vulnerability

Documentation

Overview

Package vulnerability is the client.Object.VulnerabilityProfile namespace.

Normalized object: Entry

Index

• Constants
• type Entry
  • func (o *Entry) Copy(s Entry)
  • func (o Entry) Specify(v version.Number) (string, interface{})
• type Exception
• type Firewall
  • func FirewallNamespace(client util.XapiClient) *Firewall
  • func (c *Firewall) Delete(vsys string, e ...interface{}) error
  • func (c *Firewall) Edit(vsys string, e Entry) error
  • func (c *Firewall) Get(vsys, name string) (Entry, error)
  • func (c *Firewall) GetAll(vsys string) ([]Entry, error)
  • func (c *Firewall) GetList(vsys string) ([]string, error)
  • func (c *Firewall) Set(vsys string, e ...Entry) error
  • func (c *Firewall) Show(vsys, name string) (Entry, error)
  • func (c *Firewall) ShowAll(vsys string) ([]Entry, error)
  • func (c *Firewall) ShowList(vsys string) ([]string, error)
• type Panorama
  • func PanoramaNamespace(client util.XapiClient) *Panorama
  • func (c *Panorama) Delete(dg string, e ...interface{}) error
  • func (c *Panorama) Edit(dg string, e Entry) error
  • func (c *Panorama) Get(dg, name string) (Entry, error)
  • func (c *Panorama) GetAll(dg string) ([]Entry, error)
  • func (c *Panorama) GetList(dg string) ([]string, error)
  • func (c *Panorama) Set(dg string, e ...Entry) error
  • func (c *Panorama) Show(dg, name string) (Entry, error)
  • func (c *Panorama) ShowAll(dg string) ([]Entry, error)
  • func (c *Panorama) ShowList(dg string) ([]string, error)
• type Rule

Constants

const (
	HostAny    = "any"
	HostClient = "client"
	HostServer = "server"
)

Valid values for the Rule.Host field.

const (
	ActionDefault = "default"
	ActionAllow   = "allow"
	ActionAlert   = "alert"

	// PAN-OS 6.1 Rule.Action only.
	ActionBlock = "block"

	// PAN-OS 6.1 Exception.Action only.
	ActionDropAll = "drop-all-packets"

	// PAN-OS 7.0+ Rule.Action, but ok for all PAN-OS Exception.Action.
	ActionDrop = "drop"

	// PAN-OS 7.0+.
	ActionResetClient = "reset-client"

	// PAN-OS 7.0+.
	ActionResetServer = "reset-server"

	// PAN-OS 7.0+.
	ActionResetBoth = "reset-both"

	// PAN-OS 7.0+.
	ActionBlockIp = "block-ip"
)

Valid values for Rule.Action / Exception.Action.

const (
	Disable         = "disable"
	SinglePacket    = "single-packet"
	ExtendedCapture = "extended-capture"
)

Valid values for PacketCapture.

const (
	TrackBySource               = "source"
	TrackByDestination          = "destination"
	TrackBySourceAndDestination = "source-and-destination"
)

Valid values for BlockIpTrackBy. For Rules, this is PAN-OS 7.0+.

Types

type Entry

type Entry struct {
	Name        string
	Description string
	Rules       []Rule
	Exceptions  []Exception
}

Entry is a normalized, version independent representation of a vulnerability protection profile.

func (*Entry) Copy

func (o *Entry) Copy(s Entry)

Copy copies the information from source Entry `s` to this object. As the Name field relates to the XPATH of this object, this field is not copied.

func (Entry) Specify

func (o Entry) Specify(v version.Number) (string, interface{})

type Exception

type Exception struct {
	Name            string
	PacketCapture   string
	Action          string
	BlockIpTrackBy  string
	BlockIpDuration int
	TimeInterval    int
	TimeThreshold   int
	TimeTrackBy     string
	ExemptIps       []string // ordered
}

type Firewall

type Firewall struct {
	// contains filtered or unexported fields
}

Firewall is the client.Objects.VulnerabilityProfile namespace.

func FirewallNamespace

func FirewallNamespace(client util.XapiClient) *Firewall

FirewallNamespace returns an initialized namespace.

func (*Firewall) Delete

func (c *Firewall) Delete(vsys string, e ...interface{}) error

Delete performs DELETE to remove the specified objects.

Objects can be either a string or an Entry object.

func (*Firewall) Edit

func (c *Firewall) Edit(vsys string, e Entry) error

Edit performs EDIT to configure the specified object.

func (*Firewall) Get

func (c *Firewall) Get(vsys, name string) (Entry, error)

Get performs GET to retrieve information for the given object.

func (*Firewall) GetAll

func (c *Firewall) GetAll(vsys string) ([]Entry, error)

GetAll performs GET to retrieve all objects configured.

func (*Firewall) GetList

func (c *Firewall) GetList(vsys string) ([]string, error)

GetList performs GET to retrieve a list of all objects.

func (*Firewall) Set

func (c *Firewall) Set(vsys string, e ...Entry) error

Set performs SET to configure the specified objects.

func (*Firewall) Show

func (c *Firewall) Show(vsys, name string) (Entry, error)

Show performs SHOW to retrieve information for the given object.

func (*Firewall) ShowAll

func (c *Firewall) ShowAll(vsys string) ([]Entry, error)

ShowAll performs SHOW to retrieve information for all objects.

func (*Firewall) ShowList

func (c *Firewall) ShowList(vsys string) ([]string, error)

ShowList performs SHOW to retrieve a list of all objects.

type Panorama

type Panorama struct {
	// contains filtered or unexported fields
}

Panorama is the client.Objects.VulnerabilityProfile namespace.

func PanoramaNamespace

func PanoramaNamespace(client util.XapiClient) *Panorama

PanoramaNamespace returns an initialized namespace.

func (*Panorama) Delete

func (c *Panorama) Delete(dg string, e ...interface{}) error

Delete performs DELETE to remove the specified objects.

Objects can be either a string or an Entry object.

func (*Panorama) Edit

func (c *Panorama) Edit(dg string, e Entry) error

Edit performs EDIT to configure the specified object.

func (*Panorama) Get

func (c *Panorama) Get(dg, name string) (Entry, error)

Get performs GET to retrieve information for the given object.

func (*Panorama) GetAll

func (c *Panorama) GetAll(dg string) ([]Entry, error)

GetAll performs GET to retrieve all objects configured.

func (*Panorama) GetList

func (c *Panorama) GetList(dg string) ([]string, error)

GetList performs GET to retrieve a list of all objects.

func (*Panorama) Set

func (c *Panorama) Set(dg string, e ...Entry) error

Set performs SET to configure the specified objects.

func (*Panorama) Show

func (c *Panorama) Show(dg, name string) (Entry, error)

Show performs SHOW to retrieve information for the given object.

func (*Panorama) ShowAll

func (c *Panorama) ShowAll(dg string) ([]Entry, error)

ShowAll performs SHOW to retrieve information for all objects.

func (*Panorama) ShowList

func (c *Panorama) ShowList(dg string) ([]string, error)

ShowList performs SHOW to retrieve a list of all objects.

type Rule

type Rule struct {
	Name            string
	ThreatName      string
	Cves            []string // unordered
	Host            string
	VendorIds       []string // ordered
	Severities      []string // ordered
	Category        string
	Action          string
	BlockIpTrackBy  string // PAN-OS 7.0+
	BlockIpDuration int    //PAN-OS 7.0+
	PacketCapture   string
}