Skip to main content

REST APIs for 23.5

Security Policy Objects

Security policy objects contain information about policy versions, modifications, whether they are still pending and can be reverted, policy dependencies, and policy changes.

Active vs. Draft

This Public Stable API operates on provisionable objects in either a draft (not provisioned) state or an active (provisioned) state.

Provisionable items include label groups, services, rulesets, IP lists, virtual services, firewall settings, SecureConnect gateways, and virtual servers. For these objects, the URL of the API call must include the element called :pversion, which can be set to either draft or active.

Depending on the method, the API follows these rules:

  • For GET operations — :pversion can be draft, active, or the ID of the security policy.

  • For POST, PUT, DELETE — :pversion can be draft (you cannot operate on active items) or the ID if the security policy.