ProposedIdsSecurityRule
Proposed IDS Rule
A proposed IDS security policy rule for traffic between workload groups. Extends ProposedBaseRule with IDS-specific action and profile fields.
Notes:
proposed_sync_action,action, andids_profileare the only writable fields on PUT; all other fields are read-only.DETECT_PREVENTwill actively block matched traffic in addition to generating an alert; use with caution in production environments.- Changes to a rule's
proposed_sync_actiondo not take effect in NSX until the parent IDS policy is published.
AllOf
JSON Example
{
"_create_user": "string",
"_create_time": 0,
"_last_modified_user": "string",
"_last_modified_time": 0,
"_revision": 0,
"_resource_type": "string",
"_system_owned": false,
"id": "string",
"display_name": "string",
"description": "string",
"site_ids": [
"string"
],
"disabled": false,
"proposed_sync_action": "string",
"action": "string",
"nsx_rule": {
"action": "string",
"ids_profiles": [
"string"
],
"oversubscription": "string"
}
}