List policy rules

<ips-api-base>/policies/<policy-name>/rules

policy_type (mandatory) : ips_custom | ips_default

offset, limit (optional): for pagination

curl -gsvk -H "$c" --header "Accept: application/json" "https://<host>/ wsapis/v2.0.0/ips/policies/FireEye_Default/rules? policy_type=ips_default&limit=5&offset=10" | jq "."

Standard WSAPI authentication

GET

[
{
"severity": "7",
"reference": "CVE-2011-0611,BID-47314",
"signature_iden": 85300010,
"protocol": "http",
"block_status": 0,
"blocked": "blockable",
"rule_name": "Adobe Flash Player ActionScript callMethod Type Confusion Code
Execution",
"is_custom": false,
"created_at": "2013-09-30T00:00:00",
"category": "exploit",
"enabled": true,
"direction": "from_server"
},
{
"severity": "7",
"reference": "CVE-2007-0015,BID-21829,SECUNIA-SA23540",
"signature_iden": 85300011,
"protocol": "http",
"block_status": 0,
"blocked": "blockable",
"rule_name": "Apple QuickTime RTSP URL Buffer Overflow",
"is_custom": false,
"created_at": "2013-09-30T00:00:00",
"category": "exploit",
"enabled": true,
"direction": "to_client"
},
{
"severity": "7",
"reference": "CVE-2007-0015",
"signature_iden": 85300012,
"protocol": "http",
"block_status": 0,
"blocked": "blockable",
"rule_name": "Apple QuickTime RTSP URL Buffer Overflow",
"is_custom": false,
"created_at": "2013-09-30T00:00:00",
"category": "exploit",
"enabled": true,
"direction": "to_client"
}
]

application/json