Forum Discussion

SomeGuy's avatar
SomeGuy
Icon for Joining the Conversation rankJoining the Conversation
5 months ago

Bypassing Cato via WAN Bypass and Split Tunnel

We need to add around 200 subnets to bypass Cato.  My understanding is that they need to be added to all sites under the Site Configuration/Router/Bypass/Destination and for all SDP users via Access/...
Foote's avatar
Foote
Icon for Joining the Conversation rankJoining the Conversation
5 months ago

I'll +1 this ask. My group originally had hoped to use Terraform for this task, but it looks like support for adding floating subnets isn't there yet for Terraform. Looking through the GraphQL API reference guide, though, I do see a few queries related to floating subnets: Cato Networks GraphQL API Reference

 I guess my remaining questions would be:

  • Would Cato's API support adding and modifying floating subnet ranged via GraphQL?
  • Looking through the API reference guide, it's not clear to me if there is a relevant command to modify bypass rule sets. Is this something the API supports?
  • GianlucaUlivi's avatar
    GianlucaUlivi
    Icon for Making Connections rankMaking Connections
    2 months ago

    I was not able to find an API call to do it so I took the a different approach by running a python script that opens a Selenium WebDriver, loops a list of IP Addresses and for each of them writes it in the text box and press enter (equivalent of clicking "add"):

    I do not have the script published at the moment as it's part of a larger "multi-tool" repo I have, but if needed I can move it to a dedicated git repo and share it.