how to filter policies by multiple conditions

[Manchuker1120]

cmdb.firewall.policy.get(efilter=["dstaddr==2.2.2.2",'srcaddr==1.1.1.1'])
it does not work.

[vladimirs-git]

filter - parameter can be used to filter by any data key/value.
efilter - parameter is designed to filter by prefixes using the syntax A.B.C.D/LEN.
In your example of using efilter, you need to fix the prefix syntax.

Links to some tutorials:
Extended filtering conditions
Filter policies

[Manchuker1120]

filter - parameter can be used to filter by any data key/value. efilter - parameter is designed to filter by prefixes using the syntax A.B.C.D/LEN. In your example of using efilter, you need to fix the prefix syntax.

Links to some tutorials: Extended filtering conditions Filter policies

How do I filter if there are multiple source-ip addresses?

[Manchuker1120]

I want to find all policies whose source ip address contains 1.1.1.1, but I find that one of my policies whose source ip address is 1.1.1.0/24 is not matched.

[vladimirs-git]

Please try this example to filter your source ip

HOST = ""
USERNAME = ""
PASSWORD = ""

api = FortiGateAPI(
    host=HOST,
    username=USERNAME,
    password=PASSWORD,
)

# Get all firewall policies and print the total count
policies_all = api.cmdb.firewall.policy.get()
print(f"{len(policies_all)=}")  # len(policies_all)=245

# Get policies by an exact source address using Extended-filter parameter
policies_efilter = api.cmdb.firewall.policy.get(efilter=["srcaddr==1.1.1.1/32"])
print(f"{len(policies_efilter)=}")  # len(policies_efilter)=1

# Get policies by an exact source address using filter parameter
policies_filter = []
addresses = api.cmdb.firewall.address.get(filter="subnet==1.1.1.1 255.255.255.255")
for item in api.cmdb.firewall.policy.get():
    dstaddr = [d["name"] for d in item["srcaddr"]]
    for address in addresses:
        if address["name"] in dstaddr:
            policies_filter.append(item)
print(f"{len(policies_filter)=}")  # len(policies_filter)=1

[Manchuker1120]

Please try this example to filter your source ip

HOST = ""
USERNAME = ""
PASSWORD = ""

api = FortiGateAPI(
    host=HOST,
    username=USERNAME,
    password=PASSWORD,
)

# Get all firewall policies and print the total count
policies_all = api.cmdb.firewall.policy.get()
print(f"{len(policies_all)=}")  # len(policies_all)=245

# Get policies by an exact source address using Extended-filter parameter
policies_efilter = api.cmdb.firewall.policy.get(efilter=["srcaddr==1.1.1.1/32"])
print(f"{len(policies_efilter)=}")  # len(policies_efilter)=1

# Get policies by an exact source address using filter parameter
policies_filter = []
addresses = api.cmdb.firewall.address.get(filter="subnet==1.1.1.1 255.255.255.255")
for item in api.cmdb.firewall.policy.get():
    dstaddr = [d["name"] for d in item["srcaddr"]]
    for address in addresses:
        if address["name"] in dstaddr:
            policies_filter.append(item)
print(f"{len(policies_filter)=}")  # len(policies_filter)=1

its kind of you
i will try
ty