topic Re: Export of DFW from NSXT in VMware NSX Discussions

Export of DFW from NSXT

bikashyadav — Wed, 25 Oct 2023 16:28:34 GMT

Any one aware of any PowerCLI module or script to export NSXT DFW rule in csv format ?

Appreciate any input.

Re: Export of DFW from NSXT

Sreec — Wed, 25 Oct 2023 18:12:10 GMT

You can export the security policies from the NSX U.I in CSV format

Re: Export of DFW from NSXT

bikashyadav — Thu, 02 Nov 2023 17:16:10 GMT

yes that option is there but i was looking for a better formatted data. As the one we get from the gui export is little more of data which again needs to be formatted per requirement.

Re: Export of DFW from NSXT

Sreec — Mon, 06 Nov 2023 11:49:06 GMT

Another option would be to leverage VMware Aria Operations for Networks

Re: Export of DFW from NSXT

bikashyadav — Mon, 06 Nov 2023 13:38:53 GMT

Thanks i will explore vrops and see if it suffice my requirement.

Re: Export of DFW from NSXT

EvertAM — Fri, 10 Nov 2023 10:04:39 GMT

Not PowerCLI, but you should be able to retrieve all DFW rules through the API as well.

Loop through this to get all policy id's:
GET /policy/api/v1/infra/domains/<domain-id>/security-policies

Then use the results to loop through this to get an overview of all the rule-ids within each policy:
GET /policy/api/v1/infra/domains/<domain-id>/security-policies/<security-policy-id>/rules

And finally, you could loop this to get the details for every rule within the policy:
GET /policy/api/v1/infra/domains/<domain-id>/security-policies/<security-policy-id>/rules/<rule-id>

This should allow you to output it all in JSON.
Alternatively, consider managing the rulebase through IaC, that should give you a permanent overview of your rules in a repository.