Metrics Library

Detects IKE connections with ANY as the source IP. TSRAccessRules[].rules[?contains(Parent, WAN -> WAN ) && contains(Name, Deny ) == false && contains(Ip, Any -> ) && contains(Name, IKE )].Ip []

This one is a little trickier to catch but looks for the translated service containing RDP, RDS, Terminal, or 3389 with source being any. This is an indicator of wide open RDP however if the service does not contain these names it is missed. NATPolicies[?contains(TranslatedService, RDP ) || contains(TranslatedService, 'RDS') || contains(TranslatedService, 'Terminal') || contains(TranslatedService, '3389') && contains(Source, 'any')].name

Using new roarpath function, check if sonicwall is version 6.5 or greater. Change the 6.5 to any version you want to compare for. version_compare(SystemInfo.Revision, >= , '6.5')

Show the configured Primary member of a load balancer and the active at the time of the Inspector scan.Note: Does not work for Gen 7 Sonicwalls FailoverLBStatus.GroupStatus[?GroupName == Default LB Group && TotalMembers > 1 ].join(` , [ Primary: , PrimaryMember, , Active: `, ActiveMember])

Determines if Content Filtering is "Licensed". Can add | length(@) at the end for a return of 1. LicenseStatus.SecuritySuite[?contains(SecurityService, Content Filtering ) && SecurityStatus == Licensed ]

Detects WAN Zone enabled HTTP Management interfaces with ANY as the source IP TSRAccessRules[].rules[?contains(Parent, WAN -> WAN ) && contains(Name, Deny ) == false && contains(Ip, Any -> ) && contains(Name, HTTP Management )].Ip[]

Detects WAN Zone enabled HTTPS Management interfaces with ANY as the source IP TSRAccessRules[].rules[?contains(Parent, WAN -> WAN ) && contains(Name, Deny ) == false && contains(Ip, Any -> ) && contains(Name, HTTPS Management )].Ip []

Detects WAN Zone ping enabled interfaces with ANY as the source IP TSRAccessRules[].rules[?contains(Parent, WAN -> WAN ) && contains(Name, Deny ) == false && contains(Name, Enabled ) && contains(Ip, Any -> ) && contains(Name, Ping )].Ip[]

This will allow partners to see whether it is true or false Zones[].[name, IntrusionPrevention]

List of IPv4 NAT Policies for Sonic OS7 Firewall.NatPolicies.Ipv4[?Enable == true ][].[Name, Comment]