List a device's configured IDP sensors.

List a device's configured interfaces.

List subinterfaces configured under a specific interface on a device.

Get metadata for a device's latest configuration revision.

List a device's configured routing instances.

List all of a device's configured subinterfaces.

List a device's configured security zones.

List device groups with optional pagination, filtering, and sorting.

Create a new device group. Body typically includes name, description, device UUIDs.

Get a device group by UUID.

Update a device group by UUID.

Delete a device group by UUID.

List device software image definitions with optional pagination, filtering, and sorting.

Create a new device software image definition.

Delete a device software image definition by UUID.

Bulk-deploy a software image to multiple devices. Returns a job id; poll sdcloud_get_deploy_image_status for progress.

Get the status of a bulk device-image deploy job.

Get the status of a device-image staging job.

Deploy a single software image definition to its target device(s). Returns a job id; poll sdcloud_get_deploy_image_status for progress.

Stage (pre-position) a single software image definition on its target device(s) without activating it. Returns a job id; poll sdcloud_get_stage_image_status for progress.

List onboarded devices with optional pagination, filtering, and sorting.

Bulk-create (onboard) one or more devices. Body typically includes a list of device definitions.

Get a single device by UUID.

Bulk-remove devices. Body typically includes a list of device UUIDs to remove. Returns a job id; poll sdcloud_get_remove_devices_status for progress.

Get the status of a bulk device-remove job.

Bulk-reboot devices. Body typically includes a list of device UUIDs. Returns a job id; poll sdcloud_get_reboot_devices_status for progress.

Get the status of a bulk device-reboot job.

Bulk-sync devices with the controller. Body typically includes a list of device UUIDs. Returns a job id; poll sdcloud_get_sync_devices_status for progress.

Get the status of a bulk device-sync job.

Generate/retrieve the bootstrap configuration for a device.

List configuration version history for a device.

Trigger a rollback of a device to a prior configuration version. Returns a job id; poll sdcloud_get_config_rollback_status for progress.

Get the status of a device configuration rollback job.

Get the status of an RMA device-reactivation job.

Put a device into RMA (Return Merchandise Authorization) state.

Reactivate a replacement device with the configuration of a prior RMA device. Returns a job id; poll sdcloud_get_rma_reactivation_status for progress.

Get the reactivation configuration for a device that is in RMA state.

Set up an RMA device with reactivation preferences for the replacement workflow.

Get the current RMA state of a device.

List CA certificates across the fleet, with optional pagination, filtering, and sorting.

List local certificates across the fleet, with optional pagination, filtering, and sorting.

Get the status of a certificate-delete job.

Get the status of a CA certificate installation job.

Get the status of a license installation job.

Get the status of a local certificate installation job.

List CA certificates installed on a specific device.

List local certificates installed on a specific device.

List licenses installed on a specific device.

Get a single license installed on a device.

Delete a certificate from a device. Body typically includes the certificate id/type to remove.

Install a CA certificate on a device (multipart upload). Provide the certificate file as base64 in ca_certificate_content, plus the CA profile id to associate it with.

Install a license on a device (multipart upload). Provide at least one of a primary license file (license_file_content) or, for an l2_cluster secondary device, a secondary license file (secondary_license_file_content), each base64-encoded.

Install a local certificate and its private key on a device (multipart upload). Provide the certificate id to associate, the certificate and key files as base64, and the pass phrase used to encrypt the key file.

Get the status of an MNHA (Multi-Node High Availability) cluster sync job.

Trigger a sync of an MNHA (Multi-Node High Availability) cluster. Returns a job id; poll sdcloud_get_mnha_cluster_sync_status for progress.

List IPS profile objects with optional pagination, filtering, and sorting.

Create a new IPS profile object.

Get an IPS profile object by UUID.

Update an IPS profile object by UUID.

Delete an IPS profile object by UUID.

List exempt rules within an IPS profile.

Create an exempt rule within an IPS profile.

Get an exempt rule within an IPS profile.

Update an exempt rule within an IPS profile.

Delete an exempt rule within an IPS profile.

List IPS rules within an IPS profile.

Create an IPS rule within an IPS profile.

Get an IPS rule within an IPS profile.

Update an IPS rule within an IPS profile.

Delete an IPS rule within an IPS profile.

List IPS contexts (read-only reference data) with optional pagination, filtering, and sorting.

Get an IPS context by UUID.

List IPS services (read-only reference data) with optional pagination, filtering, and sorting.

Get an IPS service by UUID.

List IPS vulnerabilities (read-only reference data) with optional pagination, filtering, and sorting.

Get an IPS vulnerability by UUID.

List IPS signature objects with optional pagination, filtering, and sorting.

Create a new IPS signature object.

Get an IPS signature object by UUID.

Update an IPS signature object by UUID.

Delete an IPS signature object by UUID.

List available IPS signature categories (read-only reference data).

List available IPS anomaly tests (read-only reference data), optionally filtered by service.

List firewall policies with optional pagination, filtering, and sorting.

Create a new firewall policy. Body typically includes name, description, all_site_policy, order.

Get a firewall policy by UUID.

Update a firewall policy by UUID.

Delete a firewall policy by UUID.

List a firewall policy's rule hierarchy for a given scope (global or zone).

Bulk-move firewall policy rules to a target rule group/scope/position. Body: rule_uuids, target_rule_group_id, position, target_scope.

List rule groups within a firewall policy scope.

Create a rule group within a firewall policy scope.

Get a single rule group within a firewall policy scope.

Update a rule group within a firewall policy scope.

Delete a rule group within a firewall policy scope. If ungroup_rules is true, member rules are kept and ungrouped instead of deleted.

List rules within a firewall policy rule group.

Create a rule inside a firewall policy rule group. Body typically includes name, description, action, sources, destinations, applications.

Get a rule inside a firewall policy rule group.

Update a rule inside a firewall policy rule group.

Delete a rule inside a firewall policy rule group.

Move (reorder) a single rule within its firewall policy rule group.

List ungrouped rules directly under a firewall policy scope.

Create a rule directly under a firewall policy scope (not inside a rule group). Body typically includes name, description, action, sources, destinations, applications.

Get an ungrouped firewall policy rule.

Update an ungrouped firewall policy rule.

Delete an ungrouped firewall policy rule.

List device/site assignments for a firewall policy.

Batch-assign or unassign devices/sites for a firewall policy.

Trigger a cleanup job for unused objects/rules referencing a firewall policy. Body requires cleanup_mode (e.g. STRICT).

Deploy a single firewall policy to its assigned devices.

Preview the configuration diff a firewall policy deployment would produce. Body requires deploy_targets and/or undeploy_targets (each a list of {target_id, target_type}).

Deploy a firewall policy to a selective subset of its assigned devices.

Get the deployment state of a firewall policy (e.g. up to date, pending, out of sync).

List NAT policies with optional pagination, filtering, and sorting.

Create a new NAT policy. Body typically includes name, description, all_site_policy, order.

Get a NAT policy by ID.

Update a NAT policy by ID.

Delete a NAT policy by ID.

List a NAT policy's rule hierarchy. Unlike firewall policies, NAT policies have no global/zone scope segment.

Bulk-move NAT policy rules to a target rule group/position. Body: rule_ids, target_rule_group_id, position.

List rule groups within a NAT policy.

Create a rule group within a NAT policy.

Reorder/move rule groups within a NAT policy. Unlike firewall (which moves individual rules via rules/{rule_uuid}/move), NAT moves are performed at the rule_groups collection level.

Get a single rule group within a NAT policy.

Delete a rule group within a NAT policy. If ungroup_rules is true, member rules are kept and ungrouped instead of deleted. Note: NAT rule groups cannot be updated in place (no PUT); delete and recreate instead.

List rules within a NAT policy rule group.

Create a rule inside a NAT policy rule group. Body typically includes name, description, nat_type, sources, destinations, translated addresses/ports.

Get a rule inside a NAT policy rule group.

Update a rule inside a NAT policy rule group.

Delete a rule inside a NAT policy rule group.

List ungrouped rules directly under a NAT policy.

Create a rule directly under a NAT policy (not inside a rule group). Body typically includes name, description, nat_type, sources, destinations, translated addresses/ports.

Get an ungrouped NAT policy rule.

Update an ungrouped NAT policy rule.

Delete an ungrouped NAT policy rule.

List ARP entries for a NAT policy (read-only). Used to inspect proxy-ARP address resolution for static/source/destination NAT translations.

List proxy NDP (Neighbor Discovery Protocol) entries for a NAT policy (read-only). IPv6 analogue of ARP entries.

List device/site assignments for a NAT policy.

Batch-assign or unassign devices/sites for a NAT policy.

Trigger a cleanup job for unused objects/rules referencing a NAT policy. Body requires cleanup_mode (e.g. STRICT).

Deploy a single NAT policy to its assigned devices.

Preview the configuration diff a NAT policy deployment would produce. Body requires deploy_targets and/or undeploy_targets (each a list of {target_id, target_type}).

Deploy a NAT policy to a selective subset of its assigned devices.

Get the deployment state of a NAT policy (e.g. up to date, pending, out of sync).

Start a bulk deploy job across multiple policies/devices. Operates across ALL policies (both firewall and NAT) referenced in the request body, unlike the single-policy sdcloud_{deploy,preview,cleanup,selective_deploy}_{firewall,nat}_policy tools, which act on one policy_id at a time. Body typically includes a list of policy_ids and/or device_ids to deploy.

Get the status of a bulk policy deploy job by deploy_id.

Get the per-device result of a bulk policy deploy job.

Start a bulk preview job across multiple policies/devices, computing the configuration diff a deploy would produce without applying it. Operates across ALL policies (both firewall and NAT) referenced in the request body, unlike the single-policy sdcloud_{deploy,preview,cleanup,selective_deploy}_{firewall,nat}_policy tools, which act on one policy_id at a time.

Get the status of a bulk policy preview job by preview_id.

Get the per-device result of a bulk policy preview job.

Start a bulk cleanup job across multiple policies, removing unused objects/rules. Operates across ALL policies (both firewall and NAT) referenced in the request body, unlike the single-policy sdcloud_{deploy,preview,cleanup,selective_deploy}_{firewall,nat}_policy tools, which act on one policy_id at a time.

Get the status of a bulk policy cleanup job by cleanup_id.

Get the per-device result of a bulk policy cleanup job.

Start a bulk selective-deploy job, deploying multiple policies to a selective subset of their assigned devices. Operates across ALL policies (both firewall and NAT) referenced in the request body, unlike the single-policy sdcloud_{deploy,preview,cleanup,selective_deploy}_{firewall,nat}_policy tools, which act on one policy_id at a time.

Get the status of a bulk policy selective-deploy job by selective_deploy_id.

Get the per-device result of a bulk policy selective-deploy job.

List Advanced Anti-Malware (AAMW) profile objects with optional pagination, filtering, and sorting.

Create a new AAMW profile object.

Get an AAMW profile object by UUID.

Update an AAMW profile object by UUID.

Delete an AAMW profile object by UUID.

List address objects with optional pagination, filtering, and sorting.

Create a new address object. Body typically includes name, description, address_type, ip_address, host_name.

Get an address object by UUID.

Update an address object by UUID.

Delete an address object by UUID.

List anti-spam profile objects with optional pagination, filtering, and sorting.

Create a new anti-spam profile object.

Get an anti-spam profile object by UUID.

Update an anti-spam profile object by UUID.

Delete an anti-spam profile object by UUID.

List anti-virus profile objects with optional pagination, filtering, and sorting.

Create a new anti-virus profile object.

Get an anti-virus profile object by UUID.

Update an anti-virus profile object by UUID.

Delete an anti-virus profile object by UUID.

List application objects with optional pagination, filtering, and sorting.

Create a new application object. Body typically includes name, description, category, risk, application_mapping.

Get an application object by UUID.

Update an application object by UUID.

Delete an application object by UUID.

List content filtering profile objects with optional pagination, filtering, and sorting.

Create a new content filtering profile object.

Get a content filtering profile object by UUID.

Update a content filtering profile object by UUID.

Delete a content filtering profile object by UUID.

List content security profile objects with optional pagination, filtering, and sorting.

Create a new content security profile object.

Get a content security profile object by UUID.

Update a content security profile object by UUID.

Delete a content security profile object by UUID.

Get the tenant-wide content security settings singleton.

Update the tenant-wide content security settings singleton.

List enhanced content filtering profile objects with optional pagination, filtering, and sorting.

Create a new enhanced content filtering profile object.

Get an enhanced content filtering profile object by UUID.

Update an enhanced content filtering profile object by UUID.

Delete an enhanced content filtering profile object by UUID.

List rule sets within an enhanced content filtering profile.

Create a rule set within an enhanced content filtering profile.

Delete a rule set within an enhanced content filtering profile. There is no get/update for a rule set itself (only its nested rules support get/update).

List rules within an enhanced content filtering profile rule set.

Create a rule within an enhanced content filtering profile rule set.

Get a rule within an enhanced content filtering profile rule set.

Update a rule within an enhanced content filtering profile rule set.

Delete a rule within an enhanced content filtering profile rule set.

Get the tenant-wide firewall global profile singleton.

Update the tenant-wide firewall global profile singleton.

Get the tenant-wide firewall global settings singleton.

Update the tenant-wide firewall global settings singleton.

List per-device firewall global settings with optional filtering and pagination.

Create a new per-device firewall global settings object.

Get a per-device firewall global settings object by UUID.

Update a per-device firewall global settings object by UUID.

Delete a per-device firewall global settings object by UUID.

List flow-based antivirus profile objects with optional pagination, filtering, and sorting.

Create a new flow-based antivirus profile object.

Get a flow-based antivirus profile object by UUID.

Update a flow-based antivirus profile object by UUID.

Delete a flow-based antivirus profile object by UUID.

List ICAP profile objects with optional pagination, filtering, and sorting.

Create a new ICAP profile object.

Get an ICAP profile object by UUID.

Update an ICAP profile object by UUID.

Delete an ICAP profile object by UUID.

List ICAP server objects with optional pagination, filtering, and sorting.

Create a new ICAP server object.

Get an ICAP server object by UUID.

Update an ICAP server object by UUID.

Delete an ICAP server object by UUID.

List identity objects with optional pagination, filtering, and sorting.

Create a new identity object. Body typically includes name, description, identity_type, identity_domain.

Get an identity object by UUID.

Update an identity object by UUID.

Delete an identity object by UUID.

List NAT pool objects with optional pagination, filtering, and sorting.

Create a new NAT pool object. Body typically includes name, description, pool_type, pool_address.

Get a NAT pool object by pool ID.

Update a NAT pool object by pool ID.

Delete a NAT pool object by pool ID.

List proxy server objects with optional pagination, filtering, and sorting.

Create a new proxy server object.

Get a proxy server object by UUID.

Update a proxy server object by UUID.

Delete a proxy server object by UUID.

Get the proxy server configuration (singleton).

Set/update the proxy server configuration (singleton).

List redirect profile objects with optional pagination, filtering, and sorting.

Create a new redirect profile object.

Get a redirect profile object by UUID.

Update a redirect profile object by UUID.

Delete a redirect profile object by UUID.

List rule option objects with optional pagination, filtering, and sorting.

Create a new rule option object. Body typically includes name, description, authentication, web_options.

Get a rule option object by UUID.

Update a rule option object by UUID.

Delete a rule option object by UUID.

List scheduler objects with optional pagination, filtering, and sorting.

Create a new scheduler object. Body typically includes name, description, start-date1, stop-date1, schedules.

Get a scheduler object by UUID.

Update a scheduler object by UUID.

Delete a scheduler object by UUID.

List SecIntel profile objects with optional pagination, filtering, and sorting.

Create a new SecIntel profile object.

Get a SecIntel profile object by UUID.

Update a SecIntel profile object by UUID.

Delete a SecIntel profile object by UUID.

List SecIntel profile group objects with optional pagination, filtering, and sorting.

Create a new SecIntel profile group object.

Get a SecIntel profile group object by UUID.

Update a SecIntel profile group object by UUID.

Delete a SecIntel profile group object by UUID.

List service objects with optional pagination, filtering, and sorting.

Create a new service object. Body typically includes name, description, service_type, protocols.

Get a service object by UUID.

Update a service object by UUID.

Delete a service object by UUID.

List SSL initiation objects with optional pagination, filtering, and sorting.

Create a new SSL initiation object. Body typically includes name, protocol_version, cipher_strength, default_local_cert.

Get an SSL initiation object by UUID.

Update an SSL initiation object by UUID.

Delete an SSL initiation object by UUID.

List SSL proxy profile objects with optional pagination, filtering, and sorting.

Create a new SSL proxy profile object. Body typically includes name, description, ssl_type, preferred_cipher.

Get an SSL proxy profile object by UUID.

Update an SSL proxy profile object by UUID.

Delete an SSL proxy profile object by UUID.

List SWP (SSL/Web Proxy) profile objects with optional pagination, filtering, and sorting.

Create a new SWP profile object.

Get an SWP profile object by UUID.

Update an SWP profile object by UUID.

Delete an SWP profile object by UUID.

List URL category list objects with optional pagination, filtering, and sorting.

Create a new URL category list object. Body typically includes name, description, url_patterns (list of {uuid}).

Get a URL category list object by UUID.

Update a URL category list object by UUID.

Delete a URL category list object by UUID.

List URL pattern objects with optional pagination, filtering, and sorting.

Create a new URL pattern object. Body typically includes name, description, address_patterns.

Get a URL pattern object by UUID.

Update a URL pattern object by UUID.

Delete a URL pattern object by UUID.

List variable zone objects with optional pagination, filtering, and sorting.

Create a new variable zone object. Body typically includes name, description, type, default_zone.

Get a variable zone object by UUID.

Update a variable zone object by UUID.

Delete a variable zone object by UUID.

List web filtering profile objects with optional pagination, filtering, and sorting.

Create a new web filtering profile object.

Get a web filtering profile object by UUID.

Update a web filtering profile object by UUID.

Delete a web filtering profile object by UUID.

List subscriptions with optional pagination, filtering, and sorting.

List associations (e.g. sites/devices) for a subscription, with optional pagination, filtering, and sorting.

Associate a subscription with a target resource (e.g. site or device).

List configuration templates with optional pagination, filtering, and sorting.

Get a configuration template by id.

Delete a configuration template by id.

Deploy a configuration template to its mapped devices. Returns a job id; poll sdcloud_get_template_deploy_status for progress.

Get the overall status of a template deploy job.

Get the per-device result of a template deploy job.

Preview the configuration a template deployment would produce. Returns a job id; poll sdcloud_get_template_preview_status for progress.

Get the overall status of a template preview job.

Get the per-device result of a template preview job.

Validate a configuration template against its mapped devices. Returns a job id; poll sdcloud_get_template_validate_status for progress.

Get the overall status of a template validate job.

Get the per-device result of a template validate job.

Download the CSV device-parameter mapping file for a template. Body typically selects which devices/mappings to include. The response is passed through as-is (file content or a reference to it, per the API).

Upload a CSV file of device parameter mappings for a template (multipart upload). Provide the CSV content base64-encoded.

Batch-create/update device-to-template variable mappings for a template.

List device mappings for a template, with optional pagination, filtering, and sorting.

Get a single device mapping for a template.

Delete a device mapping for a template.

Update a device mapping for a template.

Upload a workflow definition YAML file to create/register a new template (multipart upload). Provide the YAML content base64-encoded.

Get the tenant external probe configuration.

Delete the tenant external probe configuration.

Create the tenant external probe configuration.

Create a new user.

Get a user by user_id.

Update a user by user_id.

Delete a user by uuid. Note: unlike get/update, the API spec names this path param "uuid" rather than "user_id".

List users with optional spec.size/spec.from pagination.

Get a role by ID.

List roles with optional spec.size/spec.from pagination.

WARNING: Sensitive/destructive-ish action. Changes the password of the currently authenticated user. This immediately invalidates the old credentials for that account — confirm intent before calling.

Send an account activation email to a user.

Get the count of users for a given tenant POP.

Create a new IPsec profile.

Get an IPsec profile by name.

Delete an IPsec profile by name.

Update an IPsec profile by name.

List all IPsec profiles. This endpoint does not support pagination params.

Get a PAC file by name.

List all PAC files. This endpoint does not support pagination params.

Create a new site.

Validate site parameters before creating a site.

Get a site by name.

Delete a site by name.

Update a site by name.

Deploy a site by name.

List sites with optional spec.size/spec.from pagination.

Create multiple sites in a single bulk request.

List tenant points-of-presence with optional spec.size/spec.from pagination.

Get the tenant ID / token scope for the authenticated caller.

Get a tunnel by ID.

List tunnels with optional spec.size/spec.from pagination.

Get a count of tunnels grouped by status.