Claude 1

sophos-xgs-ansible/roles/sophos_device_access/templates/device_access_rule.json.j2

@@ -0,0 +1,24 @@
+<Request>
+  <Login>
+    <Username>{{ sophos_api_username }}</Username>
+    <Password>{{ sophos_api_password }}</Password>
+  </Login>
+  <Set operation="update">
+    <DeviceAccess>
+      <Service>{{ item.service | upper }}</Service>
+      <Status>{{ 'Enable' if item.enabled | default(true) else 'Disable' }}</Status>
+      <AllowedZones>
+        {% for zone in item.allowed_zones %}
+        <Zone>{{ zone }}</Zone>
+        {% endfor %}
+      </AllowedZones>
+      {% if item.allowed_networks is defined and item.allowed_networks | length > 0 %}
+      <AllowedNetworks>
+        {% for network in item.allowed_networks %}
+        <Network>{{ network }}</Network>
+        {% endfor %}
+      </AllowedNetworks>
+      {% endif %}
+    </DeviceAccess>
+  </Set>
+</Request>