AvantGuard - SentinelOne

Actions682

Overview

This node updates an existing firewall rule category in a firewall control system via a web API. It is useful for managing firewall rules programmatically, such as modifying rule parameters like allowed applications, ports, directions, operating system types, and actions (e.g., Allow or Deny). For example, a network administrator can automate updating firewall rules to adapt to changing security policies or network configurations.

Properties

Name	Meaning
Firewall Rule Category	The unique identifier (ID) of the firewall rule category to update. This is required to specify which rule category the update applies to.
Data	A JSON object containing the details of the firewall rule category to update. This includes fields such as application types, direction, remote and local ports, operating system types, locations, remote hosts, action (Allow or Deny), status (Enabled or Disabled), tag IDs, and other relevant firewall rule parameters.

Output

JSON

response - The JSON response from the firewall control API after updating the firewall rule category. This typically contains the updated rule details or status confirmation.

Dependencies

An API key credential for authenticating with the AvantGuard SentinelOne firewall control API
The '@avantguardllc/n8n-openapi-node' package for API request handling

Troubleshooting

Ensure the 'Firewall Rule Category' ID is correct and exists in the firewall system; otherwise, the API may return a 'not found' error.
Verify that the JSON 'Data' property is well-formed and contains valid fields as expected by the API to avoid validation errors.
Check that the API credentials (baseURL and API key) are correctly configured and have sufficient permissions to update firewall rules.
Common error messages may include authentication failures, invalid JSON format, or missing required fields. Resolving these involves verifying credentials, correcting JSON syntax, and providing all mandatory properties.