Mitigation by API

This sample shows how to map a zone to a device and change the filter mode to auto.

#!/usr/bin/env -S uv run --script
# /// script
# requires-python = ">=3.12"
# dependencies = [
#     "requests",
# ]
# ///
import requests
import json
import urllib.request, urllib.parse, urllib.error

base_url = "https://rweb"
headers = {'Content-Type':'application/json',
                   'Accept':'application/json'}


def wrap(data):
        return json.dumps({'data': data})

def url(resource, params=None):
        querystring = ""
        if params != None:
                querystring = "?"+urllib.parse.urlencode(params)
        return base_url + resource + querystring

def login(session):
        result = session.post(url('/authentication'),
                        wrap({'login':'admin','password':'test123'}))
        assert(result.status_code == requests.codes.created)

def logout(session):
        result = session.delete(url('/authentication'))
        assert(result.status_code == requests.codes.ok)

def find_group(session, name):
        result = session.get(url('/groups', {'name':name}))
        assert(result.status_code == requests.codes.ok)
        group_list = json.loads(result.content)
        assert(group_list['rows']==1)
        return group_list['data'][0]

def find_zone(session, group, name):
        result = session.get(url(group['zones_resource'],{'name':name}))
        assert(result.status_code == requests.codes.ok)
        zone_list = json.loads(result.content)
        assert(zone_list['rows']==1)
        return zone_list['data'][0]

def find_device(session, name):
        result = session.get(url('/devices',{'name':name}))
        assert(result.status_code == requests.codes.ok)
        device_list = json.loads(result.content)
        assert(device_list['rows']==1)
        return device_list['data'][0]

def mitigation(session, device, zone):
        result = session.post(url('/device_zone_mappings'),
                        wrap({'zone_resource':zone['zone_resource'],
                                'device_resource':device['device_resource']}))
        assert(result.status_code == requests.codes.created)

def find_configuration_resource(session, zone):
        current = find_current_revision(session, zone)
        configuration_resource = current['configuration_resource']
        return configuration_resource

def find_current_revision(session, zone):
        result = session.get(url(zone['revision_current_resource']))
        current = json.loads(result.content)
        return current

def change_configuration(session, zone, params):
        result = session.post(url(find_configuration_resource(session, zone)),
                        wrap(params))
        assert(result.status_code == requests.codes.created)

def main():
        with requests.Session() as session:
                session.headers = headers
                session.verify = False
                login(session)
                group = find_group(session, 'group name')
                zone = find_zone(session, group, 'zone name')
                device = find_device(session, '100.4')
                mitigation(session, device, zone)
                change_configuration(session, zone, {'configurations':
                        {'global_filter_mode':'auto'}})
                logout(session)

if __name__ == '__main__':
        main()