Forum Discussion

Altostratus

4 years ago

Enabling alarm and block of IP Intelligence through CLI and curl

Is there an API for IP Intelligence enabling and disabling as well as for enabling alerting and/or blocking of items within the IP Intelligence feature in ASM. I am wanting to run a curl command like...

ip intelligence

security

Ismael_Goncalves

Employee

4 years ago

Hi,

You could use the following iControl REST endpoint:

/mgmt/tm/asm/policies/<pol-id>/ip-intelligence

Here is an example that patches a policy to enable Block and Alarm for Spam Sources category:

curl -k -u admin:xxxxxx -X PATCH https://bigip-host.net/mgmt/tm/asm/policies/3_4-X7IjK43HRjUS7xZnyA/ip-intelligence -H "Content-Type: application/json" -d '{ "ipIntelligenceCategories": [ { "block": true, "alarm": true, "category": "Spam Sources" }], "enabled":true}'

Alternatively, you could use a Parent Policy and control the settings to children policies via 'IP Addresses and Geolocations' inheretance setting.