Update firewall rules

[chriswalg]

I would like to use ansible collection for centralized config management across multiple customers and multiple sites.

I noticed that adjusting the firewall rules in the yml file does not lead to any change if the rule already exists and is set to state present. Is it possible to introduce a state presentOrUpdate?

[mamullen13316]

Possible and will consider it. In the meantime, you can solve it by querying for it first and then setting the state based on the result… ```yaml - name: QUERY FIREWALL RULE sophos.sophos_firewall.sfos_firewall_rule: name: IGT_TESTRULE state: query register: result - name: ADD FIREWALL RULE sophos.sophos_firewall.sfos_firewall_rule: name: IGT_TESTRULE position: before status: disable before_rulename: TestFirewallRule3 src_networks: - testhost1 dst_networks: - testhost3 service_list: - HTTPS action: accept state: "{{ 'present' if result.api_response == 'No. of records Zero.' else 'updated' }}" ``` From: chriswalg ***@***.***> Date: Thursday, April 17, 2025 at 6:17 AM To: sophos/sophosfirewall-ansible ***@***.***> Cc: Subscribed ***@***.***> Subject: [sophos/sophosfirewall-ansible] Update firewall rules (Issue #32) I would like to use ansible collection for centralized config management across multiple customers and multiple sites. I noticed that adjusting the firewall rules in the yml file does not lead to any change if the rule already exists and is set to state present. Is it possible to introduce a state presentOrUpdate? — Reply to this email directly, view it on GitHub<https://eu-west-1.protection.sophos.com?d=github.com&u=aHR0cHM6Ly9naXRodWIuY29tL3NvcGhvcy9zb3Bob3NmaXJld2FsbC1hbnNpYmxlL2lzc3Vlcy8zMg==&i=NjI2MGY4MzEzOTcwM2UxMTEyNWRlYjFl&t=RTBGZFcwdnVyOXhidXEyaStVYkNKWUpBUkhCNWtOa2V4RkE3a0N6VDhsST0=&h=1c80b70c27834ca1861c8d13cc95a911&s=AVNPUEhUT0NFTkNSWVBUSVa7Z56Wl0HUa2InR2X4iZf_VhFb887oT0fj-Wj-_R9rEA>, or unsubscribe<https://eu-west-1.protection.sophos.com?d=github.com&u=aHR0cHM6Ly9naXRodWIuY29tL25vdGlmaWNhdGlvbnMvdW5zdWJzY3JpYmUtYXV0aC9BQlU3VFRQQlkyWkhSMllOM0pSUkdITDJaNTVTSEFWQ05GU002QUFBQUFCM0tQVjZJNlZISTJEU01WUVdJWDNMTVY0M0FTTFRPTjJXS09aVEdBWURFTUJXR0kyRFNOSQ==&i=NjI2MGY4MzEzOTcwM2UxMTEyNWRlYjFl&t=bjg1S3RZRTRaUzF4T0piOExOaUx0blRpZ0VQOVNjOGI0a3B3UWJ3USsyST0=&h=1c80b70c27834ca1861c8d13cc95a911&s=AVNPUEhUT0NFTkNSWVBUSVa7Z56Wl0HUa2InR2X4iZf_VhFb887oT0fj-Wj-_R9rEA>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***> [Image removed by sender.]chriswalg created an issue (sophos/sophosfirewall-ansible#32)<https://eu-west-1.protection.sophos.com?d=github.com&u=aHR0cHM6Ly9naXRodWIuY29tL3NvcGhvcy9zb3Bob3NmaXJld2FsbC1hbnNpYmxlL2lzc3Vlcy8zMg==&i=NjI2MGY4MzEzOTcwM2UxMTEyNWRlYjFl&t=RTBGZFcwdnVyOXhidXEyaStVYkNKWUpBUkhCNWtOa2V4RkE3a0N6VDhsST0=&h=1c80b70c27834ca1861c8d13cc95a911&s=AVNPUEhUT0NFTkNSWVBUSVa7Z56Wl0HUa2InR2X4iZf_VhFb887oT0fj-Wj-_R9rEA> I would like to use ansible collection for centralized config management across multiple customers and multiple sites. I noticed that adjusting the firewall rules in the yml file does not lead to any change if the rule already exists and is set to state present. Is it possible to introduce a state presentOrUpdate? — Reply to this email directly, view it on GitHub<https://eu-west-1.protection.sophos.com?d=github.com&u=aHR0cHM6Ly9naXRodWIuY29tL3NvcGhvcy9zb3Bob3NmaXJld2FsbC1hbnNpYmxlL2lzc3Vlcy8zMg==&i=NjI2MGY4MzEzOTcwM2UxMTEyNWRlYjFl&t=RTBGZFcwdnVyOXhidXEyaStVYkNKWUpBUkhCNWtOa2V4RkE3a0N6VDhsST0=&h=1c80b70c27834ca1861c8d13cc95a911&s=AVNPUEhUT0NFTkNSWVBUSVa7Z56Wl0HUa2InR2X4iZf_VhFb887oT0fj-Wj-_R9rEA>, or unsubscribe<https://eu-west-1.protection.sophos.com?d=github.com&u=aHR0cHM6Ly9naXRodWIuY29tL25vdGlmaWNhdGlvbnMvdW5zdWJzY3JpYmUtYXV0aC9BQlU3VFRQQlkyWkhSMllOM0pSUkdITDJaNTVTSEFWQ05GU002QUFBQUFCM0tQVjZJNlZISTJEU01WUVdJWDNMTVY0M0FTTFRPTjJXS09aVEdBWURFTUJXR0kyRFNOSQ==&i=NjI2MGY4MzEzOTcwM2UxMTEyNWRlYjFl&t=bjg1S3RZRTRaUzF4T0piOExOaUx0blRpZ0VQOVNjOGI0a3B3UWJ3USsyST0=&h=1c80b70c27834ca1861c8d13cc95a911&s=AVNPUEhUT0NFTkNSWVBUSVa7Z56Wl0HUa2InR2X4iZf_VhFb887oT0fj-Wj-_R9rEA>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>