Does anyone know how to do mass updates to an IDP profile with a script? I have several USG40/50/60s in service for customers and I'm looking for a way to automate IDP settings. I prefer to have all IDP signatures activated, with alert logging, and reject-both but when new signatures come in, some are disabled or otherwise don't match my preferred settings. Currently I manually verify the IDP settings every month via the web interface which takes a fair bit of time for the half dozen devices I manage.
I've looked at the CLI reference and I see where I can control IDP signatures if I input the SID but I'm not sure how to automatically step through all signatures. I have a little experience doing Powershell scripting and none when it comes to Linux scripting so any help would be appreciated.
↧