Sub-request parameters

Configuring Sub-Request Ownership

By default, when the status of a change request changes, the owner of the parent request is not automatically assigned to the sub-requests. Configure this behavior as needed, for all or specific status changes.

Tip: This parameter is particularly relevant when using the GetRealGroupName hook. For details, see GetRealGroupName .

Configuration Parameter Name Value

{"All":1}. (Default) Determines that sub-requests never inherit the owner value from their parent request.

{"None":1}. Determines that sub-requests always inherit the owner value from their parent request.

Back to top

Configuring Sub-requests to Include Traffic for the Whole Change Request

By default, if a whole traffic line in a change request is not in a network map path that passes through the device, that traffic line will not be included in that device's sub-request. Furthermore, if NAT is taking place in some devices in the path, the IP addresses of the sub-request will change accordingly. If desired, you can configure FireFlow to include all traffic lines in all sub-requests.

Note: If the network map is inaccurate (paths are missing in), it is advised to disable the FIP algorithm in AFA. In this case, this feature will automatically be disabled and sub-requests will consequently include all traffic.

Configuration Parameter Name Value

0. To configure sub-requests to include all traffic lines as is.

1. To configure sub-requests to include only traffic lines in path and to modify their values according to NAT taking place in devices in the path. (Default)

Back to top

Enabling/Disabling Sub-Request Traffic Modification

By default, FireFlow does not allow users to modify traffic specified in sub-requests. If desired, you can enable sub-request traffic modification.

Note: When traffic modification in sub-requests is enabled you may edit existing traffic lines in sub-requests. Addition and removal of traffic lines is never allowed.

Configuration Parameter Name Value

0. To disable sub-request traffic modification. (Default)

1. To enable sub-request traffic modification.

Back to top

Configuring the Risk Check Method for Change Requests with Multiple Devices

In the Approve stage of a traffic change request's lifecycle, FireFlow performs a risk check, to determine whether implementing the change specified in the change request will introduce risks. The risk check is run on the device(s) specified in the change request, using the Risk Profile that the device was assigned when generating the last successful report in AFA.

When performing a risk check for a parent request with sub-requests, there are multiple devices and potentially multiple Risk Profiles involved. You can configure FireFlow to use any of the following risk check methods:

Configuration Parameter Name Value

one. To use the One method.

profile. To use the Profile method. (Default)

all. To use the All method.

Back to top