InlineDneRule1

InlineDneRule1

JSON Example

{
    "rule_tag": "string",
    "ip_protocol": "string",
    "key_policy_identifier": "string",
    "applied_tos": [
        {
            "target_display_name": "string",
            "is_valid": false,
            "target_id": "string",
            "target_type": "string"
        }
    ],
    "logged": false,
    "comments": "string",
    "disabled": false,
    "sources": [
        {
            "target_display_name": "string",
            "is_valid": false,
            "target_id": "string",
            "target_type": "string"
        }
    ],
    "services": [
        {
            "target_display_name": "string",
            "is_valid": false,
            "target_id": "string",
            "target_type": "string",
            "service": {
                "resource_type": "string"
            }
        }
    ],
    "key_policy_name": "string",
    "action": "string",
    "destinations": [
        {
            "target_display_name": "string",
            "is_valid": false,
            "target_id": "string",
            "target_type": "string"
        }
    ]
}

string

rule_tag

Optional

User level field which will be printed in CLI and packet logs.

string

ip_protocol

Optional

Type of IP packet that should be matched while enforcing the rule.

Possible values are : IPV4, IPV6, IPV4_IPV6,

string

key_policy_identifier

Optional

Identifier of key policy. Section's key policy, if exists, overrides Rule's key policy.

array of ResourceReference

applied_tos

Optional

List of object where rule will be enforced. The section level field overrides this one. Null will be treated as any.

boolean

logged

Optional

Flag to enable packet logging. Default is disabled.

string

comments

Optional

User notes specific to the rule.

boolean

disabled

Optional

Flag to disable rule. Disabled rule will only be persisted but never provisioned/realized.

array of ResourceReference

sources

Optional

List of sources. Null will be treated as any.

array of DneService

services

Optional

List of the services. Null will be treated as any.

string

key_policy_name

Optional

A display name of rule's key policy. This is a read-only field for UI display purpose only. If not set by user, this name will be key policy's UUID.

string

action

Optional

This is a read-only field that for UI display purpose only. It is to show what type of protection the rule's key policy provides.

array of ResourceReference

destinations

Optional

List of the destinations. Null will be treated as any.

Used By

DneRule