Invoke FalconFirewallPolicyAction - CrowdStrike/psfalcon GitHub Wiki

Invoke-FalconFirewallPolicyAction

SYNOPSIS

Perform actions on Falcon Firewall Management policies

DESCRIPTION

Requires 'Firewall management: Write'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Name String Action to perform add-host-group
disable
enable
remove-host-group
GroupId String Host group identifier
Id String Policy identifier X X

SYNTAX

Invoke-FalconFirewallPolicyAction [-Name] <String> [[-GroupId] <String>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /policy/entities/firewall-actions/v1

falconpy

performFirewallPoliciesAction

USAGE

Enabling firewall policies

Invoke-FalconFirewallPolicyAction -Name enable -Id <id>

Assigning host groups to a policy

Invoke-FalconFirewallPolicyAction -Name add-host-group -Id <id> -GroupId <id>

Disabling firewall policies

Invoke-FalconFirewallPolicyAction -Name disable -Id <id>

2023-04-25: PSFalcon v2.2.5

⚠️ **GitHub.com Fallback** ⚠️