Feature Request - Firewall Rules

[galaara98]

I see the point of the current features, and so I'm not sure your interest in this (your project really centers around maintenance of the controller itself)

I am looking for a maintained PowerShell module for doing some light touch ups of Unifi Secure Gateway Firewall rules (via the controller if the controller API does that, let me know if I have made a bad assumption).

Specifically, I have a rule that lets a port in from Wan to specific LAN address, with a list of source IPs (from WAN). I'd like to be able to change those source IPs and then commit that change via PowerShell.

[MichaelMcCool]

Pretty much anything that can be done inside the WebUI can be done via the API. You are correct that my initial development was focused around controller maintenance itself. This was my company's biggest need as there is no way to manage sites and admin permissions at scale inside the WebUI.

The initial development did take me a few months. Not only did I need to evaluate the API and reverse engineer what it did, but also needed to create commands that would make sense to a powershell user not intimately familiar with the way the API works. Additionally, some behind the scenes work was necessary in generating useful data. The Unifi API is downright awful for real-world use. The commands exposed in the powershell module don't always correlate one for one with the API. In many cases there are several API calls needed to create the necessary functionality.

As far as being able to create firewall rules, that should be possible, but there is much I don't yet understand on how the Unifi controller creates these rules. It also appears that firewall groups need to be created in order to populate the rules. I can start investigating this though and seeing what is needed in order to support it fully and allow you to create rules.

[MichaelMcCool]

I was able to do some initial research and development for supporting firewall rules last week. The command Get-UnifiFirewallProtocol now returns back a list of valid protocols when creating/modifying firewall rules. I will be using this to help validate the new/set commands when I am able to script those.