ZXTM Control API Overview and Reference 

Version 4.0

  CHAPTER 2 

2 

Sample Control API 

applications 

The ZXTM Control API can perform almost any configuration task that 

can be accomplished using the ZXTM Admin Server.  Its strength comes 

from how it can be driven by other management applications elsewhere 

in the network. 

2.1  Blocking traffic from an IP address 

An Intrusion Detection System (IDS) or a live log analysis tool may 

identify remote hosts which are sending undesired traffic   malicious 

requests, port scans, or simply excessive numbers of requests in an 

attempt to mount a denial of service attack. 

The IDS may be located behind the ZXTM cluster, for example, if it needs 

to inspect SSL traffic that has been decrypted by the ZXTM machines.  In 

this case, the IDS can use the Control API to update the ZXTM cluster to 

prevent it from accepting any more traffic from the suspected IP address. 

The following ZXTM Control API application modifies a named Service 

Protection Policy, adding an IP address to the list of banned IP 

addresses.  The Service Protection Policy should be assigned to the 

appropriate Virtual Servers managing traffic in the cluster. 

30