PowerShellでCisco Umbrellaのポリシーを効率的に管理しDNSセキュリティを強化する方法

   $PSVersionTable.PSVersion

   Install-Module -Name PSReadLine -Force

[System.Environment]::SetEnvironmentVariable("UmbrellaAPIKey", "your-api-key", "User")

$APIKey = [System.Environment]::GetEnvironmentVariable("UmbrellaAPIKey", "User")
$BaseUrl = "https://management.api.umbrella.com/v1/"
$response = Invoke-RestMethod -Uri $BaseUrl -Headers @{ "Authorization" = "Bearer $APIKey" }

if ($response) {
    Write-Host "API接続に成功しました。" -ForegroundColor Green
} else {
    Write-Host "API接続に失敗しました。" -ForegroundColor Red
}

  GET https://management.api.umbrella.com/v1/policies

  POST https://management.api.umbrella.com/v1/policies

  PUT https://management.api.umbrella.com/v1/policies/{policyId}

   $APIKey = [System.Environment]::GetEnvironmentVariable("UmbrellaAPIKey", "User")
   $Headers = @{ "Authorization" = "Bearer $APIKey" }

   $BaseUrl = "https://management.api.umbrella.com/v1/policies"
   $Response = Invoke-RestMethod -Uri $BaseUrl -Headers $Headers -Method Get

   if ($Response) {
       Write-Host "APIに正常に接続できました。" -ForegroundColor Green
   } else {
       Write-Host "接続エラーが発生しました。" -ForegroundColor Red
   }

  {
      "name": "NewPolicy",
      "rules": [
          {
              "action": "block",
              "criteria": "category",
              "value": "Malware"
          }
      ]
  }

# APIキーとエンドポイントの設定
$APIKey = [System.Environment]::GetEnvironmentVariable("UmbrellaAPIKey", "User")
$Headers = @{ "Authorization" = "Bearer $APIKey" }
$BaseUrl = "https://management.api.umbrella.com/v1/policies"

# ポリシー一覧の取得
try {
    $Response = Invoke-RestMethod -Uri $BaseUrl -Headers $Headers -Method Get
    if ($Response) {
        Write-Host "ポリシー一覧:" -ForegroundColor Green
        $Response.policies | ForEach-Object {
            Write-Host "ID: $_.id, Name: $_.name, Status: $_.status"
        }
    }
} catch {
    Write-Host "エラーが発生しました: $_" -ForegroundColor Red
}

# 新しいポリシーの情報
$NewPolicy = @{
    name = "NewPolicyExample"
    rules = @(
        @{
            action = "block"
            criteria = "category"
            value = "Malware"
        }
    )
} | ConvertTo-Json -Depth 10

# APIエンドポイント
$CreateUrl = "https://management.api.umbrella.com/v1/policies"

# ポリシー作成リクエスト
try {
    $Response = Invoke-RestMethod -Uri $CreateUrl -Headers $Headers -Method Post -Body $NewPolicy -ContentType "application/json"
    Write-Host "新しいポリシーが作成されました: $($Response.id)" -ForegroundColor Green
} catch {
    Write-Host "ポリシー作成に失敗しました: $_" -ForegroundColor Red
}

# 更新対象のポリシーID
$PolicyId = "12345678"
$UpdatePolicy = @{
    name = "UpdatedPolicyExample"
    rules = @(
        @{
            action = "allow"
            criteria = "domain"
            value = "example.com"
        }
    )
} | ConvertTo-Json -Depth 10

# APIエンドポイント
$UpdateUrl = "https://management.api.umbrella.com/v1/policies/$PolicyId"

# ポリシー更新リクエスト
try {
    $Response = Invoke-RestMethod -Uri $UpdateUrl -Headers $Headers -Method Put -Body $UpdatePolicy -ContentType "application/json"
    Write-Host "ポリシーが更新されました: $PolicyId" -ForegroundColor Green
} catch {
    Write-Host "ポリシー更新に失敗しました: $_" -ForegroundColor Red
}

   name,action,criteria,value
   Policy1,block,category,Malware
   Policy2,allow,domain,example.com
   Policy3,block,category,Phishing

   # API設定
   $APIKey = [System.Environment]::GetEnvironmentVariable("UmbrellaAPIKey", "User")
   $Headers = @{ "Authorization" = "Bearer $APIKey" }
   $BaseUrl = "https://management.api.umbrella.com/v1/policies"

   # CSVの読み込み
   $Policies = Import-Csv -Path "policies.csv"

   # ポリシーの一括作成
   foreach ($Policy in $Policies) {
       $Body = @{
           name = $Policy.name
           rules = @(
               @{
                   action = $Policy.action
                   criteria = $Policy.criteria
                   value = $Policy.value
               }
           )
       } | ConvertTo-Json -Depth 10

       try {
           $Response = Invoke-RestMethod -Uri $BaseUrl -Headers $Headers -Method Post -Body $Body -ContentType "application/json"
           Write-Host "ポリシーが作成されました: $($Policy.name)" -ForegroundColor Green
       } catch {
           Write-Host "エラー: $($Policy.name) の作成に失敗しました。" -ForegroundColor Red
       }
   }

   id,name,action,criteria,value
   12345,UpdatedPolicy1,allow,domain,updated-example.com
   67890,UpdatedPolicy2,block,category,Malware

   # CSVの読み込み
   $PoliciesToUpdate = Import-Csv -Path "update_policies.csv"

   # ポリシーの一括更新
   foreach ($Policy in $PoliciesToUpdate) {
       $UpdateUrl = "https://management.api.umbrella.com/v1/policies/$($Policy.id)"
       $Body = @{
           name = $Policy.name
           rules = @(
               @{
                   action = $Policy.action
                   criteria = $Policy.criteria
                   value = $Policy.value
               }
           )
       } | ConvertTo-Json -Depth 10

       try {
           $Response = Invoke-RestMethod -Uri $UpdateUrl -Headers $Headers -Method Put -Body $Body -ContentType "application/json"
           Write-Host "ポリシーが更新されました: $($Policy.name)" -ForegroundColor Green
       } catch {
           Write-Host "エラー: $($Policy.name) の更新に失敗しました。" -ForegroundColor Red
       }
   }

   12345
   67890
   54321

   # 削除対象IDの読み込み
   $PolicyIds = Get-Content -Path "delete_ids.txt"

   # ポリシーの一括削除
   foreach ($PolicyId in $PolicyIds) {
       $DeleteUrl = "https://management.api.umbrella.com/v1/policies/$PolicyId"

       try {
           Invoke-RestMethod -Uri $DeleteUrl -Headers $Headers -Method Delete
           Write-Host "ポリシーが削除されました: $PolicyId" -ForegroundColor Green
       } catch {
           Write-Host "エラー: $PolicyId の削除に失敗しました。" -ForegroundColor Red
       }
   }

   $APIKey = [System.Environment]::GetEnvironmentVariable("UmbrellaAPIKey", "User")
   $Headers = @{ "Authorization" = "Bearer $APIKey" }
   $BaseUrl = "https://management.api.umbrella.com/v1/policies"

   $PolicyBody = @{
       name = "BlockMalware"
       rules = @(
           @{
               action = "block"
               criteria = "category"
               value = "Malware"
           }
       )
   } | ConvertTo-Json -Depth 10

   try {
       $Response = Invoke-RestMethod -Uri $BaseUrl -Headers $Headers -Method Post -Body $PolicyBody -ContentType "application/json"
       Write-Host "マルウェアブロックポリシーが作成されました: $($Response.id)" -ForegroundColor Green
   } catch {
       Write-Host "ポリシー作成に失敗しました。" -ForegroundColor Red
   }

   $PolicyBody = @{
       name = "AllowTrustedDomain"
       rules = @(
           @{
               action = "allow"
               criteria = "domain"
               value = "trusted-domain.com"
           }
       )
   } | ConvertTo-Json -Depth 10

   try {
       $Response = Invoke-RestMethod -Uri $BaseUrl -Headers $Headers -Method Post -Body $PolicyBody -ContentType "application/json"
       Write-Host "ホワイトリストポリシーが作成されました: $($Response.id)" -ForegroundColor Green
   } catch {
       Write-Host "ポリシー作成に失敗しました。" -ForegroundColor Red
   }

   $ReportUrl = "https://management.api.umbrella.com/v1/reports/top-dns-queries"
   try {
       $ReportResponse = Invoke-RestMethod -Uri $ReportUrl -Headers $Headers -Method Get
       Write-Host "トップDNSクエリ:" -ForegroundColor Green
       $ReportResponse.data | ForEach-Object {
           Write-Host "Domain: $_.domain, Hits: $_.hits"
       }
   } catch {
       Write-Host "レポート取得に失敗しました。" -ForegroundColor Red
   }

  [System.Environment]::SetEnvironmentVariable("UmbrellaAPIKey", "your-new-api-key", "User")

  Start-Sleep -Seconds 1

  $Response | Out-File -FilePath "api_log.txt" -Append