Skip to content

Commit 7059109

Browse files
committed
Firewall: Add Policy Summary about VPN SSL (from and to)
With NAT or disable...
1 parent 9be15f2 commit 7059109

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed

Src/Private/Get-AbrFgtFirewall.ps1

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -366,6 +366,27 @@ function Get-AbrFgtFirewall {
366366
$inspection_text += " ($inspection_pourcentage%)"
367367
}
368368

369+
$from_ssl = @($Policy | Where-Object { $_.srcintf.name -like 'ssl.*' }).count
370+
$from_ssl_with_nat = @($Policy | Where-Object { $_.srcintf.name -like 'ssl.*' -and $_.nat -eq "enable" }).count
371+
$from_ssl_disabled = @($Policy | Where-Object { $_.srcintf.name -like 'ssl.*' -and $_.status -eq "disable" }).count
372+
$from_ssl_text = "$from_ssl"
373+
if ($policy_count) {
374+
$from_ssl_pourcentage = [math]::Round(($from_ssl / $policy_count * 100), 2)
375+
$from_ssl_text += " ($from_ssl_pourcentage%)"
376+
}
377+
$from_ssl_text += " (With NAT: $from_ssl_with_nat, Disabled: $from_ssl_disabled)"
378+
379+
$to_ssl = @($Policy | Where-Object { $_.dstintf.name -like 'ssl.*' }).count
380+
$to_ssl_with_nat = @($Policy | Where-Object { $_.dstintf.name -like 'ssl.*' -and $_.nat -eq "enable" }).count
381+
$to_ssl_disabled = @($Policy | Where-Object { $_.dstintf.name -like 'ssl.*' -and $_.status -eq "disable" }).count
382+
$to_ssl_text = "$to_ssl"
383+
if ($policy_count) {
384+
$to_ssl_pourcentage = [math]::Round(($to_ssl / $policy_count * 100), 2)
385+
$to_ssl_text += " ($to_ssl_pourcentage%)"
386+
}
387+
$to_ssl_text += " (With NAT: $to_ssl_with_nat, Disabled: $to_ssl_disabled)"
388+
389+
369390
$OutObj = [pscustomobject]@{
370391
"Policy" = $policy_count
371392
"Enabled" = $status_text
@@ -376,6 +397,8 @@ function Get-AbrFgtFirewall {
376397
"Comments" = $comments_text
377398
"Comments (with Copy, Clone or Reverse)" = $comments_ccr_text
378399
"SSL/SSH Inspection" = $inspection_text
400+
"From VPN SSL" = $from_ssl_text
401+
"To VPN SSL" = $to_ssl_text
379402
}
380403

381404
$TableParams = @{

0 commit comments

Comments
 (0)