SentinelOne icon

SentinelOne

SentinelOne Management Console API specification.

Actions281

Agents → Fetch Firewall Rules

AI-generated

Overview

This node operation triggers the SentinelOne API to instruct selected agents to fetch the latest firewall rules. It is useful in scenarios where firewall control policies have been updated and you want to ensure that all targeted agents immediately retrieve and apply the new rules, rather than waiting for their periodic update cycle. For example, after adding or modifying firewall rules in the SentinelOne Management Console, you can use this operation to push those changes to agents promptly.

Use Case Examples

  1. Force all agents in a specific group to fetch updated firewall rules after a policy change.
  2. Target a subset of agents based on filters to fetch the latest firewall rules immediately.

Properties

Name Meaning
Options Additional optional parameters to customize the API request, including custom request body, headers, query filters, batching settings, debug mode, pagination, and timeout.

Output

JSON

  • json
    • debug - Debug information including URL, query parameters, headers, and body sent with the API request (if debug is enabled)

Dependencies

  • An API key credential for SentinelOne API authentication

Troubleshooting

  • Ensure the API credentials are correctly configured and have permissions to perform agent actions.
  • Check that the target agents have the Control SKU license required for Firewall Control features.
  • If the API request fails, enable debug mode to inspect the request details and response for troubleshooting.
  • Be aware of rate limits; use batching and batch interval options to avoid hitting API rate limits.

Links

Discussion