fortigateapi's Introduction

FortigateApi

Access Fortigate REST API in python

Just connect to your firewall and start automating everything:

create (with IDEMPOTENCY if you wish)
delete
get info
modify existing object

Of theses objects:

vdom
user
address / address group
services / services group
static routes
firewall policy
shapping policy
ip pools
vip
VPN

Access to the firewall through HTTPS (tested ok fortigate firmware 5.2 or 5.4, should work for newer versions).

If an example is worth a thousand words (connect to the fw, create an fw address object, get the json definition of the object, modify the ip address and then delete the object):

import FortigateApi 

fg = FortigateApi.Fortigate('172.30.40.50', 'myvdom', 'admin', 'mypasswd') 

fg.AddFwAddress('srv-A','10.1.1.1/32')
200

fg.GetFwAddress('srv-A')
u'{\n  "http_method":"GET",\n  "results":[\n    {\n      "name":"srv-A",\n      "q_origin_key":"srv-A",\n      "uuid":"2103d064-d520-51e6-de84-16e9ab03b8ae",\n      "subnet":"10.1.1.1 255.255.255.255",\n      "type":"ipmask",\n      "start-ip":"10.1.1.1",\n      "end-ip":"255.255.255.255",\n      "fqdn":"",\n      "country":"",\n      "url":"",\n      "cache-ttl":0,\n      "wildcard":"10.1.1.1 255.255.255.255",\n      "comment":"",\n      "visibility":"enable",\n      "associated-interface":"",\n      "color":0,\n      "tags":[\n      ]\n    }\n  ],\n  "vdom":"dc2",\n  "path":"firewall",\n  "name":"address",\n  "mkey":"srv-A",\n  "status":"success",\n  "http_status":200,\n  "serial":"FWF90D3Z13003141",\n  "version":"v5.2.9",\n  "build":736\n}'

fg.SetFwAddress('srv-A','10.2.2.2/32')
200

fg.DelFwAddress('srv-A')
200

A toolbox of everything you need to manage the fw, used for daily production at Sigma Informatique. Clean and simple (at least i tried to)

Recommend Projects