Add or modify policies

add/clone policy POST - <ips-api-base>/policies

modify policy POST - <ips-api-base>/policies/<policy-name>/modify

curl -gsvk -X POST --header "$c" --header "Content-Type: application/json" -- data @custom_policy.json "https://<host>/wsapis/v2.0.0/ips/policies"

Standard WSAPI authentication

POST - add/clone policy

POST - modify policy

{
"inclusion_list": {
"rules" : [
{
"rule_id":85300112,
"rule_revision":12,
"action":"block"
},
{
"rule_id":85300113,
"rule_revision":13,
"action":"noblock"
}
]
},
"exclusion_list":{
"rules" : [
{
"rule_id":85000001,
"rule_revision":12,
"action":"block"
},
{
"rule_id":85300007,
"rule_revision":13,
"action":"block"
}
]
},
"interfaces":[
"A",
"B"
],
"policy_name":"Custom-Policy_cloned_from_FireEye_Default",
"cloned_policy":"FireEye_Default",
"cloned_policy_type":"ips_default",
"block_all":false
}