What is the REST API endpoint for diag firewall iprope lookup?

[austindcc]

Hi all,

Looking to run the diag firewall iprope lookup command via REST API. Any suggestions?

Technical Tip: Trace which firewall policy will ma... - Fortinet Community

Thanks,

Austin

[smkml]

Hi @austindcc ,

Can you try to use, /firewall/policy-lookup? 

Example: # diag firewall iprope lookup 192.168.111.35 50000 192.168.121.102 80 tcp v111

GET https://x.x.x.x/api/v2/monitor/firewall/policy-lookup?sourceip=192.168.111.35&sourceport=50000&dest=192.168.121.102&destport=80&protocol=tcp&srcintf=v111

[austindcc]

I'm getting this, does that mean there are no policies that match the traffic?

{
    'http_method': 'GET',
    'results': {'success': False},
    'vdom': 'root',
    'path': 'firewall',
    'name': 'policy-lookup',
    'action': '',
    'status': 'success',
    'serial': 'FG201XXXXXXXX',
    'version': 'v7.0.14',
    'build': 601
}

[austindcc]

Also, is this documented somewhere? Thank you!