Help needed with Sophos XG API

sorry, the forum seems to have messed up the request url, here is a unformatted one:

Lars,

first of all make sure you enabled your computer IP (where you are fetching API commands from) on XG inside Backup & Firmware > API > Allowed Host.

From a browser than you can for example ask for "users list":

https://192.168.1.254:4444/webconsole/APIController?reqxml=<Request><Login><Username>admin</Username><Password>passwordhere</Password></Login><Get><User></User></Get></Request>

Regards

Thanks for your Reply!

I checked it and the IP Is enabled.

and running your Query just gives me:

Lars,

the errors means that some errors exist in the request. Make sure to change the password, to use admin and to copy and past the url inside a notepad.

Regards

Luk,

i did as you said - to test if the password is correct, i used a invalid pass and got:

Authentication Failure

Although it made me think, so i took the original password and just added one letter and still got malformed, so it turns out it was the password string that was causing the problem. Thanks very much for pointing me in the right direction :)

Also, here's a video on how to make use of the Sophos XG REST API in a production environment with a deployment line using  a build system, source control and a management system - www.youtube.com/watch

you need to encode the url before you post it

in php this would be 

urlencode($xml)

I just met strange bahaviour. I have two users : one of them is AD based and authenticated against AD. Second one is local.

I am using this form of file for read of Sophos Connect Clinet list :

<Request>
<Login>
<Username>USERNAME</Username>
<Password>PASSWORD</Password>
</Login>
<Get>
<CISCOVPNClient transactionid="">
<AllowedUsers/>
</CISCOVPNClient>
</Get>
</Request>

In case when I use there AD based user (administrator; it works well via browser) I get this message :

<?xml version="1.0" encoding="UTF-8"?>
<Response>
<Status code="529">Input request file is Invalid</Status>
</Response>

In case when I use localy defined user it works well.

And another thing : normal form of file name is :

curl -k 192.168.2.1:4444/.../APIController -F "reqxml=<readOfUserList.xml"

I made mistake and forgot < sign in name of file :

curl -k 192.168.2.1:4444/.../APIController -F "reqxml=readOfUserList.xml"

Result is the same :

<?xml version="1.0" encoding="UTF-8"?>
<Response>
<Status code="529">Input request file is Invalid</Status>
</Response>

thats all; hope it can help other people ...