NetworkSecurityRule

NetworkSecurityRule

JSON Example

{
    "action": "string",
    "age": 0,
    "created_by": "string",
    "enable": false,
    "index": 0,
    "log": false,
    "match": {
        "client_ip": {
            "addrs": [
                {
                    "addr": "string",
                    "type": "string"
                }
            ],
            "group_refs": [
                "string"
            ],
            "match_criteria": "string",
            "prefixes": [
                {
                    "ip_addr": {
                        "addr": "string",
                        "type": "string"
                    },
                    "mask": 0
                }
            ],
            "ranges": [
                {
                    "begin": {
                        "addr": "string",
                        "type": "string"
                    },
                    "end": {
                        "addr": "string",
                        "type": "string"
                    }
                }
            ]
        },
        "client_port": {
            "match_criteria": "string",
            "ports": [
                0
            ],
            "ranges": [
                {
                    "end": 0,
                    "start": 0
                }
            ]
        },
        "geo_matches": [
            {
                "attribute": "string",
                "match_operation": "string",
                "values": [
                    "string"
                ]
            }
        ],
        "ip_reputation_type": {
            "match_operation": "string",
            "reputation_types": [
                "string"
            ]
        },
        "microservice": {
            "group_ref": "string",
            "match_criteria": "string"
        },
        "vs_port": {
            "match_criteria": "string",
            "ports": [
                0
            ]
        }
    },
    "name": "string",
    "rl_param": {
        "burst_size": 0,
        "max_rate": 0
    }
}

string

action

Required

Enum options - NETWORK_SECURITY_POLICY_ACTION_TYPE_ALLOW, NETWORK_SECURITY_POLICY_ACTION_TYPE_DENY, NETWORK_SECURITY_POLICY_ACTION_TYPE_RATE_LIMIT. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- NETWORK_SECURITY_POLICY_ACTION_TYPE_DENY), Basic edition(Allowed values- NETWORK_SECURITY_POLICY_ACTION_TYPE_DENY), Enterprise with Cloud Services edition.

integer As uint32 As uint32

age

Optional

Time in minutes after which rule will be deleted. Allowed values are 1-4294967295. Special values are 0- blocked for ever. Unit is MIN. Allowed in Enterprise edition with any value, Essentials edition(Allowed values- 0), Basic edition(Allowed values- 0), Enterprise with Cloud Services edition.

string

created_by

Optional

Creator name. Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean

enable

Required

Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32

index

Required

Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

boolean

log

Optional

Allowed in Enterprise edition with any value, Essentials edition(Allowed values- false), Basic edition(Allowed values- false), Enterprise with Cloud Services edition.

NetworkSecurityMatchTarget

match

Required

match

string

name

Required

Allowed in Enterprise edition with any value, Essentials, Basic, Enterprise with Cloud Services edition.

NetworkSecurityPolicyActionRLParam

rl_param

Optional

rl_param

Property Of

NetworkSecurityPolicy