Task: Zone firewall (v7.8.0)
==================================================
Category: Security
Description: Firewall security policy configuration
New: No  |  IPv6: Yes

Vendor Support:
  ○ aws (IPv6: ○)
  ○ alcatel@aos (IPv6: ○)
  ✗ azure (IPv6: ✗)
  ✗ brocade@fastiron (IPv6: ✗)
  ○ cisco@ios (IPv6: ○)
  ○ cisco@ios-xe (IPv6: ○)
  ○ cisco@nx-os (IPv6: ○)
  ○ cisco@ios-xr (IPv6: ○)
  ○ cisco@asa (IPv6: ○)
  ○ cisco@wlc-air (IPv6: ○)
  ○ cisco@sg (IPv6: ○)
  ✓ cisco@ftd (IPv6: ✓)
  ○ cisco@aci (IPv6: ○)
  ○ cisco@meraki (IPv6: ○)
  ✗ cisco@viptela (IPv6: ✗)
  ○ cisco@apic (IPv6: ○)
  ○ cisco@encs (IPv6: ○)
  ○ dell@ftos (IPv6: ○)
  ○ dell@powerconnect (IPv6: ○)
  ○ dell@os10 (IPv6: ○)
  ✗ fs@fsos (IPv6: ✗)
  ○ gcp (IPv6: ○)
  ○ hpe@comware (IPv6: ○)
  ○ hpe@aruba (IPv6: ○)
  ○ hpe@arubasw (IPv6: ○)
  ○ hpe@arubacx (IPv6: ○)
  ○ hpe@3com (IPv6: ○)
  ○ hpe@aruba-iap (IPv6: ○)
  ○ riverbed@steelhead (IPv6: ○)
  ✓ fortinet@fortigate (IPv6: ✓)
  ○ fortinet@fortiswitch (IPv6: ○)
  ✓ forcepoint@ngfw (IPv6: ✗)
  ✓ paloalto@pan-os (IPv6: ✓)
  ✗ paloalto@prisma (IPv6: ✗)
  ✓ juniper@junos (IPv6: ✓)
  ○ juniper@mist (IPv6: ○)
  ✓ checkpoint@gaia (IPv6: ✓)
  ✓ checkpoint@gaia-embedded (IPv6: ✓)
  ○ extreme@boss (IPv6: ○)
  ○ extreme@enterasys (IPv6: ○)
  ○ extreme@voss (IPv6: ○)
  ○ extreme@exos (IPv6: ○)
  ○ arista@eos (IPv6: ○)
  ○ f5@big-ip (IPv6: ○)
  ○ f5@f5osa (IPv6: ○)
  ○ f5@f5osc (IPv6: ○)
  ○ huawei@vrp (IPv6: ○)
  ○ mikrotik@routeros (IPv6: ○)
  ○ quagga (IPv6: ○)
  ○ frr (IPv6: ○)
  ✗ versa@vos (IPv6: ✗)
  ✗ silverpeak@unity (IPv6: ✗)
  ✗ vmware@nsx-t (IPv6: ✗)
  ○ vmware@velocloud (IPv6: ○)
  ○ ruckus@vsz (IPv6: ○)
  ○ opengear@og (IPv6: ○)
  ○ opengear@og-om (IPv6: ○)
  ✓ stormshield@sn (IPv6: ✓)
  ○ nokia@timos (IPv6: ○)
  ○ citrix@adc (IPv6: ○)

CLI Commands:
  checkpoint@gaia-embedded: show security-gateway policy
  checkpoint@gaia-embedded: POST /web_api/show-access-rulebase
  checkpoint@gaia-embedded: POST /web_api/show-gateways-and-servers
  checkpoint@gaia-embedded: POST /web_api/show-object
  checkpoint@gaia-embedded: POST /web_api/show-objects
  checkpoint@gaia-embedded: POST /web_api/show-packages
  checkpoint@gaia-embedded: POST /web_api/show-updatable-objects
  checkpoint@gaia-embedded: POST /web_api/show-application-site
  checkpoint@gaia-embedded: show extended commands
  checkpoint@gaia-embedded: POST /web_api/show-access-layers
  checkpoint@gaia-embedded: ipf_pep show user all
  checkpoint@gaia-embedded: ipf_pep show user query pdp <ip>
  forcepoint@ngfw: sg-status -l
  forcepoint@ngfw: ip address
  forcepoint@ngfw: GET elements
  forcepoint@ngfw: GET elements/rbvpn_tunnel/<id>
  forcepoint@ngfw: GET elements/single_fw/<fwId>/internal_gateway/<gatewayId>/internal_endpoint/<endpointId>
  checkpoint@gaia: POST /web_api/show-objects
  fortinet@fortigate: get webfilter categories
  fortinet@fortigate: show webfilter ftgd-local-rating
  fortinet@fortigate: show webfilter profile
  fortinet@fortigate: show webfilter urlfilter
  checkpoint@gaia: POST /web_api/show-access-layers
  checkpoint@gaia: POST /web_api/show-access-rulebase
  checkpoint@gaia: POST /web_api/show-gateways-and-servers
  checkpoint@gaia: POST /web_api/show-object
  forcepoint@ngfw: GET elements/[single_fw|virtual_fw|fw_cluster]|single_layer2|virtual_layer2|layer2_cluster/<id>
  checkpoint@gaia: POST /web_api/show-packages
  checkpoint@gaia: POST /web_api/show-updatable-objects
  checkpoint@gaia: POST /web_api/show-application-site
  checkpoint@gaia: show extended commands
  checkpoint@gaia: show security-gateway policy
  checkpoint@gaia: ipf_pep show user all
  checkpoint@gaia: ipf_pep show user query pdp <ip>
  stormshield@sn: cli
  forcepoint@ngfw: GET elements/host/<id>
  forcepoint@ngfw: GET /elements/mgt_server/<id>
  juniper@junos: show configuration security | display inheritance
  juniper@junos: show configuration applications | display inheritance
  juniper@junos: show configuration groups junos-defaults applications | display set
  juniper@junos: show interfaces statistics detail
  stormshield@sn: cat /usr/Firewall/ConfigFiles/Filter/slotinfo
  stormshield@sn: cat /usr/Firewall/ConfigFiles/Filter/<activePolicy>
  forcepoint@ngfw: GET elements/icmp_service/<id>
  stormshield@sn: config network interface show
  stormshield@sn: config object list type=all
  stormshield@sn: config object group show name="<objectGroupName>"
  stormshield@sn: config object internet show
  stormshield@sn: cat /usr/Firewall/ConfigFiles/objectgroup
  stormshield@sn: cat /usr/Firewall/ConfigFiles/geogroup
  stormshield@sn: config network ipv6 state
  forcepoint@ngfw: GET elements/fw_policy/<id>/fw_ipv4_access_rule/<id>
  forcepoint@ngfw: GET elements/single_fw/<id>/snapshot
  forcepoint@ngfw: GET elements/single_fw/<id>/snapshot/<id>
  forcepoint@ngfw: GET elements/network/<id>
  forcepoint@ngfw: GET elements/tcp_service/<id>
  forcepoint@ngfw: GET elements/udp_service/<id>
  forcepoint@ngfw: GET elements/application_situation/<id>
  forcepoint@ngfw: GET elements/ip_service/<id>
  forcepoint@ngfw: GET elements/fw_policy/<id>/fw_ipv4_access_rule
  fortinet@fortigate: diagnose sys external-resource-list <name>
  forcepoint@ngfw: GET elements/interface_zone/<id>
  forcepoint@ngfw: GET elements/ip_country_group/<id>
  forcepoint@ngfw: GET elements/ip_list/<id>
  forcepoint@ngfw: GET elements/match_expression
  forcepoint@ngfw: GET elements/match_expression/<id>
  forcepoint@ngfw: GET elements/address_range/<id>
  forcepoint@ngfw: GET elements/single_fw/<id>/alias_resolving
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUUID>/policy/prefilterpolicies?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/portobjectgroups?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/protocolportobjects?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/securityzones?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/icmpv4objects?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/icmpv4objects/<id>
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/icmpv6objects?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/assignment/policyassignments?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUUID>/object/interfacegroups?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/networkgroups?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUUID>/policy/prefilterpolicies/<containerUUID>/prefilterrules?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUUID>/object/anyprotocolportobjects?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/urls?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/urlgroups?expanded=true
  paloalto@pan-os: show config pushed-shared-policy vsys <vsysName>
  paloalto@pan-os: show config pushed-shared-policy
  paloalto@pan-os: show interface <intName>
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUUID>/devices/devicerecords/<id>/vlaninterfaces?expanded=true
  cisco@ftd: show dns
  cisco@ftd: show managers
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/policy/accesspolicies?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/policy/accesspolicies/<id>/accessrules?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/devices/devicerecords?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/devices/devicerecords/<id>/physicalinterfaces?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/devices/devicerecords/<id>/subinterfaces?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/devices/devicerecords/<id>/etherchannelinterfaces?expanded=true
  paloalto@pan-os: show interface all
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUUID>/devices/devicerecords/<id>/fpphysicalinterfaces?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUUID>/devices/devicerecords/<id>/fplogicalinterfaces?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/devicehapairs/ftddevicehapairs?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/{domainUUID}/deviceclusters/ftddevicecluster?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/{domainUUID}/devicegroups/devicegrouprecords?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/applications?expanded=true
  cisco@ftd: GET /api/fmc_config/v1/domain/<domainUuid>/object/networkaddresses?expanded=true
  fortinet@fortigate: show firewall vipgrp
  fortinet@fortigate: show firewall address6
  fortinet@fortigate: show firewall addrgrp
  fortinet@fortigate: show firewall addrgrp6
  fortinet@fortigate: show firewall policy
  fortinet@fortigate: show firewall profile-group
  fortinet@fortigate: show firewall service custom
  fortinet@fortigate: show firewall service group
  fortinet@fortigate: show firewall vip
  fortinet@fortigate: show firewall address
  fortinet@fortigate: show full-configuration application list
  fortinet@fortigate: show system interface
  fortinet@fortigate: show system zone
  fortinet@fortigate: show system sdwan
  fortinet@fortigate: diagnose sys external-address-resource list
  fortinet@fortigate: diagnose sys external-address-resource list <name>
  fortinet@fortigate: show sys external-resource
  cisco@ftd: show summary
  fortinet@fortigate: get system status
  fortinet@fortigate: get system interface
  fortinet@fortigate: diagnose internet-service id [<id>]
  fortinet@fortigate: diagnose firewall fqdn6 list
  fortinet@fortigate: diagnose firewall fqdn list-ip
  fortinet@fortigate: diagnose firewall fqdn list
  fortinet@fortigate: diagnose firewall auth ipv6 list
  fortinet@fortigate: diagnose firewall auth list
  paloalto@pan-os: request system external-list show type predefined-ip name <name>
  paloalto@pan-os: request system external-list show type ip name <name>
  paloalto@pan-os: request system external-list show type url name <name>
  paloalto@pan-os: show object dynamic-address-group all
  paloalto@pan-os: show dns-proxy fqdn all
  paloalto@pan-os: request system fqdn show
  paloalto@pan-os: show config merged

Legend: ✓=Full, ✗=Not Yet, ○=N/A