Associated URIs:

API Description	API Path
Test a directory domain event log server connectivity This API tests a event log server connectivity before the actual domain or event log server is configured. If the connectivity is good, the response will be HTTP status 200. Otherwise the response will be HTTP status 200 and a corresponding error message will be returned.	POST /policy/api/v1/infra/firewall-identity-store-event-log-servers/status
Test a directory domain LDAP server connectivity This API tests a LDAP server connectivity before the actual domain or LDAP server is configured. If the connectivity is good, the response will be HTTP status 200. Otherwise the response will be HTTP status 500 and corresponding error message will be returned.	POST /policy/api/v1/infra/firewall-identity-store-ldap-server
Scan the size of a directory domain This call scans the size of a directory domain. It may be very \| expensive to run this call in some AD domain deployments. Please \| use it with caution.	POST /policy/api/v1/infra/firewall-identity-store-size
List all firewall identity stores List all firewall identity stores	GET /policy/api/v1/infra/firewall-identity-stores
Fetch all organization units for a LDAP server.	POST /policy/api/v1/infra/firewall-identity-stores-org-units
Delete firewall identity store If the firewall identity store is removed, it will stop the identity store synchronization. User will not be able to define new IDFW rules	DELETE /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>
Read firewall identity store Return a firewall identity store based on the store identifier	GET /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>
Create or update a firewall identity store If a firewall identity store with the firewall-identity-store-id is not already present, create a new firewall identity store. If it already exists, update the firewall identity store with specified attributes.	PATCH /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>
Invoke full sync or delta sync for a specific domain, with additional delay in seconds if needed. Stop sync will try to stop any pending sync if any to return to idle state.	POST /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>
Create or update a firewall identity store If a firewall identity store with the firewall-identity-store-id is not already present, create a new firewall identity store. If it already exists, replace the firewall identity store instance with the new object.	PUT /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>
Delete a Event Log server for Firewall Identity store	DELETE /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/event-log-servers/<event-log-server-id>
Get a specific Event Log server for a given Firewall Identity store	GET /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/event-log-servers/<event-log-server-id>
Update a event log server for Firewall Identity store	PUT /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/event-log-servers/<event-log-server-id>
Search for directory groups within a domain based on the substring of a distinguished name. (e.g. CN=User,DC=acme,DC=com) The search filter pattern can optionally support multiple (up to 100 maximum) search pattern separated by '\|' (url encoded %7C). In this case, the search results will be returned as the union of all matching criteria. (e.g. CN=Ann,CN=Users,DC=acme,DC=com\|CN=Bob,CN=Users,DC=acme,DC=com)	GET /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/groups
List members of a directory group A member group could be either direct member of the group specified by group_id or nested member of it. Both direct member groups and nested member groups are returned. Directory group member sync must be enabled to get the correct results.	GET /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/groups/<group-id>/member-groups
List all configured domain LDAP servers	GET /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/ldap-servers
Delete a LDAP server for Firewall Identity store	DELETE /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/ldap-servers/<ldap-server-id>
Get a specific LDAP server for a given Firewall Identity store	GET /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/ldap-servers/<ldap-server-id>
Create a LDAP server for Firewall Identity store More than one LDAP server can be created and only one LDAP server is used to synchronize directory objects. If more than one LDAP server is configured, NSX will try all the servers until it is able to successfully connect to one.	PATCH /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/ldap-servers/<ldap-server-id>
Test a LDAP server connection for directory domain The API tests a LDAP server connection for an already configured domain. If the connection is successful, the response will be HTTP status 200. Otherwise the response will be HTTP status 500 and corresponding error message will be returned.	POST /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/ldap-servers/<ldap-server-id>
Update a LDAP server for Firewall Identity store	PUT /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/ldap-servers/<ldap-server-id>
Fetch all organization units for a Firewall Identity Store.	GET /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/org-units
Get Firewall identity store sync statistics for the given identifier	GET /policy/api/v1/infra/firewall-identity-stores/<firewall-identity-store-id>/sync-stats
Get IDFW status for a Compute Collection Get IDFW status for a specific Compute Collection	GET /policy/api/v1/infra/settings/firewall/idfw/compute-collections/<compute-collection-id>/status
List IDFW status for Transport Nodes in a Compute Collection This API will list all transport node and statuses based on idfw enabled compute collection ID.	GET /policy/api/v1/infra/settings/firewall/idfw/compute-collections/<compute-collection-id>/transport-nodes/status
Get IDFW status for all Compute Collections Get IDFW status for all Compute Collections	GET /policy/api/v1/infra/settings/firewall/idfw/compute-collections/status
Get all IDFW Group VM details for a given Group Get all Identity Firewall Group VM details for a given Group.	GET /policy/api/v1/infra/settings/firewall/idfw/group-vm-details
Get IDFW system statistics data It will get IDFW system statistics data.	GET /policy/api/v1/infra/settings/firewall/idfw/system-stats
List IDFW status of VMs by transport node id This API will list all VMs and statuses based on transport node ID of idfw enabled compute collection.	GET /policy/api/v1/infra/settings/firewall/idfw/transport-nodes/<transport-node-id>/vms/status
Get user session data It will get user session data.	GET /policy/api/v1/infra/settings/firewall/idfw/user-session-data
Get IDFW user login events for a given user It will get IDFW user login events for a given user.	GET /policy/api/v1/infra/settings/firewall/idfw/user-stats/<user-id>
Get IDFW user login events for a given VM It will get IDFW user login events for a given VM (all active plus up to 5 most recent archived entries).	GET /policy/api/v1/infra/settings/firewall/idfw/vm-stats/<vm-id>

Policy > Security > East West Security > Distributed Firewall > Settings > Firewall Identity Store

Associated URIs:

Test a directory domain event log server connectivity

Test a directory domain LDAP server connectivity

Scan the size of a directory domain

List all firewall identity stores

Fetch all organization units for a LDAP server.

Delete firewall identity store

Read firewall identity store

Create or update a firewall identity store

Invoke full sync or delta sync for a specific domain, with additional delay in seconds if needed. Stop sync will try to stop any pending sync if any to return to idle state.

Create or update a firewall identity store

Delete a Event Log server for Firewall Identity store

Get a specific Event Log server for a given Firewall Identity store

Update a event log server for Firewall Identity store

List members of a directory group

List all configured domain LDAP servers

Delete a LDAP server for Firewall Identity store

Get a specific LDAP server for a given Firewall Identity store

Create a LDAP server for Firewall Identity store

Test a LDAP server connection for directory domain

Update a LDAP server for Firewall Identity store

Fetch all organization units for a Firewall Identity Store.

Get Firewall identity store sync statistics for the given identifier

Get IDFW status for a Compute Collection

List IDFW status for Transport Nodes in a Compute Collection

Get IDFW status for all Compute Collections

Get all IDFW Group VM details for a given Group

Get IDFW system statistics data

List IDFW status of VMs by transport node id

Get user session data

Get IDFW user login events for a given user

Get IDFW user login events for a given VM