VMware VSHIELD APP 1.0 - API Manuel d'utilisateur Page 71

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 132
  • Table des matières
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 70
VMware, Inc. 71
Chapter 6 vShield App Management
</VshieldAppConfiguration>
Get Fail-Safe Mode Configuration for vShield App Firewall
Example 6-12. Get fail-safe mode configuration
Example:
GET https://<vsm-ip>/api/2.1/app/failsafemode
Working with SpoofGuard
ItispossibleforaguestoperatingsystemtospoofitsIPaddresssothatVMwareToolswouldmisreportitto
vCenterServer.TheSpoofGuardfeatureallowsthedatacenteradministratortocertifyandauthorizereported
IPaddresses,andifnecessary,alterthem.ThisisdonebycheckingtheIPaddressagainst
thevirtualmachine’s
MACaddress,whichcomesfromtheVMXandcannotbespoofed.
TheSpoofGuardfeatureisorthogonaltofirewallrules.SpoofGuardblockstrafficifitthinkstheIPisspoofed,
whetherornotfirewallrulessaytoblock.
Get SpoofGuard Global Settings
YoucanretrieveSpoofGuardsettingssuchasthestatus(disabledorenabled),modeofoperation,timestamp,
andpublishingauthority.
Example 6-13. Get SpoofGuard settings
Example:
GET https://<vsm-ip>/api/2.0/spoofGuard/globalSettings
Edit SpoofGuard Global Settings
YoucanmodifytheSpoofGuardsettings.
Example 6-14. Edit SpoofGuard settings
Example:
POST https://<vsm-ip>/api/2.0/spoofGuard/globalSettings
RequestBody:
<VshieldConfiguration xmlns="vmware.vshield.global.20.spoofGuard">
<globalSettings>
<status>enabled</status>
<mode>trustOnFirstUse</mode>
</globalSettings>
</VshieldConfiguration>
Statuscanbeenabledordisabled.ModecanbetrustOnFirstUseormanual.
Get SpoofGuard IP Settings
YoucanretrievealistofSpoofGuardsettings,includedIPaddressessuspectedofbeingforged,thusblocked.
Vue de la page 70
1 2 ... 66 67 68 69 70 71 72 73 74 75 76 ... 131 132

Commentaires sur ces manuels

Pas de commentaire