Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ permalink: /documentation/products/secure/automate/integrate-siems/

import LinkButton from 'azion-webkit/linkbutton'
import Tabs from '~/components/tabs/Tabs'
import Code from '~/components/Code/Code.astro'


Your logs from [Web Application Firewall (WAF)](/en/documentation/products/secure/edge-firewall/web-application-firewall/) can be integrated with SIEM platforms through **Data Stream** to monitor your edge applications behaviors, performance, and security.
Expand Down Expand Up @@ -38,46 +39,41 @@ Your logs from [Web Application Firewall (WAF)](/en/documentation/products/secur
<Fragment slot="panel.api">
1. Run the following `POST` request, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/):

```bash
curl --location 'https://api.azionapi.net/data_streaming/streamings' \
--header 'Accept: application/json; version=3' \
--header 'Authorization: Token [TOKEN VALUE]' \
--header 'Content-Type: application/json' \
--data '{
"name": "Kafka Connector",
"template_id": 184,
"domain_ids": [1656613172],
"data_source": "http",
"endpoint": {
"endpoint_type": "kafka",
"kafka_topic": "mykafka.dts.topic",
"bootstrap_servers": "infra.my.net:9094,infra.my.net:9094"
},
"all_domains": false
}'
```

2. You'll receive a response similar to this:

```json
{
"results": {
"id": 1594,
"name": "Kafka Connector",
"template_id": 184,
"data_source": "http",
<Code lang="bash" code={`curl --request POST \
--url https://api.azion.com/v4/data_stream/streams \
--header 'Accept: application/json' \
--header 'Authorization: Token [TOKEN VALUE]' \
--header 'Content-Type: application/json' \
--data '{
"name": "Conector Kafka",
"active": true,
"endpoint": {
"endpoint_type": "kafka",
"use_tls": false,
"kafka_topic": "mykafka.dts.topic",
"bootstrap_servers": "infra.my.net:9094,infra.my.net:9094"
},
"all_domains": false
},
"schema_version": 3
}
```
"inputs": [
{
"type": "raw_logs",
"attributes": {
"data_source": "http"
}
}
],
"transform": [
{
"type": "sampling",
"attributes": {
"rate": 100
}
}
],
"outputs": [
{
"type": "kafka",
"attributes": {
"bootstrap_servers": "infra.my.net:9094,infra.my.net:9094",
"topic": "mykafka.dts.topic"
}
}
]
}'
`} />

:::tip
This example uses the **Apache Kafka endpoint**, but you can change the `endpoint_type` to any of the available endpoints and add the specific mandatory fields. See the available endpoints and their fields in the [Data Stream Endpoints](https://api.azion.com/#04257075-3691-4b5f-b22b-22a5b6653f3f) table.
Expand All @@ -86,7 +82,7 @@ This example uses the **Apache Kafka endpoint**, but you can change the `endpoin
Wait a few minutes for the changes to propagate and your stream will be created.

:::tip
Check the [Azion API documentation](https://api.azion.com/) and the [OpenAPI specification](https://github.com/aziontech/azionapi-openapi/) to know more about what the Azion API can offer.
Check the [Azion API documentation](https://api.azion.com/) to know more about what the Azion API can offer.
:::
</Fragment>

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ permalink: /documentation/products/guides/secure/edge-firewall-configure-main-se
import LinkButton from 'azion-webkit/linkbutton'
import Tag from 'primevue/tag'
import Tabs from '~/components/tabs/Tabs'
import Code from '~/components/Code/Code.astro'


Once you create an edge firewall with Azion, you can modify a few configurations. In this guide, you'll learn to modify the domains associated with your firewall and to enable the available modules.
Expand Down Expand Up @@ -68,69 +69,48 @@ To configure an edge firewall to protect an specific domain, [go to the Protect
<Fragment slot="panel.api">
1. Run the following `GET` request in your terminal, replacing `[TOKEN VALUE]` with your [personal token](/en/documentation/products/guides/personal-tokens/) to retrieve your `<edge_firewall_id>`:

```bash
curl --location 'https://api.azionapi.net/edge_firewall \
--header 'Accept: application/json; version=3' \
--header 'Authorization: Token [TOKEN VALUE]'
```

2. You'll receive a response with all your existing edge firewalls. Copy the value of the `<id>` that you want to configure.
3. Run a `PATCH` request to modify the firewall as follows:

```bash
curl --location --request PATCH 'https://api.azionapi.net/edge_firewall/<edge_firewall_id>' \
--header 'Accept: application/json; version=3' \
--header 'Authorization: Token [TOKEN VALUE]' \
--header 'Content-Type: application/json' \
--data '{
<Code lang="bash" code={`
curl --request GET \
--url https://api.azion.com/v4/edge_firewall/firewalls \
--header 'Accept: application/json' \
--header 'Authorization: Token [TOKEN VALUE]'
`} />

1. You'll receive a response with all your existing edge firewalls. Copy the value of the `<id>` that you want to configure.
2. Run a `PATCH` request to modify the firewall as follows:

<Code lang="bash" code={`
curl --request PATCH \
--url https://api.azion.com/v4/edge_firewall/firewalls/<edge_firewall_id> \
--header 'Accept: application/json' \
--header 'Authorization: Token [TOKEN VALUE]' \
--header 'Content-Type: application/json' \
--data '{
"name": "My edge firewall",
"domains": [
<domains_id>
],
"is_active": true,
"edge_functions_enabled": true,
"network_protection_enabled": true,
"waf_enabled": true,
"debug_rules": true
}'
```
"modules": {
"edge_functions": { "enabled": true },
"network_protection": { "enabled": true },
"waf": { "enabled": true }
},
"debug": true,
"active": true
}'
`} />


| Key | Description |
| --- | --- |
| `name` | Name of the edge firewall |
| `domains` | Array of IDs of the domains you want to associate with this edge firewall |
| `is_active` | Boolean value that enables (`true`) or disables (`false`) the edge firewall |
| `edge_functions_enabled` | Boolean value that enables (`true`) or disables (`false`) the [Edge Functions](/en/documentation/products/secure/edge-firewall/edge-functions/) module |
| `network_protection_enabled` | Boolean value that enables (`true`) or disables (`false`) the [Network Layer Protection](/en/documentation/products/secure/edge-firewall/network-layer-protection/) module |
| `waf_enabled` | Boolean value that enables (`true`) or disables (`false`) the [Web Application Firewall (WAF)](/en/documentation/products/secure/edge-firewall/web-application-firewall/) module |
| `debug_rules` | Boolean value that enables (`true`) or disables (`false`) the [Debug Rules](/en/documentation/products/guides/debug-rules/) feature |

4. You'll receive a response similar to this:

```json
{
"results": {
"name": My edge firewall",
"waf_enabled": true,
"is_active": true,
"edge_functions_enabled": true,
"last_modified": "2023-06-01T18:00:11.994514Z",
"domains": [
0123456789
],
"last_editor": "[email protected]",
"network_protection_enabled": true,
"id": 12345,
"debug_rules": false
},
"schema_version": 3
}
```

Wait a few minutes for the changes to propagate and your edge firewall will be updated.

:::tip
Check the [Azion API documentation](https://api.azion.com/) and the [OpenAPI specification](https://github.com/aziontech/azionapi-openapi/) to know more about what the Azion API can offer.
Check the [Azion API documentation](https://api.azion.com/) to know more about what the Azion API can offer.
:::
</Fragment>

Expand Down
Loading