Script to import Office 365 IP list to Cisco ASA – Improved via REST API

# CHANGE PATH
$Path = 'E:'
 
$Report = "$Path\Report.txt"
$date = Get-Date -format "yyyyMMdd"
$dateReport = Get-Date -format "dd.MM.yyyy"
$o365SavedGUID = "$Env:TEMP\o365_Guid.txt"
if (Test-Path $o365SavedGUID ) { $GUID = Get-Content $o365SavedGUID }
else { $GUID = [GUID]::NewGuid().Guid; $GUID | Out-File $o365SavedGUID }
[bool]$NoIpv6 = 1 # 1 eq True; 0 eq False
$Link = "https://endpoints.office.com/endpoints/Worldwide?NoIPv6=$NoIpv6&ClientRequestId=$GUID"
 
try { $AllIPs = Invoke-RestMethod -Method Get -Uri $Link }
catch  {
    $_ | Out-File "$Path\$date - Errors.txt"
    Add-Content $Report "$dateReport Error!!!"
}
 
if (!(Test-Path "$Path\$date - Errors.txt")) {
    $Result = @{}
    $IPGroupsTcp = $AllIPs | ? {($PSItem.Ips) -and ($PSItem.tcpPorts)} | select Ips, tcpPorts | Group-Object tcpPorts
    $IPGroupsUdp = $AllIPs | ? {($PSItem.Ips) -and ($PSItem.udpPorts)} | select Ips, udpPorts | Group-Object udpPorts
 
    foreach ($IPgrp in $IPGroupsTcp) {
        $ErrorList = @()
        $Result += @{"PortsTcp_$($IPgrp.Name)" = @()}
        $List = $IPgrp.Group.Ips | sort | select -Unique
        foreach ($Address in $List) {
            try {
                [string]$Parse = $Address
                [string]$IPAddress = $Parse.Substring(0,$Parse.IndexOf("/"))
                [string]$Cidr = $Parse.Substring($Parse.IndexOf("/")+1,$Parse.Length - $Parse.IndexOf("/")-1)
                [int]$Prefix = $Cidr
                if ($Prefix -eq 32) { [string]$Value = "network-object host $IPAddress" }
                else {
                    $mask = ([Math]::Pow(2,$Prefix)-1) * [Math]::Pow(2,(32-$Prefix))
                    $bytes = [BitConverter]::GetBytes([UInt32] $mask)
                    $IPMask = (($bytes.Count-1)..0 | ForEach-Object {[String]$bytes[$_]}) -join "."
                    [string]$Value = "network-object $IPAddress $IPMask"
                } # End if & else
                $Result."PortsTcp_$($IPgrp.Name)" += $Value.Trim()
            } # End Try
            catch { $ErrorList += "$Address --> $_" } # End Try & catch
        } # End foreach Address
    }
 
    foreach ($IPgrp in $IPGroupsUdp) {
        $ErrorList = @()
        $Result += @{"PortsUdp_$($IPgrp.Name)" = @()}
        $List = $IPgrp.Group.Ips | sort | select -Unique
        foreach ($Address in $List) {
            try {
                [string]$Parse = $Address
                [string]$IPAddress = $Parse.Substring(0,$Parse.IndexOf("/"))
                [string]$Cidr = $Parse.Substring($Parse.IndexOf("/")+1,$Parse.Length - $Parse.IndexOf("/")-1)
                [int]$Prefix = $Cidr
                if ($Prefix -eq 32) { [string]$Value = "network-object host $IPAddress" }
                else {
                    $mask = ([Math]::Pow(2,$Prefix)-1) * [Math]::Pow(2,(32-$Prefix))
                    $bytes = [BitConverter]::GetBytes([UInt32] $mask)
                    $IPMask = (($bytes.Count-1)..0 | ForEach-Object {[String]$bytes[$_]}) -join "."
                    [string]$Value = "network-object $IPAddress $IPMask"
                } # End if & else
                $Result."PortsUdp_$($IPgrp.Name)" += $Value.Trim()
            } # End Try
            catch { $ErrorList += "$Address --> $_" } # End Try & catch
        } # End foreach Address
    }
 
    if ($ErrorList) { 
        $ErrorList | Out-File "$Path\$date - Errors.txt"
        Add-Content $Report "$dateReport Error!!!"
    }   
    else { 
        $Result.Keys | % { $Result.Item($PSItem) | Out-File "$Path\$date - $_.txt" }
        Add-Content $Report "$dateReport OK"
        $Result.Keys | % {
            $Missing = @()
            $LatestRules = Get-Content "$Path\$date - $_.txt"
            if (Test-Path "$Path\$_.txt") {
                $LastFile = Get-Content "$Path\$_.txt"
                foreach ($line in $LatestRules) { if ($LastFile -notcontains $line)    {$Missing += $line} }
                foreach ($line in $LastFile)    { if ($LatestRules -notcontains $line) {$Missing += "no $line"} }
                if ($Missing) {$Missing | Out-File "$Path\$date - $_ Changes.txt"}
            }
            Copy-Item "$Path\$date - $_.txt" "$Path\$_.txt"
        }
        $ChangesToday = Get-ChildItem -Path $Path -Filter "*$date*Changes.txt"
        if ($ChangesToday) {
            foreach ($chg in $ChangesToday) { Add-Content -Value $chg.Name -Path "$Path\Report - Changes.txt" }
        }
    }
}