Page MenuHomeVyOS Platform

add authentication for firewall remote-groups
Open, NormalPublicFEATURE REQUEST

Description

Currently, in the Firewall -> Remote-Group configuration no authentication is possible for the URL.

It would be great to support basic authentication and header authentication like this:

set firewall group remote-group <name> url <url> username <username> password <password>
set firewall group remote-group <name> url <url> auth-header <header-name> value <header-value>

Use case

It would allow pulling blocklists for example from CrowdSec or from the abuse.ch API

Additional information

Other firewall providers allow using basic authentication and/or header authentication to authenticate to remote-group URLs. For example Sophos, Palo Alto, Cisco, F5, FortiNet and Checkpoint all allow to use basic auth which makes this a widely used method by providers of blocklists.
For header authentication different providers use different header names which is why I gave the example with the user defined header. I have seen x-api-key:, Auth-Key: as well as Authorization: in use

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Feature (new functionality)