SMC 3.7 new features and enhancements

Active Update server

Proxy server

You can now specify a proxy server to be contacted, which will act as a link between SMC and the Stormshield update server that hosts the Active Update databases.

Find out more

Firewall configuration

Additional SNS firewall configuration

The firewall configuration can now be completed or additionally loaded, by importing a CSV file containing configuration parameters for each firewall. This file is applied to configuration files that are generated by SMC when the configuration is deployed on firewalls. Changes that are made in this manner will be included in the configuration comparison.

Find out more

SMC public API

New API routes were added to SMC version 3.7. They are listed below. For more information about the SMC public API routes, refer to the online documentation. This documentation is also available from the SMC web administration interface.

Managing certificates

One new API route is available in the public SMC API to manage certificates:

Route Makes it possible to
POST /papi/v1/firewalls/{uuidOrName}/certificates

Add a certificate on a firewall, even when the firewall is offline or has never connected.

This certificate and its password are securely stored. They are automatically sent to the firewall the next time it connects, and are subsequently deleted from the SMC server.

Topologies and VPN tunnels

One new API route is available in the public SMC API to manage VPN topologies and tunnels:

Route Makes it possible to
PUT /papi/v1/vpn/topologies/{uuidOrName} Edit a VPN topology.

Static

One new API route is available in the public SMC API to manage routing:

Route Makes it possible to
PUT /papi/v1/firewalls/{uuidOrName}/routes Edit the static routing configuration on a firewall.

Interfaces

One new API route is available in the public SMC API to manage the interfaces of a firewall:

Route Makes it possible to
PUT /papi/v1/firewalls/{uuidOrName}/interfaces

Add, change or delete firewall interfaces that are supported by SMC.

With the API route, these operations can also be run on the interfaces on an offline firewall, which are supported by SMC.

Firewalls

One new API route is available in the public SMC API to manage firewalls:

Route Makes it possible to
POST /papi/v1/firewalls

Create a firewall.