Views:

Once Postman API is downloaded and installed, below are the steps to proceed:

A. Deleting the Service Reference.

  1. Get the Service Reference ID: 
    "GET https://<NSX-T IP Address>/policy/api/v1/infra/service-references"

    Sample Output:

    "GET https://<NSX-T IP Address>/policy/api/v1/infra/service-references"
// result of GET https://<NSX-T IP Address>/api/v1/infra/service-references

{
    "results": [
        {
            "partner_service_name": "Trend Micro Deep Security",
            "enabled": true,
            "resource_type": "ServiceReference",
            "id": "333f95bf-399a-481f-bc0b-19b44d676a57",
            "display_name": "Trend Micro Deep Security",
            "path": "/infra/service-references/333f95bf-399a-481f-bc0b-19b44d676a57",
            "relative_path": "333f95bf-399a-481f-bc0b-19b44d676a57",
            "parent_path": "/infra",
            "unique_id": "252ad43c-4bf0-41a1-a08a-f435b7f547f6",
            "realization_id": "252ad43c-4bf0-41a1-a08a-f435b7f547f6",
            "marked_for_delete": false,
            "overridden": false,
            "_system_owned": false,
            "_create_time": 1696228360140,
            "_create_user": "admin",
            "_last_modified_time": 1696228360140,
            "_last_modified_user": "admin",
            "_protection": "NOT_PROTECTED",
            "_revision": 0
        }
    ],
    "result_count": 1,
    "sort_by": "display_name",
    "sort_ascending": true
}

    From the output, record the Service Reference ID. In this example, the Service Reference ID is 333f95bf-399a-481f-bc0b-19b44d676a57.

  2. Get all of the Service Profile IDs by using the Service Reference ID from Step 1:

    "GET https://<NSX-T IP Address>/policy/api/v1/infra/service-references/<Service Reference ID>/service-profiles"

    Example:

    https://<NSX-T IP Address>/policy/api/v1/infra/service-references/333f95bf-399a-481f-bc0b-19b44d676a57/service-profiles

    Sample Output:

    "GET https://<NSX-T IP Address>/policy/api/v1/infra/service-references/<Service Reference ID>/service-profiles"
// result of GET https://<NSX-T IP Address>/api/v1/infra/service-references/<Service Reference ID>/service-profiles

{
    "results": [
        {
            "vendor_template_name": "Default (EBT)",
            "attributes": [],
            "redirection_action": "COPY",
            "vendor_template_key": "Gold",
            "resource_type": "PolicyServiceProfile",
            "id": "38f70096-fab1-4cfa-8a4a-c60dc315a4df",
            "display_name": "DSVA",
            "tags": [],
            "path": "/infra/service-references/333f95bf-399a-481f-bc0b-19b44d676a57/service-profiles/38f70096-fab1-4cfa-8a4a-c60dc315a4df",
            "relative_path": "38f70096-fab1-4cfa-8a4a-c60dc315a4df",
            "parent_path": "/infra/service-references/333f95bf-399a-481f-bc0b-19b44d676a57",
            "unique_id": "4bb52430-b569-48a0-a887-839cc9cfaa69",
            "realization_id": "4bb52430-b569-48a0-a887-839cc9cfaa69",
            "marked_for_delete": false,
            "overridden": false,
            "_system_owned": false,
            "_create_time": 1696228364574,
            "_create_user": "admin",
            "_last_modified_time": 1696228364574,
            "_last_modified_user": "admin",
            "_protection": "NOT_PROTECTED",
            "_revision": 0
        }
    ],
    "result_count": 1,
    "sort_by": "display_name",
    "sort_ascending": true
}

    In this example, the Service Profile ID is 38f70096-fab1-4cfa-8a4a-c60dc315a4df.

  3. From Step 2, the API result shows all the Service Profiles. Using the Service Profile ID, Delete ALL Service Profiles one at a time. 
    "DELETE https://<NSX-T IP Address>/policy/api/v1/infra/service-references/<Service Reference ID>/service-profiles/<Service Profile ID>"

    Example: 

    DELETE https://<NSX-T IP Address>/policy/api/v1/infra/service-references/333f95bf-399a-481f-bc0b-19b44d676a57/service-profiles/38f70096-fab1-4cfa-8a4a-c60dc315a4df

B. Deleting the Service Definition

  1. Get the Service Definition ID.

    "GET https://<NSX-T IP Address>/api/v1/serviceinsertion/services"

    Sample Output:

    "GET https://<NSX-T IP Address>/api/v1/serviceinsertion/services"
// result of GET https://<NSX-T IP Address>/api/v1/serviceinsertion/services

{
    "results": [
        {
            "functionalities": [
                "EPP",
                "IDS_IPS"
            ],
            "implementations": [
                "EAST_WEST"
            ],
            "attachment_point": [
                "SERVICE_PLANE"
            ],
            "transports": [
                "NSH"
            ],
            "on_failure_policy": "ALLOW",
            "service_deployment_spec": {
                "deployment_template": [
                    {
                        "name": "Deep Security - Deployment Template",
                        "attributes": [
                            {
                                "key": "management.gateway",
                                "display_name": "management.gateway",
                                "value": "",
                                "attribute_type": "STRING",
                                "read_only": false
                            },
                            ...
                            {
                                "key": "solutionId",
                                "display_name": "solutionId",
                                "value": "7498352642083520512",
                                "attribute_type": "STRING",
                                "read_only": false
                            }
                        ]
                    }
                ],
                "deployment_specs": [
                    {
                        "name": "Deep Security - 20.0.0-877-C2M4-SMALL",
                        "ovf_url": "https://10.209.84.168:4119/appliance/NSX/dsva-20.0.0-877-C2M4-small.ovf",
                        "min_host_version": "6.5",
                        "host_type": "ESXI",
                        "service_form_factor": "SMALL",
                        "svm_version": "1.0"
                    },
                    ...
                    {
                        "name": "Deep Security - 20.0.0-877-C4M8-SMALL",
                        "ovf_url": "https://10.209.84.168:4119/appliance/NSX/dsva-20.0.0-877-C4M8-small.ovf",
                        "min_host_version": "6.5",
                        "host_type": "ESXI",
                        "service_form_factor": "SMALL",
                        "svm_version": "1.0"
                    }
                ],
                "nic_metadata_list": [
                    {
                        "interface_label": "ens",
                        "interface_index": 0,
                        "interface_type": "MANAGEMENT",
                        "user_configurable": true
                    },
                    ...
                    {
                        "interface_label": "ens",
                        "interface_index": 1,
                        "interface_type": "CONTROL"
                    }
                ],
                "svm_version": "20.0"
            },
            "vendor_id": "Trend Micro",
            "service_manager_id": "55b8e578-f838-47cd-aec0-90704fc86ad6",
            "service_capability": {
                "nsh_liveness_support_enabled": true,
                "can_decrement_si": false
            },
            "resource_type": "ServiceDefinition",
            "id": "daf49ee7-45b9-435a-918f-e46bddab99a9",
            "display_name": "Trend Micro Deep Security",
            "description": "Advanced security for virtual servers and desktops - Provides Agentless Anti-Malware, Web Reputation, Intrusion Prevention, Integrity Monitoring and Firewall.",
            "_system_owned": false,
            "_create_time": 1696228263917,
            "_create_user": "admin",
            "_last_modified_time": 1696228264000,
            "_last_modified_user": "admin",
            "_protection": "NOT_PROTECTED",
            "_revision": 1
        }
    ],
    "result_count": 1
}

    In this example, the Service Definition ID is daf49ee7-45b9-435a-918f-e46bddab99a9.

  2. Using the Service Definition ID, get all the Vendor Template IDs.

    "GET https://<NSX-T IP Address>/api/v1/serviceinsertion/services/<Service Definition ID>/vendor-templates"

    Sample Output:

    "GET https://<NSX-T IP Address>/api/v1/serviceinsertion/services/<Service Definition ID>/vendor-templates"

//Example
https://<NSX-T IP Address>/api/v1/serviceinsertion/services/daf49ee7-45b9-435a-918f-e46bddab99a9/vendor-templates

// result of GET https://<NSX-T IP Address>/api/v1/serviceinsertion/services/<Service Definition ID>/vendor-templates

{
    "results": [
        {
            "attributes": [],
            "service_id": "daf49ee7-45b9-435a-918f-e46bddab99a9",
            "vendor_template_key": "Gold_Network",
            "functionality": "IDS_IPS",
            "redirection_action": "PUNT",
            "resource_type": "VendorTemplate",
            "id": "ccd4a13c-a184-4b4e-8bca-a0d930d215e8",
            "display_name": "Default (EBT)_Network",
            "description": "The default Deep Security profile configuration used for EBTs.",
            "_system_owned": false,
            "_create_time": 1696228265451,
            "_create_user": "admin",
            "_last_modified_time": 1696228265451,
            "_last_modified_user": "admin",
            "_protection": "NOT_PROTECTED",
            "_revision": 0
        },
        {
            "attributes": [],
            "service_id": "daf49ee7-45b9-435a-918f-e46bddab99a9",
            "vendor_template_key": "Gold",
            "functionality": "EPP",
            "redirection_action": "PUNT",
            "resource_type": "VendorTemplate",
            "id": "a3adde3f-b3d1-4a5a-b646-0675c90d072f",
            "display_name": "Default (EBT)",
            "description": "The default Deep Security profile configuration used for EBTs.",
            "_system_owned": false,
            "_create_time": 1696228265055,
            "_create_user": "admin",
            "_last_modified_time": 1696228265055,
            "_last_modified_user": "admin",
            "_protection": "NOT_PROTECTED",
            "_revision": 0
        }
    ],
    "result_count": 2
}

  3. Using the Vendor Template ID, delete ALL the Vendor Templates one at a time.

    "DELETE https://<NSX-T IP Address>/api/v1/serviceinsertion/services/<Service Definition ID>/vendor-templates/<Vendor Template ID>"

    Example:

    DELETE https://<NSX-T IP Address>/api/v1/serviceinsertion/services/daf49ee7-45b9-435a-918f-e46bddab99a9/vendor-templates/ccd4a13c-a184-4b4e-8bca-a0d930d215e8
    DELETE https://<NSX-T IP Address>/api/v1/serviceinsertion/services/daf49ee7-45b9-435a-918f-e46bddab99a9/vendor-templates/a3adde3f-b3d1-4a5a-b646-0675c90d072f

  4. Using the Service Definition ID, delete the Service Definition.

    "DELETE https://<NSX-T IP Address>/api/v1/serviceinsertion/services/<Service Definition ID>"

    Example:

    DELETE https://<NSX-T IP Address>/api/v1/serviceinsertion/services/daf49ee7-45b9-435a-918f-e46bddab99a9

C. Deleting the Service Manager

  1. Get the Service Manager ID.

    "GET https://<NSX-T IP Address>/api/v1/serviceinsertion/service-managers"

    Sample Output:

    "GET https://<NSX-T IP Address>/api/v1/serviceinsertion/service-managers"
// result of GET https://<NSX-T IP Address>/api/v1/serviceinsertion/service-managers

{
    "results": [
        {
            "vendor_id": "Trend Micro",
            "server": "10.209.84.168",
            "port": 4119,
            "uri": "/rest/vmware/2.0/nsx-notifications",
            "thumbprint": "75:38:83:a3:fe:ce:b6:4b:5a:a2:46:c8:ae:99:96:14:e2:f3:60:a1:18:76:c5:b8:c0:6f:fd:2f:f1:1c:9f:ac",
            "authentication_scheme": {
                "scheme_name": "BASIC_AUTH",
                "username": "T0"
            },
            "service_ids": [
                {
                    "target_id": "daf49ee7-45b9-435a-918f-e46bddab99a9",
                    "target_display_name": "Trend Micro Deep Security",
                    "target_type": "ServiceDefinition"
                }
            ],
            "resource_type": "ServiceManager",
            "id": "55b8e578-f838-47cd-aec0-90704fc86ad6",
            "display_name": "Deep Security Service Manager",
            "_system_owned": false,
            "_create_time": 1696228264549,
            "_create_user": "admin",
            "_last_modified_time": 1696228264549,
            "_last_modified_user": "admin",
            "_protection": "NOT_PROTECTED",
            "_revision": 0
        }
    ],
    "result_count": 1
}

    In this example, the Service Manager ID is 55b8e578-f838-47cd-aec0-90704fc86ad6.

  2. Using the Service Manager ID from Step C.1, delete the Service Manager.

"DELETE https://<NSX-T IP Address>/api/v1/serviceinsertion/service-managers/<Service Manager ID>"

Example:

DELETE https://<NSX-T IP Address>/api/v1/serviceinsertion/service-managers/55b8e578-f838-47cd-aec0-90704fc86ad6

D. Delete the service reference ID

  1. Using the Service Reference ID in Step 1, delete the Service Reference. 
        "DELETE https://<NSX-T IP Address>/policy/api/v1/infra/service-references/<Service Reference ID>"

    Example:

        DELETE https://<NSX-T IP Address>/policy/api/v1/infra/service-references/333f95bf-399a-481f-bc0b-19b44d676a57

Once done, go back to the Deep Security Manager Console to re-add the vCenter connector with NSX-T binding and reconfigure the endpoint and network protection.

Keywords: nsxt, vmware, service deployment, vcenter, deep security, dsva