NetworkSecurityRule

NetworkSecurityRule

JSON Example

{
    "action": "string",
    "age": 0,
    "created_by": "string",
    "enable": false,
    "index": 0,
    "log": false,
    "match": {
        "client_ip": {
            "addrs": [
                {
                    "addr": "string",
                    "type": "string"
                }
            ],
            "group_refs": [
                "string"
            ],
            "match_criteria": "string",
            "prefixes": [
                {
                    "ip_addr": {
                        "addr": "string",
                        "type": "string"
                    },
                    "mask": 0
                }
            ],
            "ranges": [
                {
                    "begin": {
                        "addr": "string",
                        "type": "string"
                    },
                    "end": {
                        "addr": "string",
                        "type": "string"
                    }
                }
            ]
        },
        "client_port": {
            "match_criteria": "string",
            "ports": [
                0
            ],
            "ranges": [
                {
                    "end": 0,
                    "start": 0
                }
            ]
        },
        "geo_matches": [
            {
                "attribute": "string",
                "match_operation": "string",
                "values": [
                    "string"
                ]
            }
        ],
        "ip_reputation_type": {
            "match_operation": "string",
            "reputation_types": [
                "string"
            ]
        },
        "microservice": {
            "group_ref": "string",
            "match_criteria": "string"
        },
        "vs_port": {
            "match_criteria": "string",
            "ports": [
                0
            ]
        }
    },
    "name": "string",
    "rl_param": {
        "burst_size": 0,
        "max_rate": 0
    }
}

string

action

Required

Enum options - NETWORK_SECURITY_POLICY_ACTION_TYPE_ALLOW, NETWORK_SECURITY_POLICY_ACTION_TYPE_DENY, NETWORK_SECURITY_POLICY_ACTION_TYPE_RATE_LIMIT. Allowed with any value in Enterprise, Enterprise with Cloud Services edition. Allowed in Essentials (Allowed values- NETWORK_SECURITY_POLICY_ACTION_TYPE_DENY), Basic (Allowed values- NETWORK_SECURITY_POLICY_ACTION_TYPE_DENY) edition.

integer As uint32 As uint32

age

Optional

Time in minutes after which rule will be deleted. Allowed values are 1-4294967295. Special values are 0- blocked for ever. Unit is MIN. Allowed with any value in Enterprise, Enterprise with Cloud Services edition. Allowed in Essentials (Allowed values- 0), Basic (Allowed values- 0) edition.

string

created_by

Optional

Creator name. Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

boolean

enable

Required

Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

integer As uint32 As uint32

index

Required

Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

boolean

log

Optional

Allowed with any value in Enterprise, Enterprise with Cloud Services edition. Allowed in Essentials (Allowed values- false), Basic (Allowed values- false) edition.

NetworkSecurityMatchTarget

match

Required

match

string

name

Required

Allowed with any value in Enterprise, Essentials, Basic, Enterprise with Cloud Services edition.

NetworkSecurityPolicyActionRLParam

rl_param

Optional

rl_param

Property Of

NetworkSecurityPolicy