nsxfirewallrule
Firewall Rule
{
"ruleType": "string",
"description": "string",
"ruleId": 0,
"matchTranslated": false,
"invalidApplication": false,
"direction": "string",
"statistics": {
"timestamp": 0,
"connectionCount": 0,
"byteCount": 0,
"packetCount": 0
},
"name": "string",
"invalidSource": false,
"loggingEnabled": false,
"destination": {
"exclude": false,
"ipAddress": [
"string"
],
"groupingObjectId": [
"string"
],
"vnicGroupId": [
"string"
]
},
"enabled": false,
"application": {
"applicationId": [
"string"
],
"service": [
{
"sourcePort": [
"string"
],
"protocol": "string",
"port": [
"string"
],
"icmpType": "string"
}
]
},
"source": {
"exclude": false,
"ipAddress": [
"string"
],
"groupingObjectId": [
"string"
],
"vnicGroupId": [
"string"
]
},
"action": "string",
"invalidDestination": false,
"ruleTag": 0
}
Identifies the type of the rule. internal_high or user.
Description for the rule
Identifier for the rule.
Defines the order of NAT and Firewall pipeline. When false, firewall happens before NAT. Default : false
invalidApplication
Direction. Possible values in or out. Default is 'any'.
Name for the rule.
invalidSource
Enable logging for the rule.
Source or Destination for firewall rule. Default is 'any'.
Enable rule.
Source or Destination for firewall rule. Default is 'any'.
Action. Values : accept, deny
invalidDestination
Rule tag. Used to specify user-defined ruleId. If not specified NSX Manager will generate ruleId.