EngDev

 View Only

Address Blocklist Automation on Security Director 

02-09-2022 11:19

Update SD Blocklist

 

Purpose

 

Maintaining security feeds is easily accomplished with Juniper Policy Enforcer or SecIntel but not all customers can utilize those products/services. This script is for customers that are managing firewalls with Security Director and need an easy way to add a list of IP addresses & subnets to an existing Security Group for bulk block requests.

 

Background

 

This script uses Python3 to leverage the Space/Security Director REST API to add IPv4 address objects to and existing address group. Security Director supports both IPv4 & IPv6 and hostnames address objects but this script only supports IPv4 addresses & subnets.

 

The script was developed and tested using:

 

  • Ubuntu 18.04 & 20.04 but should work on other Linux flavors.
  • Security Director 20.1R1 & 20.3R1 but should work on other versions

Statistics
0 Favorited
4 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.