ProposedIdsSecurityRule

ProposedIdsSecurityRule
Proposed IDS Rule

A proposed IDS security policy rule for traffic between workload groups. Extends ProposedBaseRule with IDS-specific action and profile fields.

Notes:

  • proposed_sync_action, action, and ids_profile are the only writable fields on PUT; all other fields are read-only.
  • DETECT_PREVENT will actively block matched traffic in addition to generating an alert; use with caution in production environments.
  • Changes to a rule's proposed_sync_action do not take effect in NSX until the parent IDS policy is published.
AllOf
This class requires all of the following:
JSON Example
{
    "_create_user": "string",
    "_create_time": 0,
    "_last_modified_user": "string",
    "_last_modified_time": 0,
    "_revision": 0,
    "_resource_type": "string",
    "_system_owned": false,
    "id": "string",
    "display_name": "string",
    "description": "string",
    "site_ids": [
        "string"
    ],
    "disabled": false,
    "proposed_sync_action": "string",
    "action": "string",
    "nsx_rule": {
        "action": "string",
        "ids_profiles": [
            "string"
        ],
        "oversubscription": "string"
    }
}