InlineNsxSecurityPolicy1
{
"application_connectivity_strategy": [
{
"application_connectivity_strategy": "string",
"default_application_rule_id": 0,
"logging_enabled": false
}
],
"connectivity_preference": "string",
"connectivity_strategy": "string",
"default_rule_id": 0,
"logging_enabled": false,
"rules": [
{
"_self": {},
"_links": [
{
"href": "string",
"action": "string",
"rel": "string"
}
],
"_schema": "string",
"_revision": 0,
"resource_type": "string",
"_create_user": "string",
"_create_time": 0,
"_last_modified_user": "string",
"_last_modified_time": 0,
"_system_owned": false,
"_protection": "string",
"id": "string",
"display_name": "string",
"description": "string",
"tags": [
{
"scope": "string",
"tag": "string"
}
],
"origin_site_id": "string",
"owner_id": "string",
"parent_path": "string",
"path": "string",
"realization_id": "string",
"relative_path": "string",
"remote_path": "string",
"unique_id": "string",
"children": [
{
"_self": {},
"_links": [
{
"href": "string",
"action": "string",
"rel": "string"
}
],
"_schema": "string",
"_revision": 0,
"resource_type": "string",
"_create_user": "string",
"_create_time": 0,
"_last_modified_user": "string",
"_last_modified_time": 0,
"_system_owned": false,
"_protection": "string",
"id": "string",
"display_name": "string",
"description": "string",
"tags": [
{
"scope": "string",
"tag": "string"
}
],
"mark_for_override": false,
"marked_for_delete": false
}
],
"marked_for_delete": false,
"overridden": false,
"destination_groups": [
"string"
],
"destinations_excluded": false,
"direction": "string",
"disabled": false,
"ip_protocol": "string",
"is_default": false,
"logged": false,
"notes": "string",
"profiles": [
"string"
],
"rule_id": 0,
"scope": [
"string"
],
"sequence_number": 0,
"service_entries": [
{
"_self": {},
"_links": [
{
"href": "string",
"action": "string",
"rel": "string"
}
],
"_schema": "string",
"_revision": 0,
"resource_type": "string",
"_create_user": "string",
"_create_time": 0,
"_last_modified_user": "string",
"_last_modified_time": 0,
"_system_owned": false,
"_protection": "string",
"id": "string",
"display_name": "string",
"description": "string",
"tags": [
{
"scope": "string",
"tag": "string"
}
],
"origin_site_id": "string",
"owner_id": "string",
"parent_path": "string",
"path": "string",
"realization_id": "string",
"relative_path": "string",
"remote_path": "string",
"unique_id": "string",
"children": [
{
"_self": {},
"_links": [
{
"href": "string",
"action": "string",
"rel": "string"
}
],
"_schema": "string",
"_revision": 0,
"resource_type": "string",
"_create_user": "string",
"_create_time": 0,
"_last_modified_user": "string",
"_last_modified_time": 0,
"_system_owned": false,
"_protection": "string",
"id": "string",
"display_name": "string",
"description": "string",
"tags": [
{
"scope": "string",
"tag": "string"
}
],
"mark_for_override": false,
"marked_for_delete": false
}
],
"marked_for_delete": false,
"overridden": false
}
],
"services": [
"string"
],
"source_groups": [
"string"
],
"sources_excluded": false,
"tag": "string",
"action": "string"
}
]
}This field indicates the application connectivity policy for the security policy.
This field indicates the default connectivity policy for the security policy. Based on the connectivitiy preference, a default rule for this security policy will be created. An appropriate action will be set on the rule based on the value of the connectivity preference. If NONE is selected or no connectivity preference is specified, then no default rule for the security policy gets created. The default rule that gets created will be a any-any rule and applied to entities specified in the scope of the security policy. Specifying the connectivity_preference without specifying the scope is not allowed. The scope has to be a Group and one cannot specify IPAddress directly in the group that is used as scope. This default rule is only applicable for the Layer3 security policies. ALLOWLIST - Adds a default drop rule. Administrator can then use "allow" rules to allow traffic between groups DENYLIST - Adds a default allow rule. Admin can then use "drop" rules to block traffic between groups ALLOWLIST_ENABLE_LOGGING - Allowlisting with logging enabled DENYLIST_ENABLE_LOGGING - Denylisting with logging enabled NONE - No default rule is created.
This field indicates the default connectivity policy for the security policy. Based on the connectivity strategy, a default rule for this security policy will be created. An appropriate action will be set on the rule based on the value of the connectivity strategy. If NONE is selected or no connectivity strategy is specified, then no default rule for the security policy gets created. The default rule that gets created will be a any-any rule and applied to entities specified in the scope of the security policy. Specifying the connectivity_strategy without specifying the scope is not allowed. The scope has to be a Group and one cannot specify IPAddress directly in the group that is used as scope. This default rule is only applicable for the Layer3 security policies. This property is deprecated. Use the type connectivity_preference instead. WHITELIST - Adds a default drop rule. Administrator can then use "allow" rules (aka whitelist) to allow traffic between groups BLACKLIST - Adds a default allow rule. Admin can then use "drop" rules (aka blacklist) to block traffic between groups WHITELIST_ENABLE_LOGGING - Whitelising with logging enabled BLACKLIST_ENABLE_LOGGING - Blacklisting with logging enabled NONE - No default rule is created.
Based on the value of the connectivity strategy, a default rule is created for the security policy. The rule id is internally assigned by the system for this default rule.
Flag to enable logging for all the rules in the security policy. If the value is true then logging will be enabled for all the rules in the security policy. If the value is false, then the rule level logging value will be honored.