Mass Address Object/Group Import GEO-IP
With recent issues with GEO-IP and AWS/Microsoft/etc moving services into foreign countries, We don't want to have to whitelist an entire country. Instead we would like to be able to import a master list of address objects into the firewalls and allow those through. I have found documents on doing this from the API:
and Also Microsoft publishes a Downloadable .JSON file: that could be used. The problem is, it is in the wrong format for SonicWALL to interpret through the API.
Has anyone out there found a way to convert something like this to the proper format without manually doing it, or found another way of Mass Importing address objects?
Answers
How many firewalls are you making this change on? If it's more than a handful, I suggest you look at DEAOs. The "file format" for those is about as simple as it gets - one FQDN or IP address per line.
https://www.sonicwall.com/support/knowledge-base/what-are-dynamic-external-objects-groups-and-how-can-we-configure-it/200507105852280
It would be nice if Sonicwall hosted some DEAOs for common use-cases like this.