firewallConfig

firewallConfig
firewallConfig

Firewall Configuration

JSON Example
{
    "firewallRules": {
        "firewallRules": [
            {
                "ruleType": "string",
                "description": "string",
                "ruleId": 0,
                "matchTranslated": false,
                "invalidApplication": false,
                "direction": "string",
                "statistics": {
                    "timestamp": 0,
                    "connectionCount": 0,
                    "byteCount": 0,
                    "packetCount": 0
                },
                "name": "string",
                "invalidSource": false,
                "loggingEnabled": false,
                "destination": {
                    "exclude": false,
                    "ipAddress": [
                        "string"
                    ],
                    "groupingObjectId": [
                        "string"
                    ],
                    "vnicGroupId": [
                        "string"
                    ]
                },
                "enabled": false,
                "application": {
                    "applicationId": [
                        "string"
                    ],
                    "service": [
                        {
                            "sourcePort": [
                                "string"
                            ],
                            "protocol": "string",
                            "port": [
                                "string"
                            ],
                            "icmpType": "string"
                        }
                    ]
                },
                "source": {
                    "exclude": false,
                    "ipAddress": [
                        "string"
                    ],
                    "groupingObjectId": [
                        "string"
                    ],
                    "vnicGroupId": [
                        "string"
                    ]
                },
                "action": "string",
                "invalidDestination": false,
                "ruleTag": 0
            }
        ]
    },
    "featureType": "string",
    "version": 0,
    "template": "string",
    "globalConfig": {
        "tcpAllowOutOfWindowPackets": false,
        "udpTimeout": 0,
        "ipGenericTimeout": 0,
        "tcpPickOngoingConnections": false,
        "tcpTimeoutOpen": 0,
        "tcpTimeoutClose": 0,
        "icmp6Timeout": 0,
        "dropIcmpReplays": false,
        "logIcmpErrors": false,
        "tcpSendResetForClosedVsePorts": false,
        "dropInvalidTraffic": false,
        "enableSynFloodProtection": false,
        "icmpTimeout": 0,
        "tcpTimeoutEstablished": 0,
        "logInvalidTraffic": false
    },
    "enabled": false,
    "defaultPolicy": {
        "action": "string",
        "loggingEnabled": false
    }
}
firewallRules
Optional

Ordered list of firewall rules.

string
featureType
Optional

featureType

integer As int64 As int64
version
Optional

Version number tracking each configuration change. To avoid problems with overwriting changes, always retrieve and modify the latest configuration to include the current version number in your request. If you provide a version number which is not current, the request is rejected. If you omit the version number, the request is accepted but may overwrite any current changes if your change is not in sync with the latest change.

string
template
Optional

template

globalConfig
Optional

Global configuration applicable to all rules.

boolean
enabled
Optional

Value is true if feature is enabled. Default value is true. Optional.

defaultPolicy
Optional

Firewall default policy. Default is deny.