@itentialopensource/adapter-tufin_securetrack

openapi: 3.0.0 info: title: Tufin-SecureTrack-R19-2-RC1 description: Tufin Orchestration Suite - Tufin SecureTrack APIs. For detailed information about the APIs please see the documentation at: https://your-securetrack-server/securetrack/apidoc contact: {} version: '1.0' servers: - url: http://example.com/securetrack/api variables: {} paths: /revisions/{revision_id}/additional_parameters: get: tags: - Additional Policy Fields summary: Getadditionalparametersidentitiesbyrevision description: 'Some firewall vendors use special fields in their security policy. For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations. SecureTrack refers to these fields as “Additional Parameters”. The additional parameters API retrieves the possible values of these fields. This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager. Parameters: context: Global MSSP context [optional] revision_id: Revision ID type: Additional parameter type [optional] Usage Example https://192.168.1.1/securetrack/api/revisions/162/additional_parameters?type=security_profile_group Response Messages: 200: Successful 400: Invalid request' operationId: Getadditionalparametersidentitiesbyrevision parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: revision_id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /revisions/{revision_id}/additional_parameters/{ids}: get: tags: - Additional Policy Fields summary: Getspecificadditionalparameteridentity description: 'Some firewall vendors use special fields in their security policy. For example: Palo Alto uses Tags, Security Profiles and Log Profiles and Fortinet uses NAT Pools and other NAT configurations. SecureTrack refers to these fields as “Additional Parameters”. The additional parameters API retrieves the possible values of these fields. This API is currently supported for Palo Alto Networks firewalls and Fortinet devices managed by Fortimanager. Parameters: context: Global MSSP context [optional] revision_id: Revision ID ids: Additional parameter IDs separated by commas Usage Example https://192.168.1.1/securetrack/api/revisions/162/additional_parameters/242767,242768,242760 ' operationId: Getspecificadditionalparameteridentity parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: revision_id in: path description: '' required: true style: simple schema: type: string - name: ids in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /revisions/{revision_id}/url_categories/{ids}: get: tags: - Additional Policy Fields summary: GetaURLCategory. description: 'Fetches one or more URL Categories. This API is supported for Panorama in advanced mode and Panorama Device Groups. Parameters: context: Global MSSP context [optional] revision_id: Revision ID ids: Url Category IDs separated by commas Usage Example https://192.168.1.1/securetrack/api/revisions/762/url_categories/242767,242768,242760 ' operationId: GetaURLCategory. parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: revision_id in: path description: '' required: true style: simple schema: type: string - name: ids in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /devices/{id}/applications: get: tags: - Application IDs summary: Getapplicationidentitiesbydevice description: 'Fetches list of applications defined on device given by ID. This API is currently supported for Palo Alto Networks firewalls. In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value. The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls. Parameters: context: Global MSSP context [optional] id: Device ID start: Starting page for query allowable values are numeric [optional] count: Number of pages for query allowable values are numeric [optional] get_total: Set to true to get the total number of items that can be retrieved [optional] Usage Example <table><tr><td>URL</td><td>https://192.168.1.1/securetrack/api/devices/31/applications?get_total=true </td></tr><tr><td>OUTPUT</td><td> {     "applications": {         "count": 50,         "total": 100,         "application": [{             "@xsi.type": "singleApplicationDTO",             "id": 2095027,             "name": "any",             "display_name": "any",             "class_name": "application_object",             "comment": "",             "uid": "{61B7771C-8B0B-90D6-ED55-B6698691BEED}",             "overrides": false,             "service": {                 "id": 5048925,                 "uid": "{4BC8F8B5-7671-A61B-5DD2-8CA235955162}",                 "display_name": "any",                 "name": "any"             }         }]     } }</td></tr></table> ' operationId: Getapplicationidentitiesbydevice parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /devices/{id}/applications/{ids}: get: tags: - Application IDs summary: Getspecificapplicationidentity description: 'Fetches one or more applications defined by a device ID and Application Id or comma separated applications ids list. This API is currently supported for Palo Alto Networks firewalls. Note: This API retrieves the information from the latest revision. In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value. Parameters: context: Global MSSP context [optional] id: Device ID ids: Application IDs separated by commas Usage Example https://192.168.1.1/securetrack/api/devices/1/applications/701 ' operationId: Getspecificapplicationidentity parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string - name: ids in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /revisions/{id}/applications: get: tags: - Application IDs summary: Getapplicationsidentitiesbyrevision description: 'Fetches list of applications defined in a revision given by ID. This API is currently supported for Palo Alto Networks firewalls. In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value. The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls. Parameters: context: Global MSSP context [optional] id: Revision id start: Starting page for query allowable value is numeric [optional] count: Number of pages for query starting from starting page, allowable type is numeric [optional] get_total: Set to true to get the total number of items that can be retrieved [optional] Usage Example <table><tr><td>URL</td><td>https://192.168.1.1/securetrack/api/revisions/762/applications?get_total=true </td></tr><tr><td>OUTPUT</td><td> {     "applications": {         "count": 1,         "total": 100,         "application": [{             "@xsi.type": "singleApplicationDTO",             "id": 2095027,             "name": "any",             "display_name": "any",             "class_name": "application_object",             "comment": "",             "uid": "{61B7771C-8B0B-90D6-ED55-B6698691BEED}",             "overrides": false,             "service": {                 "id": 5048925,                 "uid": "{4BC8F8B5-7671-A61B-5DD2-8CA235955162}",                 "display_name": "any",                 "name": "any"             }         }]     } }</td></tr></table> ' operationId: Getapplicationsidentitiesbyrevision parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /revisions/{revision_id}/applications/{ids}: get: tags: - Application IDs summary: Getspecificapplicationidentity1 description: 'Fetches one or more applications defined by a revision ID and Application Id or comma separated applications ids list. This API is currently supported for Palo Alto Networks firewalls. In Panorama NG, overrides property in returned ApplicationDTO will be set to true, if the application overrides an original value. Parameters: context: Global MSSP context [optional] revision_id: Revision ID ids: Application IDs separated by commas Usage Example https://192.168.1.1/securetrack/api/revisions/762/applications/242767,242768,242760 ' operationId: Getspecificapplicationidentity1 parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: revision_id in: path description: '' required: true style: simple schema: type: string - name: ids in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /change_authorization: get: tags: - Change Authorization summary: Determineifchangesbetweentworevisionsareauthorized description: 'This API checks for unauthorized changes between any two versions of a firewall policy. The API returns authorized if and only if all traffic changes between the two versions were authorized by SecureChange tickets. The API returns unauthorized if there is at least one change that cannot be matched to a SecureChange ticket. The API checks access that was granted (checked against access requests with action=Accept) as well as access that was removed (checked against access requests with action=Drop or Remove). The API returns the authorization status, the relevant tickets in SecureChange and the rules that implement unauthorized access changes. Note 1: To use this API you must enable “Authorize Revisions with Tickets” in SecureTrack/Configuration/Ticketing. Note 2: Use the ID returned by the /revisions API for new_version and old_version. Note 3: The default value for traffic_details and ignore_tickets is false. Note 4: Traffic that is handled by an implicit rule will not have a rule ID. Parameters: new_version: New version ID old_version: Old version ID traffic_details: Return unauthorized traffic change details for all modified rules [optional] ignore_tickets: Ignore SecureChange tickets and consider all traffic changes unauthorized [optional] Usage Example https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2 Usage Example https://192.168.1.1/securetrack/api/change_authorization?old_version=1&new_version=2&traffic_details=true&ignore_tickets=true Response Messages: 200: Change authorization has been successfully calculated 400: Input parameters are not valid 400: Could not find the requested revisions for comparison' operationId: Determineifchangesbetweentworevisionsareauthorized parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json responses: '200': description: '' headers: {} content: {} deprecated: false /change_authorization/policyTrafficComparison: post: tags: - Change Authorization summary: Comparerevisionsontwodifferentdevicesintermsoftraffic. description: 'This API compares two arbitrary revisions from any devices. The comparison will be done in terms of allowed/denied traffic. The API returns authorized if and only if there are no differences between the traffic allowed/denied by the rules in the two revisions. The API returns unauthorized if there is at least one difference in terms of allowed/denied traffic between the two revisions. Note 1: To map policies from one revision to the other use oldId2newIdMap and provide the UIDs of the policies to be compared. Note 2: Parameter in the request body specifies if the result will return traffic difference details for all incompatible rules Note 3: The format of the result is the same as the one returned by /change_authorization Note 4: The API accepts in request body only one pair of oldId - newId map Note 5: The request is valid only if the mapping ids are found in the active policies Parameters: body: Request parameter containing the versions of the revisions to be compared and the policy mapping between the revisions. Usage Example <table><tr><td>URL</td><td>https://192.168.1.1/securetrack/api/change_authorization/policyTrafficComparison</td></tr><tr><td>BODY</td><td>{     "policy_traffic_comparison_request": {         "oldVersionId": "234",         "newVersionId": "179",         "oldId2newIdMap": [             {                 "oldId": "{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}",                 "newId" : "{00-FACED0-00}"             }         ],         "withTraffic": true     } }</td></tr></table> Response Messages: 200: Policies diff was successfully calculated 400: Could not find the requested revisions for comparison' operationId: Comparerevisionsontwodifferentdevicesintermsoftraffic. parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json requestBody: description: '' content: application/json: schema: allOf: - $ref: '#/components/schemas/Comparerevisionsontwodifferentdevicesintermsoftraffic.Request' - example: policy_traffic_comparison_request: oldVersionId: '234' newVersionId: '179' oldId2newIdMap: - oldId: '{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}' newId: '{00-FACED0-00}' withTraffic: true example: policy_traffic_comparison_request: oldVersionId: '234' newVersionId: '179' oldId2newIdMap: - oldId: '{037DEA62-A8D2-46F5-8DC9-DA404A60B96F}' newId: '{00-FACED0-00}' withTraffic: true required: true responses: '200': description: '' headers: {} content: {} deprecated: false /change_windows: get: tags: - Change Windows summary: Getnameandstatusforallchangewindows description: 'Retrieves a list of all change windows. For valid pagination, both start and count should be provided. Otherwise, pagination is turned off. The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls. Parameters: context: Global MSSP context [optional] start: Starting result for query allowable value is numeric [optional] count: Number of change windows for query starting from starting page, allowable type is numeric [optional] get_total: Set to true to get the total number of items that can be retrieved [optional] Usage Example <table><tr><td>URL</td><td>https://192.168.1.1/securetrack/api/change_windows?start=0&count=50&get_total=true </td></tr><tr><td>OUTPUT</td><td> {     "change_windows": {         "count": 2,         "total": 2,         "change_window": [             {                 "uuid": "6ae41504-a95c-4f23-98a2-f18b2efadb9d",                 "name": "cw1",                 "domain_id": 1,                 "enabled": true             },             {                 "uuid": "fc7b167c-29ea-49a1-9ee3-efb6d1351343",                 "name": "cw2",                 "domain_id": 1,                 "enabled": true             }         ]     } }</td></tr></table> Response Messages: 200: OK 400: For correct pagination provide a value for the start and count parameters 400: Start parameter must be a non-negative value 400: Count parameter must be a positive value 401: Not permitted to access this context ' operationId: Getnameandstatusforallchangewindows parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json responses: '200': description: '' headers: {} content: {} deprecated: false /change_windows/{uid}/tasks/{task_id}: get: tags: - Change Windows summary: Getschedulinganddevicedetailsforaspecificchangewindow description: 'Retrieves scheduling and device details for a specific change window. Parameters: context: Global MSSP context [optional] uid: Change window uuid task_id: Task Id Usage Example <table><tr><td>URL</td><td>https://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks/1 </td></tr><tr><td>OUTPUT</td><td> {     "commit_task": {         "id": 1,         "start_date": "04-Nov-2018 01:30:00PM +0200",         "end_date": "04-Nov-2018 01:32:01PM +0200",         "errors": "",         "device_commits": {             "device_commit": [                 {                     "id": 1,                     "result": {                         "errors": {                             "error": "got_error_from_dcs"                         },                         "device": {                             "id": 17,                             "status": "FAILURE",                             "revision_id": 1,                             "errors": {                                 "error": "Login error"                             }                         }                     }                 },                 {                     "id": 2,                     "result": {                         "errors": "",                         "device": {                             "id": 19,                             "status": "SUCCESS_WITH_WARNINGS",                             "revision_id": 1,                             "warnings": {                                 "warning": "Commit not performed: This device had no policies to install on its managed firewalls"                             }                         }                     }                 }             ]         }     } }</td></tr></table> Response Messages: 200: OK 400: For correct pagination provide a value for the start and count parameters 400: Start parameter must be a non-negative value 400: Count parameter must be a positive value 401: Not permitted to access this context 404: Change window with uuid was not found 404: Change window with uuid was not found in domain 404: Fail to find task for change window ' operationId: Getschedulinganddevicedetailsforaspecificchangewindow parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: uid in: path description: '' required: true style: simple schema: type: string - name: task_id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /change_windows/{uid}/tasks: get: tags: - Change Windows summary: Getalistofcompletedpolicychangesforaspecificchangewindow description: 'Retrieves a list of completed policy changes for a specific change window. For valid pagination, both start and count should be provided. Otherwise, pagination is turned off. The default value for get_total is false. For API calls that have pagination, set get_total to true on the first call. Use the value to returned in total to determine how many additional calls are required to retrieve all the desired results. To improve performance, omit or set get_total to false on any subsequent calls. Parameters: context: Global MSSP context [optional] uid: Change window uuid start: Starting result for query allowable value is numeric [optional] count: Number of tasks for query starting from starting page, allowable type is numeric [optional] get_total: Set to true to get the total number of items that can be retrieved [optional] Usage Example <table><tr><td>URL</td><td>https://192.168.1.1/securetrack/api/change_windows/fc7b167c-29ea-49a1-9ee3-efb6d1351343/tasks?start=0&count=50&get_total=true </td></tr><tr><td>OUTPUT</td><td> {     "commit_tasks": {         "count": 1,         "total": 1,         "commit_task": {             "id": 1,             "start_date": "04-Nov-2018 01:30:00PM +0200",             "end_date": "04-Nov-2018 01:32:01PM +0200",             "errors": ""         }     } }</td></tr></table> Response Messages: 200: OK 400: For correct pagination provide a value for the start and count parameters 400: Start parameter must be a non-negative value 400: Count parameter must be a positive value 401: Not permitted to access this context 404: Change window with uuid was not found 404: Change window with uuid was not found in domain ' operationId: Getalistofcompletedpolicychangesforaspecificchangewindow parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: uid in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /devices/{id}/interfaces: get: tags: - Device Interfaces and Zones summary: Getnetworkinterfacesbydevice description: 'Reflects static data from the running-config. For dynamic information see the /topology_interfaces API. This API is not applicable for Check Point. Parameters: context: Global MSSP context [optional] id: Device ID Usage Example https://192.168.1.1/securetrack/api/devices/10/interfaces ' operationId: Getnetworkinterfacesbydevice parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /revisions/{id}/interfaces: get: tags: - Device Interfaces and Zones summary: Getnetworkinterfacesbyrevision description: 'Reflects static data from the running-config. For dynamic information see the /topology_interfaces API. This API is not applicable for Check Point. Parameters: context: Global MSSP context [optional] id: Revision ID Usage Example https://192.168.1.1/securetrack/api/revisions/227/interfaces ' operationId: Getnetworkinterfacesbyrevision parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /revisions/{id}/zones: get: tags: - Device Interfaces and Zones summary: Getdevicezonesbyrevision description: 'Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks revision. Note: this API returns device zones, not Tufin zones. Parameters: context: Global MSSP context [optional] id: Revision ID Usage Example https://192.168.1.1/securetrack/api/revisions/787/zones ' operationId: Getdevicezonesbyrevision parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /devices/{id}/zones: get: tags: - Device Interfaces and Zones summary: Getdevicezonesbydevice description: 'Returns a list of the zones for the specified Juniper, Stonesoft, Fortinet or Palo Alto Networks device. Note: this API returns device zones, not Tufin zones. Parameters: context: Global MSSP context [optional] id: Device ID Usage Example https://192.168.1.1/securetrack/api/devices/104/zones ' operationId: Getdevicezonesbydevice parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /devices/{id}/bindable_objects: get: tags: - Device Interfaces and Zones summary: Getzonesandnetworkinterfacesthatparticipateinsub-policies description: 'Parameters: context: Global MSSP context [optional] id: Device ID Usage Example https://192.168.1.1/securetrack/api/devices/104/bindable_objects ' operationId: Getzonesandnetworkinterfacesthatparticipateinsub-policies parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /domains/{id}: get: tags: - Domains summary: Getdomain description: 'Parameters: context: Global MSSP context [optional] id: Domain id Usage Example https://192.168.1.1/securetrack/api/domains/1 Response Messages: 401: User not permitted to access domains 400: Domain with ID was not found' operationId: Getdomain parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false put: tags: - Domains summary: Updateadomain description: 'Parameters: id: Domain id body [optional] Usage Example https://192.168.1.1/securetrack/api/domains/1 Response Messages: 401: User not permitted to access domains 400: Domain with ID was not found 400: Domain with this name already exists 400: Domain name is empty 400: Default domain cannot be changed' operationId: Updateadomain parameters: - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /domains: post: tags: - Domains summary: Addadomain description: 'Parameters: body [optional] Usage Example https://192.168.1.1/securetrack/api/domains Response Messages: 401: User not permitted to access domains 400: Domain with this name already exists 400: Domain name is empty' operationId: Addadomain parameters: [] responses: '200': description: '' headers: {} content: {} deprecated: false get: tags: - Domains summary: Getalldomains description: ' Usage Example https://192.168.1.1/securetrack/api/domains Response Messages: 401: User not permitted to access domains' operationId: Getalldomains parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json responses: '200': description: '' headers: {} content: {} deprecated: false /properties: get: tags: - General Properties summary: Getgeneralproperties description: ' Usage Example <table><tr><td>URL</td><td>https://192.168.1.1/securetrack/api/properties</td></tr><tr><td>OUTPUT</td><td>{     "properties": {         "sc_addresses": {             "sc_address": [                 {                     "ip_address": "127.0.0.1",                     "type": "external"                 },                 {                     "ip_address": "127.0.0.1",                     "type": "internal"                 }             ]         }     } }</td></tr></table> Response Messages: 401: User not permitted to view properties' operationId: Getgeneralproperties parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json responses: '200': description: '' headers: {} content: {} deprecated: false /revisions/{id}/crypto_maps: get: tags: - IPsec VPN summary: GetCiscocryptographicmapsbyrevision description: 'Parameters: context: Global MSSP context [optional] id: Revision ID Usage Example https://191.168.1.1/securetrack/api/revisions/18/crypto_maps ' operationId: GetCiscocryptographicmapsbyrevision parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /bindings/{device_id}/ipsec_tunnels: get: tags: - IPsec VPN summary: GetCiscoIPsecpolicyandpeers description: 'Get policy and peers defined on a Cisco crypto map which is applied to specific interface (provided through the outputInterfaceName parameter) in the running config. You can retrieve the interface names by calling the /devices/id/interfaces API. Parameters: device_id: The unique identifier of target device outputInterfaceName: Interface name Usage Example https://192.168.1.1/securetrack/api/bindings/32/ipsec_tunnels?outputInterfaceName=GigabitEthernet1 ' operationId: GetCiscoIPsecpolicyandpeers parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: device_id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /bindings/{device_id}/ipsec_communities: get: tags: - IPsec VPN summary: GetCheckPointVPN(IPSec)communitiesandgateways description: 'Get Check Point VPN (IPSec) Communities and gateways that partcipant in those communities. Works on clusters and gateways, not on management servers. Parameters: device_id: The unique identifier of target device Usage Example https://192.168.1.1/securetrack/api/bindings/20/ipsec_communities ' operationId: GetCheckPointVPN(IPSec)communitiesandgateways parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: device_id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /devices/{id}/crypto_maps: get: tags: - IPsec VPN summary: GetCiscocryptographicmapsbydevice description: 'Parameters: context: Global MSSP context [optional] id: Device ID Usage Example https://192.168.1.1/securetrack/api/devices/19/crypto_maps ' operationId: GetCiscocryptographicmapsbydevice parameters: - name: Accept in: header description: '' required: true style: simple schema: type: string example: application/json - name: id in: path description: '' required: true style: simple schema: type: string responses: '200': description: '' headers: {} content: {} deprecated: false /internet_referral/{deviceId}/object: get: tags: - Internet Objects summary: GetresolvedInternetrepresentationfordevice description: 'The order of precedence used to resolve the Internet object is: Step 1: Identify the Internet referral: Search for a defined Internet referral on the specified device. If it is not found on the device, search the parent and grandparents (up the device tree) for a defined Internet referral. If a defined Internet referral is found, then match the name in the Internet referral to a network object, as defined in Step 2. If an Internet referral is not found, it resolves to “Any”. Step 2: Resolve the object by name: Search the specified device for a defined network object that matches the name returned in Step 1. If a matching network object is not found, an error will be returned. Parameters: deviceId: SecureTrack Device ID Usage Example https://192.168.1.1/secur