RecommendationAdditionalRule

Additional Rule

This specifies additional rules to be treated as default rules. When starting or rerunning a recommendation, only 2 parameters are required:

1. rule_path
2. site_id

This information is used to resolve the given rule path to the correct rule IDs and thus include the rule path as an additional default rule. Rule IDs are populated after the resolution has succeeded.

JSON Example

{
    "rule_id": "string",
    "rule_path": "string",
    "site_id": "string"
}

string

rule_id

Optional

The rule ID (i.e. rule ID of 1007) that is associated with the given rule path.

string

rule_path

Required  

The fully qualified rule path, which is considered as an additional default rule. Flows that hit default rules and these rules will be considered as unmicrosegmented.

One example of a fully qualified path is: "/infra/domains/default/security-policies/east-west-security-policy/rules/ssh-protection-rule"

string

site_id

Required  

The corresponding site ID in which the rule is published in.