3H0E}Hn~eNlJ&{RZ!RS3NvjXwaXjo|djg> zyJJNM>HN?c{3xBIgLLi=W=>eu0l?>0G0r)_$zEDG%eWm(Q({~Z`qrLY^htwuhld{d zPhYRTOAkeS{oAQVBN)3#7qa~LF_wZ$bPWO$1&};6VLCPmYAnG8(MPilmDg4j<&r1fwN> zJg@Z}Eif;9FlOIiaO4p0_OZ~N)E6&g!d@~lGdt2OZu+EjEBaADOv?VX2!|6t??Huj zzr?p6+~TVSFY>;OJ>6nK-mw2TF?dA*_L!)~k5Dd5W{m{0?&faZ#YTuQ7HAn)R?VC| zhCEa%M=ekYdNgmy-YdsTQphy1E9A6-|Js=xfKMZ{2`Rzei+10A`Kvf&hvOVaND}Q3S&eM%DftgbYq{8vWW+ zK^5QI)RDkewH4WRp+Z&;N9PB?2OGa^zUpw3%wZK1QykpnTtLX-fnGobq1RhG_btu2_Fkhi{oE8+@IIL7xP91D*j>9_UT@Gme&t5B)}4VU&LG^u z>XG*_QuG1}JFS+Hm$Sy0u)~x2wQu6VULnSJzdV8Hsm?5^0TXt5p*z&96sw~Pr~Nx zVOp)>_Z7>{nVNt&u=NfPda$KOJ-R3xi66CtE$j6VOr%?%#fht!g9GbTB)-NQv6#z$ z;*1fkSL_5iNEz)3hS5aM%^q{wE}YD5F_98;+L|hkzcx0syAXsbWjeZ1%Co^^f7rO$ z=6jKKRB$Cq(;vr)mei6;6esw?LhkRJAyC!)GrG#52qU`wTDhdsuLwA3(>uj19HlXN zr$voLWlImq&YtW~0QXOol3Xagt&$|V!x!(Q?LggKv0`fG9Og!@(Yo^~GdQ0cAx}$emAHR*HAghuS{!D%zNE0w;qZ{*>jPi@&)AV=D{j!5pbXh?Tf=9=VG=gt}{P0gms z@H%!{1OR+9^4!aNHGle6*z^FU_@|Lrr>cE!6Jk5HJQjm^Aq zkn^vj<*jTB&j_A0NpcsT&grmr|I+fQ_u z?YxXy9!Ig_rzx@G19Jn>aHIITr!^2f*BEP=xFSGGeaJveo>J7Xg@sQJ809MrBivN2 zy5-K3;7I+t!}eZ0^$vG0LJH1uTtmj9OozC`K)5XhQaJ(3+PXhIv*oan$Kr?GC6=LI zg|d_Xia+&M)rB}kHWN4eMsF>;cyFr#s4(urVv3Sz2-0I!ES1pSwkA@59cjcw`k}hb zI2^;Gx^4KPneTBl!lqySwh|~;nq19!l}CGAm+Or zY|2X&2NpWKde>y2ZmQX#L6!+0)cX!Pc;3dGjEX+zJ zncG|s7t~Q2X2#7B@q^ew1RY6y$Cq_6F}3wdLSgJ0Yw}Mr5*J0ki8`vV6Qmtbu=%Wx34Inc!c!IURcqEei zh&Wg;BDrXOzV-g-sq5rGb1onpE@@K*}PD2dOP(WkG!$=@xW%m8R1DJe1DT zF_U>|wjR#lXE7wlzBk!fsjJaiMH*QGom{g!L!`i_H-q-oIX}_uVLL`AI6ZcoeWzLf zNk7|v2lCH8K*=f8)TqMzd)e)zi{NdmMC9?x!od$ZAB(R<*O;xzT*dqI91|^A5cy$e z0c3YF?@n(i`v~MS11tF@V98*L-|;<-x6q~|Njq6^2e}uf35=$ZwCfrJ3oCdkKa>Yp zF$5lY!0{Yk>XQPPH28RsR=CI!Z}!TTf&O41We;Oen#qNK_EmopL8kDrp-Mu^P)gXF zccticB(|D5NksFAafNY{8A@cmk8tnNfXGl3AO;SX*AXVSS-kc7jlGcVd~bp`#Xxk2sI{^Ia=X(Jw;!4j$uz z)dliW*wP18cK`9gLQujp^c2*I%&ioj4DA z^(aTFCYnWtFw6tq>pr&=dlJquT5new6c*;2m ze=?SVIkPIKMx#nj-Vsj8Vn05+y0e8~>R6+?FMJtdSo7xzT1T;5K{iW;IGrj*b|dOh zc>>khss%QDCs75`fuJ;@t`kxvE4X zA4rERK?XW{yUb5)glu2d&+zH?I_+O@E)40)bQ`Jkr;}Yw8LSS8&*Bg$Fes*lDcvr( zZw)9Qa8)zhBxh-Q74mc`PhTMy^~M|%h(n&bxn17yY3N@p?jP$l$4p=G8d&<-Ik`Pu z%!!1$NM&g*iSWQ(vc|xFM^_HheMoyYx&CNNonHwILzk8lM!lhCLSMTxfN6bVP}3ph zqrO?(RW=KI@)wnCa^~Gn<+LA?`R_?&a3N9#bB>m4OM~~mxVPB`Oma$cPHRSUUE3$F z>q`-~UT`tPqctw@4g)&@Xm?d@LUjQwI%aStp6xmi(HrRkhb0sucmT&q+%3IIIlR`7 zKgU*9GAvZ*1qOrIzJkFYkI&gUHD>wV+7Gg=#aqt2G4lIUG7;)J3Ahg}AdlL1?-rK3PFAzl;a0m<#5D*v;TJ0RA!|nGheNYe(Iv5ZT-0xOr7c)y+ zMteIaXB$IXeN$UkOGi6f8&g~7lw_d705eMH7u?Q=Vv%x z#i!d3h_l6Iv*_Frx9+%q74&kIoM-6@MtLjKXxZNmZI6{^tQkdXo%(9p?^YDul?DeT z-aj;tdv&fmKC;?@WR`A}y!M;CQ1fK-qh4g0iGYslEcz@!wxmc!1h4?V2q9HT z-3M#IO&NR7cz}8J!VqQOv8To!r&nv@wJb$WS)}LsY0f4K%2Qy@b&0Xut&(;O@_zAyj)h{FUL6 zl18+@|AeS00}3Vp@_&s>ONc#6HxVcZ?jJ-DG7$3bk@?R-{9gnCaWXY_aWplyFtjx{ zb+dD{Hv47grmxJ(!ob3yEW*NQ$HLo&5!^M8GH* z{J#I+q%_~fFuEr)Ni_ii;*JXgg7<$T{rY~D|C7|&(a_lX|Az~NEYbWwTrQzA`Tya_ zQ?2>$^?!5yKMU`FC#ZK0`u|;q|8Hrj!?^x8otIa~|49oH>OUU}{QH#suI-15Zvgo} E0A8*;4*&oF

6vDWMw)n_=_y51I^ zcsg~LdDNlU+wO@?fi&2O^bSPMzRSemaI4aRi1#6Z5B+g%&!sSZiPfb30f$p-Nbu_f z?6OBr*iLa0sUbIPnI|-~-M4g`B9uYBl%N(`0v~G?*F?>cYX&Jb_d3DLs(Tz^ z8!LvAfG2&w#reiB>MN3PD-^H3wD7+!Y}TefZ@|9=1{yXBKW4WVo;gAOZ)$`;g=CE2 zz+22%rJ1o<*&`NS?`HeOXG8-)nWE9V+jzx=SJ4L{*v0N%H}*P|+7`8|otNJ6&8(VP2v0 z`~`YBwFB=!=(4+B1bCG&o{nPgIuyN<25gjMc^AU-t2km50(hnreR_4`7Q+*J_kA%C z2hK!?aX^7+b5Z(r?Jfc0)+XW`@_6yA`tl9ZqQYPCNq1Zdh-xSO5eV@J*Tj+i1Z5Ue|o1yk?j~-v@Td479q{dIa;3&y)^GJ*thc!ry znu4OaKvHUgqQ9Bv7epscED;jK? z!IMyEo1Fb)>;#4RWZ*<3HR)9=;9@C=E+Qhiz5@mT%-B8iOHOu+hS~*{22DROYP)2q zj@y)*;z%e<$tk)y$@T<=2OE)Yc*AbCaL(iiYr&f|y`xkQoa5@K^qaJl@Vz=*QHiLKG+O(&ERb1rZJC z#5~Wj%<^wp5rVZS9pp^-is>v_aEsym5${ht0_Un~$GXwgH=4f7F?32vAAm2jA`EKI zMxVKnXli}x7(MLoGUQfoOj>6gF3Yg_S7E3Z-HcI)qmh5I>>X*I(FEboY068LFI}2! zT7i9|YLpEiXqEKH%sHHmf(BNo7$^_Vm61dAC|Qb^w&+!Ug$Omwky%V6)0pI63dA^P^_rNp^vT1c~8s(^t~&9@n236%;7EU^1>nENu#~i z5MCLfRHC`3Jnckxpt_UUm1XushGOAO^rFV8v#tw3=(T%4lJ?!n)(s!dTaPLY+GbEzE)7_29&TcHce61#q0RwlyEWZjpz5+GHlY7)Mj&(XW?dZ=wIX^ zRjWYKd8J9IC$rfqIDL(YshZ-tk_pjBd`=%6B%Oj?zjrrMq^~ z%Fm}`w)&yezYx00Ms*q$?G_F#NK=IfTpV)aM0rnk#H3xQ%)U%t%XfVO1;)(s5-= zXKTm~6_Qz6Y&`D$FiW?^OXV>^hU3dJrZ<&N0|Z;?L=}~b$yGgOL>7zJUQ87*tSB^_ z+O)?zm?a4iAbIsJ#!OLP)NIWbU2FAvJsw$+jfN|_EWe5srXYz?GT7iaO4iu}_dw## zu#y)Y=dWR^Y<3sCM;}zGOED`9JX$#Ub!1p*UH6`3;A_!y>M+$^NflW>fyfoNaUp(= zj+d|5BT@v#0*!XU)-qK7K@L$3!)}EFfxI0-IC(W^D!7#!%gO$p)Dxsemqy|7$KfO) zEQ5=#V{}wAKi#zDY_iBa$5?k(%wJ|!7^%lxbd>DFN*lAMv`Gr7WVqsk*3ItSH^LR@ zjRUr1xtm+e29o6Z<9<16u}#DM1phAbPEtqqn%`48($48tE};GGRH3|yEWrDEJGXOi z)(~BDoY&?yF@Ko?)BoCEf4XiQU$)}*5M_fMo+!9Rt61R93cy+VVJO7UuO0iHB!=e$n93>O-*|TyM68o(^z<(T@#0Fw#Z=InX>;3vwV{w z&hkeE_dBLUGsNU<40EgAOHUnpwx+t7?qS8_Rn`6DBoIo=ghkwkOz<|f*tKlQga}Tm zxJvSNuEn*CzFTNB!;dV7Og`D>FPtk_#?6aIiKRQ-3eJt2xbugr6OKW_Ycm#f}iT_K=5jF&&{NwT@8DszKFa>s9wk#dG2Wm#>hymW_Ms*?)BJTx5|` zz6upK6O@M~uiY(aNbpnB!rk(wzj_qgVa_D}su`q5C>v|J89BGExV5zzSOa2sS3Yw8 z1Cc;(zwK+izUtxNMNjLywy8V9?oW5_3JigF1$*F7rXSSNJXywbXSGD0@?;*PA9fH3 zt?)}Dcd6x99F|I1l}7F@Be$hVBX>*Gf~s_v8ga+z>z1qfU9+beUEjlMgyX4qY|A$c z*VjxW&D`=31TWot2tuBL;MVS1pw3pMQvLmBD(&6U-rW!?w7t7AHpGib6?=wEv9+a% zJ#UiOHs*a@qGYKIUq5SY%2%1L_2^(fHgj3z&HbOs=hI|Vl8IaQo3CoKUNLX;)dGbI znUgi9#*oQdPf9N?d24+`wJH@Nc`H{db!_PuQ}2rF zciiRgu|)Rw?DXHz99!j%18NY9FYE>D8)d(tsur8Ulzz+J^_r%-wv`(Y?%ifvxI1K|~ z_^(v?j7yy+J@~{5${|reD+EXcMQ)lxL@)IKR;d3SCvLjE54TS3^wmlaY{#f<}yOUU^l=ZBo%@kGw=Nbw-&cM5OLLp_!7Xyu4p>8W|b z#c@nLGQg2c$Qv5LZF$2N_l1 zjeIaoM(uOcWJ~X_7lYwLVbCea?ShPd@uZu3Toy2Xnujgv|MuOjXNf^P>sjHSjG{b? z4Ts$*NOJyZRw5a#;8{_d|BwGm`L3zi6S?8%d*Q`E=`Q0!Z_p0?yL(FhM3bL|^ke>s zP5Ohy_nsyBN7Ie#;;)Jw?b3s#3QVOEo2?j_jbg#<8#Vdi4EDCmAnu!f%{DyLKKfCYqIo}~(jH_DWoi>_w zL%$a{WJ%qmL=ciMI#bA}p73`Rg!wVxQ<+NOW(Ba%Rr(!`<0nCQO17Mmbh(5X zOUQ+QRs__F`t7Ly<91&zr*a`ONbF25Bktc&@`iHwqqne=c|!uo9+nUP{uu8jL2hV=Vrwrlu|-V ze%Z4ie|gHKh(N(4j=kY%PBjzxB38_r8*^TNTz)q0M!kEkjW4{o)C?!A%_i*Srw^F_ zGNordI@oQy#mXhSLIT#R6Q|s%k$R2Vq{FHqbKG{TUUg=e9#wD#p~@4&JAx3>tqUX9 zH=XaeV@rMOc7ud1!nj#k9PM!@(t7YWBnNkUn{E9HA7D~PGOfU(h;{-|-%!i>bBx&b z4CdRVI+c92;b1xn;DpJM=lsO6$o_oCY7ln2kmW^rSjL$xmc2E?ZZo83i7mroYQKB= z5>8R3TzLE|uN(R8Cg5d>h)hFr|1s{(0WU{)ZWgPPon-IuIpK!-(0&K<+Pjj;AgD5TfRp2QJq<-#0#?;%O)s70kBxr`Wv-rUib|)}MBPUNqSBcmVetwGp`JlJ{zniNhV1N~8r*mi z^^=|E*xE0}^f*6CVOmGmOQgSPdI4#OZi+@Jyv{J3P9XANw5N#y2ATm`M62ewM zq!(2XZc>I^4XW=O%@3c^3n5z~uGX7~t2HFzYD0*)+Dxv+)zz9^VV#;o>~gC@oVM!{ z7P^#FXqlDTWxG5nYD0*AAi5H+ zs}4jz5W|Ss#z5}x2l8_;MmLaLaJd`E8?IGqqXU7NT%0C(qeE~8gEM5U2)H8_3{|LgukfhyR^$ACDEe?Gdq?on@sl%#{;KJI_ z5kwge%NPX_MTFgENG!6tE*Fb<=C2zpveJuKWThdo$jT66k(I7Q{H_B%3)8+)+`nEY z3VOrTk%J$tHJ2CUynWI9i1T?g=i0iP#@D;%$9D}s)*UpbH9aeSU1Dl8l%CZY4SGrN zi|E%x^5<_L)CcY9OH`LNAe4|HA#4RiUPlGtxc+DFNV^lafqzBiL)-LmnIj45^;jTV z+63|f>6t!1VGH7}v8ioxbjy4F8U20zB^_xjV{;lpve0_jOt37CMx&Y0=osY{VX`Ip zVPUc*x!*9^lH5a>Y)KvnOtvKV6(+9hKEPy4^1$HgElJOzmOHW?FWHwo2pHa%ys0PK zlKT#qY)jtMlU>REhPNrOipl79sBpR~SxnUI0HNHJEGC_|zc87R?K6ZC%&|RNv(3O= zOcpZs0VW%puLu)nzW_`O|4YDRqVb9_*+u@aFxf@kZN?;%Wfkq-nWyU6>}?wT(XPYttGq2`wf#_+I- z+h3T>%k~-0?j?6?$zJkaz+`*#6=A~c7l4W3e+igOH(n7Yd&wUbCVR>I4U@g(J%q_# z@`1p)trzxaxSnARl2K-_Ay+VUZ0Oi&?<-V4t-%&U)km0~_m`6?6!^YpI( zI2_QP$-aVQ{270B&D@b~xr|&g*QEpIo_&!UiIx$=_G+YBKX%cg*7%nFV!0ifx%sgojv=4%5aC1C)eL(M}O{?^yT+d7v(# zCScc}h|WyrF+G~uVZV==>oJE6$F4_ujCha=bvVrOpi^vEWEK)If zFuXfLEy9K)?}@l$u{u00+jtxqe*60dGlAQ#=oiBY_f}`z8ycQO8I}yh&-<-!IM9jE zvQbd%JV@g7K?jG5*cNm*b>BrK!W}Wq=o^6hL9$)988RL^%cH;^3jZ|?q+QC7B;1-I zBO+`L$R_+)Hqq{=1!BeVSxoF+xKNOK;yp?$?>!B^@`a|LYZmew1am1to{dOYfFi0! zQ35fGU)F_Yi$)KrrwR7Tbi)cO3G&wNi!{lyg@j_OMLv+GG2?|OB87g@C~t`2VeeBt z!~1E9=aO0!SSI?*_4&v})$k0E%s=1_FieLYU1)b|ST)v#dW*Nsk> zRIi$If{z44ry!0q^0DcCe%@?c)YVq?vhnf2`<#4wJvPAz+PcvX?9Z&`jz>JukLes0 zR*6gVM_8jG7$!M?NADRKF^Ahrlo6XS-SDvBi~+>b7ZH1PMmTXx&;d671cVHU%{AkW zn$RIAjuCPsw<#G>2V}$;QOlbbb`%1`4O$%_xoK5zy5F>~n?E<|m{{^P0vQu-i`3?@ zCN}Habx4bOoEFj+7Khiur~~7V?Qk)q7PMPqydf?fg5vS+8-}|NnQ;cxrlvy^u}6;#w37Z>VfyWTu+)~elRyT#FN*@6$i`c7B9Y1XlNT>9OX z{jDg^HD;O->ZAwbQ~6T0fWyLrxu*sTN6;;+;|3n&LA21R+r3*VJ67phP^H!3E3?h$J3^*2|1Ypv-BpwaRKkd z@tzRL)ph%-aozpt8DhSWnP|eMjF{sCjMqAWkp{$dMslULGSe6sJrnDX8bg%1ER5mE zw(l(a0bC&%-fHLp+72JWNOL$s`9Wc7*&Y*4A?l!Eal?*SVTW#S8^>g^S_!;_%5Bu)&1$J@r-_znWdSPVU1F5y6sx~Vwd>AD?r@s>+Un~ z-dKT)A$W1NkQwOh@$tYRJw9>aVmA(s>f5HyoYYyWkSP@5*`W_0GOSKL3W@J;ty}Ll zg>u6;^e_Rw`m+iD^v|X0-+2Lhvoc38#lt+qMX&sm5vAaboZ(=Z7FQKBR1oJ!>hyM$ z&^zhqCKX9#kb4r8;trG>DS~M{>6akM3*KT5;SC3+X5Y-cz*nNzBBkbEFMI3F z?S^y1uZD*$)klzCTpZ2feD(8rR%F4>yEnKW>-SxulwO_}9er*LD>JJ6g#X`^t%~WLW?7BvUFB^bA!><&1Vrl}h=fTsY02PJoHA@UEv|zTfal zCRGhkq}L(95+R{Kw_!H$mU=An{pE2fqbN#7$*aZN)GADqmGz)Jtz~_XGfqZt!KGBi zGuJeRd}R6o#_CJvQJs3U-fgev1E8CBqh9FIV!m*k(P*!dDHZ#tnaZhB$n@z6qouOm ztDKae8&{*8+*(_`gjXBAfaKWyF|XItPKlM>&mFTzM9C+09t(EIiaNpPTq6Y1o~&2> zm(o7UzF`AlRp3^8y71KILV3`L#^ppB)ie(y&KT;HON zWk-JSU|$TL$=?Zew=eLs^1eR@R^4V9AE(RaU8ZX5Z9`QyD7)|? zG=XLVBtrwdixJ`|X2oZd()2MXUCxS6oNk4VU7zXKTkBakCh0^KV~O*BMHOM51l8|C z7h8?)_L{gsx$PAX8aec*KewquxtyK;?2!iET3aEXY~vM#mP|Jr*i)!%ijq$Jhl4R% z;(&UrIURnY2c;=J>7UXP%jC<)G*jv+G}D8$Ohq|9IW70g8Y{E4Q<}9B9wWnKw_}vp z?T9t{|KEE21`=_N$q1Zdll=N~rLs?nL94ked*NcVY%1Q4Kd;CAE;Qtw~c$C5>K0?GR(KHP(Y*Mv!PLyl`oRiW9B@^dl=7U%KZ@gxK`c^@_t1&;zFY$5g zuV3O5_q+alA&?>V8#qJYnNB?=SGXyC^(MT7@!$3m%#B8+*4hS)#F%) zjRoT5k71hDW|{1>kFcH8CCV1}uYttFiW-N1toGRocTf4n-p@LvpwQzBLmdh<7^C)&D4 z+WNeOmY8?@t;f7)-M#tJ+W)1;W8ONk9`mz%eCIRzP0pCyT5FRqVeU~r%zgbee1Z;A zC#iI5?3k&u)Sc&z+_PNn{d){^!Qc82*>_o+KZb>_H`RMj*#^3K8m4!Pf4&>Jh2 z7Q-Xtxn|zj;n5x9XtYNS)5Xx3>6u@jAo3~fDHA214-yQE=L7LH8G*Bm&eIX#h20*_ zF-E*HKo6(1g6JQNGBPa99785jvxhvUss#Zm*UTN8o|`5QcMJnN*yD&=x@sEMJC_H3 z0I~cGrvZdIW0n?q;GFUFFu23p!Rg^eso;=0xGR8wzwt#(W(~YM?+I>4h*ps;i1X0bX41t22RVZdMZ=*=M`Ur=)A zu>O~ya2qn;+U zi*`r+uC{pm8vhDe+85t9>dWfuTvTJ$*{Y^V`@1yxp?ckFw%(>m^#THh(xlO;RWC${ z+_E|(tJl?V(f%P#TJ7u0>P4D-(|r34wB)+kZ32GDe~B7}7E4djUe1c)GK$zV%vz@& zTR<45V_XnmJ0rS&dHDqY$fxWvOA7g{qGSvCymA!O(Xu%nXeS2119Z?2c?D}Ys{!k+ zV`X>NG3u;|N3M0k9*UTiU*4xMw&je+!KB4fJ(TD4LLQ7?2Qq{&m4ZXe@XpYIpv{Z% z;l2q)f5oaVZJn18*1-Lbc!P$Ho*=}_S>s`kIZeSs2I7(Pp8`V0hI$@??)ebo8NN!AR&(&vr1r z&voIMS{jq~U5=T+?dbIw@;&$325j!Na8zZ<>?;_M_wNmTGC?lF0}9Gyg6v#tP0INN z)@061*drV65P1U6VML4}Z}z7na5(yg$&NVxY)eq8jFJWRdrX z*nJEE<`J(^R0HFlSt5OD>6QHYenvgX1F(CBTX$^c8kP_V_DI@+8UDzdK#+!PYQZS} zp=}`~@ZUUPq5Q&oU%Mug#bUhPnkuV(Gd>D|r9QrUn;RX@w+IS5R`J(q#^k$GRa=otzURfkpvZZkH5gjjJ;APdM&x?y*yEABfk-Oi(I%Yu6z@NqLm$OfT#wDrr?^(o_1R}|Sp=VP_en3> z0|7)<)P6oNSjmy*4DjuQgB7vc$t38+X*X9%ywnqEGI z%P@Gsk(_a8)HKnL4X^kK%iD%Ljw~rJ*pd?-L?Y(^!5v5aKGS#&Js}*36KBoPem<+A zSj=z&p$k`eGvbqIyq!s`+}m=x55)$i-J_-?h*zmm$1(6$o(Jma;&v_^4Uj5JM^9Z6 z7D6`S0r2)1b7JNEhfDGDi>TxcR8YIlm!%`Rv-rj#&kinl38sVc-H^f9f!$-9fF7{$ zK~*<|?wko>0;h@_Ys2#kosm`d4dOV~b*T1E^sc-E2b7d3MAgag#deN=n)BmbgC@kEk90)T^< zeLmacf_%Z(;nUzjZG3-?8D%OjtAom^C}MuIMawsm;jxy z>Hxg>-ZC_RhU1N?c}cZ9!(zd6bp)-wW*GK;W!q+&@HVp=W*#2~%!08% zTd3d7E1!|i=slUr0yswc@%F1lV#qJ_yQhZ9T|qf8nbhN> zyu9dScNX4v5f9PA``1hDPJ3U%!iSHMrzN+gX>v6$^wQ>XGJW*4(7Ul7JVY#*yK5fA zvtZ6hQzLBwahj!LPR#uRFE8f)4RUzLT_D(z3kQ7>?>(X0>MO@TfBg+8Ld8DuuUHda zG6Q=nWxxTp-BZgGXxwz@rb;@LEtFTx8Q>2_7Ly@2_^E~tY{!WQ^_G`K=P)?`feWps z8K|i%JVVzONaYo;h9~Z}1;B-;$Dk0C+%W_*0L4rr_^iip1sW_YY?2XP)CS+$4RKda zE3hRRHA7U-)9DNNgW=)`h@8dx`XC2HA2UH2A|6`?%xo+^#{u8goci6Cjrg!+4{{1W zThFfEH|W{=)0sd2=c`q4!Ot^R5LYb~e&Jt>?eVYrS2x!ecxSe!?_d?NFtdtS3hv_$ zDtyzf|0HWforauTlUJDqvCxG(p**YHE9R*=Opb*?%xBhSU5bKCkq}tSfl&oc;C*>3 z7Po+H4-XI7hho-t206a>nEUbaqNClhAhN2p<6)WjcOtS)~4vdYZ?uR#pHqRt@s#VR%;cUG!X8Em!1 zxt;5-FP$?P;|c4gFd!==Ogm@#&R|GJ27|$i3CYf&Fg@xRRpxzFDO4N9Vm_0vzo};w zrBTkjIV~xflk+_Pr{o*?#zZuV7uvm^?F<5mp%phIv{Vq3htdzG0aAptQK49wZNvxMky{c05t~&W0s2zUH;} zW_ioDhAjD;dbL_SIjv=CmHeAbsjd_eK&CpUAw1@a-B`-7Y26|9i|4t_)rwdKDuxNj+`(fLH}8@LW~ zquK6D!!4VYLto)QssA52Ixn?Iuy-)z{Z#J_Rmo?SJp2^$FbtIT-Ur$lj5@Ljx2@e1&u_PliaLbfKv4bux`VrIIhrjcf1qySc8!*{ z>8?;XSkG{~mM5;yQrD-D6`#cCnH$#NYNdl1(01E?|3B1%FTbRl4Y3 z_O89TQ5%SV6`DUfy_t|RHh!g#nbh`O-Cp8M;e$K^6@zI#^^*kJqs zLt-0L_kJ@0?Mk~^tyU{QX>r|I-bdO{|0vQ><;iVA0N#n93h*Dk~shr0f1HCq`IcBAH=@|NqyypA|yi9zJU8Eux z!E34o_fwlyw49*T>IBs)@Ti=ECT&r!X)Uqcg0~4Y)Wk@xtCMz9ekq0<+k`Jg5bmUe zILgKzv{7$T`PfmikJcH3zKaXP)9O?As>l!|>c(f|sl|ee{q{q(n zXTjIszI_!UhIt#8oEArC^ebh@=ET!tdp%UjFrB9$c?vQO@)RUbLFR`%1vxMEl$#cL z3UW{6-Y5fZPeD4~1dNjBAoIj<4)UfqqG2I~J1Mg~N{t`qYMA8299K8#le#DVi1O}7kxx&i{benDexVTk zm=^h-N4fVr_#Ot|!^jW$9>)A6qqajK-^17wxi`vy+xIXYEr;)5GhKLs1maD>u_@xZKK+E~>DVA#;6ZLcW!e9gi~ecqlxnoN-=QXbULzYN(V!I!`E; zJE52sc>Ou8D1_(QMVV zx`ONYNIyt+C@gfmR!X6HkXks52B~+w>%s43{rUipQWbE?P8w31ua1vDvVUzXw9v=7EXoT@Ij!(Vjd+ln26>RmgVg+x zzw098i6k!_VDMFqi z%n$iKb~aqu$8ICF)kg4uce}1>qTIr=h-6$7C(T+DN$qM?#)$7@mnU8;rO-S`EgbS7 zl?SP5kO!$eNX-xVKK8uSQ*K)1``CNp_I+&EMy4~jY?p6lr^4`N_OQeEvXkP5z3gF! zZ)GRL(HV?Z?)|djaw}V^)?{vZ8IWyeGevSe?nWNhB|-3Ww&hxiWh^FHzC0*Ry0Mf( z7uzwEGF;&~R-R)`gFMH|bFBFx&#}%+J>{lFo@3n;d5-lpFq~t3=<*zEQrwVZedzKW zYck|H)?9FzW36$s%YZ?GwZ@gW8+k;R1Xr`G4_%&JEl;AcltLFmIR2gDta#8yy-DS{ zRdI&A3XY5Cf@)z$FfCW0FT9)!mM!S)f(s;yXWQ6hMYr;bvboq=)9z!>P7dc!-Gpwg2uRkqMP>@N= zE04&WVoLA@8Qu!p309B?y`Z~9jW$NAXqm?IlGD|kh=SD!ad7qh9VR&>pV!QDTwo|* z9g2Vqwnt^rkm2A3zs@68K2NN#X=sRMROCXNEgQrSh%SX^_)nb8L{*KKWmZ9&tw-;= z`Yg`r@$qstTNImO6Whob>n0^1)3yd25#tHHXHT(9yXxJ7vd<`(wn!}@T_ZEb)y9h_j}Ui)Iz1Qvi-tY9rgP(uxb%yLVxf~RJC$POMq2Hx9g7Ww7p^EpN~u(xc&8*Ixmp+?=L zm9WN!KSS?ZnD4h}4UXm6K=K}1OWwGo#b{m75?WwcIdSLj_G~!0=Ig`sWw4kG@7d+W z_+ghR6_|zZvo3wB`Vo3|VS@%t5?G}*Gr4|bpI{e=ptKd8-ltFF>p{2wq2IY0_6IkF z?Vb`GK=t>-@k77Ms%I~FW>LR_4I^M5Zyy`Ifq7pF-}&95`y5$2&V`9i$F$%DHy$2> zTZA}%{T*|EY+jtr-RBG8JJOVpC^u1yAa|o}o9T{2DrGuMPKOOl+{|hV7z2qpXVs$C z^oYJ-a9B32$})*J^yXyhrLLI;H$ulUT?92fL(d6Fo#`exRvWpN&8!ee!A?yjn0IQ- z*^>GN)&Qu^#EUqE%q&0zO4>>{I2{cMtKqn&I z#&l8x4Y<#Y$?e_Xws$xDGsBpnMog{zzwXk;|GQ^HePN79xFe=>9qKwZr^I?LLpx$~ z0kim}ACI|l8sgj!1u*25;TX6eZ0J+np9Pt3pJPRbhN!_@F5F}0^?x(1Cj+a{nH{i5 zYzvl6C)ECI&Wx0a4Ur7%dgfSklZAGK)qbJ}g~{jtSPVf*4gb9DW$4$SaNx6pXeh9o z;h;14lqY}7b{X%%-7o{+2h;K9gc)XG-{o3muxN)&F19eSJQn9pZH!z@d)X9#3AVq9 z6c4rzNWZf5H*3h!f@x@ElR-yK-t-KEwfaKnQHwwzr=z<%I3gV`OtH=GpPip+mZ4(% z?DDKCR%`ILjhN)rj$Eh|Tn$N%vOnF>!za+9Ahd%Gwcs{wpA)7CE=I4p zvCU%Q>BnJDJNC)W!$dme)0AtGt8Bo9tBu}?+z4*jaLXa}FrHQUe6_?3nP^G}Qt%{F ztcX8#MXHY9UfkVqKlGgisZ!IVrYeb8Yc)l=T2)0P$#qd_AgNt%)~l^b>%~_}%G%;O zXIt~*aX`41t-C0<+=%`F_O5>f;}w6uZpfk}NupF4*G6Y?`j<64S#L*`7Qer^oj?-P zsa-mTJ|j;55Aea)*hMN>a(6fYsWvfLs$H#4P_0sJhzgptMY*Q6#CA)niW+KSB-hnR zyD5X(*D-n-nL97Rg^ho*KjONIkBFthwiF7=Y||Dk|2&Se^m-_CI9AMdViKK91aPKvdUs8Hgaq%$36 zt~sNuUC`fd8uWERQ@^0UWj7@9Z0z^<$V^=R<(!-K(U`U4O`xj%?fRxSOl#FUOQ$tr zX#5PKQbts**Dsd;-oTni=1%gLT{BK7HL?sB}?A*KE|;7{r!^D0w3ONAt)#Z)x8h`N zE8*Fbx!BhJBR!GRJ*KYMJCaBvgq!N*ospR&Mqua7(BcULgzzaVJLrOjZjFE3L z=vu7U9?`=8>>cTD^ET{NgzrzcAxWF7*DhpDzAjiVq|FX&L!j77>&=Zb+gV!-1NInu zzCFn(Qt}b!aN4v@9HS`XLkC4s6h%>V&bX_SAt~ej=3TK|SFD2!2~OlKEl6%oo+(El z4-@DCc@_VslCNSCC(0uYL9R-@6_@G4P4@ z3Et%+EB0cS{6st`!7^ngUyS69{B6qza#LJBkiYOiRt+?>1rE@*DYw+&k!7mA^TS{70&K&9t`#&jUldA4{)*0_tZ_j4vL2NF#>Q(-N?e{=|h3u)zoK zEEDirJ{!{Id0CNyko8x>`rI*PjuChHy(e2D$e9!90gpeTj{|iMkbz4tal;-%B6b3U z&+^%Y^T0a78{58DU=Md;jVLthxhOU_|k{argSpq+t zWF3%D4&R8+{*^90bk?^_a^`3^*>HT{7q0RU*A3ww^X{C7AvA_X8CK>+%FfC!U(U@f zi90j5d^tCFlxoNDR?|^Bx?AEwmqT*dV?R6CP2B!9LXNIHx4>GDTskCag6Q!H%44a# ze^@G)%1e&RvKo>VH4-adN0I$f_G-#=6bt?JWK&<_tycr`Bi6D99ysyWKso>g@2`D8 zD)AamKv89`(^fQFySEy3FgRqr^e5SCqh92A^<&!ek zYb<94A~DZ{qWvuTEPRtxn^Nb+21r?DlbJm0_r$ zcUvg2$LJi|ZSR7tMTV}FSZ7Qk+Em?;OjIqgt|vg!+Tu^>T@=(XE^mb&&*+j!rjeox zwmhAlJYFVTQ?;9t0kbr2hbOU4`Eqg_jB4np8cNkhIEFMDoIPI5KERXwM-CZyvu@q zPucCh%Z=ZeD50{znyXS>G|AjsxM}4h16((dNx1 zscw=uX+>}s_-UKlu7_>Wq?S*ALag!swuLb_CXB~KP{n1ec{Ut@FOqHuezNx zJWmSOp^kMRb*xfluUabaEjguEj@0bEU)|MWb~n;oP~i5%1FRa0Z!ViZ1!!R4m{b9J z{z4N$5BnAF@s0)W|CZ$-NS>J804jZrosW8HPOvltdl{9a)IeY5nRE(f!Y!v1&P+X= znWoYT1pF@_QXEy!CUt0OJD-y%4f4_!Q_6O3dm!T;xQo8tU_~5Q_H3d-auz0Mlzf}% zht*pClcrqnR-VG1Nk5%jQ;uQsEvBCusjfg>apfWF*qo6+w#*gB6J*dH+l;F^#z#V zxhbO#EKVWK6Ma|k-!a~YE!_C|Z8G8n%UZonp@VG5ur(|=tUArg$%p1NGbhu1oQli>e zpd;O;py7!i2~i?7VxdLa%}6AIumxmNkB2vzpLSZjqbXH{hxpOb0P0WdxG=L~Es{M> zc1&d%3v%DUGb%zP^FYs1l^54Ho$iS=?=W3MtjB1hJmpr%NNR#AFZ>Pk*g`OI+o#IY`nSkm}X-5tf zZzPSe8aHV!jW7%CY-*c85H7}sW>IjF^4?ygPTAW`+TBX?%CkH=f}Sjn0=sn2ziD;Y zP%_BtOytsHMzlg1; zlsXx4WHAPYgF!k#>`pXo#C@o3NbLgYF3Ee) zJ24{zp{>cpV{>Y1{gv;%!3nSoLvqC+NJ z7r5Iod_H^UM!mkcxVAQ`}3#$YD`_FJ0JF`5`j zGOVhB(^1h4)Lak*o4Gt|G9?jJ(3#}C2SYNHC(-FOEcJWbe38Qr*TL~RE?PfK*1@54 zT*EHJ#&p8aXkmSw_%0B14yv*kl`vGy3z1Dh#|<_t6H)VaRKUl?4x#oJa+O9E*?lds z5ea&3nvusaS-GB{z6RV!Z4izjjdc({lK4xOb_R`{Q&`$CFUu@|Ue(ub(qClif)CzD z?$WuH)L!m^cPi8tw<)AjMLI03l0Xv;)ya2o30aZv}P* zN~z(_ARgW;UgY;k)P*Z4y@dKO#m94vJk#cI&0^_NpYOCb+coX+-j0eGYNnN#f+I#cmvH0O7aJTGuY!v>~vLz4`5lt?e5J#t$8lLd_-?B#faAPbG@%AI4MC zGfX?#Hg%kNE!+0V42vO#4A#adJs>|_h7zBkK9?*$URrf=X_gt5H3zTHl%HRF!20nf z#|sB>rUE<{bQ+)kEnsQP}fU|Oo$3h~W;z~C2!GP9WePj+Q6NM4B-xWTmY?d1^ zU9`$BngKnMVzhLlx3acd+v#&#A%s;L+;t(DUZya4kcCuL!V0Q1od{x)!bZ|i=!_|4 z=%Wc-oQ&-mP*&S3pmtL(ieh7DdbD8Q30FRP5uo4Q3*mc{<^^YHS~zx&k(ofHkpkWF zRig8$hf-3@Kl8} z6ba)>nksLBK_2*1&-i^*U^1);Ug_n&%L`D2lv5+PE3hE7J@()!q@#=8y}0kod(Rng z;2qIZDU(n1zBvpl@3Gf+9_2+ZUQX;0Z~#z{k|&crPDvMB-ap+w^jhC{D4~8T^O`W^ zdco$(J6tuT>(Ak zqI4tXXe#zzHIK*=dd`sA7V-&MNi@4G&nAGUZ4H4I-w!PVpym2wZl7}lbRH4hH%8Ff zj-V)gSB_&Bm|VLWLJ}3O<(7lhAA>|w8LnXTD1PN3jVbMQWF5H|sw-$)l zYoNMur*5f~AmN4XwFbDrwwkBtZhLig)^0U>HE6JzkL^zD2S{6B zE%O$tkU@5?p8%D6;1tvDS)-m5^K^rsQm~AvF8EgUXxP--&%JK(ToL ziPTm#IR5+RUnnAyZAa~iqn0c{-VzU}Q#O1^W-hNlwgO$R%B&;0Tc8g{4-JyHf^Lve4)0uJ`~%kpm5GGADp7UYDcc2vN!<*OH#u1ZBD zrMU*nRS#c^xhuFwUn9}WdtETrLa!Ir0ZEB7bjsKB-G4QXF0a5{Eg35R*?zA<0R3l| zFu&wiaLJtorv>d_sdw%y7(_Z>JrS3M0V?l~$wCaD5f*-}+q1S5p9NEV5@NHOlm1f` z>)5XK{BAeSIIl1}yf#F<-)`=CZMft|PqNYEr9bzvNzH!NcZFXYzAI91Qu#_Nc~)W1 zlk-zF|J4iSDV40ej?@xv)`yDTNW6ugKYB9~ELusu>7r(#zPn-i`*S}b^%gikPb4f0 z)#t8WTZk+R7k{bb{c(Ig?ij6p9Z{bJ*OJc5!bHT}cNRXYf-^pSv9{x5RdB6lz}JQ< z&hq+7z1N1*B1pf@MEqXxZ4`j_f|Il4#?6VVf?GM7(~t5rUn|Th7{bKY8FTu?;6z~l zoH{X>`1)o}pBS9~DZ^~*BP%s{ZVLQ03ys^T9@;FmHxt@hZW+lI%q=6MR9UkDbIVA! zU~U=7(%iZ#INvgYr~Y!oNLs^4r*U!G%1t8^aK<+akytsYCf&-dVK29pET9p83}{p@ z$-mr0l0BH4NZuN*C9?0z25&-e=?v?{n!J+xWcZzhzuxPhe8I=}orE8B6ojU=~` zWFID0PZ*tc^MWa@3QC5EoVhN-RxA5Q2mLoX zbN^m&qf~%QG$Pky-W=u|J=ub}5;IDbH5)KjV&*C_oF5Dhc}*1e>ifJ{>z8@456_B6 z<^6-h`k-!zy2zE7^@khPh_yuaU2Sr2LXo%89e??NUy@kE&|C_yjr0LixaU4#YXvjE zG*E1pFAY*<-z=Cf4RRl_Ou=71Y?-)9&)8A7C*S2mPkxb0OZSXSTFb(ybJNYq)z%)X zoN;^-NV2sAfzh$O(qlGReV7YFoX~Xd)1>_KO?=pkPC8^ZVO<(Q2c*R2*vahKO6`hg@G3ANNCNcLbvYMVyrye-*2(uOt46WpQI-|W~BQ;80LjS zvmi7K^ZwpOTEq2+6$T~)W`NXf?uT*sWg8wF8IK#VIaJ_& z%G6?K@Xwjg9nUM%N(vX4EsM2A&dZW!v(|jRB%6vrDDIDBfb1i*HI>LoCbXWK3WH5` zW69Y=4vH3P$;FxnB^k$bLTewV*eEKC`~cgn$bcj$w!ldWGS=f9M>35^&hshKjT9>+ zCrWr?A_L*AGa{9}s=kkHiA-fJ7joyY8%82v9R9nm&=#H_V*w5JSsL2|KmlEXWxP-F z4V8AHqu4jHjosj>3gZZg@&Nafv(^|9kwIhwf^*ITKDAvya#B0!z8tbgC%po$;QMTS zQ;?{^uI|{jZQHhO+qP}nwr$&5W1DMiu9-7?*FE>?y!1m?cj`;(N4k@ISv-^1`A8_8 zke4DhVKryDZ*vQD#+%`=*BX%itDcAix27c*%vpx2J_+G%mSpk8JV7uNdoAP2dpZ$_ z)_t1oE$_91p8My%xcH{EvU9x7I1Mqsv2MwC#oAr`-}rpjHKFR(Vagj=F*VWZrGco_ z-X%%vNlJ;)-Fq;{)=X#ky;jnB3w99%ETzNknB5#{ZV+j2ka*%g)JXW$6c|A$phXHG z6`}E?`8BD7R1%8Sf?-WS>6p{}fT*qkB$COL?M+`}@j)9+qKph$7a@_Q7=NUM29zowHRL9a zAxAW1qB#={ZWtJFS@Q*_7;k6H0TXdYWGW%T1|T^=aPMw*WjamCTras!a53;okT@2D zN={-z^5AbtcLpD4NE_ncL)9J^CR%@Q30)@$tU2)3hh%~syi;{wyA6`hl@4+C!2G}vgs8A@dzC9jd z#)NH#9z^UR1K>o!skTC^@lyGS8!R5UTM1Sl=Y?L8uJR#Edzo?y3j45M_s^mD6nrY- z#=pTkBqw=bTyeFGf=-QUlo%T|BXGdcF+-W;`AVd12%D3DK!n0Nl!>Jisja#ep>{6p zA`LpY&m0qKI&i0PiTJ* z!h{dj+y}Wk=3zXWJVqGg`tRpZ6f>UGYW31iq|-w!8Rhm6a;Ckz-~W=Bnh!~-YRY!f zxi8i9`7>1Rz5I>K*zUZ>VZ+KBz6_Tg?*(n2$!gDz<^FWvFT-vWNE7a1ndE%cqk- z4QgId@Riz^!nYVs17?b27N{Yduv{Mtw3rt=<%1Fwq?2Kq5|mBE1AderAhGBl`9=@5 zyU${$Ob|(v`C`X2obAzeFtpUHp6EztFdgk_S|tmwHd#^Krv5-hGm0=cx+CdB2h@l2 zA?rvba&ox7Z~eH+fg3L(WnV;V*SaZ@$rtxx0I!d2LGQ(K`R)__ z7`4|AO;@75{S`lyA17pbyL$yTG+2D}+nCoNCsOC1dkaD*mjIXUpMVNh5*c=T<=DvxdTo zLG!;vlCx<_-1_(wR3+aVfDc$2gJCiHnJLGU%gLtVZd%!sh%Dzg|2~oVO+HUmOrol` zkNKdBw)g78gOq-TDSkR+8*iU2dfSSA>iirxw+Zs{T>KPyI64_J@bqbt@?8CFNk4?K zA6A=9(UMvNNdMJ#U^?10Fg$A=Q3JMYbfV^s?ZeH}`LL~d;O(|zwNcvz?(mMo8t#4( z!Tvj2Kx&J|2g4H^Gno?Y*3Gqg`cQ0Y!Osk_-sI7uvc{3oB$r}?Sn(zW#bQ@0Sfmp3 z%$Nul+6@<#=IYP3sqdQ&E1iU9(l@}U8p?zdpFoRqPq#?;sFL)WXU^wS+BZIQGqla7 zSYiUB? zlQ|GOfdoQ`=u*U)4H~SpCe}KI;V8_-ioXUapM#A%f)%Z_AVYO@eZUIRz#u39000mGl=>KoT&IA$+2a5J zb_3u5n7^~mrpB&LrY=r~#@6~uOboP)wBmwvR?hZzzrj1FN0BR4p7%jUme}j|M2g84Ctw9J2q2J4!)EjTChhE#!g=^EUZvg(-SM8I2+LY(y z$O2aT#HDMxv8wswTD0v4z+WrND;9CLFt4jhTuXOzkJo#UeW@K)j~!N~uv5hWbAeW5 zHG3O%7rZrf+O~N5y)`TQ&_K(a3;P1ez?4_lTCXn)N?vvr@5IIypiu`|Q}KD$wPfXd z@^ZyBfc20C)i?_r1?36{v9MdZv5k!Jjhd^<>z|z`T6|Nrx3V<+Ey{nFbH*2_E(eUD z{wvj)^ygF6 zsuOB8P>>aH1$0>>_WRQA%%{~?0hvRvRKNmr8A%~qm{nCEE5HR%6;uUTL0144u(V|p zd%pFTGfpPdN-QdK329|vnw20=&=zh*d1l`7EJ{nA8@4!aK!bLzkOb@ks0ylrte`6Z z3&^TW!7LO$@5h=zuTQjJt2*+4fK29k|rBdK7tqylM$ zv`ngzYCxOqqvwe{e{W}A4cd~1pm0vq_<3v~9E6Dq{3&%3dw|uRR-cmUOf0gLT}1H= zf(ttUF>`339nkf^a%U!LIJ4->f!Cy#uEm0m$p}DJ9UBM-%Rsb|Y@i#eq!f}1=mx7m ztdVM@|KD`Vx|J1OT?x0K7V}^-T0w9TXN7bF)nFFLC6dgAvgNA)E{jd0Q`>h@DnTP` zM;4~TYziF5zvcnC!3DXu4=RIzwEbTIuBt&4--7z9Z}^_fAGOww8>+yJ54F=g3(!0GrMZt(x=R{6iWDPuTU!j|{p zDhWy*NYM(?g6RyP!m*L8rx-{F*#frx+S-!jC9)KKc}hL@F=8(XXXv{a2X}CN`jHix0w8QCzEp5*r0Yq)T3@H=9c;FW zvyA}iFmbq=mNJK^L7<3bKGa@wie=Qv)Pjr}ME)s1`d^cum8~}_jglIURU5?r2|PAX z4x)u@(W<9Yzwm=)L z1?>5ed5B#A==PvOdt^z$rQ5)NxEp=X1{`rt_JUmq6xm>DNHR5rupsda&I|g=cYBTb1%#@d^S{?E~BJ{-APk3B3XUK8PAUU}6Pdk7xRS zN}4UA{J+1lQ=DAQX)UYgJmIH616yxu0j5L$f(OFN78no@^4g;ak54sUl-~hAy)W$U zD}pUeg8YRvf|N50(WTLX5b>V5A8E0m=OqgaffN$X|I_aql=#K}Pebi`zj!KT8?>zO z9ET#Gdl!J}_4MIE$B;cWzX!7RasJIpBnA%UaN!RQC!a7Sj{+BTM#+A$g=7-WVFe|* ziV%mOyCDZ892M$$-pe5T*4j&}lt32ah*=E=a`zA=B-MVLn#t0W>5@;71$?K<3%N?p zM|&T8u82fOLl9&Nu-Q0N0@ftPxgH$B6`}5}#ozr}tlhtz3r%g63_JAKjerPP*#r5? zdw?10NAdhbOzXF~{Csrvust{jj6IzVW~HEMvKVAiKs_F32eI?=bptA=O|k{AYv}sa z<6;&&Uf(&an|rmKA2UGUuoMng1R$|l_)u+znA)kk7+oxlE76GBi@br> z{R?`Jb*^d|PdBwcy|!SOrQfZ{e%B#uO=tvK(Vqr56JQ4e{lY>xD13O>f{kQmmijt> zti785Y!ma-eiYm7e9;hr?g7#9@|9^6TQROqM7*dpA9BssX5sE`7%_lxF@z0HcEY`m zx|NFv*7=IFOxmFk|9Rz06dSRasDf$@QW50a6N|{+N{v}a9Z#HDa!wHPs#^|Ontw&P z-F@)g0+}Lnd6|J7sa<{mK1krxaGg=Jt9K2Rh=3IQxZn-E~Y1;KFV zTu4nu05JwQs>E`So@e0Qu<8nm>1Gj|$pZ_E zZlc9f*eSNSUyKkLj1Mv!U)cRo0n`t0#;~H8d>2{qhp-Zo5{<5Jz}3yy)z6o7fzqFV z_qHS0;KA_0OF0V7Pnj#CFYlk1GSO`0p0)Qo6oD%dXob}r5s~U(kl&PQ>dC182V29d z;&#Jbwi3YNxrQURhw_x@hf_{l6RXZ#>KzYWyPh5d!z9y2pj`Rtf3PpM|)r*)lgBJKRcf2FR){ihP&L=Lf~&KX$B} zn|~%HUmG31ih{wYEaa6Lf&$X*Pv@<)68mcaohQ-sl%nm%%2%dl(8?uB;yt0fN&dY}5#bZ#+Jw6OootZUW1$(c zpje%yj}JUo3NkVx$jnKh?`z084mutK+9R3d52T;@P=N8;RZ0~0r+oWfK791<6TD3VXWw`uEMxf`6QP26C+w(gN-S?j| zKy~z;GB9c85GD5Y;DB8pJen|MjfSvmPaE(wkARv!HA`yyu)Mu3L(@8Rg5y({j2!2X zZ;9&XCkTYyO~`^*Kno>?dx|A)yck94lJRv2jq%<{DX+BE-(w zObOs8Nb^?%%z}SeB`K+NF=m|<1wpyQ0zAVK0~^^?C>>OJmze3EEBjQ^JUl6~x&W3} z*}XPA?;VU!bk48}=nBO1zH99ynN_q=0b*fTdp8B;9Na05!aRLGZ333Zd5nviBB(L+ zL?Qx$;f1njDoHRSozW)z7%o9jflUx^C`M_QD=6YGAR>d67vu#}yezCU00|XXU?MjR zv+eCvg3ZJdd(jram#=RaKeCV}C)!j0@S=I2tZ2)v{gr_Nv#DXx@XqLH?WiQ2$m9j5>pD5wZcQjom&0}L9`$TIzPrpg z$PIxS!9F8V4@wXDDawssdFd$M1mz!;9RjDE4x&@aZ?~PzP+d!K8#djV&!=BBfA}s0 zYZ@;U6#PA14*c-BlJrX=UNSI$H5{4*5P#P@&g1vS_2SnlJm(IP0{8yDVd@so)8vnf z&o!i%y+EcrlQAy#>2N`4hg2-g{iJE0ORWLUxxZ%)vst?5Zw~8EDuwvyepVfq$FIhJ z`s>lcqS`jN`g(mORjMSdDM-N_1fw3XyFOGnG}fXEd%snq+8s_QBaIj!Yb618*(U52 z7>A4z#eftFP-$8rSc^&#pI)xA>$Hg6CZ3(U?i|WR68b07d#Wo8?vu4G6QXXsq5@yS zZ!?`vkKT^${_8q%BP0yGNP~X3|BTKM(;_HK<8bH90rQ?|;acTgj&KTmn`gW+5RR^h zPP8u0k9hyk2xbt%{ImofD<(ub2+=Vy-&MhsFAP#apZH+Y%gCr6tnwC(7%sI->Z3OD zjw_zNpnBqU@G4eJz_7h>Ep7zuBt4Zt$cp$DX~|IGD@y%*G?aBZ&vB=v5hEg9Z>KX^ z`iL2JlHo-gTeyV?zK`X8TQJ;UL+6a!v5?RT95b&Q2iu43iAT^07Bsb}lSMU0q9G>ttyfZ+QYmb~jO`T? zx+<>Jy87m{J8+r|@d(%IPL#v9oDX!y?OZE5*18wzn6W#3Gv0_6kqGb*9=7YG?Aw*c zohe4N9Y7ioakw7Z?KjFnPpKDGb~=kaCmV6toFI{k16?%*>>-7=gr8QMxcMybLa{rd zpJ|rI;5x{Bk)1THuCo*tFN=pIfCj_F=rRRO_MkX>0G8P)WDnvlA^?UaAC>tzg~ff z`=`Kgh_9f5+M-qH?G^H1sqh2N@YYb*xBUEFm4nArI5D6$;axSG9&uVzpoFONve7C| z%x^O-T}rDRUKcFewP1Cse3$ozVNFTpx}XZL;_o~52{7t*SdgXHhOYU!efcRhLL&A4H4*J9!DHu}BCSVeR(8$1*Ru^&#e6g0#_F+Qy+4OJuaox7ry>gO8Yjqci?`zf&|G^d6W_>x2wvOjWrCv7yKMC_ z4^$rQdK=`wuZ$_y*~10-@Ex|+#>r8~R9_6sk(Yn}>bUf7xf5;mC9lxsHEVA*OP?Pf zha~1__bO}Hofe;*>l?21^s85^+=6}Cb{CS*GBwoO zlBz$*HwHHWW?O6NxAiUgr25V8)ah&E$^!A&kO=5cm0$#~*un+M)CI9j5BXA0M+wPf42u3FuKK=YQQB+z2m6V8z4Xd6;ZFDPaAicPJM&m6i_Mc&$PGx2pSxy8$z5}IId?Hmsji)0`pRZ1TYI&|&T-XTAFqv7;0!<7~;n0l=1j|Ls=iw21b)AN(WRjhLZzFEPo zZN&hL9S765f@_%H&ed+%GP`&0n3`%(b>6gW#2wC&GfeqL=1qvH629gdKh8**RY&V|cpMQJVjB?ZDY8hz*P^S(hxUgu0T76Hh+j9MKOcbfJCAN1vQu&|BbwDI;H z#SZd#f7%?1N%gQhU#y_3o{(ud##mb$&;fnkg+>(DvQhQsuO~^y z6X-HPukYw-N9Wl8?RJ%xxO$SgCEdKKC1^zHZZB&UvL&T;=Y`T(;Clr@?-ZBRnnc1Q z5I1PQfRw!sG0V`UzH2BTK42x!p6wh1-<3Cz*}Uqnen_TL>k*wYltYONc6-c4k07sC z{Rp3Rk_OWD?Uk6GowGXM(qg8IBUzyzw%HE;T>zxwb`_K^6C()~BsPOel(c~)MsF}5 zPXb6z9T!rUqrtVmbUiAzy+Er?ly;+lytDf2p;=thstzslLMvWRPUfaFW@k!HhTs!D zyc3Jzpm#ZCrVX{|#D)QwfXO-CqDXQtHaD{^3puv#lW?jLc%^s4L|ltW&Fi$Q1qwF#8UCVxhFI8+cvS4~%t%^~bDGfxm`h8~ z1fBD=X(*rm#>Zi8%ys7^n7#D|qi*c=fm`lg+@R&Zp@`Dk;G7mId9#qbc*r8r6WppS zuQUR`KvOWEAVL?csC z$!wWdh%n!>2yB$((zhXUC!Pz3k0@4{WWSjiOD|{rP=C+vhN3!lQctDKXEYs{J2E%s zlkW8mr25&uRo2a`w(cb}dZbC_Y^uH@`QG+g@D0LQ*Q!~b+$sv1QhnRB=O8jroUOqH z<*;uXB(Db3yW=^$!$6qO_+c{$|5cgu6RgE$CKyYrTBs9oe2hd#gu>MF*0XTVVheRP z|LPia76AOoOzOS7e5%{$xxlN}$w?`OCX7v+J4mzjfyKfNF=8ne?p)vL64fVM`a*fQ z$b$$BACWokdm!o6h*$$Z@i8GmpRhR=0M3|HVR7CAN?mSI_QbIz=!4#rMo>lRu1BVV z5X{9Zi`K;1SNkXXQ37YT1Kq!tN%!PBpz41NRSbdTKNJ5N5rRrkj|1LDaSd5No-2{I z7a)3Bb$FcxOa_`dOQg_Mhg-TB>>WtgKdUr%}? zVY4B=;F(wg^J7WG$ZVLA@-?)>+G;8McJ$+vGHjGmU&%xZ8K9kpN$1su=G z-A}^CXkT$FOijsCiKVfq8bVSp+Go5t#Era$xovYl7EuWC)QJ#HMku<5M2tHdkix3s zqU&T1%r5X2fpA#p4G1eGeQNRoRk!H&Nv`5cU~Z9dTHj(J083DktxY1yk(&lk_6(qP z#MDCOxhNE$orvk9riMHl7p#ixv%>toi>o_2TIG1BT0eVhsX51~#-mXdT6V&T=$+FG z3UvU1>;z2(%c`J098UelrMQ(Pe?aE(SZLanFOD+Qe}+mBl_Uzc>3F(B1ksFI*PX#i zQaEmw$8a{xOh2!`6CN_rUDzj+j=Tq%!#hC|Uu{S>X4}ThDG`h+C=Fbq*G^~uYakX8 z%d$4q7U66i=W)o^RICo9__KZ}M8#6X_gfp<<4iiMI%Uue-*`l2nwa^~i>FZ@0Z6f` zv{A$R(ZfsS6}n2Otn-_s;pt41LZhWJA_ibCa(xm2;wd6dZ)YgRC+3_`(guNiaSrP5 zP6_uUHu1}Pznz@hEF^zi+Dt@ms8;fj_l(xXXk+s9a=?JDkqN+slFweE)5lqd(|>WN zEPldep-3bCVL-EDk;rzQP{OU2lQ-Ro-~M{d^TPMXrs(Xp@L&0IEz7^_rd=wJkFljE zgvdlyL4}5OJID)!#FSEB^yf zL;YZw#`FpQag~!MY`V0wK(dfm8dwFlu=b{f7QuQw7BfUP-{f zzclLWPY_-zuy1D^W=); z4Z~5!+q%c`iIgc5#_b}xfu7+U*B>+jWx%{w%IUaqL@+ocMoU7@cZ+ieNNEi^Il6j= zYTp7HqdbM4{AH)lGkA}NG0AigA*<*s9TR$q%mxxktATqg*{||qNZnxUE!~5O#V}i~_-)cXDZt`Y(EAeLV;o$?d1ep z0HQJ^8>L92S#=Mng@lMGj6Opnnsqu!(xrc^#6mM>dklrCo2U)!RUMD;dM=fc0gJ`| z%pZcODnDXWh9uB8E5e9(YArnR9M26vB#1gHw@wtN9;vdEzWkoXJK10>F5Yrh0mv?J zW)~I~E*`)dg=|ogZpK9%uWv2#c+PGR7q)pxdHm480;_EkvnXR?wm7kLa@2DkFY9v_ zxO&f5{4CdVhlh19C@hE`va61u75gIsN~jEOAd@zVl{UkXbsOL9a8|V$+Tfb)p*SjS zfYDFk!3Z}G2zUibO&@6uAcQ%IxNfE6R+MvK1~JrvH<81uo$+&1WfF;6!3)RvwiBoR zLrZr+Sbc9G#-H|(mkQZQg?l~tf#7aqI=YGzg*&x>hHk!gM&IE$HnzpLq~{rzSXZ~=eD+|C zu?PzS0(^owd%7lauqhC9C{d?na}hg8FU+jx3Im8#R&b$gWYXR%5vJ=2^8| z$yMqDi(abMk5PQqjQY(LWgBd^itB@wq5qA@BhIRo)|_rlYSFcx+g0i&rhxy&C)yKS z5PubLAqK%ADNmp&EjWq06<|NnFv%7};3f6d1cl~CkZFq%_#`f_ViRFv4-0N5?(^R@ z89rJ}84Wz{Nyd~90|kD_q<|a`Wbr{-4>o+%@xP9i$4`Fc{lwl55*7paQ4ewyeG#k(u1!Tr<3i5qVK~RLvgi}G z>@?d-a>UGkb3;p~DY?4mHnc=_?WNYz$KF1cy((v1$q6^^aEX z`r%W9L-UxA%_aNyNBViU->;Pq2Okapyx4C?PwW49@bk0IhBzC0kpZ@B3?*upw?d21;;~#vjmaU9!ZXF*MjPyaBoWsRYuzdM2$Cm=dR0 zeUA(#tj*{wo?hk`8+do*vVRt{5I^vBHG#1Fy$!!t zuSE7V{t`fIP<(9;+i&w0F&ThbqFqEm!lY$94s_##bnh?aJLB^G?`NO*7zLk+@r4!u zWdH(!l1a}Lye^$?y;VvW@zbod5}7Mpk^oEQNmNGsCdHYjZxy}R@fg!6nRp)SjT_DdZCXwpdZPMLLPUMd_A z|B8-<LRShLnH-Lij-|EniQRya-RlC!tEvvf z8TT4pC6xFh6B;G_hSl=#ak@yoEo!OH*ua?A1D5`OBBme_#!2d?+-*j+#on@mqBG8yMg{x+?=OGwL^caChn5(@-EWE$hIo*WKgJ^^APKwA%i+D>E$A2|)4{)xzy5;A|= z;(nNJ5s5d>qlM z=euR26DQ!S%L{yB@AA~7yYwlWpabW-)jBrpX6u}ls?(tBI=2DEwwzaYdp&GRYu-yBMIo`z~yA#cSQZm|JCJW=5FgORhlmP zBFgBwAcoFnSbN`XPT(OJG$68i14#1k{kbAR(gr5mfx4jYZ+AE#$8? zVq#S*4IyFVyz^MPV^Btje)GNY3!=0T;xh9o$e)wYBjBh827lXZzfUH4vFJp@J|V)> zz|}GR`h@!e!+Fx_dJzCk3JYlxf0L0*_(x2CEFIQ!7@1U~O%iF3??s+rcGV=){Ss4Y zK$d1etT6`Uc^!5%9LMnaKf;)k0t7>%{aefA)r6xAA)6@$^nTCyiW)US&v~Ug38hcP6lK z=YVHbwV`}Pq^<~|LkP%*Xf$w>pljaa!IZL3Y ziKZ0IEGN6Pt{_l3c`#u@J$asGRL!oe+O_GuniK&b_;#8>I!cXENT+kGR9ECp;qpLJ zminTp7iQQ%c5hOYTw>;RQfe*BHm&sXB2yhLVVcCT63b$gVEG_nSUbr__q1?P$l_`m z!_h=TJi7Z!KVCzqEbBjdXFn$YuDPDrQq`}h{u8@?m;q)Wj2}RyoW*RMOw!!UQ7C7q zSEY4-hONr}vlN}jFvIuzmC=7r9;fk{=h(_d&(_4V(+bKiUGWWlM#>?TX39r? z#4&)viG+hr3APOABe9=2`y2@bx2bIPP`TSZA%&XX%UAlsO zQ;=*uTkQssS#fh>F~oA|oh<1iD&rrS0SgZcHUVWo%%w3Z-c{-lB7o71^DqJc&3g4JP5Dc}rmkUUlxZ$^^T zpv}j&m7zb6WBJs!!=v;myFA^g0n6Cte@{D`{rcJF?Q(_bJRWt1dYviT=St+_NK%~2 z6qTTJGRER%6y9g?OSl^tSwEHD$NsZ7os9~xl3mVCU+CYg??zl#_1$Z#y*O+(Ef15U zjt<{K7OntvLcJgOdJRa)E=MM=0LFex=*Q=|6WpiZa8`OgYj(&vp5m<jm)5YVBAr69$yeRWq)B4!STK%XJ@`oyJfZU?rBFvHc4>o_ zy04xEFYaV2bTNs|2P}x1qpnnJM-r_zz=`Pa;MrLm5&D7GWB)r(^fG(Orlv}H)6$9o zb;nL;b9JPAjowrbq+p%7QoG2M^|{V)eG4xQM+cW*f)TbhL>E=U`d1>)#j1SVb~9w^ zS_w-kx0-q}XCXGv%8kia#nMJF8U|)wEZDJ6xAEvSu`9`8a+`bg6NI-hH0fo}A%Z^v zea2+;J+|z*)ZO8b+nD>*5oSSnJ0VY&Dxw>weWuLJCn+lsk`{MzjtYz=qOPjvHV=w~wmGxt^dEE4LP4;21SU`hrMVE-Q4>6Z}mLRBm{CHzki4i1#j)8tA?6gJl^{nLxZPXEimwAEU*5}T1VT-;bqFh?%GiB0 zdOch`9K)g%dVcMo@T^@3OiU}Ht%b9rvRfcKszWlr8mb?G*N~S-*aI_2k^n}2X`z2m z!88?6oH@h>G9((0U(*UdCVchmf*fVhu4uhjwYu?rM68&z{@;w36f8L z06;Dw^!+vTmUz=woFc_)3KF;uh~BYq`rdDZG9Kc{1xa^c#oqW9j0{}D9p8h-rKPIV z{z8%uk`GAdzU&s1XyAtKVi5KaG-Qtet%nQ`4TSiyGY9u}egFH_VaLRN=NVs_{tX4O zF0ZyV;gGHBrqZ&DyCiX2W0@he;G{T_vj$(}$Hn}OmFar z1b$eMTQDMMvvn3&=ibT@cOJgF{OI4rt0C96wy1l|gqvx6tw?cN)V%1R@2mx)u+n`% zBOn0O0`mIbPy+~%LORLt5kR|0a^0R>ENRxwfpV)WQ@FyGF}0pH38@ojS(7VrzM19Z z_v2V(*7R~})>1%XtQYgJa2*?>22k>dW%aAo7Lcw0OHczn7z^n{$LdJ{y+RwNfHmDY z3^t!e`V|t>Rf=qweX}XB4VEb~V2>TsWI&%x=3i`pnZ!fSt5OQ3K{N1yPS2sur@3HGDonPUN?*M-! zvb;>=N-Vzt)+Mr_*C(+gn|(49S(>L-_%l7n_?p8cD7BhVXKtUE8w;bZTaez8z4wdr zlLvo*z0;B(nZoDi^73@Z(~HzzW}teCyjDeH;iO80ZIZgt`W2J6RmnT4y(b@Bwr$Tl z5^y9WS0}faCMh7wkd=#x@l7HZY8~;pV73VGRW?a1J4MlB?1R7^B&~hCe#3Fx|^xaQP~2{n#%LA$>NNR#`72vLE`ZwEAo zYCq3C`ckv!eV!7GOxO&1xAO^0U#(@ zV_*>PcySSDGp&zi=RZNceoO>*ZDgt#Tha|fyGi~XPa4G21ni!(~>tS#Om<{wC791!C`=xwY70zMt{gvStp^f`=aLp4685YN9ycLXOW zVX2f048>DQ1B!xxKXzyPZK@M__*sqx>2ygLkAin1B7`Y-k>C$hw$SZkLG`nTVv)s9 z#J1*BEy@_VK;fT14ZD9DNm#PE=EvfE5c>Ysu?by@n5qe+-t?Mf*M4S0_BV}E?uT@=Po~DP=$(jw1Qp3&4 zZ8JVp%sj=W(X`c!(v;zKfZdLpN~@_1A-wkjQgYV*gNM|1no_xr43J}(^fH+ zHl6#KF^OihGj%qcfh_R8TcD23y=&Tho7-ZWHWJP^C6-PJ%~ZLn#&B0p4K+a;j+=2+ zY=YUB+1((heuWHYgU;B{gJEYVo(SCm=@?CDm)*za))GEu93#N2b9S00N`eJ*ybDpe zeJwz}Hrao$ajtU_URIbhylcjOHo6ya$0G^8s1W(p2x6J0XCQae&g_BhJpTrE4}@%E0{e)5Vb3`U0DzJ`2*#&bbn5_8aT zJo7qqH^;r?LHi8aXBv-=?}gqJ9qd~t)tmPV@9ywAM%y!Hb#}k*e_l1y2LcQ10%6|a z*Zb;7Yy~hWkl`Bjfn)n3?J?nBtn{R8p@%n-_1}sb-a4_^4K!klFcYjFL>!(O;Jaft z9)RBP=E~7@Ao>or8kjT8e_Lj7g|rEggdn`${h8Z~4?E7dRIMb^T&k2gBKgs;p-M7~ zLavSwy~mz2oD#93P~gPp$i^g=DI+qzxGLIxIbhWAta!A;#p)HZ&FJcISDb&S&>$*Q zji?s2G_BV!`qCIbp$`j5K=DJ-kaX`bO44<7#DTgv(+`zzARWV>Fqu81GRjl|Lib^q zpyr?-j2UVqtHwhAZJz7*kE{>xY{Q>=gA&aK!(cQF8etn71I=US82v2xCiTZ!l(kCyj&GqOi#Eyim7o3opH< zcl5(cyG8|L&A1_NTRvS@DNj$eg?Gx^ZUCcnq$;DRt6=#<#BBU%l1KD@71nR-+TYZu z5-}1>JUX%QA&7j8Xs#+j{_CHjm^6)&7+nhb2FomA8w?`Q#!56$s{dgE-}X!aB;{Dd zTY(3gyQ}!(QXj9ugei)f0Tqe==OHXnl0g30c)*Txz`y{fANd7id-#Fjxyn_uh_UPS zuIETfe2%Tp`ns$P6Ab*sZ~o+iB%MqLLVs83Il|jNuoN*I`9Ol3tw3Zx*LL^Zfl+%1 zVybvC2j<%>0L}~;pC`kZ?|+x}LsK9(U$6E4VL_rO*c%Rl`f<;RhI&c!kA4r__{fx2 zsEJ7=*pX-@*~BU;lIf!msStX@8Hm@yFrO7#l9Sq>prA3SFbcSNh{8zd>$(48O3uAO^dUOtj(BAW1xg# zwRzdqKO$e6fOfm{egly10=ZEl(upK1fYl+pi@d5g=Ny6Xey_cRa?)4X^J3gMsqbs^ zpyLgR5J<`6X*Pd@x=&m2ZJSEe^@pmo{saL6^USu1t9HGH_A5ikTf_!t#~yt$KB$x+ zRubi)<LHGLCW7gu(wph~jMaxPCUnkCuF zpf4&l$96V0*l57{LzUm|6wjW4y2kFp&1CS-0QS=XaV)8I({hJuFR2>|wRPptZHbX! z7i(w$>TvhD4_~#MiCjdi0hnsnG0MocX_=9d?YGOV z@w-~JH`(gwYlih^R2fS*U4_D)mvqv}o;_$_#nvPmQ8aI;;6|>hn{IVIYj3`b9n2CDDCQh$tWEEivfw$OTt82_W9tL^9Hb!(u1`;p+2q4+7!?&si=z%IaeNDFcU`A^b~~Lv>jc0(N3N zFiZFdLM%V-+szN{G-s58^1VUUo`gK;dZ?f%hW?rybu> zFO~~)F_x#&VxicQveY5B&rF|5I^gEa@mOBiw$ap%x-D<;i#Is1e?_6EbacLIb`{hd zi~Yak2MGxv))P_5N$_)3CqX+#$eCb~xTR9<`B&2VXaFz;Z7z_?FdHHn3pCdTFe+nq zw82GlP^%&aN9_=-ZiOA%H+q&cWo%fQDa~zjCTYv*7@%D0STe>_UD37a(p2~UW%;_bb;wyEUEDh8tCY^}Ft?qBt`#u_x&UeGmbFl} zJvRtk*X)9_ZCj8zq3(vVtyqX%SD<$thvemIdQDZT#Z~HV4?_5y$6&WoN1wot4{c`| zEu;I-gYS+4{mxytwy|?B+r}+`nLV|X`D`Z5mSa`Y7MdYV&4nt-3t3TR%No!1MRzTL z7?3cr>MovtGkN|E`SC-X)Gc8N+f~6LiB!|)XBMR3;IL;IBv%38gy1Lzi$?Tth>VwI z8+Wjf_1&D8C9v1MVX8N#E-N>Z;%JVfskfSR?cOTVdTosr127V@ zYc^#=B)tN`{;?TDk<>@v-=EY;ZtRU)i&Ibq2~?XPS4bi^gHS87DBQI+zP+_Z;8nYU zlQ^29OV=jW1k+7jab4BbuUmJm9g^TtQdT0xg;r{)WRaes4H*KNC+>Q)0=a;PMh;k% zZ5ou7rd@AN3U4FfrKs>%|D+9dZS z^(tV(U%xl_n$>KNj(PgzDQ}Bs(8-kH#d9`J;QB$73t8NWYBpOE2dn!m!IcjP*LN~k zT#8^$qxJm2|HBGNN~@jAiJVtGJFwUg(y{EoAKdLl?;p8A)gZ~{j-@nu{G?uROT9b# zL#9RCXL{*xTM*Og=EUhr3A81nNN+Gsw`yD8-coEptbLZ8#(UL!m*C-9N##L zV;UVgj?t}S7u`Hw(cxnhT{|vOuXZcjp4;(^?_sTa=ak3|t#@BA{1R3^^<8Iw^9x2*GHm_^;dq)?_v&-Z zl)HC*|AIQ-;cg~2XkAdBChv7(Z-kr<`~d6klO+m|Jmu5miGZCgCrhu>adUx(Fn=iW z;rZ-Gn(jBw19sp)UIUF196($GWKhuv$q6-VU+3zsbgI6Mx8XR#9Rqr4u&12YHyMXW zl+21EWNVs_gbA2t(B^P(Xa>N8_|99Qzg3&+|6!#N0RUE zQuL#z)1MX7`MwEZ*evz8!cxnuo2LPSe|U-IBCm}-!iXj(0iC)TPH!S9%ja?=8rEWtb;_BFP-R&fz&mJ1NI`{K-7-QG=vd z=gT3@(xZn<6D$d?BqBDxEU6{V91oF5n4b9t@ObQo<7=HFY4~!$tm}2xo2M4$`}Dg_ zP_R5hp*O*-!q3uDsv!mRE{u2n~J9M_W68*t1!%C#6qwOuNyYFO z&&~wzbMg@-QbXXB4qkD@ktMcR-!a6I<2b@!BJ`#=N3q8nRcK#?NNG0dbg{vqdj0Z= z@bF>|d2mODG@dSIa1d#3NVa9oCCGuROzp9y*>mB3_PWEpJ)Egx+rybkwLP4vj2i0z zS3R7mU|X;9EZg>QrqkLU&eX%1GH@nY>>jCXdkD@{!}g|Zdq{J2fvXAXhhM+k~TI}$<{`2d;|)O=%zU}ms$t3Ry@R={eht-EL{PBDU z1ILf*T!%OoUPX2&0z`G#@tTX4(#4{s$O}cW#{^tT;BoiDwb5DRjk1*uN*-knzjgg! zB5zG66aTicW7mg|(huLQA+P|aehuT2j*%!#-y!rK+(wAxXIdDGos}FW7M-SVWcuZm z=EtM{Q96i-wZ0~QUz5L3;)IInC~`$weg+AGL1WW(;H~?r{K9f!^i}z*fK1M|Dt{>R z{Y%5J`ojFBgYA7`{=P7OUzop`^QkY)|4``pYHeSbzc0++7v?W*gd_~0ZrA27Y?Krw z`HEN?4WI;}%|#EI&F3h$W4oi~GJ%IiM%#Qehd?Z1VAPIGED}s>Fbj9vHjcc|W~y$F z;AsCslQelGOQx-w(sI5S>*MKcK3h&-eH*7W>!JZ9W3C#@SDAIU-9bJU)|OpFMCPm4 z){&Bh)N$)r#ZpSU!`yZjaaqI?=mHY6h_TR|x+vS88*;O2c0t*;Eu^PV??TyDEHbn! zh|!KCNpm&5rfSW2?8~+Zc&#Hx@!Q0;8?Nl_p)s>3RNVLN}Y8(z|fb~ zFVsaBLkyj$gW8wX@9UuUbx`{{sC^yOz7A?%YqU`N`dE>DVf~8jYiv;Vh4p)bvNtGu zgR(a$dxNqstS`QO9gN-6a}|g*%xABJ`tng4wb})n8!)~*?d%9$tUK0A3>gcr1!-upt^4b-n(0J@u zt>&1%zq=2v;BlqW)9@VwcA6a*v7#tL@Q}mbp`uh2GWU-EE9pzuhwvBE%vbCw5-Fd- z#KA6aFe!Is#8ApTV%{-7XrAIZK-p@QSeLE+#| z-0>2Js42Zr`Feaw?B&Mp?zrakatvMa4rpp z()4BscY$;B`zug$PhbnoKN$7<^np9Gz~Twvy6-v6z6B5{=)s|i9;}|aP?A(gQ~Ii5 zXLO*i36H%QD6j@)$UoYUK2%nEqgR2X&txax3oA$50Gz=bhXG~AzxD!3DWrp>!d3-YG?kYb0FGj_T+B1&{^A836$187f&-+C zXbT*ygK#<+P6BZtl1zv~thpo^-@W!&sv4}%r7|231Y^1oB7pyS9fpyINw0A02Bh${ zHNAyi_0JiCNeumcF6tntpoAh;h3E`O2!3bH6<8}k*9X+7Uwnl8xZq6r5zq`5X@(d< z`f}mUUnA3^$6#h7bp(q^=Qnn#fM?*Nfv_aY8GMh*0s1P!SA5jn*t>CW_j$fCOWg0Y zpc}3U*aY)^T)DRvBDwg}jDjIHEvVt0$V=4|?Q>YWESPFg+1{67;B&r?`O7`)9O}Ld z7q{$k*K`BE?ljSd&7 zb~sKsi9?P`g2hCg05p;GAvQx`^GmZd<|UtxOH^9#-13`_je(EbI=be8hM`n*dp#Quab>{}DKc zRE>(f9FZ+n3*9Xitybw{)qE{3T=ajqw z()(eM6xGdelRLpy^G4J*oo%}*51m@bsM@uL^$x%+4CiMcns#5+i?Ee(7!13~|B7R= zs?bkca#Gwqb?>NJ9<&?pp!2DDEjXWrOWesY=*L(SqmvOkEhBX<+?zU-*lg97dj?jS z$OC-NT36a%J_pu+ri88>->$G(I@JpVM+A@-r+ zB1?$ZolS8HZ2B-deCGjVu$G^pwO-S5o{aAyr%f87>~P8O07A&=4}u60eZX+>NsXo+wxu zlFk~LCZFJXt+9W&?mkT?&&V)+@NCQxBq!FoZM;61eW&km<7o~`D7B_Ar9pCXJx8Z# z%>88qQd^0-UN)%E0zg~fm{}HYy?GV9imO!~e--DH7(EhdNjzc&v*qHIN55g+G4RGGI$f8;h%8sf-dk3L<7>_{i&8&jRrPKix0T&Gc0FxR}qNrb|U1z_vBJKY=RY zR~SD&r2ILswD2zY;m#L9cmq=rjP1vuli0I4bjsc%-dnh*`Ub0HzZ6b$_8K-EXW{gg z@7qN`XSY7pQhjJW&duW|)bPT9Vc|k&z!A@FaQ=D$M`6Fg047ZrV%B1>0s3`jb-uTr zKLhdZEZMQ;;oOZPh|!u_ozFn|=eFu3SFnNVVJCM`Z2y?ON(@h74f;h9*(u5M3@AM9h`49wgR4wRA=?DyZ_XE$_8=E7t8B3d%D2D3WcYS}=kkLro*&)CSgjL%bkiaj_& zgJ}1hplZR-_JI_1+v@km(k^dx2k+8i{lIBHZmY^*tM zY(8*oJaVi(bZj_w#DmBEHr?Yic8@L7J#5}IcF$-<_e`q0hf|j5o=HRZWM0?lKJi73 zh7upN(Ie@=@PGWYo`c~=7o2iJad{Wq7I*udFxgkbXv$zse3j0S!9a0s1&uKe5;_=$phzWN27xzw z5iS?N-5d@^7u2vW{-@DAPWTumWR|SmW&hbcep_vSs4oZVmZcB`ofyOlL9lIAD{I}7 zz=uquc|sDZ1WW=sVAmq{3zxWhq{LX6`#Q2WeJ%M+lVOy+s!MlH^50@lGf9bAUP9RDT#?u`$oN zzvK}?7TX~n;2n9hr)uB=hEVvYgG3@=?yH3dHC1pD<@B|VQP5ab5xL-r8^xa>oL1n) z{hn#`0)U3~7LMpZvnh`K0C{psJV6|;KQ)~qpL(!d8@yOUb$*bOJyip*fqX&oG&VL( z6_v+`9yp4~6H2W#u5t{g7bvKl^;NJdD#v+HIgLHIJ(Xj2J@tc4iC&%3K|mHob+fZO zzxC|;^fv`nrYI0%|B%939lxh~q+G<~tK16ILh{LO9GIf99BZnxVUW3jqiz37-Cvv2_gHtm9- zn)SG3#$fPa2F+H}&607juH!6B!&^c;YHSsgkyJhZDxohk>&fJON#69F-b_|xeNFw2p>@M-3&~Wi^7C?1R|F5&&JU}unPKw5_7l~=4T>s zB{u*7BKMr=6K$p#!XQOueUDujGX@ zGFZt7U72_Kqwc`zIYTBXqfr-M44kgx^z1Qb63Zc{Y1z>zEjsEA7~6vq+h<{n2}XE} ziA(DpKFg~*<6Ue(i*YTDn?vJ*MJ4#=UzZsye>A{m;y=6eyys-|qf9w$6{f(T6lBmu zj;e6fXH2nc7)PVNIrs*Skn%!Ium^YtTAe;*vVe)-CVE>Kh(sXLr;M~jGHnTj2i4#` zcH>Kj0Oz4OHnHtbr4DKPGYMW9+iD?eZGUE=$e1W~ZN~w9*Bfl^cDFw-)o=Q&slIYl z!dN|}KNNq|jvv&vi*0{ySQIyt2e?`k$6FS~@q;Mtk|>%zByJ~)Ac>n3hLR*ICuME> zvtAGtBS7w>AZ`r!r%Diq+ZDv&#_HabAgU14MP=CF7GXHlPMN))J%XCE+W-pOz1Sm6 zCTgzwwm%C>$R2dZ;2;=oOA96S-#;~El%0)=;(_7~tF}LjqBz>JD30!{D5?NJM|V;4gF5_Bwjk7pfxjU=n ze&%n=J(mK9S(cV25JK1t+&>v@4t=A|Y%dkrN$8C`G~Inpd8`(4SQ6uz>eZLB*za4T z$%E3!D-AJP{7Gg1)4S>(-HI|9SKTld;afa+nSbS8@&r)=YZNNRBw#w}=%U3rRM)=T zG>VnV!L|gV-(+*%rEzHi@lQcA7}bEWF_a37^-z=~AuD$f6F%US#biLsvl(?TaR*UN zlcw!sY|51jaVPj8#^W5PU23h@IF8JaX=+C6w6Nn`}3&UTqFl)ynQItnoQ4Wy^W2}P6$MkM18tl#@ zo~Z0qs(QMcAKc zCT}7&2_x;!mopRy?2YO+5tV%_#CWG0AH(THtWffmsEY>~3 zB6j1YIW}3`p3p~@k0}_-Y+8Z$E0#=C3$b#P+$gWi{3|AiU%BzBMq&$AHIcG9cC4=+ zy|g$@>>UvoM}e()mo7-f9~zX76>AM9c{~ZC7)GFHCgBcLi|-M-z@c{pP7S*rW~^k?&Jx zqI?JgicyI4|JyKpM}%Q?IB?#kVL1XbV7m=S7VLe#kef<@SJ9wG`*&i@VVk+NS9=dN z`;nA`7A|kB+cS&zLq^i>*dc`Eh88&zls9OZ%cpwVG<6xtun*D0w-E4;^HUP_Noum;bsGaPkCBV}sk=!?E`SS~<_E-pB+Z|%O_dHSs~ArRe2 z7ovC>@a)9iRF@JsMN?SR4d0*_va1%3l*q15Xkk%yRWC2BUv}ZogY;HQFY*Ph3vU6d zg@l!{lh^?1LXp9n*0V)cAxx*W)#FU}1<-V6iJ)hdN}t}N0VoIz7n>w+Q8r>%ceN}*Jc@q_)h*V8fDEeTc zuG>U4X=46Q?91nmlnLGO6?z?Zrb#=|w2?R-D^pvqk@)fdRs?s}NZht*xY`h0s}=bC z(R!>RZVk%We$9s8c&uUgeY_?Xw`BO)%0Z~*W0100C#<--&kDep&8H(c_**<4Nqe@3 z4e8lN4ocGASR3A@(^mtWKql1_Fra);rk_XiP&EabKNs^C4xlxXso`8VwGe|=(6<9o zf9NcmLeuC_L7miM;WcmjaS2sB?=vZ(s&@{{5~@n+K|)tbs2@m4=)E@$4O$3n9Rm{h zm&|GAfdM>G9!4W$GYH`K^4A>xeZ9tmzJ=gOhva|+*tYd)kK3T4C=n6zhpQ0Zi6wr6W3A>1Z9UeiPD;`NyG@V?=%AP2m7!P=#HT}Ak6;hkXrI$1f?38sFDHWQx)=;TWsUH`0m3UsSXT(QE z9g!F?s`ZbX>mRJBf3Oy7rnqD_A|@Pc5Pn6|o{^#QV9)HnJ;S3I4I_+hbm`oXnWP%+ zCA)OqT{DS9NbMTQ|4D=%tgi>_tDW_gYUkDlk%U1uQZmSr*}j%0-31$MtQwY{KWl6- zo@!4WSC*2x%k39saAT*BX(x}z(kGB+Kmkhg4yX5cEM~aE1Yd{ry?Ij_9jSB2iN?8O zE@-ZuP(p!i%j2521-;2oFPyGQ<7*%gD4JPD5eU@GrJTx7odR9eI~ihefTf`^^2V4A zV?ysthI*F8E-9V^{m2_oBF)~2R%+*dX0|U68l_$yrFrggc55cOue4AV)2AqDxq9tq z+)rUZE3Qjhw$q}DI#fot-c`SZ#$tKz#YK71l@XX-_d>K>!6keKJF4| znOzk_+pv&hXz4C26^xtmJ$?}UD#3rRud!j4KWi(11biJX zV+CvhEVkS6xeI8aW>7B481lNycmf%$WxB&@+g-cQF-cXIRnv$772ee!o;`i0dj5b{ zk$#Oo3&pL~lwyhvZ)mxOG8s2^T7zR}ET^R~%Ij@YD8+ zXJx9r|FrBFvX^QT-w2bXg~?%kzb&vkQ~k#gCH-KRR`BTgKk+)X3T?Au*+48(Wrq;B z1VOfR8^Ib&Mq!)D`cOWw2ivze+lp0E-(qv$ey| z8|ohKRYV>7s~POB1>V{t{&0i%)gZoUH;#O~4>j>#DB0=?uS;dq=!@^X1v5S2GT_HenO$^*5FoZ1X<#gfxzY4)`KO-5H}q+5bwmz?6RuxZ5}Y9>x)FuP$bZ3 zFm@^(iV9?{s67<9w0xYE=z_sVI*tsb1T3zWw5@*6l1MMbEyPv#I*w?bq!+R0Y(Zcq z>}$a;aGa<7i*R(m{XpDn6#?4rU5Yvz-M0$z!gMFc9i}@0&|N+^1igO=6(BHgNc^sqF>QCrF3?l(7Y@?ZCa~SyJ@6SN{%W53Z8wMbHSZZ(;B~?y^^`5e zqjW_cWqIWAKgT2WEXuEMSY&1s4363vq^muU%Oa)Gr7avb#vRwzgcy0{1D~uH;<&_g zm@8SU+zAZ+Q>hAarQEPZ8SWdlEzdcHbotzSYWY>O9H}n)z8t#=TbE@Os{L|FC~8n* zi-t{0OCY%~CO%U_1C1>#Ce(x+uUeq{%g07jfO_!`M=fB=sHW5AGGcrL<_u@cyH6!(T(P(Y3f@o z@7-vAsz3jinxFM&yBpO{In|F6%WpR7ptAg9W$K_|Ma4lz9i&8o!u8&$h{`Q@ODdwO zOT9uJQ3HuyF<>BsB6QSewyL6d`$R5eb;1Wkph(#e0`!{lMHqo)#vuWuu)z4qawFF{ z1vvI9T-+XQ$AOn7&cd{q=Q;$vaE~(r>_fdIK&2Dnn|tWjFimu&GU%OcF~)*hKARY> z{Cn?ta5g>OTez2?EBu<7Pk>B&!r<880ib!J#-NCYutyv!fY1i)2!0pf!gm3>iMrUY zJ-KH;*_bwZDko+0q*I{k`p!4z_c&>VEm*980w*E`9HMg`YT&{WnEc*bIM5!m^#ZOq ze&zY_%bgLx(e<<~4oD*&GXZFLuzb-iIJ?3(Pi*dc54MSY5c%RX>5P4YTUPk-Sbi)6 zI^fKO!L~m4TwBiTLVmf$CNTD$=Rdv4c4X33F&X%nW9}w!#N-QDz9$%*1JQ2Td`$gs zsR`neY$54wJ+FYAcrFqwocfM;3y1#aS68nXeV9^AN|dF_vmv&K(uFGiOiTxf$6hPWgq zS0X-o$tAX9LOVQMGeSGms}PqZw1Eoa)r~i5mdAA?sy?+=tLigc-GgRL z8pS)3sNk?S+BE{ePpkzgG@RnPG%3_!2vwiYawW~m)Bi2}~jcs8upjcff5_A))H4?^`numXgF3+4e`zM#U1g%)1j> zHtNEiK z?za?DwI*Y}WQSF~*c?%6N;Rmh+6l}7201elef8LAn)(R( zP+RbJ5x|D0-T|5zR)wn6m8(Nx#0rRie*Xh7@z3vnrZuf{Ug3b-G|foL=y-d0@OFD5(r|a5cAQ+fR3v}LQq=p&FS1!Zk^&W4Jg8sM z#bB820zo#gj|45Innzq}WI}%yCywlRK*xbcLqKDBTt_dzB0z{`LpygXe2<6o=0GOp zfQ$oJ(3F_CH_dzPb8L{sG+F@Zw2_+$ccmRra+YU0F6%;)*k0s1P_SWSqrxp9QrgwE zQCE|hkDIYghj}g1`BsFbb&+rEAX>lkVM9^d3W;3cZy|%P#E)Y+H2M;nk{qV>G$MCa zAdVc>u|iyY%d4tSC9#>qd*X*O)p7>AgBs;>k}M~mRPgKe>7<0As4@xFvlZbHfB3v( zE#glkrv<6DK#&ta=@x9%v*rx9*VZldW$w0Nea4J?iM%~jX6L0l&d9bawe@Uw1^X^j z1gt+C4C`$_ax{u2uW6{oT|6A<1?Wi^9bIE8t~g1q=W|cjdBC2lEYEwrJ@}(rOaPNk zrczF7CzOZ$(Ud)Uu=DEtGtFLr4tbq`f`#iYQ1-XXI=!IY87E`?EORv0){L~rHa|*o zgf%MqCkj=UXMzE$tV|zvazTlp`_JVx(*##hC%3 z_krQ3US_ttOcRbYh=bux)cV=xL8OpJUC^Cyw{F4y^r7bqvlAC;9<)@%dI5_?Ocf`+ z!O7^P9FCEm!d*cI6lz0yp_Gw?9FD1xG8LeuCI=)n4*`>!!!sZecF1Pu;Vpl8W3ajy zjw8P7OGO*+BYsgYjc|x>Y%^_?Q9kFSn!LFFLXMR%&d^)T2$*9T@ImnCWeCEIIp?GC zi*ZQL2Bf?|#rJ#~?dD*cPnju+LpY4QjRejbE#i{yiG(@cG zQ!Avb>hlFh40IMpl&1Za#1pNO^gsXL^Y=dZva_j%WWNcSYA!ai>hq?JSjwu;)lz-O z%)YJI&Z^H&sJZI1W1e62xzbqEs?VDaV^ga>n`O*ZpKDF}9mUF4eXcaNw(9ey!&uy^ z&kgCXIySiKbA_?QRiE9(9#?&8#VS{Q{?OzgS`gQ@g>|4KJVVj<)b-pQY0_CkouQt` z;YMe;(HXAh3c1l47C$?s{f_RBHyfSd3Q51c>+DL7e%-_>UqH%%vIci9a?+Cf3)y4I z*gP}l)%<1XJ@8GTA4g{7PWz3It|>?*$`NJ<{S>@MoVG}bArthTkYfpY7buyeQ6Jf| zjva^feXG&0V{QcZ!UaQ_)&Zy~r1Gqjy@mS|fT#L z&pkh2Zy*?!l&ZI3hx`>x<|l9O{`33a;x|ZF0YAPe5*oYl1_I?ZTUiNpQqe95~205`#|7YMUXD z0B#ICat-C)!k<_dv|X=_JK!e?S6I1h%4=c{+cDsgM-91|P@duBx)MJaUG&(}ad5qC zm0QMx+|Ulp21gma0+K;53Ld4{CV-XSj{;MINFbrB&14}`A7^PTmH20y38&ddn_Kb3 zGpSZ#7Mz~?AO$=*w==?##5WC&`Hj#En6d<6d&+hIU>oFm27LrX#ejRC z8WVLO2I4Jnt3)XrBzLf9Vr4Il;JL{m4+| z{%G<78pq(l$mIc`rwE#Da=)8dhRYK}LRN3N?ARN#Wp^<2+=E?h12EV;A=^r#UUVX=0{;KK*NPY+!Qe z=Ry&~@>X;xL09sJK7Am*%jC>apu}S%x>V%CV4=?(HPPX(66|Dkz^oyW4 z)h1HMo9dgA|+z2WPG$5S{6-|0vh6+tyT z?ukDH)$pJv{|q9i!gFj}o^OQ;D^{Sf!lB2w&&SeVua3@&q?xghZ7sNb)`_NstDJ>1 zhII2&PaCL$%Q4=ZjvBtK#V^9I&Ue24d}lBi^bXk@@5@pVZ#F)jyn(h>-W-lL)AMOU zhU2kw2l(%$taid1A5JhA;89ULp*~4geX7B~_NQ{f@=R+Qsl^w1#R>WpV@-dXu3=V& zjDv;i!Vx$aG^|=^bRqyS9JW|aq+60vXu24E`N8|wpM5ue|BK5@_^CrZknb&m4rl#r zCBr)}zI!ht^jK6uYtZjX6J8AFiuQTILdJwY;szuLq`1Luv-`186<}AJ9#jLE4YfPk z4|jYE)lHuvi-lut{N!?wV@%Xe5t_+WZ{vJW<0>l&@RS7lwFMc~5|`GU5!99F+kOJ5 zif?iv2lr`h5sQ0zWLj>3`Z*zA@9Wv>+kW1J8t@lF1_bR3AOY0Vyd1OwurC6uXaH1T zb|WKoBkojvzJLS!!dhcWlE?K+IZ!qybt}(hC-tG8TVC7G%}L$Pb8}L+@m#Z$x{JYA z@0I>S1`609Lpy@mXQIe5&CC>bb~uDK$0Dq_YVU z3OWRlao%zGHufPrfw&c9r$zRE&qYr<^%etrJ}Q97|AjmOJlE=hZ=m`B+is^ij-gA; z?jr8Zfc@p*wpUz+=%d7(sUA_Px06^Y1weyqGEweKEm*@Q@lao~g{G9~!nJ-LcGN+#$;8_3Lj@2D5Xvl^kMAv`Y9+Wip#J;**)g zRoTiQgWb26rz%Ys$#YdE&?FX!jjV!8QbE0Z*f5dl0(PQ-Dt*d;3fy68-z|LU3p2GH z;VspVoJyZmQ#bUMLeC*pT`pT}Ej_IA>4Ue3yCudQPepPw6luxiY-znF4zO1k2OP?5*CMu`IdSB)ZBAwROvF__BC`oVi6{~dVXF2B z^!G-Z3r-#B(rDkg9%QO|vpVy<_JpsNaJpiTbWr)0I6%1dfQf?>X9VmX$?ajsL(f^R zo->&AV1-7~_mR$-ytCy^b;fxdb@1rL+BxkhSPWZ!ED}_U-W{X1CiSOH16!~f!}Yi!vo(kW;gtCS>UdMk*rTZW37N+|zLwFG3R6upvCYZ6jU1BTYl&ndIh0exh z>hMS`kRwZ@b}Lb#=SWM_DUqxjY#%dbP%P#?{I8o3CSG1=x3{ZZTE~ui;MH(eLa)k? zy}8iQp4aOGMG;Z%M>nyaDi<`|`R)s;FV?fX>Qk6rDuL!H?4YOXM%fyLS(c@nSf41Q zKAna%HhQJmPqHLci6TyGSs3rdAJKzmB9Lbuk5Z&hm@9)8SV*}f{ZWXT!SGPT2uzz( zoVN`NR!2349fEQ!Ef&-cBEx=908)w#L#cwU1!PA6Lh%dZm&#nSLV;ePtnU~?ewd#j z6sPLt!$YzYr8R+#l)`-mkYZ|TsN!Ns+>uQ8^{Y!{s}gmTzLsQX-24k5KKB|6_Q#4hJ->#ePA zwsp3}3=z$5P7L4VZ*J-)ggP9cpxV_FVtwg{W~@W$gxEwHkH64DO4X+dq!oTk!=c_4 zr0O%mT({0r7}%@7+*O}2S}2W-GvSimMQX|c$9PK|hXJGq`;ZIjxOceMY34bC1Y+4E zK;8yGL~5!*XHdXi70aPwmchUfN4;(?h0L)yIB>w`8>?s$~p zaYK2}F&Q^@TSIDRY==@9X7~{JIlhG5)yncCj%8a(QwVqD5?NZUq}|nOwY%PmgEfnT zt&X_W5jR&HwAB%}+0|E+T|KSC{;uw--s~pd-+EWW^_wpFK61wRj0~Q|4i$+MtrD)(e>pIH`45RL#I)`k<$xT3Nab{!1 zqM2h|ItbyoC;ZvEgQm`xlz@|AwepR7^%{EF2~eq&eJ$WgMi@IQN^x1}!uav^QT5m* zOCF6M<*u@lBi8fg9v#k#!e1K_uBp$ovb@eSyAD2nI>%{K4mb6gMl2`H4Cn7PtJT*1 z+zO2xMr%Ev>j;e>-v991O=5;M9_@AT$w-ZLoo;my%S(;HnqCvUl^a?x%zjF_arD@X zk&Y#fqesecqON@zh_>k*Hh_?RVFu$1D*!M?iX;RDV|u12eRG-RNbdMGJjs-)GJ9O^1Zpxx6F| zZu1bJyK-0+xz}Cn)pMgo zc@y6M;>Gs~@SSP=&bvTz)-P^|9C`);-e@NVv?l@Hfk466UwycH1VvE{+qgZ2uAuM% zwS{+gZsK&;)q#!}ul)=CkqD z18oKb1gq$DjIXf;EU_wG-@sqn;z9z%-*sT|*s+T?JPHv?_0fwU}u! zVH&f(1d^O-&Ot{Ib!Weun|>@>!c+~na0>4KYN3?EjW&~g$_iZ+Bfq$g3j2p}(U1dW z#m)`@92N4r@WsC>N0jKbm=`J~+q3zh_Eg&i7}tW7(-aQiH*8P1QN4f-3nSxONWu{$ zN?Nd3Q2Z)B^_&q1V)%sbD4s@(#n&mxF42UA&!`}pPNiHD^|;Rwh@DeOE#e8wkkR46 zsgx(`0rfY^hzqF24;TenI{^%SF&B@JtxqLS%ZDjG907Aeg>(s5g8ut73;dgU5{v?) zQvG(5j(J3dDQ%+T(H036c`BerX0Oyt8+HIn-@$UFPg}Kn9=en*brD^A{z`PZYUQjR zQk$feBAgl0 z^F^xaAhgIr6j!d_@gkL~c_j~ux{p%M23g%KuXPn$mg`NdIjP3wx}mljT0;>n zQPrSU`K+x(kE>STo@MgBesQ@fv)y!>&_CmbmaU8i1?X0)WFK)RAkN}M%`^aKb+gEv za^^Xh{M?%Y0PN%9MZ|X5yo}*&GWqsgDGh^*I4Mv94#%+^7EX5xkZ6I0^-y9;PDA3N zdT^p31R$62Y1z@lrMCm4baPz!Yj1I?pG%qMXNC%>FLL!@*O*I9bytJ$p$ltv!3l$?gb6JGcR+~0n>=W5ec6MAEa-P0QMt~F zHST_V?fK4_=0i(8fGLMg$LNG!S$zo@Tte!vM>+-mtnPjZJR&cpU&BugZD$EQ3U5{L z=w~H7tXXG%O4g*6`O)MVsPc?3Sm7CA)oSxP)akmPt2u+{9ZdVC4yIj`B)D#h9&Rbx zbl(|@4%SG~#!M}ZD4N@qOLwZFy(c$5SC?I(c>Ke0oIGt(IF4 zVJ?gW?9_wBEi(9)UKEKJnpR#Csmr0ojWpeL^be`EcNg;eU#+du=EOf8E zU#&MI*R?WKY`xy6imwmEyFD4)vpgUM5ct!Fj)clYCNhh-&LZH$w>E;+vmO_ZeZw z(!YkStJi~%lUh@FFwl6pRMRMtjNid}{0&rZ%Nz}w?7sOuv|vH`{gq!>MLfS&t`=4* zt_qg^@yh?h=w4m9Ne_CB@5HlbSMD%%+S9ww=60(&B^Gb2TU;^Y?;6d$S*GikHJb9y zk#5gLHGl~EO2ZH(H9%tiS z2&p4Z`%Qhs^D-4S8t?jnU!gu#$9&T^im0KHA~Jn;YI{1O_V`A49+-SA8Kz@-v2|yI zRg$yip*XjR=n#AaDAL?kz8tyE1|%n09;x1p-b$aUqLO2kvf-4r?Nl1XW>p8RV{NgeLNpUQ)n zsn4|DJ6v0)ghVQE))|xCHcP>=8N@a`Hi~>Tu@z24{mS#Jsn6VrYhCGU3eV`E84fV}35`sEt9DE)w7BX->$h2Ma`@ zeE3JFtaBC=sunhJR>vvduE{u93z*_e5Jf)^vJox2Uc8rdpL z4HTx$yj9WlfEWxHC=jdF35=QZ7CId%to;QB$p`bha(%l`d}o6}TV2QGx+j`jId4F>3b(RdQR zHGS7g<1AC8@v`jx)|=cC4vv%H6iHkO6E)m2zE9dm3WPxh?sp~B<_ru>fGE07Zu%dY zk8|93*oGVBT0<2%IxObp(_qU(V9SFgo8y=6UGR(h-(gEJo{i_skkD+!oC3tA^Cw}s z<T;Tx+(ctNHYM=d}pGqwo6@EUQTF~6$WSMSMD=Hl7MzvGgBF+=5fw{gHSMJHoV@UKjo1&g5)W~uPj!aC(rTZt(j(Hflc0w8pn z_!dd5s)fmsA+KC}I;B}(xFtqvPm~pnMvhhIXu^^j&ZktJ%e7#5ce5Y_B0aG_g>f=T zBB9!`C7%(1VoTwRdEsLqup2AqOzcvYQq!`Q3|_U&bojq>_kQ=rLh>&y30dZGi+g!)HcCI-nMn?pl8LZ>-C zsdiG|tRAo{RHy{|Ar#8?k&U^l`+bdglzNG{Mz$#gV?h!h}?^aMV2i9b?~`Q z=(F{28U-rDaFpqU!}{)AJXb_}M8BRqE`{#38;16jakVD4kI^`MVsdCQct`J$f8f10 zodWoK`ys+P#1V10j^n~ukR};+c38=%-Z=Lk-bjsUVPBRPQ%~GQ_AJ~TeICR>F5b0> z#oFa}*xkXhBS4mJG)c796KEchOCtpGxs#v8B?=!pVKiy3CCS5d?Q~33W3k?qsaP$m*vJCj^rMqsBM(eGh$P^6e}BJsKimt#n=b64 z{qA?4eR>IVeP{1_eiWn47A!;1;siG$Xy(nv4D{7&J2%Zz7h3#Z3d2+v$o^xAxOkbM znXbGULg~W`CgG1r@9WJ>07f57gp=~XWcc{RL=RmtAC<7Uc6Qm5M#V=_E0ZTEU0;%g zgCxp~tSr|W(w+^O$y+d)|14%eVPNtQ=oCyRcd#9ozBhBP+SZvHF_|MR>vXlO!I}Bw z8lGyBdA^x98%cUS1!B!VM)DeEsP2?VE?-Zsx*U6s3ZOV&6g4u*CPGcqCNtd69fum< z^ax)%Bg(XnPrvAHwTkp27lRE5P&N2A%tm)gH4}WBy@k3BqIeZIP|L>4T3NO|mumGt zkK9m7nkWk<{isr-6tABBaq^)^r zhwz#HMwj~;>u9R;~Y1qoKs!ndqZ>YAk@xh$?1WX5bRpE zsv9@nYj<~O#!RGZBuX*t%FN!}xI&ybflFY8eqq=;q(l7A%%oxFD_7f(H^N;_;J`?^ z4&A_Rpu?J)HS;cOXjJd24s>tu(yXCcukdQP$+l~jO(J-zhFa~mHZ+vF9LVU}yP1bn z!YB@DeH61G>k|tz>yW` z8}Ap_Pmm?rK!Tzxa1Wsalmx;9-7|UDaMR9S(&FYGKsZ5of{mZ!wY2pz@ZkBb#jR$r zipU_gk9Xr!59nrUKLGK)nf@j2$*)}Y5_TPN(S3jGic4+D`tqKAoS>zQiHKn2lGwqC ze2Y->qDcVAoIn2*e||FeJ)rh3$Sa zVAEjkShJ}e<4s%y6))vg-bd)25Mia}5^jMd=}TT4;46{(S={}+P z!lCh9$N_y0v(pF+%uF7RzJ#Z@Sx_Jik(h0^tb02dQ_w(=K9%H$VxZ zDmKbbt5$PK$_Su1pBT%M##==5U|kqcvGN!5xLDf+o6C6x7YF%$OmQmjE*SI~h=QHs zSkAyRY=_a#mzxp{5>Kd`EFo0Opj<5@24-YLxgI2lrqyv~ZCa2(b*lqyo(}YaR%WXK zY09wwlm;XQ(?I_jnvrdCW!EgsK6GR7t&5~6Q)o!<E zsbjsg{Q$bOt#juW+n=C+G0B0?Y##_CwBENPZ-R0vUE#CmRPy=dcP;EU%Q)Kvf%0&1 z>z32CA}U1i)y8|I!hQ2pxK`6b9XbrvQPna^CGrexh)yzs%s8n?=naVFzzng3^C?k^ zIvA|%O!i}*UJRZxbPowBf~j|2Fud)mqeC|iV9|q{hq0RQcNd%!V5!MVtl#bPd7iFInBaKtw1S5kwKz^3#~wRL|L`k(ECp8SFM z0YV4GPxfk{LkTwQ-N;4SMFj;)rw-XLEP+|aN@0T9J9oQ>I*R2AraZAyU0P@9CLOMy zV{MxV7H%!*U&DMal-{w;wAv+F?aHXNF-hZh)smd;_jh<1&W6K1@way}*zffF!@cDH zUT-J8C};itKK4#EcjRK6#go~|QEw+TA7?y~smA)3N%9CCas&!z_)z}4AB15L!onss zq6a^=f8Em%O~*|{lg`{O7fQzpxhIl2bhu>oDIfmA>w#s&ok}V zq!ghGU}U)-kR*YQU3(heiaOBQ)V;AMgo+3fz6#*s_0+zJEIXv;9g2`b5n43#y(!8; z%68xg?ns&!J_-QM4~m22a4Y3{h&4LdO*hxTlTHG0khH+ziyv}#n1~4E6ASXVSt1Rf z!-y=x!k$7E=b=6}p*x$RUWt{In@Fb4Qsnln&jX8To$&k8odls{Me41=DmdDn$H5)I z#3<^ABp)5%3I&t-6n}NBYo%tW1~QyexU&due}0Rx@fJM&85S041U(+E)caTxL-KWi zubYA9tnL(%$zXuvEkZl75Zp_2(}*Gz&lIZvjTcO5mf-uRb`)D5doh0l#$cuE^44}l z|CcbObEx{<4S^3>B9xTA0Bmw)AZTY^n0|b&1d9bHmR!jf_r4phd8?S`rdS0j>cyu$?>4r*Jb>t_dg= z+xJ|2wQzmv#QiZOAtFg_%Ld7*2bH0S42q?1(ggMo0g4~gffbU}7)KiMgXMrM26i=% zJmgNI{txbKZ;C)M+Uq@-tQn~2d+;xzTC8fi|IazL^L;K9JX!4gbDbE_>b_kR5E!aQ zz+m$j?)Lh-y`!(->_C6t?hW9R`cLYb=vYL)_7An=V5>n2$^M*}mP9H8a`x{L>;^jPmSrx`1~|p)h@qvP_^rs2W)aib6-FqQp_DBs3Cabt-8}tw%RAH>V4zrBS@6`D4g&`HL1fyVlb=R_)+(v4AO&{R<%C>q-XmT^twOa4%ZwhlQ|i#uId32IDwBh4kKAQUp{~wzEU}?S zZS2$)45tpI#o^XC=e9p}OPmZLWc=W5Ocp7RfSe@4vPV79Dfa>?zk2(xC`qE${WK`DO+xXkFpY0h#LF2;@f=JjrtYAJsDITch4F$q@aVBy7JYv! z^WR2#UYdhOFV*1gpsJcPsFw7-oF4l?kA{5Fx%(&~F5^U@vGj%(538G8oa#j|BAusaZuXMiV3)&;AcsNm3PWYXUR1qp=*mgp1 zqW7Y;{0rLZfNaZFsn9b?q3`0r&tM@;@f!D$^H%5XG{m3*7j@u3raQL8nu-r=$B2>@ z#&iArJs*0$lOGF`5VKs4yMpUf{#G8Zc7S2Xc6WBJ zy*NYYS$xV>9J-gh$F+nqCfHOURF2vyx*))NG#*-}-JDJ4^JafEcAB%1)ot32H5v5g zlhJTKs+O+>J;j`ziM=&BJ2N%p>+Oc$>yRW7PDNrQg9d>QzUVSp0;qO}hNWWB4lzMF zZUhuSoP|WXv7W(3%>QnA4qKpWA|k8;lH5d3-|u|3`x%L~zUEtq2LG%EEB>OaxUjQf857`4m;CKUjKq5*=@02ry zUZOvKsLCXYAnH)tIg*+seb}$5YwQ@S4&F`$JFVFyyJdJd>0(7K*qnEfu>j+0$~Tl5 z89hg@!kT#I-YgZ#TtbCTMmw-bWvMbc=AbRwF_rDm#UN>IdJ4-{?K$#_ru;1up{4`+ z&Ri1Xua!RvE19s#ur!v{Fs1MA50mH$Bhksrac@_|#WDQt{HsaZzQACvTQ_3%Nt!VC zV&wfaO=J^W6`l;KhCp%VA>a^s%<Oj0 zT#|RlgzAxY2^MzQbcG<=*RE%yg%z|~_N>!$nzlI@H~WM6uxWL#&F0)5^*UyEH1Bq2 zYi3rj%*uKfxc@$<1fWM#;lX+S0yPged=A&fH*lmD;_AQgxAn?!dXJj zQe#8?kckLxEpjWAKPi(U5pzNr)EuVsMIcJV00UkgRh zl$IFfrm$UF)Maa5EuJ8c@8ikwIe$CTmb=I@eL)aj9EIVm$7!)D^5u<N2HPpu&1{DcS{uWH$cK#%3A{CEecwhB7j7 zUx4OR)S>*bd@NRX15D|uY8Fb1=~lWoo*%F+p9TQx2Yh)z*fRLu0SmqMh!wC7#bt5- z<**g$#PwaEq)7q+@P zz)n}<67v1JB*8KlF6AQTuOYGu>BBRHfA&2n_YHim1tli}G{=cjj7@#~W_C0iz?Q%f zD1xeK_pu*2;aeHdFgt<1Ystp2#UzSj6*J{YY5P(@ zL-)qS>zb~yNUaor>OFUX^KkaSS5_zs3yR(Nb;yi za(V0D8^Le>( zN1eLM?POQkz3i&&ZdUHddZji8{H}Rz*>qEascWvM9f_H3QVAHgU+PZNf1Ou+woWN` z{iK@M`3d(4wP1)eeK7G(FTVie_JX7jW+zcaMpa~}%Mjmv_7`~EU*ITq7C1RP!lEbt zcpm}5D>NE$R6DNaI6{hH_*|A86<9H;CjB3}5rmKH3tKN}<==bV$W5ARpr%acGI;lJ zlQ2?3B%lCkz^nDnysbO>^X&hZdkb;QQuaA41UFWIo3)Jfl;VM%yE~YLl7;&{5E#s- zo)g{s!S~qvb{NT@Z%KuS8(`ZT%mEVoU%&m1x`U;Aa~tvP7~-1PE6;fOAoVv5!{r>a zq(%X}q3|y1HB8fFN}5t%t=qdqwh&ey3;P0TPSy z^Q9Bg((%`Cf4o`;KL+0*23@W~(ih=4F<<`m+n;qWrTG*HuANX`Aot@}mDM-$B~xs; zPdeP9zThs-!=dW>_3nvPxz|aq$b1{!;iU!iOeKtNYiN=pg+%qx6138f^Pk9wu+U9b z*G!T1kw3$&7uWwVM5jDXjCqJk2R%28ZFV@jcV_S=_|XXtXxxv@0~)~Nj(Jp@%UOFc zsmSZh*y?sh+_{g#S?s-3%4z26waAaG#UAys0p;o64ENoiLbnCd1OmT$O`19IGzej= zSFe?#b~85eJnEL~gGa{Z4g)r*0oo~+fPX2%slRGRPj*cpK(C8ne0QJYcnzJDd8 zRITmVj8rIk>T71viMFJx?{WP<^Ou(E2_aAal-uJ&z+x7E`4novVU}o`bkY1m@ zTQFP3Vu5?%RNNaL@`6(bU3%SI3%Y7{>T*n#yUz4!(8o)>X*S<`ae97cHcj)_f8)Sj zy=H-Uxp2gdiPKr&Sl{FJK{BS^B^Oa466`rvYG|ILfI;a<>RZ8i1?-P{1Fg;3jE^0b zrtzW|hPRsgvcO6UNcFP3cGh0Oang&JA!x0rh_m@*M%{AuiSh9#uMCk(+4$r$dcDfCCn1iVz~1Pj>21J$*A8owKivmdGg=b4+_i& zm=68_!hB#Rtz$l*3X?j|@*XrZ32`DEcq*gcVa;nr;N2yPk8V^Ec-i|?==my?8ZZTe zdBqrLwkrwVxV-$}eeGQ2-^B-o4?lT-dU<|%dGX1|+R;cOTJ7hByVMo=(*-zqFSxZ| zYHsCbBBUK!$Tfas@PoQECs(gg9+M^B)af!AuYB9my(n$Lf9pn~2ih-cL;R!bFNo=? z&uFp9T*3omGR|1Jh(Bx^sdaYjRf}O#C3U z7TQ|@%YU`oJ0N(vQ|DM~V|I|HlZU?kQ=dBfPjKq&PkR4$DH}Mqu0toFs!N_nt9h+6 zF)6CN|IZ%rc)bm(*f1~&-5%}%yMFQ-_+$#^Xm#y+SMVor&`C*icNSOzGX%W5u&q1I z{8t9puVqt%umjC!^4{`~gwvRE@#>rAq49-C^yvq}`6?ayhertV(F+XEr|3r4&ex=* zZ$)c%dWXhG)=w(bh-{V8!;(0VB&=%t26Qo??4DfPckc7m3-?jtWF1dZjba5u%bl4sVLHSsF zx}yyaFXYRpBJVLEmllpWILO3FCx1+C6*w0nRad4CFnsb6#&p49MAciAJV9l}jyP>F zQytf~adlZjV+@RIUc%`(xyTVA9G(Be$_*Slm3=|w%nb1zPcKX_;NyG^e5Bn8Xx;PX zPQ&n*F7#)RYXo%wwZif!7&ioTjwhN@LA-t@tTBYPPnQm=IYRUXk7ANkzwylGECje4 z;P`S@3$7~y$Q(EgSU@{6WN2Ur0IUYMYJg<6Qw)4MIDNnSBzL$-659tf5zDV#!I2nM z0Dm>s!G|)@{H|fFZ1`~RaNOPb@-71m1u6v$e`N|_ooN~+rTxT5k2h-u2U`c`q=}>0 zH?xQXKk{K6Q()zjMj^0E0k=CCWB|vE&8);zG@_^yWEY-&UOZT^k1Tn<^Hw6Kn7zZ^ zv9E)9Dq2)7z3*^qI7+;T3;E*??B~X}rP@)< z!xfeek?TY-X?4!z#sHis`XjwQEOb)kX1to;!C9y~&`!QQmDhl3zOceDfe6+&)@kWi zr2qrefJKPkh^GogoN@p&Dhnwv(BX76d9O2gF#vzl$$4{h-XAqzz6AHv^Wk7J>J9tD z!LX}8ra;=otLi-vpMn76MXN%vw0=U+I9K$l&;YdSRRvn;j;rbuDFh(=p=Q{TyL9{& z@k^=ny}y=Dxm%0e(Ca9%0aveM5_%7k()BS8Spg|Rmk`0ig1)W341_1nk)9DJxHa$N z*yxugwn-VC-e6)5^-ioJ(#Pv;EEiEi@1A{pSzE*N@=2Z8vmy%*|CHutZB!`ss~0be zH-s6N9^C@e(}+GrM51wTJ_eC~-t1a^tJ&{e_nR~4y4$qv$*?;b4m%xZtXm{{Dp9GR z2vs)=Ak$CLXUCD-$BpAnQxmWzO5Bi%nBD~rD=(2A?Vga22!sxM5!Hci>n>ytCcSz# zp(1nDvHQd8>xtRybmnk(U%xwO&c?RY91q5WuH*Ea!OW~{uI|2%)ne%{y~k^%u9Pvn zw9uY0=M2i2b8`8oVfiU=RrvsnIGQeHB-0V;;$cugm8FvZX3Q$JSa#Uxo6kkf`d6kC z-)|&z2Xh3YW6Q|eeAmdVXe(;1u~WQCCl_P<%J7gOj0`2huF3mLco=6>wrm^bNa`)x zCh3w%&rbFMmsx|rur`+@h+84F)>}Z5!y@}?hAu6{F*1{o>NYOKI`r0hYX}2P*HmhE zWv;rw&U8bSv&!=$>@O(o2bf;TlC^FyXCPnSh9^oWtUxyq6Wd!>p%Y@NBbgn>gyco7 z9hCV+PTq1Vw}%6BH0E5d=>aCCy{@$c@a>x071t3>mujkvWKOVeF8lh@yXGv(+=}uh zWtAk}jc+t|19DL*xF~J6k?xcOR-5%y@9bD_&uUKwlks@0Yf5a)fXWDqI!)j_(R8J$ zK+NlLp^bO1?1($>yhPUyyKVT--fs70Q?-as2BT41^o}m}%&yo3y}**K>Ap0bOLkpe zfn^qKL7Q5x`S+uXbwz%I`>y4t6l9mug3GbN93N+>ToP%1}Lf&+YPAtqJ+rdv4FqXYaXZ?>UV^!?W+)Zl79( zhT_7+v+vxq@7%NR-1gf0d{!&?6cLD?ednHi=bnA%o_*(ZeLnln{VRRv#I)btb8cMv zHse#&wtG<%Z@%8asw3?wOAG8RX-mIMQn8P{=bEm`&f0te>po}j$zMpAv-#X(jvQqL zfD*jh^R0ryT4N=efTZy?gfxqx%ENX%%JKu{K1HRtAH@1;dMmoi33mVrhACKiidtLu z@J9GQyTu81JH%qxk5Ix8kJyeB>gB1HapeIj$r=UFC0J`cMsSaX0tg&@&zIHn!>I;GmBG=qTNy6`=C=G)au&XKgKQl6 z84BXst+jTwH^Ii6$N!debY(yfhS=Vei))d_6JNNV;w5CD939ME#Yur8Tn9>(rH3If zNthF*JRDbv8v5@5KaR&+FPz*14fN%~3fj``TjSBFZ$nn6 zIb=AU^{l34Ig@5@-W_$V?rhMRbdIW3kZz!m?hnQpdW`m+j+xhrzWn6uYwbGGBD&I2 zM-8^B?gM}uaag($TTgz&NoO)DMO~322o0p}G{WlWRXL)Jwvet6g9m|ML7vrW4UfE- z@u&~?7)NerZ-O)%v};(6+T#mdmZ1>P>#lldrPtl>%30txx6p8b3Fgp z_41E1b4xwvd6B1k6HluWzv37Ak3N1aqdm(AZrinHow8c94M7Lcd>x^sPZukeXh66w z3XD?|7t}^=_v&36^|dxfz7C zsMhU|pV0iJ$ykNt(!N#?Q&iizoxf6E<2yNTZ}qswT}cn5efe5>0jJnZ7gH;nM2?fU zbFijN?+MnaKQ;4?Jgh%LD!Dk8;$y=N%f=vtj6no~g-LvkbgTnnsffc(Q^40<(9R#qkRS;;iW60E>?~;D zt(&l+-s7G6NC7-Uxq#RR*=OZJ5e&{#C5Sl30{hmBrS&s#@E4z+=4TC44~!Mv;>>BE zyx2sIjNt{cBV*xMD7tt~jF3}7AeTBWAYlubzY6ALsDaLiI4%n{&z5aNXM~K?%eMge znqjKxo}p;AipW$2D+qSO*0x<-%c+jQG33ex;0-Dv?h2SW7)3Q-5hzFP0+a2^;X1m)*2M~BR>b82F*1&8{ChcDL z>b396;4gQJmAD1CqJ|@Aa!Zce*cq7rn1;jF4wJTub`xaL@_qx1_2rsXK=%Y6B`n_pj>^m}*1NDGhWS4WxD4-R05cb4;O2QFtp|d?WyHDky4rqR zfE$4Tm&!c$=_i+232w8T_S15a6w^o|H!P5s!tag9SDUz@?wY0T9P?ulyUDF)yWn;j zI0(pMpahH&u~9q?F-+j39g|NolDrE$8Nf=C0Fiv_%mL)BL#0sWk5=L`Di|sCoSk+y z@5FL@&Fr{fInC(Nix^5hZRQk{{Fso-)s57O&j)$PW!8mKD>msU$_voxCiy zJV{7VnH?7?mDDm33DR(dlC(`B_XB+0AC*FfA%kgF63=vDaPJTjZINaRJ_&_;rwjZN zW-`KpR0FNVKf;3V_QXSQMCWe>6_?-4aYaF7Ah5kfF@-WQ$#+l8wbqgtCJb+>2jKVK z41|D0<4S`%*v>?VMFoE#B2-;cBh=#x@e3w~4M$q~5Z93KC!bbMf%VfG3gBsd6ku!p zAfn0KCG`Ag>+ZPg=bFZ6QNyEJP*=D95~zanXVc2HV|8mT*SHs_r{|x(Vvt1^zBSlo z6@HbIu=YBHb`OmgY2j5#i$dzYw?GspbuuX1_?(%mL_(2tpI><{JdMk8ybTKd_;!|1 zDxz1r#}aX@>>~zHwNI&9>}EXk(JR)SfA2)HqHEJxfrTslnv`u=-c|rV_W4pxdvPzU1C^VKVFS1EU zYKJeW?d>zw?zfT@@Ww5>=-vqugV0)2GTDRci+5!ENk8j&^3A~P6=JEtLHeOmMn5sm z=_igdJb!{G^~^(hhSTpTDgU4Fxh45bm0Ty+pMaC?y637^9TL65R-epHI0aV1Tu}Z_ zSL3R*Zp+T+Uu(*_cPC05J_1>IT_KcRPclO75lOV^(nnG{Rh{>U{HY4nDPd;&7^TA# z5EYL|PRzb#bo`iK@H-`voly4cwtA2$&lQp~)XDHDB~xvvVf~b<0l&A^U@_&S+lAu% zV>56rN|062GTd||_xH_XpDQ4?;}fw#WAT_RvUTBM_EC6JPD{8&6Z5#%a12_*VMc3M z-0qvU>&Ap6G;90iNJcmpMI9WF1j0$S%gs7OqHc@nO&}&c97`UCi&v`SW)(=&sP*WE zq$SDmBV#L?+V0w8$FzEoa$yEel>P2(+?)-}PP5k=UOS_{Ifj=7#Wr*69?L^Yn>YNJ zJMNEL_ii#RfJNE~0w20=4h;;@3cA7=LhQ$+9$3|Qm3|>@$AXSqOUO>JHo4&~Kznea z+@7y_E{V1S5aJDRuGl`Y)+Q$B33H08_aZZAYMU!(&ccaMtlfc$|DDqWap;^R{jHM( znRA9&I<1)>pxZ+j8{`%bg(k~(K{vM1Rn7H?aVMTnWk5eW|M2|Pxt{HW3^?`fCR_Fp zCh6ZlNB(B-SbN*HfqzBFhhzg1$Ihcovjtt2bZf9>E0VMruoQ-DD~VRyG9{6yD|$HCHM(e3<(FK_0bm=7>PAAr!oI%AJ5a?mSN>c^%J=ybAOxsr@71fbt-&xdHNC-Lff^BHO>UPE2E zI2)}iw{_)~YZh9+UEcbxX-ZnQsp?$`tt+>6FFRb2YZ*Z3`^751v;G{@Lci^UZ?;ebFn}q%Rq!@kX4T zK9+-XXdM2xLGY2dHvWTwoo=u!65GgM6j>mPJEMF1#|u~?z0w>)rn;gAkyz?-n%vhW znDNC#5)|F^t5!}-7~C{W>Gz({{E`IA2Z6P3L(aHTA-q;9CEuPF-4eMnd7jGgsEZ(V z=rML1js6k2I7z;pjZF5T0|px2lvoAgYx60QlsbtoyG7JNC00ulp&0*Vd#hFm(7w!h0A8L#qhE-bxjEoD&q1%$` zdq%i&uyJ_S#D-}=*R3O8I+j<+2#BG1rb=$GN2uwe%VuWI47E!>OAkjhu`q5@*J~X` z`@wAk9$?59BQx0VU}JaOk-9Kh-j!g{8}B#v?c60DFO1XoI51qEdrIS`t_0v63>W=( za!slOvfqoF0?NB3;5d9oga_|)60vx9&U`$=eosvI19B$M*gy){kgxx`mbkLVi9Q4D zY4V=zn+IYn=u}WOQaX-!@|J@7+*;|3%vkPg?UC!k~g>Q~W~9>$QO4E&E7e==#Dct_%o(m;Q`fT3YN5 zFyw70`WNnFKDB_a!0FG2;P_7m4K zM-Kv)7XZ7YjWGs@Guc6~sFgjLsWKL!+wEZtl5(Axb5L7c`(M7`f`t#3z1U77z;1|t zVHgxPv=^meBh`acgh0^er$;<&+%!h^&5h-PxXo<}Si2Gy%!Jte00)A?kxs0?yuEy* z29a0x!eJyIi3{ImHnnB>q;^1;t;ih5x2Km1%ek;fi>-fr^5oSD8juqhlt*y64TW_}MWxwz} zQ~9kj#&GP+NBG_k?;ra18DnbQC#sXtfPeoHyl=18rZhubnYSWD7c_9mfaH-UwQVBuni}x%Umg!>l z#GJxFIqpLr5bz)q{)W%QlllY;KAzo#%nrs7230c0KY!b#EDC$&ojnCtDFDz=nGf>Jk^&1ng5!2?%YFjre*vVfy#fl6!|XTb|vNKZ)0GipP_5D}qOudwc1 zvUHzZKZl8BQ&7y-YgEmaY7`g?46<#Gt8ZTIWr)J-vtM7A-W>Fy_;lw@uh;&(pIUCo zok(x(=lKYX!NoMf2G|>FSxuqcrdncFYiU5!(yy)M=rTIFIJ-JKIsU!$CVi8{J|?@O z_T+TawYVc^fVR}fC2=g`nI`~Ue{!Eu)o zLZH?7v#s9F?)BPomZHdmXNecf_%vsphtOUe@*z928^nx3QQdpDo6x<54wqA~!YYLY zD6E_mlvq0sG)ir;MOG*va>%M0;({uQbz|zh+K|;Z#lI4Iyk<{Bj9sUnyd7xON@eA$ zc#;jPJc1q{geap^--#V1M*;tNUr?oIZ6ZU3-|d15U)EL8=;T()ltdu;#;?3T&{g3z zQYYlFDf|=x5@>=K9M5CAsDO@z4Kd=?CkDV8pW*{hV=6g^ikmW4R^{a=5*dP&L+O2T zUA9r%ml(g=B%MN?tvX$}iFbPi$F%Bn!8Sa35DT%nD3@aLXj2GsbYBdn9dRni6bJf%9HSq5h4A@!qw2)z{X=yRDcGJ>UVyed- zuqtV~yz~wShmPU20@LGmxhgy?tCCjj30jr3c8}Gnr`Ky2>!;r+vE)rbE4yeV$CXXL zG_e!4jBGtJb0cNi#U|~YhH|_|Oxn#wxix8jEop1g)*hVJq^&VXtx3BzX%|V^q}|He zE1T9MaaNtSLO^S!)e`|)E3KXk&{}C*D{X6~&7HPZTK%-O(qr)V_h53}U5^HqaPyM*xK8!3G}D(Sj5G z_DJvK|ETPf|DWyI7oB4g5_e;{%L`N82pIj=p3B!uvk%FI^2@+OWYDK3&KY!*e2CnYUma-1Y zxw=2Tzdm{t)U{zC;LHR0YDQkgfJGM`DKq)e3a1gXTVJxN-foK;r()tn^Nke8n-ElEyqTG~i@t~%A0S=zx_7S=p+RHI;%(>5w;Wz#k)Nponv^{Av)Hfp1f*4yZ#GSfEt zNIz|(k1`83IV}`}Q*~O)$QJ5(bE1!eXMdnQXYTUzNH@-WIx00VDWCi7MfE{S=M?T! zC`RdxiWy1+f_^o0i?Bxu3zGXN9GGOl<;NfG5fq6&Vd7Hw4tw(83uMrX*MSe~lAKWw zSW!NS9fm-K+21Cn+V}D8S?;mtOe}>)J|Ce9whBX-Q9rPWvm1I+)p4Q2ZtPVRcr(Qr z{9_HFhqkK2-oQ_ujboKsL%v8mvc{H=!#EwuaT-Mez^H~lgwZWFN-ONS1j24(zS@|t zr}2s8js>Z%@j7(Zn(gKF+MC;$uhL=~^2dBNS^R5*&sHG#4Co^)JyXcLw*0K*<5QBf zvLn!_T#k5s6=t@wq84?zT2X6B397OPv0`sRm(5NW^O}`qt99{(UYIYOzWV*u)hlhr zps!e;+*!j9hJAzdEuI+}Iuj^vPJPnUQeHTrJ>~DuWMc*})A@M3xd!_Hg2ZJ9WvnSq zCm>I+$*z5{9w3iN0!mmete!q}_{;lD6<#7K-$@bgrZ8%*oU|nJ(WRbP$br^L<O0#R(@=VZ)rBB5ezG(JJB5nrK?$4-)|nS*>c$4b+JFy&@j5`0W7z-3 z9nJ|W^+R)t3b#pmGPF;QFzTI3pl6 z1;G4O7J_zM7y2=N*o0wF^Du;;G*>~zhkKH#yCb1W!S8(Qmsgn;9Qm&FU_SNdy}iy}W)*v4-f|wdWJ$a9iei6XAkdCHUi=cp^4QbK63Xooas2!6?R+LUVu1O5;A~l z%?|X%cjt!94@SoDgO9G-qp7gmrw7)pJ)NR>lN9~9kTIQ429_J|^blBr0vfH!RS+|7 zh|f#e{CYiW!KlIpGLk84-O@|#IEx^a^t#=!)WpsdU})|G@-7dSD`9d31+UjSwd$CC zHCHbs4IBZJT9*@cBwvKgR65tk{tqudO~wXPL_U0Uz1HhMhYSmZL=->a!`rK0whrJE z&hf|`J5vijK47rQ%k^9T2j~-lLBv@45J-j4C z9r%nCGAk^8JTd{Rw}O5-ip)^PTK!)7}X5)vYX8o~xzPBw(5W^7m!u#_1>JlK$YhyaF>zQ@|%; zdS{$I20^pH?xr4W2KLk!EHPBPkzELL!aMu+E`hW*tE@VWEai~326o4(cL-4wN7p2S z!~T4Kf8V*^?Ktl3HYh>8?Z3`{zXVBpVs1%E2)0Y8aftHhQ9L62$$R=ZcSZD&bJ0w} z-%Un!op(?Z%+|&OB19|{Y0?eS61qr>l+Z(yUd7Nts3C+BngSvaq(}!T5v2H1rHDus zLlX$Sqx6n+DN6Hl-|xbeczKTS* z%2R_-v7pF)F&~M?7|Ul;Q7(#jpz&Aq@zICBSnzQJvB%Kx3-vfP3gFW!l@GBvb@f+< zwr0APY}doG<;1797;~pPPiPLq6ss0_0+l8Lwc9j0KsU&X1Hj}|LXF{0@r&~Cjfc;& zv6}2>zq3n~LfL25PEwWWv`n+0**OoV081^ zY8N0DOB&B9gieEbRu|Jc*T)t8iF-zSAe|D_NY$XigL+|g$3T>~jZg1o6Pdo8(;!z5 z6sF?A#164-Q=y@fu;W9+Z4_M$*O9&SMgS>~vsxZ$xQ=w0Q>GOK@{E7)aRck@z|~EE zvzp6H02l{HtQh(^5e(}I`#B%f$(OBrVy?j^QT<_Byq*W_?5wRXy~MV7Rq&jdm!;4| zwS{od7uX;l*U3muD&@5l+qc$KruxB3rnl=QGm~jj65RDd_f;}%ET(>*dc7JI>h7YV zGTEgwCQ@TA?1M|bh5cd4=pG-cQufxA!tYJgN!v8*=ZT{qqwHQ3-u4ea@#<{hE=-bE zN-p=<+}Z{*P^fOveN=!kDBJ=_PjP*F;;V0RDp!>`=NLcPM?x8zjZ6&(HPNf|W1*#~P{r)Z$8;3|cEb8}42Gg>l2N zJxWR9lNz{3i6^5M)t#6SsBmIa8M* z8xIh|iNo67%uM9Q!phl~KhFNeNTIarj!A7t9emd76#&)mFyq^5(galP2waUh24MPz zw4=(;K9LAdV!k7GN__{xls4_>w+~BCTI@X%8msfyYqONTPv%_6@AQ+?h`=(U5I3-S znnGbQtjXk`(cZH)rit+gIY{|-MYE!R^kcIoh8`s@CKPTdBoeg(+L~Hdw@Z(fDtX}+ zUox52=~SE9kap>CcIt8!XHR75v$8@U8?msJ{sw}ywGQr>fAykSaq@F54!6+Dsl&e- zI5T~IKH1b1xjOTndUe@qpe5Lr?=fE}SJ1V*mf39!?)4=Lh&^S+vZU###EQmr$Hm3< zpk%+naYeP9h(QRlGW(^9b$Y$9_AYp#i3|MtKI~yW`sUtv$CmltrxTg6iqLaPV;;K% zDO(}&59p~KQuFMe71Md{-yZ0i!}FfrvLhtWZfomAImh;v4EBR{MAUX{R?&Wlz>0fXoDS4t051qwbJkdgX*O z4>Bd~d)9}A;S@~Ev0>C~m{L{GB#!yM-=n(Jd1dj?(tsUu%!%3Cql3O(n+i)>vn`Oo zxTK`*g&@|7ic3NfSx#>y#_#Aoin(GC5qLe=OEMIqa?Rn6?C%u`!w{`*c7yckBh~hR zq<&##fI~DZ@&@vOgQ47VMQ0Ft$v)CFYJtAFy-4lqCrz~xFG^Hw!64q!L4JPu@wy)K z0aX))Xt$U97vJd7dMzCC_kvL009((x_4$%izzyS(?6??kQ~{UkErPIFeNAxz!<)gz z(S{{(Iqyxv`s=XBPT}uR@Zj_|bHS^r`jDSLtZ2GRR-`;%Z}lobuev;r81@n=x8oxc zaAHovb>n07QqY=Pxsn^CcMW23`?#{dj`K(vFoUz{Xcc6H$jQb}Q%7pva~dn9!tu%w z?*oQpC-WuoI%{!EO>gVtZDD{;4-dfMsK$g@iMW=(FFIPG#hL=HIh8Hq-e2Vxm?>Yi zpb6Q&g=zNKBj{RqexqY-MzCtLv45#z?jtcP5{SY1;!lQnu6PoU`2)Uke#*mQ^ah!D z5R~vwPR$#8YMwM;~& zK`!p0TyBW4g&%YD8L{VsJ-1}~xSwey@VDq%>r$eldHd7Y#~C1x?m(U8MQ5OT7p4>P z#OYD-ZE4Y6rddCMYlQbA!U3xjRQjS2ba=lJYhbe;d%UThzn{|3I5%YYb-Y3+|DhM3 zh8kbCO!QK3C7hG-xaL)`K57aRaIb4DTZs?la`7P#8Ot#$Z^dP4>0f+X8A<%Z-^Y3j z7F9mk5>;&ox(c^BBu&EZ5q3Qnt}^Ihu9BxO6mSVj^R{KWP*TGLE1DUT_+y9%Y&H$l zRb?{ed~y~2o;B;+FBx~Qp*ch{A~ya=4nk))qDWKX@Gjgcj8=BWKa2bH-SQSavzgQi zT&2LuPoSD65U1$k5XAj6*)&ezSmY%{CRLyHt0hWecY0O*Jw3-S?^$U24f{qC;*+`E zT*Pw%tz}}+9#d$Ib$lb?PsOJUgu-2~$Hr*{{n{-2w&uJ$Xq>p-KY0#q!1>1VEqmiM zVn}yrqUr(4mki8`FjOcky1IdUJBC3duj5pY(;iae9@1ERwG&kI; z66GW64MF7An4-*TV@=q)KN72wLV0sbqF}dm4u2y7qj)tn34jI%KU{iW53lIXjoi2K z{R9nz``{=)j8BVixUjVPHqVhvnX2BSO_eRma#fx@I^!8 zeU9X6ISM}(zt7LBeKKdb`tlu_TPk_gr~4HYL}%?Vr3h=^eR6b8mw(R#Cz3Hbuk#KB zmYbkFwBpezEm8bbz5k^%H1Tb#`PBXEM=#3m%Yh(4BOB1L>GPyv9BY*2_3g3r zO}vXHo5LfPy9&vm7E~r3tTR%0zpy{av2_Bc^|YxuVRq?4rtDo!x@LAK)yqsG`(efvb6NC`{_@cgh($4+jZhC(8)~MMHWt*LHKQWUKfs!wCwf2>YP_mr( z6k%O!{gG|nRgEF8lJR+c@7eXiq}pBV#%Z;g=o>CYf6-YZd0DxK&jKa%CxCCrQ;&ZtwF3PhGrs4w@B)AKt1h|TV_$TjW}#$Yt&y;$SD1vN z;x)CF6JP3~@aYwzTMW*Kw3yS`_$Ah-Q9AmlYvr~7T}^cslkaidLUnpxmSlgGUb#Q4 zZ4inq$1}^u$)xpi78xCZ`;wxDa&PZ_4V~!>S?qW}tFL{9f&l;k00Dvs7K7#4vrGgT z000330Cz5Ty?q>=(IOZRFK>5SGy;kCb;f$2-H~YTlw|owtzxthf2j9KZ4+f+ZRvbp z6#+Tf@dJiVsS7-7@db{ZVq;|7F^15IYku{sSV*^2Y9sxT-J6L%`mF2;zQa;SiPw2k zjR+IVGZ)_GQk$iMAa?WB7OS0x^UQjA9%mdM6f+H_9O4=J8pxB8DATZ$DU>ObrRkM9 z1J7LPksg|f7ky4joNu%Mz%=MOZ<#PAXv)*UN z-}L5KEoB-T4ME(x4$gCj50r<*?rsVu|IC(T*{fXW1`Bg*&-L#c^Er{ywMt8I@iNNW zSi5ANOjeP3@qQ&d`-+5@fbp~3HSECmBfhpa&N)>Teqdy%kyW9pXX#ub_0JdzTuV(( zt1OYw&uMbB?DpC}C5>xw@#v<$HW|4h;D7TX6e%vzL`4Shl)MQ50q$L9=AVQ6?+5^R zA?F{<{eO)2lukH2#g6)N%b6>MG?wzv;^5)VfqQa_}+${sFwR!LI-S diff --git a/R20-2 postman collection.zip b/R20-2 postman collection.zip deleted file mode 100644 index 4e5524b95da84d05404e8afb626eeccdc59956b8..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 124346 zcmV(&K;geoO9KQH000080J@5uQ8^M#3DFq=0NZg503!eZ0CQzyb#i56Xkl(=Wp{6K zYi4Y3cVAL6FfB4INJcU)YIARH>|J|r<3teuDpvnEfplr&yjwz{^a>OmM|F3+1gLUj zw>5R_;0L`5@!gr(r{7*Db{?m3P%4{guAGLKG=Fs*AWEFjP4b1Mk6YtIi22W~$Y z!CULE$O=LzEA%7l<&jOYKtcb$OqAX4j3ER5ov^=C_VyrPc7bR9>X0f5gcDOvoG@b8v|IUi)if z{#f1x<8;j@ol%WBb8We%?cQq_4~BbR(c6=BQPa){+Jq7#^)laC{@t=?}1V= z97i+c^Wf7`DW+*DPC6s#2TDvhG3CSwBgQ>W=$z9iYGM9^dk``I-b;i(g zj2a1QEU1Z~rh=+5e^E?(Zh@Tlj(2M~CGrvG83Faq1R9J{x}f@k8VIV!WR_w%-n>#O zJtGy2L1-*SjRiFk)Kp!T9|P#easm1o0S2833@A!XdxFvh)fd!2P(wkD1T_}aL{L*f zsrPh64F;JS3_B+vH=}exRp_J($BRrfuz}}ToPL3rxkz~b0d}qxg-=aoGdu5?gsHkp6 zhxU6=3`|Bw>OD#7lI%-zAjyhWqDmg*ntO|d9R!dBY-G7l*~`cWJ~ujioE%q_`5c7S z0;kxWeIF^fJpHVrjXD$hfRj^6o(QtvlcX-mz9a`qf>x_f;F%T>9Bp)2IXRN#SdtS- zP9=FF$U#q%dbzCc?fIh>YOn1(YyLbh(_DmMM&2P50qi(AkmOL3BT0@WIg#X4k|%;3 z_9UrGvMi!vc?(c3)t68CMTYp=c^}!B8n5yyAnn9PYoIhkUjnE*) z{B1Z9FmNNsd3h8*FOgYjeF!0q)^phFk=i9%|H(iHABr}gHPdpSWz1umcyOw* zsDd59BiFV}@!(f4(o9cty-<5FpktSo&lIs1daOs2#n|D4cJ+!f&`-5Dkm_&4cCZsQ zNM(V{ovt^Z!X`1l2n_YV9G)m-ktX_uaeI{ES&iCy@1MuR>_>*t0{Zy zna`&sm8qK6vk+?me~>iKeti3S)`h=7Z+6CGq447iNxu5w)vrR77f$$DaqbuQ;b&Nv z7w&Da{4D#6xdY;4-Q4?Lw7juR%%bD{Zt6h|UiOl3ImUmKmw2GU1-(7!TujPL6)KxQ zJ=-Py{Ihk-SO1i)Mnoj#u&lfka<8I!Wczk$k1OfeJ}S5K!ofw<|_03R)Qw z(^|qv*XD+cD)<&G>tY!`%Ou}=L5QloRtC^k^pk}AmTC?4_ zWaU|Hk`W|_K@N9?DUi8X$BD|#;SW?U{Tz5nnNgRB1m9qvrYj_#Ub&!upkeG~p$%)t z1P!o3?4-?u%Vl)y*uevFd0c1^v{I1YidVq2v3H^7rbi2=$^v-ZVLM0`$Pfndk_?At zOrLK&W$Yf_#K*5787ko7d2;r<`+GP`>4P(UmR1poboTO$X@HrW{xk)frDru}_l!?% z;4tf!h`KlSydSsc*FU^#!Jz-RG-1+h&Uis+0b>J`*oAkUxB zPGypEt-NtRA^1Ny3W17UUc=8Q;Tm^26ugWw`N&K|4(Hd`Z-4mdlJKN=EBPvT3R`TR zexuFv_VT;Si}x+GPIbVZm-bJT3TqdD)w2nH(@TfslOzx2#>(qN0`I60_b><7aALSc|lk< zsFK=ODp+fp11X+JR$2SaBV`-TADA45un!FgjTHGVRzGqerh<1#Q+clQtljzEA~k$% zXsr*QX}!*^5y(r^x-%fZMjA=`T4&M=@g=GI6`V&wi!-gJZE!?1CxUpArR;eJA z!%DUVvSoZR<{t^(G7-JS(#U`c*&LnSXv^iquva4e{lpG!Q<*J zQTLY>xUup|^!>FM}saP0Z_T?l;Y-Cw?c z{ciqXEsT!sQqSS{BMow#qCtRcXb^4;P=UW6?QDG&=EPS~V7urBeHR7tO_=s(N87(3 zIQ9(6eFbi(WwQ7KdJcEtQX@5k6x9}CTfZnEj?&e)8npe}_%tHi_In;(`yPSi-jD^( zM=^gc-oiUdqjB#rW!C>~a>_iwAK$Uv$Nio$-|}kg^<;q+I*N^5nOZv0WelktB-+`! z{lDgp>3ho?(|dAn9Eb<)_XJ`u4gYMrP@%n^L;*leVpGHSo@*L(nTq$-wnuL3_y09} z7KRHUC4axC4XcC()wG?xo;JiMlQsG>jP7jr81`ozJT~=Tlw`wU3oNpghz&AcFZP5S zl)`YBP%Ypm-zN;Z@l9*gL0WHvn$E-Ch|uFJZrROfB7)2DC5ppFz7G-ss0uOBdy8QD zQ4mL_c=R-h{b!$xSMlZuaOFIo#}BgLsd2Me3A4Zo`9re3f`e(6ixn{t7Y?HUku3tQ zJu!IXxcKcp4`QDJM#0*eL415`;_$%ac$=!#B&ou7){j5q2NNl7o{9#x@R!I_3&W@fl1Qxic!e7>pi_YLgW*6)6yiCK?+0QiXb55e zwh6VjmxdcA+g(=A4n+Mb;aPa{KGXIH0Mq%sjC^Q~03Xru96Mk~pvLWC%EeouNCeU{ zac-n`Y0BIetUHT9PnuO?T)cBrTT7UFV9EqHq_St0*?d``9@z#`?KTP}qX()sA)DoL z&8$6JVKWjioZUl`=r)#{=)}}p0JxC=hu++Y0GCa3-M8JdA{*VeAyQ_ysezmsehM!p z_p=*vN!zl`w+v7{%K=R)l#NV4{3v=UZ;)$ohiYwlPu^{8wG~5{5@ksF^T8Wh zlWZ2`ca{r^%*bLPT@mUQw_82Jt+0N{pn7S&c(8gaRS^-{!kUO+XHg{}M0i#hM4Vv+ zal>^=M#>5+mIy)>RZhfl&S-FFCL=o=t`%D<7gi?`94H-dnMJqq$Yb{s%B3r`i@d}H z^opr2P6m_~t17sh(UG#rw;XP4xoeC+rdRSQHRKh$$R;bF!%*>xgOp|$UTL7xY;FTG zEl(*YO}dq%)@0G@FD|s;x3~0e!`8jK9otx%P!W}{9l#OStM>l^VwVR(79sN9I%8sSc0a_NPEfPAKW2fwzzjpBX8`nIIT3#e-_7*^2BTg zlgro*a!v1u)460C=1f&&8Wd-emjS;f6O>=eI~lHenyXADuVZ{;8japd->u-EN-6J2 zo_I_4(gtIS>&6RCat=!oAFClV_YeW7&be3Nz#JctA6>EyBX+Pi8?-lj9^KS?adq|T z^7ZBW%QYjMvizn`mTp%&(Jh)a|vutsw^&{g%c7$vPle2PEr& zWE~=lTZk+wAXyB@k~mBj+R8#Om2g*0z$*iJW$~+g*ei))DP$d#Wz7O$SqQ8E1k1Kj z9uSrTh2?``+4~A5B~$ae8Qw`)tfJ5R<$eAY?eqG42jzS(DBl(aN4kg8LdP#R{%N9E z(N#fry}=JE@K+7?Htt^Yl=5w1f!i!Q_mpfUx4spxW9Qyf_-IbOu2LNRhF(U1Gp+X@ zs>2-kVjxR&fb7-;{O0+vWofqvK{Sb0`(*XX@#+-|>CN^KT1vK4=`c}rR+bWj= zOuU(uJnRhcQq+Z645rxhr9R9*XmJY3+Luq4K}R31`i;>NxK{XgZJ{tLybl`Zz@^&^ zpp#c}9UihZ3un1VvMbnfd@Kst@PW9vsex#1S-cEFt@h?@n{aZ|etsd&EJt6iwp-P& z7TM18#`#)X%kog~VT-yp$6d)EU+IMWKFJ{mo~o-e?C7Ir5%YuAZcS?oP+#2MQAoe8 zZd5@1Wxg8te=_6xk@rx~s?|0d z>}$3z+~sy_0*g=WReEDR#SBobT}qg?Of{zxG>Ca!N!wY8e#O$RkArcPAm2|C&ZtK| z(1O;aKJb;qO$g4Rh53$nQ6|J{YUd&CM`RCwt6ICy?BG-sfBwPd){;~m$*Bps2=p}LC>zVEKi&hTd0xSQK*OIjk@YSn1KzOfobDs z(i-l;aQx2<2ZIw=G%dS}CRToCY-Lz52LI7%V`_M<4*xX(^R)-($yd=%*2OVu;B$3w zxF+zn7GWaMfX%d@qLj689f{w>25|v~QwhbifyCr|9x9cz>0|E>n8^V%IbbIL??uI` zNDN>E9Bhd@1OjYHK`mLJg}g>`!Z3{#%96xb(g+K`PBBaIk}2d>^2_90@H})R1%Yhu zYeQRKaGf-G9$5?;$seSGvAilr5q=`7>m9 zbxhJWCzOt;R`JY-7w0^fA)$>!{OS&d=?!ynEEC6UK;3R4OfeTs$+OYX7zL=D*$dwC zO?~{oeLeVIZSVL>s&W^iJql5soUCdqXdbHX^vXpGs2q+^1(YKw2qaLor<<0*c2jM(=LjJr9t2*F zCt=2pX<8+&3q&UpOI=b3B-#31{8#nOiNk(7iQl;ClA!p}}+u1jSK z?4^fhT_^rxp2T!&jjS)L(*h5N;MeFtjCs_%oLJ>PcQ?zzDWbCkC-vkc6!nDANLjRK zAW+5$5P~q$wvJ0AiUcR&ReA_nKjMK(4!QgZgxF`H4;6)2Q*cWtwS#({#ur<3XGM84 zA&l=gkq#k{I;U<{K)q7WurJlu2J_*h!F;F+;1^kWVpdL@;50si#yB?zF{I5586;TZ>u@g25V*fQ>3l;l!Z46H)s zozA3UDuq|s6z=mS@=jU09=MtkfU5kG^`?$!<<01x9UIi%qC1tg~c9)wW1}0+Mals95ar_F%CtoBn+zYF=NXJ~lx! zK9n)~qXq;+yZ1qZY8?-1W7Cfu#5pN&XiMRXn- z81#7n*8=oG$gr*L2a`kQarwmr?5S(hRi0$`56c`{wiIe-mEEWN>;&H)Y?p2x=b%(B ziWk*6y^oXI>AXnym_B)xXR|~U!+!16kAm#QgPn|czIjv?EZ@{A$Y#s;T-C+qkw$zL z8_UjTTS(WOtk2qv(i2eWjjoP>_qr+4pgX+v_z#-t3JD3kHjBu2)0-c*gi?K$Km1Ye zzCb{5iPk)h3w9j1vEuj9lN>2I@6Cub#5AMKk66#YH2H=qmpRXUX9^iM~-O zl9y8~0|PZpUP3b;mhc>sw^o38p|X0LXVieIVq9g#boDw-7fHH!l`ZoHF33gl)+~Jm zU{hMG_VFb5jMqPYC;2+NTY@~Z2<+Iw4G5?o%l?cTQ}1zI(WTMAFdOsW!AwOCfq1mU}Uklubpw!`4cxyj#8LLUo8` zt0JA>Y8BAr7f;~x=RaILd+viBhF%z+)W!#wdE;vY9Y;Zmk`T|fto>nqTPv=qwqLca z#WJ7-qz*z=1qIVtFL8D?*7pwiLeCakRGMv>-DO~YYJ>I?)N}dhX85qnkzBD0(tDwp z5vNhjh_a_3)1YGif(7?a{`&cFoK6pp-wQ~-&-8;`_bi0Fq zIu32ME7Ixm=GW`;^}NR3!&Z#_D4q`dw!xiOZH;_aw6dHp!)eK{8&@+a^hCR1|%Sn$Oo!zG2QDR?sbGIVCXWC1d@MHeSP*<@i=TGs1L zgomW;2>UJ6-V3IioHa-tuFg-FPCpDp+hS)Pwoa`(B6Y#*4C?mdgG1I&F6A1W|a#}yM{v9_I%C025D=LrFQCvh@ zWUNXFYq9A_D*9c+9@T3V)ix_zRJ*Ebhh^SgJr=0}%LK=6m8hVoB&fG@^jGYHSgR_R z#mhe!U@y@ytx3!DK7S<*#QfGKSMpFec9r6jMD&W)wZqFqxEF-LRphEF4KS6g_@$Jx ztK41OI4|m>nJsj}Ej%rYJsNLwJSG_VM7;1Mdg!UngHg0koqE~$4SqFhzZODfTltA` z(P}wqZ!0g!o?*Ih8nO!qha2g`8LQC@wo`P0-3w6E5!ytysCwPY7+%z!oDt zVu!hS$Z=sVwNYL0HEUe>i=F=NgUJx2P%Lump#ZWF_ui)aIZ5BoYMT>eLm934a);fG z+3x!p1=s1;bQI8k&Ta3+Jqq!JqBVbG6E`SA)UEBinY%vVynFNgo)VO%EXRGZsAq0N zxgDO;O&%virB|V#RYnrBsRki9(?|L?T+c8{DQts}s-CSAII8Z6#nfKZ+R$Wem50LN z2ZMQQfs$mpP762OoCBuq$U6DyWwVb2Bqh*2i+wN8mQ`)HZwx`^e*Gb3g*ZUX8N1V# zst?nf-yLahb|_j`6wQf`5ws-7Qk=?H!EdbP8&FOIKyt1UqF~#4@5b2d)h6yGCgxxq z#T|@;!%>aKvHxh$T0Ehc2E)V!2@Q8)g~tJ@wc8IAj*xA;A+{=EYLX1=UR2T%o)Yv} z$w$c&CCm$#$~p-c@l;P6Ev?Z05txNRdYyICL-hpWSeZJ3FJd}%vnUq%VN5-+2G06CX8q)zy(6^=puWtwc#_1C6> zXjy&KS`^$fMlv6D=zXJy=C2oou$NA3ne4a1VzhfgNyJ$4e!)kX2=~o=Kf{9R#71IK z>X1O$S6TYHXXsWGL3mWYpJB<>#71IK>X7u#G>)%g52u8{Y&lq(EpFzIGrq#GcP9be zJ6B@0euEdvlf-DFKY?-qFIt;1a>-Z52Xwx-ho! z%CH3Trc{y9=0%S1s}z~v8dpwJGZOavL$-oTBsAiCSgCCu6nVM(Sfc=mPBX@_93%K| z=FwJlsbzZCo%8{G0s^|ggsTotIk2ubyo@Dp4gCym7s z5qfP=3=YSyVb^=6Ankg-?Qv{lhl@S2hdmPH>Bzi(q*dl@vi9TUnM$UZF9sdwirn+8 zuJD9?0h|NW-lk_E%9$6+7hL})($1*5oLsE9DOutZ4J!re6k7_2z2BaV|663lnAstv z{V;sZ(Nj*<-%+U{TMs_MxeO94kCfx+_xS)&bX)LGThBf|eA9ZVW5Br@hiqDEM|YHJ zx7u{tu^yJ;#pfowP{`5MA9PsT#kEI>*2}{stx4l`8FUFZ3X1cC@EQD#Z)8bUxD)Q@ z!Kqibf8l&Kv#J|?a_?i0vA4+-`wd0xp_b7n!HbpqUSURXUqfT3$sH6}R-98Ry%+qT z6!25;;E>cfd=Xz|#R`hczSU<)vf|LrY=$9RmlfxCGGK>A;LHuzFdQV1)KNjG z2YWVV14sVs*9B_mCNVcT%x&c-Ah!kS6jvwqIUKCfN5n?Ax25H3F+_Z{qly1v*kA_g zyW5LzEJlK8g11n7ig9v$8iugeBxkCU%^AC%HZ9iiHf2eK9_P9r!m#W|8CoNiC>q7c zIm~40QGZI3lV{|fX}+KFC``_Q?Y&EI^O!n|_Mt*~kbE#zmd5gN4}gjN(@G8MXH>uE zw4F<%*I+(Myiq%#ydxfwC_g*m(T;euBOdLDN4=m6uN^oF6&r7zkECy?9SkLJj*?(0 zwVcS7*A=dk&Q{WQ@fu@E3mh=kKOXh5)h(sT6cCif}x6wUJcDSpdmRV)&LMA*XY4+G=dVRIwI z=0ah!Isi5;Du}NDVY8=z2fm@YoI?Xb4DHd)N;3=u#^DGcp!(S}`GYF+RFPQ~s(&rE z2QF%+jQHle&fC~mcGGP(_98GMND4X6WtYctE^9<>1pohD0hTmWkQ1;JMns86P zW_UUUJPMyJwg=snQq0-aBiU73>CShk55ZCQA;9nP*r9F*j?;5O+2X^W(7RDB&aA!iU?+SX&@s*_AhbKB< z&-dUq@PprWk785op(%|fRq!*3Fj|2y_AYzpKpR_+jqEmWThBtl$Z`Q{W)%s`eX0rb zSv+dh9IJpVsA>OZzXnE$YNUENRMO~l;Yc+lbYe_3Ma1AwDaq2-!lr86Ga9!l*l0OH z=Meb%yTO`U8YkD7K%K%S@%`lTqlu4Xs)YIs_t1SmsWx4xPq^Q@pRuzk8*hnoT0~<8 z`hH?F);wr<%UDweWye%IPhP8a+-ZjT+-bKpzNo&R;RxlSK6l#9D#y$C!wSSrhP!A# z^hRO*Huj30IKcWrePdxW$H5&%+899EU5yfa+IG~r+xh6SUouk8JA_o(C_xOLBvO~D zr%M7gjrwYr%F}O4j4NNTlOYH3<9X36f02{7DxO2@uK8Eq3% zk+ftkUta!>y|pbRq{9_23a4wfaJ(!~WglI$*{VMHoD!qny{HvIP{{;-;)|D@U;YI5 zB4;&k*2Z=(dsJtE+!pDIEJDMEY0>7%rx>`xr5)`jXHwi`j`cdO+)#~ODAKfcH_)8r9pnt309?|39rf_3#Md4aCJ!+)6`eZ*LRF@%D_IoQ zakFy?bvK{|LXjxoBK)BwhC2B$5T7qjru3Suu5Wo$bM|5Mbv0C+EwG3pnl!7t1Q#R$ zq_Jvy^Kl2n`yiz_CnBl@Z%nu7#l|SbA!!$(I0liuZfo|g#pedZ@{(=98#WxT*XDfp z5xrO;yj20cQX#|)=Pm!Ay=(7n+XmuaMc5yE0L#NpoHRq$AxPZKK$-+i+HJr9!?BfC zn=NOSoUR!5-FL?mMTwM6N}^;d5r(0yOdiSO9Uu3*JJy7iH&EL*A$Bt8nFF!316Y>A z22ITadZdtFAksGoqXq^S%>~&O?%zvq;ZCxA;-QFyU8q=_+*S*S6|jJr0Ae*mS+-HC z0uR{d0h?5uNJUpvY(+(g1fHUxDJqtdjSML`ilCfo%+t=q(kamXFN>aa-ghj~LkSQUziNp8+bZ&IGkg^KE0-q|XCWO&*FOmCB zpPgZMJNBSjEVf&*{B*1&JP;7FPlrV0uO2|Q3>vpESZ4SWaDAA-ID=OTj>=zKOCm>*}lHJz~=k@8xa~nx;8Xy@glq@v5&lb#;=^ zih!=9_`7%*3cZ+VCY{h5|K*0I5;~bI3mvd^K&hvZH$_2kpp@$e_}=MR@E4sVVr7GS z{LJ$~))ph+E1i;p0RBA!zi5-Y`RWW)YnK-JfM#-RIj(Qj7~rBI$<$i)Ki=sblvn>Z zZaDtr29X`3ypIXd$)WGO0uyy+^Lj`aR;pKPFeYK4;r#wj;4^Brxh9k4j0DV^C<2yK z91AQERyA5{+_IW`UbeGLwmQiJ4CNh9yn-+FQyesm|(q4zjMU*Tfw42~r$S|KhRi&1L+ zlkfX$R}XuNp6x5jg-~1&#HdVbqy~5Q`%VA)>Z1Q)aNc+7T}X6mhmyBVHBr*w%Ivzy zb40Pbd}7~L*JgFOx|^p0^qdh6g5IJ>5dc9);_;*O){pwsU2QFKh=5MvviJu7h&It$ z*TB@ludD1vhnw%gPh#H8S0?kLN*c?XaO3f3>&R&K`eK_so%h>%`dmk(sP*Fz_i(SvtPhHvAvA1zljw; zE}rc4j;b>Y+q$ON-Y^W#vURTZ8(m2cs#rd)-t;Q9-PFEHD5sU?t{lhZFPa0U3qm_4 ze9d4_nSET$myh4WrWr05ej;Yk3j=57&hF8D$@%q@>oX!V*e^!xq>Z(|!R27@aSG;v zZ=7#o105}=;dkG|ZtD4=nm9K{ zea+P<)!85x+ug(WRw7@>pW;FP*!wzjI6vk%p9}Bl%rr;J$d!_+71b!tz zZJm!jdIxO2-nZ;LZjH|`t<&(bAhVZ*almvD+(~xKmiv>;7(Ya_u4%^jpYiy!7jZz? zE$BfVP9qdc3>kdVFxH$#jjPl=CuOKJUkF!!=o>#AvvV0gB4gWdxD6u}2%=+K0Ij^c zet&bzhFo3K(>Z|p(#@5euwctYM;Eks|J~t4{RqTygbl8$jjY)XPVmMhtjl4A{m0A~rmhqlmM`d&vmG2W=;*YFak6 z+|mim0`;RBiRs#w7}nS7M23;KB{L7+A_#{hC*584AEQj)OUMsWnT}-IM0`3bN1My0 zV28PI7Lm>Mq8TjjeYc|3tZWtoMK)PyD_qYQeakD_!7lsH%8CY^n~j3Mm`L_|yZrxs zMx1`s=X5cWOU8*DtEPRy^phg_!CQpO(Uk5b*5tEn4tYgBpQxMBVavXpE~&5ox}DMS zaku-h$Km}~$2%wE`_6HvM#mFc0i$naNi)F` zT-zb8ZBpi*W`pREXidg?R%DDXMo%+ai&Ii+XHIlBu3+DfCwVrE8rkS}ms(YrvBTO- zA6c2{1k;%@#r}+-?8M}4iBl96F`B{!&}A&ZyDuZ2`l%#$U=~H+jpb-PO|(|oPkZFp zKM3uW>}kZmAy`^y1xHH4*_lL4Em252)t_uU$x+DkjR^pCevAX3IbBD76uuM4Q6p+m zoQzZvsYK={*p8KN5u2huQ5VqSDd7Zs9GIO&WUoor^#Xjeb8Y?{3BsTU^M#FC^zJc% zlEh!%!U0qLF2>?Ls(gYfiTeLIUN&XVmwr(Qd44v1Bq`Goqn;uHv|veqL|GwGY$XvP zHIpR?n9GgWi2x!0OM>hucBFaWK0Bf)Pl01vp5|iZ>$$4%k#>@ViLs=0*Fg(qI;bEq z7N>u4$p;UdiS7IoW*a6TYTcv(R;@4F?J~6NG(W8^k4AB}n1Wa1Yh6zc}ec?aB2g^Tp;Ngb%67 zRek(!?~1|=MxI5h+z7F9k9?y-jwF$!()`{nAS7FtYw1MIwPeYt%yRxX&S_q=F{_6) z<@8C86K8QsT5+X^L9iGe-&h%*!$^>Pd`%WrB>X78LyxG&DckUQ-=!^EKO|kGw~-y_b;?3?%FRR4_=$EY2CO#JsC+og=7Y4ItmelOYMWU<;OLlaiJL4y z#XuI~e@Wa(TOvwvMVJy)F7%KK(j-64lnLgeSMTS7HPQgYExVjhtJh?86i3-}$qow| zk)}e*fYUd{*DTCQx;{$dWprqy;ukt-(ZBIarV8$*N}Z;UPOp<8pnKA9+5D70)%ny8 zdWYtUc?9gdlTOQK4xO(_OVUV~d|mu@W5T!7$a?+J+-m!3a5wDbZMp1c2ZWA&DuHcrFxyuYJ#Az_0Cvn0JquJZ!d_e9cOr{g|OA*P5 z3|hxoV@jALX|b3?FUG)5aK_2!yx?q;iOj?iU{m;gLAzX0Oy10AK&amH2lA_c?JGg& ztH$CT6EHqMI;n@;Hx01oACobPz8#o($pMNx(B=T-7A7`8AP%Gu>%woKzeUf&FJRn9 zuej)WMnCD2`*AwICvish1E60T_ES>8}12 z>tc@YtZLam@NVdT_?e7voZo^2BAqQy*r{S&YK;0wvgVn;2egu+Pm{q3v!$~JFco{j z(Z3O9bsbH4anE1T8QPSn0p1_Xj_OXKfgo-#`{_w?dk)Pyn1O{#>AE}nDo(~%7-rNy zwRvoi&(7SskA`)y2PRDGWW~?2>ZNS@F(|-y;uWv}MS~?RY^k8IQ&17K?BgH&i|6AP z{DYIAV;RQa^1m_$@fEplc6C&CS!LE5Rzcemui#TAv!ZkDmawd=uq+(giNE zUP~0ydG z3^3N^w-V`XLH2Ez;&5D<7+-k7c(j<1d$^EX=i9sUo9}GPZwrsVNby}x>KEVl7xu-s z1-7?cd~E{T*;{Kv!)4BNn3clN9RcAYTs+3x zKA169VATBQJh8zQq1YTK4U%X!R>S;KSh2;HtAdb03YrG^K7agHL2I+Ijf7?9nIp8s z5Dhy_EC4S8oQ@28H)JfDqncBS!s zf)aG7aM?ld$(umgq6nin?NF=E+12l>ej53ahh7O+J|vaxs=4|&Wbi`u24T?Sr0!hw zFZ*}>@~#TV$iYP!6^aPuNW&V}U_u1VZ%mc;x<-mqP9=*e^L=mVf|^s}PpmAj@iPS@KYppe-dZcAz5YHwh5QOt zB58Kin6_GNs+mex(n)A)&rDNuW(eG1-urb+g^^lzY^&w^R569LwzG4*uivLEY(v)d zPGP>Ri|+#$6UB{P=Klw>BG%s^F|{I}B)4wj|J$I*tn)uOZ}1Q5d%aGoW~yF)<3Gi- zYIbSMx#Za0{&U==8km1jKFvb{O-!9Rq*J{?PC{?O>Yd%(Tn^69?grOaQQc;)rJWKd zpuA4FQNNo02*}1=e$y*W>j7MWQ%~ywY}JRS^#HC$Oil1V>+)NP^tK+r+b+ee2XN~` z*5aMZda|YjTl1P~7_`cKvB4&b2+Mrqb|MjhUx18Wz6Sm-BH>*Xx`p{stX~ zjNQ7o*oR1~>j!DCA#+tXhPff}UJG-#Ft;Vcb^FLw3!lGe_`H4Oszu+Mi2qcg1UBsT z?ITw$2-;{Ru<=Mt`^Z(R1a&EaO;3RKk*ojNyZYtEX(0Y8p8i2$XqqN%`f)>nPFtWb zTyNR}!%!yUCQi?gI>B}h0&_FG1~c$-JPEs6%aSE0mTfs{kMhyG%F=2jt)$iJx2va* zEwHhEnO?fDv6(hR)U=uJ*zE3E=(_yb-Ti;e?nbdDRvtaG{e)S@Fpbno#Y7VipkXMo zpCS7QDjdQs+yw65=G%oYr9H!0nntMD4F2|X5GPLqI`aJNSo!XHes-*Mmpwl_R=Ufc zpB*z$S^r1Rj;*pMdj&n&ZJ;Ng81lyA18g&>)b#bWe3T1PSSiE>D=fTRw^WS;U!jI} zj7~c`Fa!(NdrqutTN;t20$J;}4lKVVhLu`+LCi=F8Ui)mxW zipM+h8|3f4IafX8+peFUp|!Q_PvKR!N}KRH+iAmqYuZk2%J77GR!;D!Ljlfnr=u^8 z`qJ%D9ci#7^QSbh<+|UUq4`nN85kQhdBy&;lm?_&t&nXpS+T!njtycHT;>HJwleLg z;7>nJHl&YWH=WG7YL{`0WE3ZfWzGBueOE=dw17TYsXDZD(Eoapb?GKOCZHKOfE(7ygBRMd z0Ay;xTQ^QVDq)an)IyN4_&q?+^raLN(}7y1(2U^Zl&Xv%a~L%XgbbAbnz}!++P1(e zQ6fojQ(LXQ$p&)7-SncOEFkfehCai;FzXSStDK~8u_ z2_jcq{e-M4RK%yFugEOLLsrhqkk>i==KALH>+`D&hlEukkJP!iQkaB7oyy_rMoLYd zD`NRWRyv>iwEkSy#YgH*{{aC%-Vh6>`iq_&Ri{iSc5kRRkE{4^{4ky+FfAToMo_vV zm<`}*Xt<=#%+ow_stG+Tm|qR{he70iMz~SR>%X;+D7icTgVpnydhI!jO3xf(aG@m z>g4pRMFT`lD>+D~moHzQpR#;6mvS+!ZekHSLNuK6=u`I^U|$1|<~7k@Owb*VojanG zQFROY?99VR3Y1l;#}BO4LNP|lH$-%aPN{U4TjRS_ZAudql;I@Qg&oh1?7G)zd6!MW z+DQs!xCo-y0fQ}+eB=6K+}j)=;K5EBZ96B?&kT7e)@Cp-W5!Unc5Y!Vy_7;}h>=ms zX0pNWDmRsx>{eouY|Du%N@nG9%<75uZNEzo<^@LK-PXZTeFRS4!&h>F`Zl>{<6tOi zF)RWhwP@wfQW+f@N(Pi^UNynHm znq)TY8p{2~_kJ}&KN=9JO2ecd>q3u`t}$bjXI8pKF*nz+kd{<-)Brj_#lI6Q&Jt87 z*sKojMXpQyqTzt@&4xtf;w;B(C^Qz_Etojb{VI5IV2W;%)LS!=S%Jl9g8T?-dZ4zv z${jWYmg**A%c`cEWbJiP{qu0*Mdtcoq!19}a|gC9(J6S&Hej=wsv3!%9_dmaDVMa+ zG-Hc`L@HTtB=&1jmNzWTX3?Db|E}0TR3iY{B$)aHe^LsW0J7SPumnH`)m`UQ^VXqk zS>@tm)H;ArHkIdP5+^JT!ncV&)8@~AOJs_&iv-2eva1+CL?-Fii2qKKDQHrHO0%cX zWSIm_K_p{uY1RNz{zTSM3?LdPuHmzkMMH*qJ;Bdh?}QyA$sBqST|B7kCK;u}k%}yP>|Q6$Z;1Rj%D*9scVE5yCywW=1}WpK}HuQ6?YU7;Ml}=ui);p2I(_ zhlkd1sKDqzT#{No_u`b+444~}A_X7IQyqYCgYoVQBFBP;gp*&(K=^Dg#OxmJ0v0|I!+Z>mCcW0qL9284Xc>DCrA4H5x{sP!CWOb`$G~91ilH{3?Nat);@jTm zN*_itD$G!5pqegVi3W>2grG$yJWYpK}Mvc*f93 z(+Omr!y$VzCT0opKyAMXK|L}=YG=0Wb*|;?NbI8+_C>1Zl zXx7R&hGwBtGOAp$I~EOt@etY75Vqufu$BDTXMXovlJdF5H!AIyero09`Ln5TuPLX; z6B+WDxj_^*$9G=Sd|YS23+X6WsI6&{xpWKX#RC|$W9I~R(K+-K`Ei_Hf9s4uJ>IsY zk8vxf){i>GZ32;hK{*WKgbhFVDKSaAahz({bOr|HV=4b2Qf&@|yzvmGkwXzNonK}XSVZ36{D9#DhC^@2 zR}v^L>M+O3l{V(CaDDE!eb&K!H|gO1AbMlCLa*$0r1(NV*ZH8vg0QB^PllkJ5h+{= z_N$)T%;B*Vy$^zy%eia>@&n%>ndEu{`jvFfFXfl-IM$q>kyI8aS{5N%Oj*K*R)CEb z(>H=*mi>vu?V=+crwnwon2sTKvg}VJ-z4O;xZZMj+_FEhmQqkvV?vdO0_j+RxSCdA zn|^VTW9NNOrbS z32nkvo+v9juPP@_&YBkay&TknDWzwR6mKaH?3hr7>&abhTTcaqTCaN`(aOU<>cQ2=#GWnA<)#rV6 z?(T*5gaakyX#)lY!u^*tCOmc**-Ui8|A$q>o<&2BcfM0!DORi_^+U-!i(FwrT&j4& zF8bN9eZ<~by_997bTGYUB+J+j+fcG9I%pSA&v_u!t_|)T6tG1<8@Icy#pq_w#JT9F zHFKLKTU)b+wzXKs*EaG5W&6lp!0ldud)Yz8tY{#i@ z$Ek*AdG>HGVfLtW(Ozi&$Txk^vm^3D!m=@>qgX;Tr*hQab)Ry|t(!x1lZ9dk$sX+s z`QAN}Nfo-zQy%rPOVyxLgMCcUjX1d$9NjL&$z`(U8g6u}%_5VHZm-deHJYX7aobl8 z>qigF!%mpK<4I3KC?T}(0CY}kGvcb)(sJ*=@hFyR^3*Opbbo)(JR>N(uOQFWM?&>A zSji7x`qJ|C!uiY}$J_&1Fo#r#q0D0Ue&hkxOuW>O^6y3;ytoaJF0Ifl3`{r+gD6Y$ zS6rMyY`(&;5EqP$K!bdA9IBYkPt>eHRfvxVX?gvUA9V3g7Mst zG-hS=i8;RSk~5N2{l9j#RbJ!~~l@1w@O8b8c zl@;D=D}HHK=AB-Gg(5iM`U4o$$=GWr{ny4u_a)}~$ehXDM^3q7Yc3RouET7SO2w=lkZe+#jfiraAku{K zWGQm;xU%5?^e_w&a$3#k6?HA@*08Z+H^J3~48mMh&(~ zJp1$aFWfM6=g#{(tveU4$v@c6_Yl58*EI5ILyJ>d51&8CKAk1Dn^(ParTY`=&*PH^ z_jg!TGaYyQop*Qbg^h)rFVE2J24^Yk+-?{xz>jOa6j~~*9rx~-=cM*+D_)QI+^T1^uYA@3r>!_77Wo!@*(e z=&*Cw>Ux9T?q2WkV7J$O%bGK*(GUYhb_Ro^y#u$`>K^QmT6^xE+d3LT2#4XQ*FD@D z4ZQuGqxy_sd801HjQP?bJ_%W?ecb8rN5JUa$owY@i;ONiWv{!MxpmtqybE099IJ;C z6*dCCCSyyqvReyZ{o|%;b!%%{mjQFQuEfybeUrCCiWAiN=kJ0$aEz2u7gq1nL0$P?kz9y6d()Y?Lv5@=nzBfN!2ov8Vh8kTA_$ zRD3d4W*(h%Cx(fEXvZ6(Dk@`^>z^gBVF67G=e&u>9-RWgG+TvS^G<%wsW=SQ{wzG81jl50Ypft%3X?v~=`6 zW0ITi6e#XMA}9(M;F~PUPs}!hU^CeZ>RLjT#kr?1&YX8z*%X%)<@rY8fwD03ZhmI* zizU#6I>nYRh`rX)ZhbQ)2TO=eHRVEwOf+OkQkv}zn~~lefm21Pkzw?Pg#&3Jx@0<# zaKGC!7|d1fXiduvtVaEn%TDFR%BF;2%Z;V1XHm*H3#P!TeC!iZSp{@uV5&LQrB48i z)T~+J<&rY;r~(es>J7YUZOdSx+*OXjq~E6L&jIt-Shz`H0LsRL>(?@f^0t++hKe$p zDU?1nh6EBL(XEKODI%n`1;l5)y?@CnPbK0ymQuyk6ETu46`Q3u^EY2 z^0<6%un9jBJFYK`YQj|J$?hoEC!e49zrH*>PlNI&;r^o-<8Cu4q6E5^#Jxx^c3q%4 z<*}r*lK-evEElZ)qLUj;u#D&|?!=_~iHO=pei+3B>BXB}&XOM&+7Xu=Rq1#sgz#fo zKtGbCGjs5?eeRUk%EHH_V0pBF*8dFSp?jix>%Z;a;PTk$?%j~8XtbKFe_t+?waTzl zUDilLtS@PdPMJp+cmY+$SbAZITXXq1WAthb_x{4+K4s%;G~)E3P0hn0XMZzzsBXX2 z+1be%aIH)OTt@R?@H(6X{_ma;9VyXCGAe7I!hJ_M7>hGZ#17D6*dvAtjM!D)jkAS^ z88pnGcwV1wI~N$qnR4PNa>rZBzC~M*AH!G!(L00}Jxl9`*W3v-=!)R9cC>2nGvu%`w; z!+7ABa+i#O7ox<|l0rc#Xxk(dH*GkWe>{=%@a3CUDB7PrnhP(Sw%OuHM^3cRMX@)H z+Iwwm4*toih}s9;g4v9-mk~)G2%+wPMEDbu8knsMSZBbaAWj>Ao!eJBw@t=~{zD=? z=95?zJF*Gz=lzmplKgAD2&Wvy7AYz(4ojRu(hP14K%2%a%0~T|hLblwx)W0#1=6%U zFZPa(fy&g3-I+^+3Xk!3an#w_1{)YI zD{JR0@Zty9e;HfdUT<6af9<>t{2?wHyWLf=@z!P~D_t*!9>ONr_S(RrAyI!`Iad91 z(aO<<|JKgh^V0F;mku;3`OWAWNcn%LY@EFOenrCnbfwN^hj-RpbQ;%tOmFF1{d{!! z%?+IIO;1S7F)TTdLETOzk-6QdNuXGUoZF4dJA5G4vK-xROc+^q-lTfSudiiW3r%Yh zEdpST_bXhsHC5Bli@^#QVP)wixwm6ozXmCC1NWXq906zpR@d$AG*^Wfs#kz#0&9ue zCJRWX+WGcvscBXQ3D;$oPBIS(qkA-CW{D9PtLB+l#=?H8d+(+fH_4zo` zFj;>v&mY}bLg_I#e~5%wm@d+kI59BrgdgcIZ?`xRI%g|nC^1V&e1?BD#Z&&c?lu*@H-Uck(L)#PPVz874Xlq{^MeBNZ@G?AL2-U|yS%n77dY4NXP*hH)j5 zXJ1Nqq9!F&|5`anMPU$%!qr!}%aiveiv*4inBq6?y!lZ(ledA%z&pQq8thlSP~u`P z?o=+$G7c@?P?z_q%We>b62NBwh0}TM!>u*frnFh1<5$Fmw!_iRT$ONM`(B6$mH7)C zzO&CePRlvxGKr(_J%D)7Px!js5sCWG&%P`8++F^8mruo0Xc&TPxUV7MH%9I_N}^=R z7yA^=8JPR`&%dBIhTDrN;H8*O0LyMUz&!rw;*VV*gVY$Q<+oMQYq-9F%3e4u=4gbM z!xO5g<(&D^bnMO}1$rWlCI<`pVa~YX2Qflh82)4MnnMAFxcCn|J~rc5=7YLSFhYF= zWH}F$R)`{jicDGC%3X5Y=SY+4u)h7}4!}$3+QA;f$Q8k&hsvigSA+@A_&`y+CN>bo5 z@k6mZ<|%L$8KS2a=&(?zXe5aweaoEu9b zOsQ`mA|U*^7<5W)!E7|bXYvSNk@0M$_*4O{C1XBGUSF0xZq#dc_d9Lgi{=wmhL2P2 zY1BL1K`zd4;}C%wu45pP{g`#f!qFl+`6Q^nsg43NIdvIOhb2DFuR$192M85KmstUd zMoD*WzJGO|B}IroOkZ4DuSr3ec6ThUb~y-B{DlM@5>$|>f#m$h-qk2KP6OdrF)+h# z(l%-OJN%V4cLe%3X?wtM;BgYC=OM8(wsUtKxEUUU=i^D()n{3i8o);XC6AkJu6I#_wo!p62~M&U;6Uy=h_Wmk0|M5lvQnk^=uvDUjly zd|}XB{VbGsIZl%Oo;Ewn%BcUzW~ZEdd)o6n?Rg69d6pJ_IdK&h7{Z^nLn{c4<<+7k z?Y^83Z7%7awn+b1<*2ajw^2IeKsE|8Q&|r*qldc;?2zLl3*R9`wYZl+{?YI{ZfM{7 zNSMZJgBd6+zY1xKNgSMMI4jk zeY?olM1x{RN4%s%l8ecamZ=_RpUT`q5ZALcN>I?SPG#9h;}Yb&o>!e=6G%*rb%N1t~ZGy z`N_nW{VSqAljN4b#X=++7Oz)olc6x;s{jzrA{?m73_YFO7^avdqLq22R%w|SgV<3` zcaxdlrztA@qTu5-x6CRH6AVNzW6}@JK$q@VXLUwtZot{RSgky-ugw`#apn9;GQ=G7 zg7jWW#ri|Rd1Pdf=l}=>`wS6&n!I;EV!iyMn(>j~gpU|3(k-PI&5R2@xyjG!smy4! z4gvC|5oe-H&gn1pIsf@)>SJ69^O0YPIr_Pppb~2_+2q5#vHUV}M4k6t)}PDTUv6)G zKA-Vr^?Y`e-4+oH3$SmLU1}!T9*uL(?CSkpo z(T8H@IwViVK;(tA-N4}-+cg=GlY`M7N_$5j($Di$rh5|oFsl0|>CaDfW57BTn&4{F3IGGt%)1XW)ZMh%L(4oO-vUU5<>4E=i2=jcvOM1vJ7?H}WqiblidC z6BWBQLU2)JUJ+yzKA!}9)lqQaR|3;7dS37Aa7tEy4cab#7^B7SKU8?b zH#EBiYL?9~(m_tk)03l1ObVu!KJhr7bl}jA)?%>&3a~|h+&~L#A+DtZqPj~GC29zY zw<)f%pk=|6*B((S1rE@_{&r9|dR_?Pifs^BE~pt!h$Qs9CAVE+)9|>M5eW?dV~q1- z$sG!BMY$^Sypioarg* ztM~a}7JwfOtO+m9L+5sirK~ix+#3RgZ!Rp-Iu{^}t;mYmWwLkNm6=flIpp`kZsp#p z4;O+O=}+qJ{qJI$3R(3|W{QECF{s66|BuOt#?um#{C81!0i5I+2Q!8$EYc4mUbbNL z*N$a$+gH~RI)N6!73t8ea=bcHOr3Cm-Jm*R!Cr0^5ttMaFCoOxgtKl=@?U&@QoI=0NoXA*Kv`V+!&~Y z2(`E!EQ)t=3sxXZ&p3qB^GUE?{PKMc7!P&bHV`$_7}=Q=~zAlBr}Ip$QFF$$C5#4A_xN);EvC~u!!gF+QrQmM}yZKB$;J9 zKb~1WoqX`a$?+F#`)#|g`6p>mFW+BV$QOC`B<590nsT?(M_96sb^;xBFjaCvL6zDp zo;z{rXC(WfEcTJ_R@=~ECKoI!=9D@b)FGsn%Zv!0 zoT98Mpa8AAdi`YeWY#x`rdO5-*lhWPgFEHzUA%*?F*HaPr1oaToL;Gz_z)UV&VI7& zdt69nW07>V4WGWsvnP8Z6l+rNCm=W<{qaVT4k4%32p}PKsRbZeW5XFgj!=d(u zGqv$MK?aPO8Wuja9oycNO%?*ob?2;oaf1qDXGE>qRCo{+O;z1&&JJ6Y5m{Ksmk>gz zP?1Qy2uMNDVOpqeXdGR(43skG8(vRhykSo{J83PU2M@T|}oJ zb{!XpY&KR~$ORA+aLdNAeEB{I&R4_Pu51lNY`32qwdOA+*X|@hr0(JXQrorGFZoOI zoUi3~l3Rxy+Qqg9BIeB45#s9iv!fq7XE$f>5?n9SYU;~yfK@^Suo-x2sU|T*uih0Y zN}D=)hMb&aX&91W`Sm-Mpj4Zlvy0BtB94(>louZ>YB}_x^h-H~_Mh@Z zm750sZqA=#|{D5xkSH5NEwo*-Rsf{|oT zF;gFgqaG8@W#Uj8?zF^w)O1hWJUD5ewy)de6+UeGv=t@aEVN!l4T>4?5{&u?6tfD{ zvK34#atniBWdr%X)Tsz?+Kci~#d)BBho6n;T(F?UWgY5W$DPn7^aVScU`yWieG+>_ z0QmC@Gd(>yqTFj$&KBjy0QxR*ypS??ETzmO_NZBE;!8e#P%dZ0*RAH{i>K|D{+_LVQx)@-W9i7XkYz;VY72a6e6-`!>k1V{fsYtfqis| z`&U3%yz~%k5vH>@&{05CJsPE23cB{dI~E7v;YsK{$WkEv=^K$NeG^Xf^nag_%iXrK zEsP7AT-(H9e!fd3Rnm%57ujiM=)5%$Kih!&VhR|)%QUsp!7H}1yl~G>GpXMxv!p{c z?WiZ@u)qd0RyZ9*Sey8E9p^cWl>sJYsNg?D+@x`5Jwi4PCgOf^YG>{V&@g!0!B*%# zI}k~OA{4tQs-fj*a|Xk6u2X&%A9-hXbNY$+;_Si;oqf}g6-_NXoes-$dnIR z(tf_F3VxoYXO)MNOW!PGZ0H#iIyc9CbDLI#)TNNp3j%tl-#CJCf93+g2s7EUd+Ch_ zSSF%lOna4UX9@`jm2VmS}wV~M*cw=IP?wLTgY=;frAYR z5EUcLgr!)GH$Dtd!ccryBLIDi{b}h{)U4xbPDV*KoqK9sM3FSg$v%PdY_&0_a!SnM z^*!i{QA_z^t%9@>$Lu9IlI(P^((Dy0SV>MG)l1xTa?@Tf)k-|kXPQuo)$ip5MMWI| z21)T%)XKhio`@!NAEy4u3+zFv01bTdK&F6QetV4!FNPzZ-}fq7#=ADuhv46^!+97( znAETSMW(Pq+c-&juJ>rRbXnsUkSw&dlZ8#LT~e{Rgr$VuOyc9sqwZWSC(&e8y3WIG z#FjIL72LM1WY$UzZ&pW{O|X=CO9yigYD*Cl7cg3S|F*xtwd2g182)r*v-Vq|7LyxT zpW4Ox!Hp|N)YLhOPy6WCmK#Q;99Iw5u^}9mj|KzWMe{{)3}zeOv4c4fXc#O;4s}l* zS1eVezK5QF$2WYd3pZYbDS=}Iyo8TwO4%|P(xpf3-vOB$-Y!sykx+*i7e3u~lWLlm+?0r#n|u@S z)(*AW;w~+MqudcYj>QJ3$RT+t#Z&w*TW|An&uuf1w2luLMHa5rPiVNPk*Veug z!?KKS+uUl1IC;Y7+LF%c9!YuvIuVR8OilH4G&{pMLs6^|(21VFMYq`8;QfT(Y-~o|E;Q5gjuhGP zDK%9kW9CdKu30XWT!D#F#BFhnJROZhE=O-~tv&o$*XGMG{|d8FybPhTT!iOZhkWiD zZw_)S;uwNQVh{(?SaOS7!%?f`o)MK7*uqhuvh5)#jdcW;M;@hxrJ$J=|@Bcq{w3Eo)UvM*H4uKB z&@nThB{AWNN7T*#(3=l!;ya#C)+>OLPYZE|XhsG6UR-=+nR=D0)1xBQgr{*7yy;o& zb}N>eLOL(Oj@NgVn-noro8C#Pvg3PKLw4meF3R6+^sdzMOcDo312^ z$fX-%Xk@#$;r)cwlA;$h{)%*>#)n|AFFNPuW%uGa#dW!=b=%*ykFVP&1yzxS@p3vO z)Nd^s`Gm4!a{xaoW?V{D01PN(CsoprF(fuMd#pw(F^}|u; zx^w>AyuL8MX`4q^SDokQ{2ssb63;HW=GjHJZFbI|UDS+|i}QAkntX9|+M!aH?eh~V z75^|#JIC$wt2rIwIa;t&=SMZ;;(JD;doCI{I&F8aYexI(_~`WLx^r)2( z_@QQ;Uv$roPHV=uo#)@uP<5%#1b+_b%rwcifcLET@oh|!OoPGM*&Y33d~Cnnpf!ji zQF5%EPtw;q$-+0#RyE8qp~#$EoE;I3rMj8YUs`KWHo)N8O^f$#N52kR`ygi z;G`5QUw1EYl*v-NaJt-Qo}coqaa@r`I}l306B_4a8|*^=z#fu{$$%FkYG|O;Dq^81 zwquCXEoD%IibHL2l~^sxwm}8i@VFk`Mjfussm~u5*4F#Yi<1id0aFa%Ab7?-W!27{ zs}`5+>$fe5OI`UG&j_f z9N8@78IUhcTB}Qw=Qa+`<2*G~=s%JHdl{qo^4?VUIMDA zvYdWR2dR?sDiazFS*pj%N>${*>)z#t=24X8nu1wpS-O-?(vz#JSo{Ly_!rBTCrzhf zO@{|}Zf*YfAJLQO|AP1bYYNj$sXt%TC*}Ktt6Q4b1bGT5V7o~XS=!+qT|#)`$w-Pu z8SK&m^LxX}{0T}(zRHE>EI)aqEfCI$7J1`+$)Q1=zMQn5Z}z@4csyJLLt(Qz7GlBb zxa-Pw!#AFGbjLFU*0wuM0w8^wlCBU3u$?j*jSafV8FI7;bLtGl$=cX*iF5e`lpQdI zM;;0RBvMbLO5z=tP4~^UL+02=**89^oaL^HP`u)BQU9@s8(A?Z$fElJg9Sa1{0yfGFv zxtl`VI!*Ht2R`tvkt=%N8jT>}IXIBC=OeZ_mGMy%kOa<9C;&vQv604V4TlJd*8_8? zfJ5AW)*38Sb9}{gT9Y^8ib?>%h4WB+<<@RTUe6jygt*DR<@*k9w7jwWfp&BUtX#JG zYltaeJjkydZ;FyZd{E6?+?|f1k&R?$JhIZ~G~ketjJiH|2DT6!iAkoM&Kagux8%36 zO-n?|nVX{qJ7Vq}3T86eQPkw9(&56iewrt{psqa#Ja1?b@7QKkGW*7y_}Q@6-`&13+b_B(DBp730Zlm*EEaWpGNQQ@^>%2{Ysq@?4>OV+Q6O&dKcoq>DJrax z(DXKNO?G8qQ4^Jvx$aC~NH;LYNyOe&^9VyQJr{jbd;&i%$u7&Y3E|0ldChp?I(_=< z_~FzVomqWSZ|wN_XhOa1+K5GS>3O4?!7fXEaSTbnS&4PXyT%?w6)tJ^M}u?>GSZ%B zLIolq3iJ<-PY+Q-uPYk${;TK_P~w8otmE_8Q?q^YynR)pak@P1v`_dj`RM#7LZowb z-R*pHb4~A_b-L{zs4Sh_4sNLlPS}S#6~rlnk?BlK7V~(xwOv{Z`ZMQu=Q0||6{tsz z5sV6_cjxkTt7eF$r)KbjNq=^MKMUvCQdZ9bBNwI-uOz%veJxCk)k*kBMf^8P_$#1Z z-Rxb5gm?Pmi5U%YO^&t{O+i1@J__$l^%(ZGZ_`2ikdRlN{ab!>-HBU-I@tY}A zSPQn6A{qKb!QABDMqIRtj9|hdV%}&G}F{8-}pV!?&SPxjfA7EtK#A~n6u2j{}2owi|<_GtV7U88eaJkPfPf{ zY9)MxUsWMPELiMBVs2NK{_g0ydc=RaFeJe*Iv-(X0=xJ=<#S40;E9En=85&AiLao3f^lpzjP}lTXwcl?v2JQB2gn zGc%BK=bfnWo1LG*SW33#giqyiLf~5|FXc^5aT2pUQB$X8eS0*j9EM2bS7x4+6cex* zV(5=fPD;yyh?A1t%N>tgcttpKJ`i#5F`p`hrz9D%OA4`)9Y_x6{qjcfQ3=eTZ(>nB zr0eyBbczp3a#fKuVCU^?vuwhy`S7Et5@@1w=*|Ryw>QMUmBXjOACnf2Mw&Z28`^&* z`L|4^U&>S})l#|XRccl|NzCPB!;{3!lbFJX=Kcg`_vrk2d)*?l{o~QuVE0r3FlH|~twc9?s zcu`iwKk;jkzbSs*+i&h#!~GUTo$Kw^TZ5gQx@GS)>bs3?YiqFG+&$RqJ@M<4a4q)t zNnl3pU z`}^>^dS%18NWIptca^5U(w{rWXP2ez-E-{P46`&u>UMd@p7~(;Zo6R4a@@H9Uk_l* zKrJV5?ypj*p(;hVC(*W?MEFmNw$QiSfStW7lyBF^m5aCQ(aNL40a2IoSZ3dj|1`;p%eD_TTCP_mWTNI{8`{1aM844Cf#+1Q5a7{{v zI-91z_UyjJ0rZ>@Sq!Z~oufo3NJkUyiakhFmTxza&JeIT8XvOSIaGxD;B$E&v0YT+ zlUH{CH;PcTOdT2-J;jQwbZFesKlSmrJ{V-ng3^q(ll&Sw<1D0CuMWrKxR?k@WQ|P6 z71eRKOG2~&lc?w4+PIRe^15_f6{AkHqK&oXreVl%M;GdLvl{s>(=Ay)!gNC}rJa_QSq@V|LTNZ6_75gG}VvaRIS)_B*O*c=^1rWr)&M}+6rGc2mQ z&vZh`Np!}ym=U8zL?IM~6oab(qy`EBAuUZKF3EAkTno)oN~LQKvooLUfN>~pQ$Fjo zPfy}ZKE}t)grqPb%}@IU7399RlakAuUV;p2sm{2W^qjs z3{w>e<)Q zi!l)eRO2i@KPibgzndMoYjb9#Bb7pw8zG=kmN2HQWPOe(h2TC>zrMg}oxvRySa6aq z%CvRTdDb}=39cCIL-hcW@GW19xr>s4HsyGXv4F+Rl*IP|Smo;4yy={vc^s3h!Y+Ic zEWu~-!B?>|XrklipoW>i#H(qZ)YYZ5n( zlg*7{42##3am7*?6b#9Ym`T}$>PZB#3)((7%z&*vr;8sNW z6O82&6cR}9C5lV43bPVSAsJ28GDv!|bQ80TW6`5e8%A3&p+!R*IH5ymI`rb!_VFF< z?5dFf8*+LQ5iI*K4!HA&b_e?pd2d?uvW`fDKq)nkjZK+x20;jeiA5Scz2y;`jVT^6 zX%n#-L+duk$5*H+b%8czExl={lpWH4?YG$f$?%t=Y@<$Ydr6`dXpC#hvCs#I0hL0c zwRNz&G!_vjmS}LRT!Xn|oFFA4Von2&Z8@5dem5O+++VH5nlT{x8q)v4A2q?o?p-!S ztEyudpAiZ*!!$lHzBV?DL*onMJ>ys7W5f6)zX$UO_eV6Axdh|^jmI*6&q-E%Tc|xE z2l^|{(emx}*{NV&?iIu5X)dGLRK>FUvN)MNCtL?j$4tm5F%Qzi-yzruPPw-w4a+KX&V8@$iPt`Q$n zF=`U8;y0_rl9&TAED$XQ1(%8c!ZqHBdKhZeDfvcwv1H5@R4Nfg1r^`%|FVAswpq5& z5YK*$zbzAkgv+O5jqt0?5m`0#E*B$2k#9lF5B{8gA#jPz}Yulknb<}Z7Q|NRm_q1*pi zI{d@lwJx_#1L0Tk@Pi(hByHNXoF1;B%_)I4?IbOC#^WSzF{E~|9ZF%C;W79DFUOOx ztIx7zI~ONSpm8!B)Y#T_wOXxqSG(fgc)n?ncfQrv8TYkiHr%zIHZ$3K($gjcfAH#e zeRXOgqlK58&tr@^Z#2$5#{X;*SF*n8mRU|JD{qLY zuM=)}sSKH$SxX|f<5u^y+e7?)_6?tT@(MsNfcR0pOT~)};xBfWWjTode+)3^{fFl} zz_BZPY(ujbbjq$BMaEjHr?14-lU7=V8`}=VS_g#rJCLv8ugToqZA0lfj1I>?#pI=Ev zex4S-KS!K?84r3!HRIaKQ9JAl$F-oWhNMo$inKP~EmVfAAxl-(z@UcB^^k?2bx%^cdEQGCItO+ilIFYf9bpEJZBh>#6@Mm)c11+U`+~HmGWs*@JOrL8^#mf@NsEtE9BBmE zkMvE*NeDKut)JtMP-uo8Vd=ex*T{)bYpUj+c1m(T|H!KEznQA5F zh$@#ZGc&*(7fNI8!trEOu%P3-k%Bne{OwbzENPfoYG$vid-HUAfgVt?)Dq<)%m$UK z^bgHvbEs%8W9RqT1$6n(Fn56|n2H3uGm9@i@$+N(61qBnqgfQ)eIf?VxG~hyplJv@ zf5nKx4ubbAKMFP)%0~hBoRx4$a=VXMsl@!=I(H*B9wh~ob3eM5=H6;^5G}yEPoL{R zHmBG9;-5eMs*|b94Hfz4kH6na+mKr{fK>P9=s9@ytWhp^atFB){ypF=lr!*l9vL-q zm}I%(vN=ol-U)ek?LH#*t1P;cvomsJQ8~G#-#UJPn^baNl{8{Xy|S{1=|o*l5Esp9 zn5boo)8~DT)Loi8CSE+7cpfYbqz0tqcTLY!xJrx@(s2PV7O!d6|3!|=cR37cCs(WA(^C~8X!Rt}r$HLb zG;4b=v)_EcQq%Xcd$4#yiY-cbHBHn?cwSK73sEe$ZL*TOP$!YbFigr8eh5fO;7*o3;JXq&TnJk)u{2NZfKG$9Pcwc;TRmsTMp}o2NJ=5; z&B=fRzw;df%6=u}`%jfrEFgw`f&|xb19}AHbBRev&OwCnabUl{!}XT?cFzMky)s5F zO$b|+zPt0mS)AjP?k7a$inE zCeuNMSru4iv(YiVXR>o=hgv};?*l!R6+3~<5A(j%Wt{k29-r3Vrd^py4z7mEQZ(-> zGjAD|xZE3;$_pnfC)~CgctB3xJ0#Go3ht^%`3Q1)KGk3h2f~s)#GOujL1ccFlQ+oZ zhJ)bxkchsZJnH5*n8&xo7`kKIt6s%;O|OxeTeK8iCe`3A%?0{{UY3meDPzF49N=04 zwTN69SaR=0&HPc)1iPP{GSRy}dWWk}SDr&nv|sKCuHWiWIq;B~3bj|5!Ca7I@qIm|n~U})JmA(sr|=ebUk(S$krSNx_{Ib`NO z#?YJyN~{izhF97EtWy}u8~MR2iKVT}R-2YtIRJh+n;3ulGrvGcpo=t91Q}&>+43Fpjhu*=aCf3ZK|nAIEaZZG6b2O zs9DpaOfycc-~z8aDEdO0;ZT(dKOPc{2d-iRu{H-#ZdZCO#b`K zHEaQv2VhTwk|5l?BTs}=yk~DXq{Pl-ik)dJtcbvW`$i6TK*fX(tdgc<67mRK+F(eL zrrRVM_h9+Vkn+KlY3 zIRfp^n;KJAKG`ZS=)P}CYa|R)t?^T$wH&V8HV*~VX>IJXdAY%>BedjYS_rrJ;T!Rq z&0`JmYyaCfzS{yw2hiq%Lo6jhNhcgOAhz1z6_o=*Lh_Z5r|RRg|rvaT_=FA59NX-E5B#C+&BS#tonhj zyt+?1waC?`HVvA36!))e<11kW4YVteoH|ZM>Q#sh)() zSC)oG4#KTe8O$u2Y;~^NHzzC(G*k=PjNv}UB6{J4+=WpSEnP_F1WHa;k^sF=tDThE zLfLyO$-Np)3BKGWm~O{qQR!l~&x8pHe?vGZLJ3PF^&_OR+zCEac!BXarLp!z*DH{k z20a$G@0dFk;}e=G*VrlVuoY%#>{NDmslYLd>>G>Pb!34|J(3~CE+q#vEI9P5?(J!9 z@@xwS0Fyv$zbKW-^(oWtY;|z{cysY_qitNiHcmdNx9cY)zU`zO+2pF-31S7*?m^zp2LB+UY?FH=d@d271 znm*^J5$dR9t4;XHOt%62LkrUA`Fn>*z2E!(k-f@!UXW@6{gTZqfSq9KCAKMtIBGUj zX61m5dzB@wLbgQo3W^U?-O==J>FOa!Pj$==EV^x1cjytcw(EH)M3q=_ISxvX1;Vjfbd`V3=gO* zZN5H`WPguHihUnsa;n9rY{uw#l5(q>a62A|909FBcSpJ?=iSt|`B^z$^EBnROU(zy z>6ucPM@x_@0$!+joHS_8PXc0tRBxnUJQbLQ+04%4vSw&}R}?sa#<35`%kxtsBI(i> zWOCyMKomjL`2$t!=i*SvbOVB)L>sNf7wI;5*A_yXnZ40$WYliYK9RNV~CxKjqTKHSb64eL6|ty(MJVi>De1w z)||DS(;%l*Hq(?$T*Fx#>G*V^6G{Sv_&KnHFEQy+tj)s9fqIFZhd)IB&5C zEX@)o8jbOS%&3_`j9-YGg=}_2Q%HP=|M*tM5Q_OTX~)F0O?l!IoQM+=(SMMK(h|@$ zx_m?{%p~6P$3U|nVr1|~;9~g*t5_1B$HD#KBC%CWwhhY2tjl!M0hr2yGU9jgB2kdi z;P;5wgp?g0LE{-%LyJyxpuGdzy$inw3}Jie1Psi#QdNl~0};8~+aNO35|!g9A?P7n z%%lo2%wHL2D1hc^Zul+Chp@6!g>(?VBJwPOF5Ku74aA5+;4&lTYgBw4IXDH*uvG+Z zfCc<^N8(aUfg%5x$MoUJ_ftNM{Jl3_gKVSks0+cH0+{d9{Tl(#_YdCGq42&4YLQE7 zBZyf?)SqHt;kREivJH5fCgf4fk`y4y)+b^=@w7p;I!0Y?QuP!|i?7}a|6`05&U)M0$gbpX%x zLBc9g-{i*+Ss%&{-J#hre)U{?<_I{`qCMxbxq2KKu6|AV1D=}%+z@qxE6GkTuGYx0 z&1*1t!}}&9IPrWvVei|INiF*$A+#f;6SnCgaE%72&I`aoiLde|1+!LyowLT)JgMT) zL&f$$oV@V11i2MTn#|vl@WmP+Gh_^Mix}6I#0Eq8fR&&^#ZrFZ*g3yGVd9V?8SH$3^pI^ed^lXTl2u-g*abkt54Q; zFuOLVuj-o8ueT%0+PpQo*r)|LmiecC+kZ{~+ zw6_+$mZ*mxnnPM_!`O{Y-ZM?U-Ykd;y$xKG7G0lLM3hr9Y5EHG}^WecimT>Hz*k_`ss-{ zF7%sKj!t((yLwdMidKIFq!UadNd|_LA*w`G{e|Px!?|}yL}bt*sQ12)9#Ko2u_b4% zPFE%xr)T1N#?{q%vvF!(Uz)VN^9>6Y$A5ftP48Ye+l?x%@2ClOw%U25uG|x* z^arLhH2L6;2NB-T>5X0A&8rBIPnbPwjOtk8@@`)JTq_~0V9DSIlaeF!pNR7WDyu7d zC40+EUJ%9#;pI{Ih?`kQ3g1E3m$!OXLE&}Rr6mb%Nt%LQs6K*+SC3&&`!?#w4+#nu zEE@*-D40L&nTfFgof7@f(OmEA>d{=D2X&=I=p{5s5sG&o!C_%>&`q~LsS2&wj*M0& zuE-I+1rDgFKBAfcr$W^(3TyreD!OAO9P#B<%0~!*CzXYuOv#;LFG9uTGR5&c@K7lZ ziiQ(HZ{oR(Jdo#0=r{}vt|B!E_@olmps=7xjxO)y8~LiIk_*O2cq`C)o$Y6Y;15n< zt2l6)s6x6Euuw6y_AayJKRez4Qw}F6s1GHT*Q_~QWJR~!;9*O;J>aVPgc*(!kp;{YU+1Z!@7)u-8B_XG`_>{Yh^R*Ul&2;+OEdFM zNDbwE>z%yLx29Dk`yG4#z})F`m3L^nxyMGCS-&ycW!1!YAy_rc~isCTK%sYoz@xjMp&r*XF!-YP4&|tbqjH^hB<=altJdlXNtS4|0$upNnfN)+H@8 z@f71K812*$SPP9_nBmPBc6!{~4Fc&ju3E6v__t-KqjW0{oF#zJ7Fkh-tq-q=v{M_O zuth7-u9s&WW6bfHfm{|`U!Gi^Z~Ugfu#pk0859&xTr2_kZVR4w*}Rg$@Ddv&Jr+g{ zl4s@YiltK==0DGvQ`ABj@gsbK**tBuuE~eZmU0lB)QxRrHF$P!Ij~ApUvt_Nu6bJI zRih8BX#7LMC`$6Q@RR~P?iG~L9avp^5X_Dy`pnV@4cFU%t?)*8<4o}Q0#m_l@HWl@ zZ)<*+PA5v+95--gC9-)o zBI9(vtqoA|7F=IhTy5nh=_=P+Q@Kv6%BZvK5$4%mZCJ9?8g>M3TE1Z3S3WSH35_ zKek5f_qjN$>7-rVuN@xkZCB7T(j~8;@9B@vUat$VfIg99S^u>&@`XJ-CN<%_6wXGW zC-k4K(fkIkq`vPBO^S-{ngeHT{SoTRDe|KHh2zqw)_+MM!ccT%z3|+=1sei>|E!O) z8@QGr$My@bh@z1gHs4iP|3w7uEgsfK;poAOER8{#Ci-*J2&)KXtBh%pubj z9>&vWaw-ksm?6oj74KHkTJWPY9NPV4b9lKDP(E$roHu)`TN!@Ox?o2_>`&9heHbe=tS)#r^g9{0bVZXdKJ2zKXm+k9_ zj3u+?W#gY)N+Z#T!usK1j%C(}LU3}B=oK=j|5uvzz}kCxw13+@x-C}^s>t^fBY@9abp&^;MXs3mFQ)Nzpi`ow+9Rx`BB&@VeF@5pY|+eYS@2OG~vAuH`-! z?`X>dT1#B!j<2qD*^--c05pTtoX@L#yS-T|=v1a1S+Dhb_vc>%2t?9}(>MHDOcj_?GL=qDp@D zWODvgt*W`EkjLix`c_KVyEbb*rm$-Z%15z|JkW~jQZAuK=Tpt~{f_M#M5CU{EZatx z7_@5;mjy4n)Nm|Kv86qqZao#K5}yioT!-@UE4d8j;ViK4LeFiz3TECPYc!Ht;fIks z)AB1%momEwBX`Qkty37e8=@8zHF1fkyR5#Tjg+h zHz0s%I+=yEF%?@~%~n;dZxfy6<1)V^RYPp0xjF ztvDK`^r`Xe;_~{+)J#Qc=M7?)G6Q<#=~8A_lh~y<*B?LCP|ZCSSJx}`>#8juiz{^? z+AmEc=B6|UE*Du9gQ7&?G>*$rRb4CJsI;?f~p zI)qDy#AI!3`bey+P`38yU8rxBitGsA1chPDg>mZT<_ZMBG|y*bZFwC-ysKSyK;B z$~8ape2)#D!%h(VQ6D$nJ)rSLqCIaYNnvi?PF&BtxS`}v5dLf>U$bu%GM+5|K5Uo# zp-EOe|EWA(zI0>B>`0^%tqI<+HH!qZuhsY;A26ABO^BN-bMW=z>chK1>ET%xQs6D# z9^R12=e=68ouf{^wVDmQz0xfu^P=?7?IK?h$#|B0zS6IkX!ot4OHsQ~v)_){>@FVl z*^81bX{Ib4Uxvpbe?DO!Z}(%z`n0%mEy_iQr0LJ@e!gJo=T9S-8GonE?na(@8&!Kr zbg)Eja8AfOEa z*}>Qi#y^_-aw*EC$RM!;xs;@Nm)JM{(N5Q=J(m*CH(2cfMRAEmRgE~hMf+M$Q;d%B zAo+%0H8F#$W=eCNPMF#7-ZU42#{{l~iJaGrG_NMJFnDc+9{GHwtAxb@5!x}C85Qy` z&vGUrkTX8VHuyAGHDmeWtaxgs_Pp`D`+PnMZg1FVd|}R|D=)NME3_^@U1R?{DTnQq zg6%4{)$J%caV)z})UI!kzQHPd`Bu-fRL!;fJ@oB5k@({i6X zw)nT2dq~(KjK<0$x5gby>)uRB4(j%{x%JDt$CS#+!~+W_S^>hpQ7sqi7-!o9D7Q*g zlq}kCayN6Jgq0(+`SClK%|$w__S&h2X?)Q$ubEnKI{& z$%9y*&#du}$Lco@LAB&YV)n)R*8`JcBx}iGdr>ci59Xp|f*B2J*}@6ndCC0d!PpF@ ziwY}G;}6ENmW&cU|1QT;dm4XmuoIb5N37L_-!TZMBW8RBgx#nL!mMyY!sU5h!sRJ8 z;qnxaaCz2*aCwSKsIDRqF3*|~yG;$b-{m>Kv)Lkq&r=4j`#j$dKEdNzQ!YK82UR@> z&&y#O4o(>uYpJ)a3_Bmp%}Z0^=@gpq`v^dII!{Q<_zDQ29zZPr9K;NRb#{*rZXO2X zIMW=d{iT>(=SL}~Rt{!YJiydDl-V+dJES6F-ky*Mu{tjiVkI^aVkICEVpS8SoZH^t zU>@SWAJG{tu(dLhmeunOOZ7-c(=DRf)FL+fj`XSCGc;dwJk3KHNg)VJ)d>kG|El8E*xRFS&1=(Dr?Vkc5y%%7ONE*KaB&I$A z$^3I5X&5ciKD_HA0<{-M?`2pD<5z+-NUL&SqHXj>kd@(l9@B=%ijeenjYx;AJ}f4O zc%tEk4p|io>5x?ckq%jH2+|>|q9VobMZl{PP5T>#kDu3ZtidpLt!7oL>n}}e4K8lZ|S6rms zA|i7WmS)d^d3yX(6KsNE@4LL}K;|kOux$AO#w0MA}9Eut>Ye#YWmiE+En_ z@`fPoA{Q0Obu9wYF7k#U?IM3nnB7J0G-(&P==i`ca;HhV$i+t5Mc!ykcahC?aehJF?$6_1OF3G*P%M==wfptfYjY50h;P!rl_v%KY*6$nDeNi=dRaA`LUS*G) zjdHmv_?Uv~A|S8RUo-ZYsAT*`l5Am_G^ngp0y&y)x}1Ns|$z}S8oVX zT)mliFRrfl8kOB$-ZvWkhA^s)UDMdN8kS-9c+KkXmwR=yL2-2V2F9h7_^FqN+L>TgG5gvTAGtv*MySoSMa5!`wi>ozS);?lR$OcXrLj1g)WN8M1 zOTjGH4~5O7W4#tqWfY#O%Vxgk-ZFK?g1r*fC=fuB@sw;zsBj@?y73v6tC!tc;zrKbBI363p;$~X*H$QmYcm21z2G5tQ z?~got#&ZWBt2OF3V#agJ_xjHDDA4VVbHCxP^9Zp}$mH1{{)k!JQ^~?p{ooAOm7qoH z3tT9V7@E?%h&vsZ^oPP@JYl@YY=6L=3}4%xYEmMaVc__IBX75-n}Nh8DrRpTdBeEJ z#9%0ISvbJAwtiFNwFW2 zB-K6;aHfdwfw+12dO{<@p|G631GL}9Y`1-Zj0a&!?m+M0Kg$AbkM$>RxOcA^6Ur8V zZUzDfG3$nVpjL{WC-m+`2nD&+&rw^I^ep&OEi@&fnaOWZ%m*7JeIz0h5|d^$*+9$^ zl?|cWy3+$LEzRCI-SM(Ug1q(nIxS||tcGH*(ZE2PMnVuED9qE8({s&KhVKzu~=D5?us8)|7;y$Vl}b|WK6a%u{CEc zv3<0hKu(2JZDD76#8I^f9>DzL2SVAK2mQ8$>PW~3V0cP=gRJnq2 zMRq`JY7JOt({({hbcVEYb#?m1i{%=w(oiv&7xlr%KI}xv(NM%S?Xc?hBj{C*}r};A?UFc*$*L^=Xzc>vd^O*j}=8DlP3z#>v!_V{ZZ+ z7w}F3d5c8OFV4M$-!ga2lo{RNQ4u+_6 z+c1YC+kWxJKW@sV{|g3eg4~PYwJydo17eSK21;j#7)f zdxZm2Vws#xO^fJfJeOX_nboi6Gqp>nb9MeWZ#_Y-apriKjjuJvdeb>;o*h3Yeeep9 z_Sr?}33M;L#Kq9OICu_ba12P2fyy7m!xH)wBjCHQOP(D5u8V-H7jO%dF zzdaba(iysO&QMz?Ix1?4Mn5L0=Ea0VtftI>^;B%9s9$SeS{tMXy@sLWvx)5SdjOOP z;)U`lms5pjff|=EIvcqzGGv>zqVR3#hmLfBtqvqyivXWb2ZOdRCY(wb<@(TP&q_k* ziMFLrr_E2MzP}?w;r6j)Jrx=b7R(kBSSTW)MUmW{V&h%U@oeaqns)EhWT5`gQZb-< zC!Asg27^0sOod@tIOG=eY6tadCV%j2>Lms+OTJP5sN~n-;_b#J>f~P!k1t#I6bU9Q z@lN72<#?7mvT=AZjdHCvsp>f^k9m`2*wT%t?l$TRw<5CNB`VxquEK?RJ}GK&7j=}Y zmU4#RI*tY+aI8!VwwMjGrG)>Z{%mRE@^0g(wC^k57kHg1!`N5Qge}%(pR@1SHalS7 zvd`E*>`TU84H+A0ATZ4s0XN@b&5h3^4> z3zNDy;*vw+`z!BCUX^eZQAaK?0sf36ADz!U>Ec_7)EUhVO`MZ4$u~D==D?7-Tj`s7wrPm|{+>}Smu-Wa)tX_|x!I`g)yn(3 z`(t2YF1qtuFfBKHXC;@+Cpq(Elrvr%SUCt?XP{z--(adg5t7?n@}th#d_DlVRE&1H$1A(#x?%BN!>CsJ z`$l8mEE|2kCwR4H_ZoZEF*4*4mRxyDJ%mRKJ%Hrg@|d>kR4BQ!N4axKM3=nnPE$c~ zJW?mD3d~W0cs!YJ`m3^3Z0WOU&G-?X=yj|G1g8r{(Mfc&zN^-X7Nd}ZMlz8-{K;X+ z_g-<3%UUDpPd0FVj~3RQ_=88UbMP$w%zRDr{F38bjhXCr4k_f71%4iVBWnQrBKH}e zM`Y73)8Xllt**I1*_p4Z)MOSQ0)A}Q86u6!w*D+qn!ig**S7U1k61yl^E3T@&BV+JjKg(z1{ho8x-ES&H4_jy$qyR|wusy&k%JxDVeW_@qJ)~{Kj zCgz4Tb2U6ihVk>xQF=c**X;kPNqld=T<87$s!^`=>PFSB)eJ6brcpO5eAlj&>y5qM zCQAIHHSmwdE4lH*XYomX0y<`S5g%c~E3qsKC@fNS?3|d}WpGZa3zQ`1;d{k45yF7Zb!CfBZw>N0* z0=>`JTP0rwiMdtsWX~l#IpY`Db1B9Z*=e34WT$!Tw9|aDopzdQuv7H|E&1w@+23@@ zQzDlH<@9e{khK=bTA#MilJo7W^C=fh+>0-*eJT>q`Cg#;l%Fi|XOHL?Ib(9=%}v6D zsju;usXzZtPtfVqF&r8k1uh&GypeJk9_;MAe~%Xt@p@jjeLf!VggOQ93dRTZcKFbl zc(8-#48t8DX~F4EyhPcyfp!^^96LIuXqZ*?eIVqGuhP!XUUf?2t@ouH!EF(Qkks@& z2{W0|QK#jz7twa!4csdaN~<{%GGZg+8;kk?vbqYYZzM9mpWd+Ka_W90P_gwn$-my0 z)S*_Or;avn>F^L}OE?V*d7@jbC794hVygrPXW*G*LyH$Lrkd4WuBh&yD*HD!8;*HG z5q02G^+SYK;0zUqAWa=S?f7^Hm3`BDIe9Aoo1NZEhWBM-BTX)--ufdvV64i*@}jz1 z2#nTebEO~Mcew>l#>DXMP?C%Jx()g+=>O~;iE`>T@K@AyrYD4O<)Ftj4YZ}rH3{i4 zJs4pN@H}I?w#YGUX8IZZzJ5t}wLXDxg(P77@}hvWyIQSQt7|3Ikd5Ll``VU$My*>N zu}L@;G6X6SkWW&1$|WHwPQi|r&0hsw%d&mc#Zy0Y1lT{`t)RYj?V%GKe+`<`$BRhf zBRYIPMm|ZcJe!)KN3^E!^~opawuF}0?6OX>$VuX^V7llUme6wnjO6cx#~fE^LKhZl z;jM7vSV66RLx-y9P|^c26LOJbfQ3h`=uCF}X4PjO_L5Q#16N3>O|EA zz_^4NJKaq#-ysoY9ijua-LB9uhmKMXqN$9LD!(fvCp5zil`fv;jRVlaKN<{Vr0u6- zZavfPaMNcB(>~IUP8Z(w14!L>8H5l`V@cXd?rM(j5 z(RyjyW{%al1Yx33;j@8f-8w@lbRXdoTE8!(6RO4&d*A?oPb4D!li|XbQ@dwq+`I;< zYkmJKQ3(OhgIYU=!|RRuw~cG~czJo+Y}DJWi}vyPFThCix^>n3`lbbO-!!ipKLKox zHS`{2f!m7L55UR*G(|VthSNqfPhWb%!m~yb+jsNQ7vwW)4>AK9D{S7)%iBthsjer- z@Jkzlec~UC^JFWlPW#+)!^E**&@q`@VlN+@;aHu8_lJm^XyN^{&8us@FJa;1J7l>) z+JR~EG#N{@QBR_;Qj4Vx_3%r=f_bZ!!F(3Xb+mS(ETm2eKE~ACM|gQP_pdLY3l<{9 zj^B3St9a*uhOK_%`0t;8fkX`LL;rlg8YK&`x1gFnuT#XGC~t z88EZ4aE=3GTQeGWTQ<=n%nm@Rakjo2y9Dhrn7c){pLJ~gp+@6vIJSf_>R>u863~@4 zG)ad@`0Gb0c#Qi7KTu?l$qinw1_qCVnG%o<#rqesN&KjPd2@A2x3$4-opO5xpbAq!t$)PD(hP)%GxGgwanqYZ0! zU;L(4fPk^PySv@H@~-Xn3Z=chV&Uhr(`&6S20U+Ap5zwpWH7*}VexcF`gd|E+L-iA>ONJ)Brew|x_;zyIfq8< z(RDh(^gbZ0a-rmzc>pMB20@bEj^7=))*4-$q0dv_YIyRn?b5G21S{&ReTqS$T6#W^%a10n4>6&)Q0S?uSR>2f{b+{gFkEr>|qV*7L1A z)#JQC@9@&0;`{abo|g_6yuctGMPB&0{3aE9r5AIrDtuF>UM2IDX0jBq&SYlAD15UMSf%Bv#N0Pr1G}BguGTg;7f;F|8no76Ed&U5x-UVIs<^W z3P*d%jq4Lv6>eo~p1+mPb6Zs=!6+QNlPi-?A{;qJm`NuQj@_@8$tMv`zo;eMr6Wm&vLAp z%hPPvrnl#DdEPf}qP3QCUNp=WAJY|Pi;vD+sObo^#m97o+2UiG`qov2%RJYU$uA1W zA0^5bi<05Qrmy!$3r&nGNo08%e^z4W=U<-5FizW$i^|R9%dUo=?b$!j58N%I>KxaGj$Nd z`9b%PS44iVy3g~KPLbz35SKqH?jIahyH!n8MK*|8|8S!Uv6jrf>6+ZDNaS_Kj{dW~ zYj`!6&(}u!fcd;sg9d~<@F1I|# zc4c7QQ_^WI8pfTQS|^uVd#v(_g*SfvK`;`4>zh1**NCa!)$LVU197A z$!fJ&t?uhQUn=QZzOvt~LelG>iB1=)~p3&L!tE?r@^QTc@UPTj~(-Az5)soP5HF?*-3yp?J(Yn!gTjY3KHh+^J7x|@2oN4NgrMipYS z8dfSg%4}_GGsA4v#+eH>9bvX=lddpZwV7+x#?S^%wqO%3*fdYhvK5<=6&sMr_Ac3A zv)NkHF?-3Tn(k52q9Lx?kXW`+DjPKsUNlTa;Wnxen>9X7MF){BRirD-mN1;TP}31+ zzQj{~iI2E`c*HyV`J-yLo39*-N}g9lIo~-bAMoN)sZ^Ce#YaH9&bmdtL!?NO`D zWGP~VG%fM*^McgBguumscTDjmMAPr^%PZkIw&e+SCOnV#gjf5#FjR?^y}cT1^#yZW z`_|Bf&ZMEe6O!q+@R(&wrtJRiR9MNqcOwYQu$Tl;ZRonflFXCBnM|W=2veVotq3Qx z#?>`uyA1m!W_J;4l)`{Ztsf;IExhEjYua}atzYaR)3}B3TAy1zp%8AlIUFI|5gH$Y z2^<^xv<5>@0zoDW0D&^NLsgb8H$4&3JLwDU zUB|v(1P3Lfa|t}#E)+jNs<8+7mmduBx;_qTkhp+tBbh3V!8oOUzcv_zU_D_8mz!8l!PeH?&^h5SvIvlD|^*mP9}hBAdXZ z3?kI?7=}NLC*l(!0!NAwkV{wSqH9<}e~O8K_GtDOSeJw}p36+^nC{w+uo#E`nkGC{ z&p(F(D(udX*a9E}nu0~R-^3~^Y(!^6QyM3#8GP&7Lq`F{72NdiT4Mx63=t1XIS1V0 zJ!}F7r);kp*DZE@*^KKIeh&KxSdLG8+MMV@<} z(X$51tZ1&`V9N{)jrjl;L})_^cu(sb6`;mGFy&|8G#jV&_WAKy+c&UElS4d0Qh4@Ga}ZkLqY`KtW)X)ljIJe% z_(1G_yjYxcdg3wjYRIV@R z%rnD+DlSeMr>E_+i+b~$=E-rZd2xL+l5>QJVeh1iI9W#LRV(lGeOuc8A&651S zfvQ}$+BeNQWlyuM=ctP&Ofw)q&L7DvXpS}ZkzWahPm%b@v5ui^5E}*wH#dF~A&