NetworkSecurityRule

NetworkSecurityRule

JSON Example

{
    "action": "string",
    "age": 0,
    "created_by": "string",
    "enable": false,
    "index": 0,
    "log": false,
    "match": {
        "client_ip": {
            "addrs": [
                {
                    "addr": "string",
                    "type": "string"
                }
            ],
            "group_refs": [
                "string"
            ],
            "match_criteria": "string",
            "prefixes": [
                {
                    "ip_addr": {
                        "addr": "string",
                        "type": "string"
                    },
                    "mask": 0
                }
            ],
            "ranges": [
                {
                    "begin": {
                        "addr": "string",
                        "type": "string"
                    },
                    "end": {
                        "addr": "string",
                        "type": "string"
                    }
                }
            ]
        },
        "client_port": {
            "match_criteria": "string",
            "ports": [
                0
            ],
            "ranges": [
                {
                    "end": 0,
                    "start": 0
                }
            ]
        },
        "geo_matches": [
            {
                "attribute": "string",
                "match_operation": "string",
                "values": [
                    "string"
                ]
            }
        ],
        "ip_reputation_type": {
            "match_operation": "string",
            "reputation_types": [
                "string"
            ]
        },
        "microservice": {
            "group_ref": "string",
            "match_criteria": "string"
        },
        "vs_port": {
            "match_criteria": "string",
            "ports": [
                0
            ]
        }
    },
    "name": "string",
    "rl_param": {
        "burst_size": 0,
        "max_rate": 0
    }
}

string

action

Required  

Enum options - NETWORK_SECURITY_POLICY_ACTION_TYPE_ALLOW, NETWORK_SECURITY_POLICY_ACTION_TYPE_DENY, NETWORK_SECURITY_POLICY_ACTION_TYPE_RATE_LIMIT. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32

age

Optional

Time in minutes after which rule will be deleted. Allowed values are 1-4294967295. Special values are 0- blocked for ever. Unit is MIN. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

string

created_by

Optional

Creator name. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

boolean

enable

Required  

Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32

index

Required  

Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

boolean

log

Optional

Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

NetworkSecurityMatchTarget

match

Required  

match

string

name

Required  

Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

NetworkSecurityPolicyActionRLParam

rl_param

Optional

rl_param

Property Of

NetworkSecurityPolicy