SectionDefaultRuleUpdateEntity

Section Default Rule Update Entity

A security policy section and its default connectivity configuration. Returned as part of per-application monitoring results to show the current policy state.

JSON Example

{
    "site_id": "string",
    "path": "string",
    "connectivity_preference": "string"
}

string

site_id

Optional

The unique identifier of the site that the security policy belong to.

string

path

Required  

The intent path of security policy

string

connectivity_preference

Optional

Default connectivity rule for the security policy.

Notes:

• A default rule is only created when a value other than NONE is specified.
• The default rule is an any-any rule applied to the policy scope. The scope must be a Group - direct IP address scope is not allowed.
• Only applicable to Layer 3 security policies.

Value	Description
ALLOWLIST	Adds a default drop rule; use allow rules to permit specific traffic.
DENYLIST	Adds a default allow rule; use drop rules to block specific traffic.
ALLOWLIST_ENABLE_LOGGING	Allowlist mode with logging enabled.
DENYLIST_ENABLE_LOGGING	Denylist mode with logging enabled.
NONE	No default rule is created.

Enumeration: ALLOWLIST, DENYLIST, ALLOWLIST_ENABLE_LOGGING, DENYLIST_ENABLE_LOGGING, NONE