Public/Set-MerakiOrganizationApplianceSecurityIntrusion.ps1

function Set-MerakiOrganizationApplianceSecurityIntrusion {
    <#
    .SYNOPSIS
    Updates the security intrusion settings for a Meraki organization using the Meraki Dashboard API.
 
    .DESCRIPTION
    The Set-MerakiOrganizationApplianceSecurityIntrusion function allows you to update the security intrusion settings for a specified Meraki organization by providing the authentication token, organization ID, and a security intrusion configuration string.
 
    .PARAMETER AuthToken
    The authentication token (API key) required to access the Meraki Dashboard API.
 
    .PARAMETER OrganizationId
    The ID of the Meraki organization for which you want to update the security intrusion settings.
 
    .PARAMETER SecurityIntrusionConfig
    A string containing the security intrusion configuration. The string should be in JSON format and should include the "allowedRules" property.
 
    .EXAMPLE
    $config = [PSCustomObject]@{
        allowedRules = @(
            @{
                ruleId = "meraki:intrusion/snort/GID/01/SID/688"
                message = "SQL sa login failed"
            },
            @{
                ruleId = "meraki:intrusion/snort/GID/01/SID/5805"
                message = "MALWARE-OTHER Trackware myway speedbar runtime detection - switch engines"
            }
        )
    }
 
    $config = $config | ConvertTo-Json -Compress
    Set-MerakiOrganizationApplianceSecurityIntrusion -AuthToken "your-api-token" -OrganizationId "your-organization-id" -SecurityIntrusionConfig $config
    This example updates the security intrusion settings for the Meraki organization with ID "your-organization-id", using the specified security intrusion configuration.
 
    .NOTES
    The function requires the "Invoke-RestMethod" cmdlet to be available.
 
    The function returns the response from the API if the security intrusion settings update is successful, otherwise, it displays an error message.
    #>


    [CmdletBinding()]
    param (
        [parameter(Mandatory=$true)]
        [string]$AuthToken,
        [parameter(Mandatory=$false)]
        [string]$OrganizationID = (Get-OrgID -AuthToken $AuthToken),
        [parameter(Mandatory=$true)]
        [string]$SecurityIntrusionConfig
    )
    If($OrganizationID -eq "Multiple organizations found. Please specify an organization ID.") {
        Return "Multiple organizations found. Please specify an organization ID."
    } else {
        try {
            $header = @{
                "X-Cisco-Meraki-API-Key" = $AuthToken
                "content-type" = "application/json; charset=utf-8"
            }

            $body = $SecurityIntrusionConfig

            $uri = "https://api.meraki.com/api/v1/organizations/$OrganizationId/appliance/security/intrusion"
            $response = Invoke-RestMethod -Method Put -Uri $uri -Header $header -UserAgent "MerakiPowerShellModule/1.0.2 DocNougat" -Body $body
            return $response
        }
        catch {
        Write-Debug $_
        Throw $_
    }
    }
}