Reapply a policy with API

[Dimitri Danishevski]

Hello everyone.
I'm trying to Reapply a policy in DCS 6.10.3 via the API and I'm getting this response:
Invoke-RestMethod: {"errorRemedy":"N/A","errorCode":"437","errorResponse":{"errorCode":"437","errorMsg":"Security
Group already in published state.","errorRemedy":"N/A"},"errorMsg":"Security Group already in published state."}

I can't find any information about what "Group already in published state" means and what I should do next.
I'd be grateful if anyone could help me with this and/or provide a link to documentation explaining this.

Thanks in advance, Dima

-------------------------------------------

[Muhammad Ihsan]

Hello @Dimitri Danishevski

Apologies for delayed response, You can find all the DCS rest API details here 

The DCS APIs are now published and accessible via the ESG API Portal. The DCS 6.10 Management Server architecture is fully API-driven and includes over 700 APIs. 
https://apidocs.security.com/#/

You can also follow this community portal for additional details
https://community.broadcom.com/discussion/dcssa-610-rest-api

On your specific error I will revert back to after confirming internally 

-------------------------------------------

[Muhammad Ihsan]

@Dimitri Danishevski

When a Security Group is already in APPLIED state, there is nothing to reapply, therefore, we send out error 437: Security Group already in published state.

User will have to update a policy applied to that SG. This action will move the SG to the Modified state and then the reapply API will return success.

-------------------------------------------

[Dimitri Danishevski]

Hi Muhammad, I've already figured out your answer, but thank you very much for it.
To Reapply a policy that hasn't been modified, I have to run three requests: Get+Put+Put
$SecGrpV1Url = https:// + $DCSserver + ":4443/sis-ui/api/v1/sa/securitygroups"

$GetSecGroup = Invoke-RestMethod -Method 'Get' -Uri $SecGrpV1Url/1501 -Header $header | ConvertTo-Json -Depth 10
$UpdateSecGroup = Invoke-RestMethod -Method 'Put' -Uri $SecGrpV1Url/1501 -Header $header -Body $GetSecGroup
$ReapplySecGroup = Invoke-RestMethod -Method 'Put' -Uri $SecGrpV1Url/1501/reapply -Header $header

It's just a shame that we get "Published state" in the error, while the documentation calls it APPLIED state.

Dima




[cid:image001.jpg@01DCE881.1735A890][cid:image002.gif@01DCE881.1735A890]
Dimitri Danishevski
Cyber Security Engineer
Mobile: [phone]
Mail: [e-mail]<mailto:[e-mail]>
Webex: https://malamteam.webex.com/meet/dimitrid