Update Orgs.sddcs.networks.edges.firewall.config

Configure firewall for a management or compute gateway (NSX Edge).

Request

URI

PUT

https://vmc.vmware.com/vmc/api/orgs/{org}/sddcs/{sddc}/networks/4.0/edges/{edgeId}/firewall/config

COPY

Path Parameters

string

org

Required

Organization identifier.

string

sddc

Required

Sddc Identifier.

string

edgeId

Required

Edge Identifier.

Request Body

firewallConfig of type(s) application/json

Required

{
    "firewallRules": {
        "firewallRules": [
            {
                "ruleType": "string",
                "description": "string",
                "ruleId": 0,
                "matchTranslated": false,
                "invalidApplication": false,
                "direction": "string",
                "statistics": {
                    "timestamp": 0,
                    "connectionCount": 0,
                    "byteCount": 0,
                    "packetCount": 0
                },
                "name": "string",
                "invalidSource": false,
                "loggingEnabled": false,
                "destination": {
                    "exclude": false,
                    "ipAddress": [
                        "string"
                    ],
                    "groupingObjectId": [
                        "string"
                    ],
                    "vnicGroupId": [
                        "string"
                    ]
                },
                "enabled": false,
                "application": {
                    "applicationId": [
                        "string"
                    ],
                    "service": [
                        {
                            "sourcePort": [
                                "string"
                            ],
                            "protocol": "string",
                            "port": [
                                "string"
                            ],
                            "icmpType": "string"
                        }
                    ]
                },
                "source": {
                    "exclude": false,
                    "ipAddress": [
                        "string"
                    ],
                    "groupingObjectId": [
                        "string"
                    ],
                    "vnicGroupId": [
                        "string"
                    ]
                },
                "action": "string",
                "invalidDestination": false,
                "ruleTag": 0
            }
        ]
    },
    "featureType": "string",
    "version": 0,
    "template": "string",
    "globalConfig": {
        "tcpAllowOutOfWindowPackets": false,
        "udpTimeout": 0,
        "ipGenericTimeout": 0,
        "tcpPickOngoingConnections": false,
        "tcpTimeoutOpen": 0,
        "tcpTimeoutClose": 0,
        "icmp6Timeout": 0,
        "dropIcmpReplays": false,
        "logIcmpErrors": false,
        "tcpSendResetForClosedVsePorts": false,
        "dropInvalidTraffic": false,
        "enableSynFloodProtection": false,
        "icmpTimeout": 0,
        "tcpTimeoutEstablished": 0,
        "logInvalidTraffic": false
    },
    "enabled": false,
    "defaultPolicy": {
        "action": "string",
        "loggingEnabled": false
    }
}

firewallRules

Optional

Ordered list of firewall rules.

string

featureType

Optional

featureType

integer As int64 As int64

version

Optional

Version number tracking each configuration change. To avoid problems with overwriting changes, always retrieve and modify the latest configuration to include the current version number in your request. If you provide a version number which is not current, the request is rejected. If you omit the version number, the request is accepted but may overwrite any current changes if your change is not in sync with the latest change.

string

template

Optional

template

firewallGlobalConfig

globalConfig

Optional

Global configuration applicable to all rules.

boolean

enabled

Optional

Value is true if feature is enabled. Default value is true. Optional.